last executing test programs: 29m15.813099895s ago: executing program 3 (id=513): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x1, 0x191540) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 29m11.513918401s ago: executing program 3 (id=526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0xf0, 0x31, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 29m10.705388934s ago: executing program 3 (id=530): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00') fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x400400c0}}], 0x2, 0x0) 29m10.415525903s ago: executing program 3 (id=534): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280), 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b2538f70e06d038e7ff7fc6e5539b3250078b089b3908476d090890e0878f0e1ac6e7049b3367959b619a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0936cd3b78130daa66d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8c8c855ab79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14056c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x94a}}, 0x1006) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) setns(r4, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 29m8.017773976s ago: executing program 3 (id=544): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x8402219, 0x4fce, 0x3b, 0x0, 0x0) 29m7.202359362s ago: executing program 3 (id=551): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 29m6.69094519s ago: executing program 32 (id=551): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 21m43.214229447s ago: executing program 0 (id=2019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001e80)={'syz', 0x1}, &(0x7f0000000080)='blake2b-256-generic\x00\v\xe5\xa1\"\x05<\x99\xd3U\xf8\x9cb\xfa\xb5\xd8\x1et\x05s\x95\xd9\xbd>\x97\x90\xde#\xb1&b\fy\x96b\xecc\xdbr\x94\x0e+?\xea\x1ey\x1a\xa4@\xb3\bV\xb7\xc3k\x9113,', 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, 0x0, 0x20000080) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)={[{@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@discard}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x200810, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 21m41.468417385s ago: executing program 0 (id=2022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 21m40.774962994s ago: executing program 0 (id=2027): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, &(0x7f0000000040)) r4 = io_uring_setup(0x197b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x8, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 21m39.051158162s ago: executing program 0 (id=2030): socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x2597, 0x0, 0x9, 0x3bd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) 21m32.142696082s ago: executing program 0 (id=2046): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}}) 21m31.927217219s ago: executing program 0 (id=2048): syz_open_dev$char_usb(0xc, 0xb4, 0x345) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x2000000000000069, 0x0, &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x4c314356, 0x0, 0xb, [{0x80000004, 0x8}, {0x7ff, 0xb325}, {0x10000001}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) 21m16.853435714s ago: executing program 33 (id=2048): syz_open_dev$char_usb(0xc, 0xb4, 0x345) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x2000000000000069, 0x0, &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x4c314356, 0x0, 0xb, [{0x80000004, 0x8}, {0x7ff, 0xb325}, {0x10000001}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) 20m46.682880485s ago: executing program 1 (id=2141): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001400010004000000000000000a00000004000000", @ANYRES32, @ANYBLOB="140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c697479000000000000000000000000000000000000000000000000040000000d"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x3c, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000203010100000001000000000400004a080001000100002a4ad0ddcd010cd9544f4cf7062a1bcbca33"], 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 20m43.340431665s ago: executing program 1 (id=2145): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000240)='./file1\x00', 0x2004018, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc15, &(0x7f0000001940)="$eJzs3V1sZOdZB/DnnWPHY6e0TtNuWmjKSEXtymWj/equq0WVt3ENlbabql5X5Koef+x2FO94ZXvppkBlQAWJm4rcIG6QRYlA6gVXhEtcGqRWCAlVvSgXSJZoo1xw4YtKCFBqdM68Y493vVk3G39s8vtFzv/MmeeM34/xmWNpX58AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI++7nLp8+ko24FAHCYrk5+6fQ5n/8A8K5yze//AAAAAAAAAAAAAABw3KUo4kSkGHplM01XjzvqV1rt23emxif2PmwwRYpaFFV9+VU/c/bc+U9duDjazTc//u324Xhu8trlxrOLN28tzS8vz881ptqt2cW5+X2/wsMef7eRagAaN1+4PXf9+nLj7DPndj19Z/i1gcdPDF+6eOrCaLd2anxiYrKnpq//LX/3e9xvhcdjUUQzUrwx/HpqRkQtHn4sHvDeOWiDVSdGqk5MjU9UHVloNdsr5ZOplqtqEY2eg8a6Y3QIc/FQxiJWy+aXDR4puzd5q7nUnFmYb3yxubTSWmkttlOt09qyP42oxWiKWIuIjYF7X64/ivhopHjp9GaaiYiiOw6frBYGP7g9tQPo4z6U7Wz0R6zVHoE5O8YGooirkeJnr56M2XLM8ld8POILZb4S8XKZn4lI5RvjfMRP93gf8WjqiyL+NVIsps00V50PuueVK19ufL59fbGntnteeeQ/Hw7TMT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25Hij57+nWpdcVTr0t93afQ9z/9m75rxpx7wOmXtMxGxWtvfmtz+vHQ41cr/DqBj7Es9ivhGXv/3B0fdGAAAAAAAAAAAAAAAAAAAgHe1Ip6PFF85dTKtRe89xVvtG41rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzjsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KhbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIZyLF+vP16vFaLeJaRPx8a2ur+vqfra2tiM1y+2EddV8BAAAAAAAAAAAAAAAAAADg2EpFfCxSPPm/m6kREXeGXxt4/MTwpYunLowWUUQqS3rrn5u8drnx7OLNW0vzy8vzc42pdmt2cW5+v9+ufqXVvn1nanziQDrzQIMH3P7B+rOLt15cat346sqezw/VL88sryw1Z/d+OgajFjHdu2ekavDU+ETV6IVWs10dmmr3aWAtYmy/nQEAAAAAAAAAAAAAAAAAAODYGEpFfC5S/OQ/zqfuuvG+zpr/X+o8KrZrX/69nb8FsHBXdvX+/YD9bKf9NnSkWnjfmBqfmJjs2d3Xf29p2aaUingqUnzipQ9V6+FTDO25Nr6se29Zd/N8rhv+lbJudVdVfWRqfKJxdbF96vLCwuJsc6U5szDfmLzVnN33Hw4AAAAAAAAAAAAAAAAAAACANzGUivhRpPivv/231L3vfF7/39d51LP+/zeqJfSVetqd26q1/e+t1vZ3tt93aXToo0/fb/9BrP8v25RSEd+MFOd+9KHqfvrd9f/Td9WWdX8SKV5/+iO5rvZYWdfsdqfzitdbC/Ony9q/jBS/+ka3NqraG7n2yZ3aM2XtYKT4883dtV/NtR/YqT1b1p6MFN/7z71rP7hTe66s/Umk+Ie/aXRrh8ra3821J3Zqn5ldXJh70LCW8/+dSPHXV38rdft83/nv+fsPq3fltnvm/M233675H+7Zt5rn9Y/z/DcfMP8XIsV36h/JdZ2xn8nPP1H9f2f+PxEp/v1fdtdez7Xv36k9s99uHbVy/r8dKb77Fz/e7nOe/zyyOzPUO/+/3Lc7t98lRzT/T/TsG87tmv0Fx+LdaPnFr7/QXFiYX7Jhw4aN7Y2jPjNxGMrP/z+NFP93okjd65j8+f+ezqOd67///sbO5/+lu3LbEX3+v79n36V81dLfF1FfuXmr/6mI+vKLXz/Vutm8MX9jvn32zOlPf/rCmdNnLvQ/1r2429na99i9E5Tz/4NI8cO/++H27zG7r//2vv4fuiu3HdH8P9nbp13XNfseinelcv7/KlI88dkfb/+++WbX/93f/09+bHdu//wd0fx/oGffcG5X6xccCwAAAAAAAAAAgEfJUCrizyLFb//hr6fuGqL9/Pu/ubty2xH9+68TPfvmDmldw74HGQDgGCmv/z4YKf5x6/vba7l3X//Fr3Vre6//7uc43P8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAedSmK+P1IMfTKZlofKB931K+02rfvTI1P7H3YYIoUtSiq+vKrfubsufOfunBxtJtXBg6zGx+O5yavXW48u3jz1tL88vL8XGOq3ZpdnJvf9ys87PF3G6kGsHHzhdtz168vN84+c27X03eGXxt4/MTwpYunLox2a6fGJyYme2r6+t/yd79Hus/+x6KI70eKN4ZfT98diKjFw4/FA947B22w6sRI1Ymp8YmqIwutZnulfDLVclUtotFz0Fh3jA5hLh7KWMRq2fyywSNl9yZvNZeaMwvzjS82l1ZaK63Fdqp1Wlv2pxG1GE0RaxGxscePZH8U8c1I8dLpzfRPAxFFdxw+eXXyS6fPPbg9tQPo4z6U7Wz0R6zVHoE5O8YGooi/jxQ/e/VkfG8goi86X/HxiC+U+UrEy2V+JiKVb4zzET891FM7B6kvijgfKRbTZnp1oDwfdM8rV77c+Hz7+mJPbfe88sh/PhymY35uqkcRP6jO+Jvpn/1cAwAAAAAAAAAAAAAAABwjRaxFiq+cOpmq9cHba4pb7RuNa82Zhc6yvu7av+6a6a2tra1G6uRYzumcqznXcq7n3MgZtXx8zrGc0zlXc67lXM+5kTOKfHzOsZzTOVdzruVcz7mRM/ry8TnHck7nXM25lnM950bOOCZr9wAAAAAAAAAAAAAAAAAAgHeWWhTVXdy/9bXNtDXQub/0dHRy3f1A3/H+PwAA//8YNXNU") ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x5867, 0x400, 0x0, 0x344}, &(0x7f0000000380), &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 20m36.626505844s ago: executing program 1 (id=2158): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) 20m35.933690334s ago: executing program 1 (id=2159): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080), 0x4) 20m34.69351326s ago: executing program 1 (id=2161): socket(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0xa000) read(r1, &(0x7f00000003c0)=""/92, 0x5c) 20m28.568982816s ago: executing program 1 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000840)=ANY=[], 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x6, 0xf}, 'port0\x00', 0x11, 0x20010, 0x2, 0x81, 0x0, 0x3, 0x3, 0x0, 0x5, 0x2}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf25040000000c000c000100000000000000981672cfe0b6a50dca0d6f6a7effc9212afeb9b12cb304c0ec0f3a1d40bb956341f8fcb7676d7e5068a0b6e84b8d9a422f258fde9caa2328e6c2558255a56ece9b7c0dffab8c06de5ee0e7b9eeb069ea1de040bca2317a1a38286059f97e1ed5a3d2e38c010198e9a25049caf1db58d50f3f3dc47735e557d3457d1d33379e3b88ef4e018e6bbdff0a07e7cadc54f9df82f248cd78b17fc7110bca169b93e38151f7096e3c46deba3bd3d5"], 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) 20m13.378807163s ago: executing program 34 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000840)=ANY=[], 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x6, 0xf}, 'port0\x00', 0x11, 0x20010, 0x2, 0x81, 0x0, 0x3, 0x3, 0x0, 0x5, 0x2}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf25040000000c000c000100000000000000981672cfe0b6a50dca0d6f6a7effc9212afeb9b12cb304c0ec0f3a1d40bb956341f8fcb7676d7e5068a0b6e84b8d9a422f258fde9caa2328e6c2558255a56ece9b7c0dffab8c06de5ee0e7b9eeb069ea1de040bca2317a1a38286059f97e1ed5a3d2e38c010198e9a25049caf1db58d50f3f3dc47735e557d3457d1d33379e3b88ef4e018e6bbdff0a07e7cadc54f9df82f248cd78b17fc7110bca169b93e38151f7096e3c46deba3bd3d5"], 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) 19m59.21416803s ago: executing program 7 (id=2230): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file0\x00', 0x1818008, &(0x7f0000000600)=ANY=[@ANYBLOB='gid=', @ANYRESDEC=0x0, @ANYBLOB=',utf8,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c646d6f64653d30303030303030303030303031373737373737373737372c62733d31383434363734343037333730393535303539322c6e6f6164696e694a622c6e6f7374726963742c616e63686f723d30303030303030303030e63030303030303030322c646d6f64653d30303030a7debac6aae23e2330303030303030303030372c7569643d666f726765742c0033a815ae8f2c9eea17917b80102eacb7e4e56b177f1c18cda8219c8eabd42b159498b28705d547f8dfe76955db88c5d38d27b21580d5c0b45d9e7e71e0231d68f22bdf0f9b8db6017d76f87091cfafb71a978bd71f0afe4d"], 0x1, 0xc46, &(0x7f00000021c0)="$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") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x32, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) setpriority(0x1, r0, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) fchdir(0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) statx(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) 19m57.949202445s ago: executing program 7 (id=2231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x0, 0x0) r3 = io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, 0x0, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES64, @ANYRESOCT], 0x8) 19m56.729955808s ago: executing program 7 (id=2232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000840)=ANY=[], 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x6, 0xf}, 'port0\x00', 0x11, 0x20010, 0x2, 0x81, 0x0, 0x3, 0x3, 0x0, 0x5, 0x2}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf25040000000c000c000100000000000000981672cfe0b6a50dca0d6f6a7effc9212afeb9b12cb304c0ec0f3a1d40bb956341f8fcb7676d7e5068a0b6e84b8d9a422f258fde9caa2328e6c2558255a56ece9b7c0dffab8c06de5ee0e7b9eeb069ea1de040bca2317a1a38286059f97e1ed5a3d2e38c010198e9a25049caf1db58d50f3f3dc47735e557d3457d1d33379e3b88ef4e018e6bbdff0a07e7cadc54f9df82f248cd78b17fc7110bca169b93e38151f7096e3c46deba3bd3d5"], 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) 19m45.767340199s ago: executing program 7 (id=2249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 19m43.177133875s ago: executing program 7 (id=2256): waitid(0x0, 0x0, &(0x7f0000000200), 0x8, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d0102030109021200"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(r3, &(0x7f0000000e40)={0x1f, 0x4, 0x1}, 0x6) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 19m36.965639807s ago: executing program 7 (id=2262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000840)=ANY=[], 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x6, 0xf}, 'port0\x00', 0x11, 0x20010, 0x2, 0x81, 0x0, 0x3, 0x3, 0x0, 0x5, 0x2}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf25040000000c000c000100000000000000981672cfe0b6a50dca0d6f6a7effc9212afeb9b12cb304c0ec0f3a1d40bb956341f8fcb7676d7e5068a0b6e84b8d9a422f258fde9caa2328e6c2558255a56ece9b7c0dffab8c06de5ee0e7b9eeb069ea1de040bca2317a1a38286059f97e1ed5a3d2e38c010198e9a25049caf1db58d50f3f3dc47735e557d3457d1d33379e3b88ef4e018e6bbdff0a07e7cadc54f9df82f248cd78b17fc7110bca169b93e38151f7096e3c46deba3bd3d5"], 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) 19m21.436216482s ago: executing program 35 (id=2262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000840)=ANY=[], 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x6, 0xf}, 'port0\x00', 0x11, 0x20010, 0x2, 0x81, 0x0, 0x3, 0x3, 0x0, 0x5, 0x2}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf25040000000c000c000100000000000000981672cfe0b6a50dca0d6f6a7effc9212afeb9b12cb304c0ec0f3a1d40bb956341f8fcb7676d7e5068a0b6e84b8d9a422f258fde9caa2328e6c2558255a56ece9b7c0dffab8c06de5ee0e7b9eeb069ea1de040bca2317a1a38286059f97e1ed5a3d2e38c010198e9a25049caf1db58d50f3f3dc47735e557d3457d1d33379e3b88ef4e018e6bbdff0a07e7cadc54f9df82f248cd78b17fc7110bca169b93e38151f7096e3c46deba3bd3d5"], 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) 13.326294076s ago: executing program 4 (id=5081): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7f, [{{0x9, 0x4, 0x0, 0x20, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xd, 0x14}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0xb, {0xb, 0xd, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 12.621410044s ago: executing program 9 (id=5091): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') dup2(r1, r0) 12.466171219s ago: executing program 2 (id=5094): syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x842a4011, 0x0, 0x0, 0x0, 0x0, 0x0) 12.379424851s ago: executing program 9 (id=5095): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x200000, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100419, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101015, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x200000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xa) 12.222257768s ago: executing program 5 (id=5097): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, "", [@typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x24}], 0x1, 0x0, 0x0, 0x44895}, 0x8000) pselect6(0x15, &(0x7f0000002780)={0x8, 0x0, 0x0, 0x0, 0x0, 0x10000002, 0x2000000000, 0x4}, 0x0, 0x0, 0x0, 0x0) 12.216598253s ago: executing program 9 (id=5098): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 11.98084313s ago: executing program 9 (id=5100): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0xc800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) 11.980635009s ago: executing program 5 (id=5101): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0xf) 10.169633091s ago: executing program 9 (id=5104): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, 0x0, 0x0, 0x3}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x2000000000006) fcntl$getown(r3, 0x9) 10.080396739s ago: executing program 5 (id=5105): memfd_create(0x0, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x220408a, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6b6f69382d752c636f6465706167653d3933322c696f636861727365743d6575632d6a702c747a3d5554432c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00416786a537fd"], 0x1, 0x376, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x2, 0x0) 10.033820974s ago: executing program 4 (id=5106): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getlink={0x20, 0x12, 0x1, 0x70bd25, 0x0, {0x7}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.889951097s ago: executing program 2 (id=5107): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 9.889655012s ago: executing program 8 (id=5108): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f22", 0x59}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.83502072s ago: executing program 4 (id=5109): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x34}}, 0x4000) 9.624165139s ago: executing program 8 (id=5110): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x8003, 0x7) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x1400, 0x0, 0x0) 9.522351853s ago: executing program 4 (id=5111): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) 9.451643695s ago: executing program 2 (id=5112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x7, 0x13) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 7.590945318s ago: executing program 4 (id=5113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003100)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x3c, 0x2, [@TCA_FW_ACT={0x38, 0x4, [@m_pedit={0x34, 0x1, 0x0, 0x0, {{0xa}, {0x8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x800) 7.185745177s ago: executing program 5 (id=5114): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=""/203, 0xcb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x8, 'veth1_virt_wifi\x00', {'macvlan1\x00'}, 0xc}) 6.45292552s ago: executing program 2 (id=5115): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9e", 0x1a) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r0, r0) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) 6.420812925s ago: executing program 6 (id=5116): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xfd, 0x12fa80) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r2, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x16]}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.257596542s ago: executing program 8 (id=5117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_COMMENT={0x7, 0x1a, ']:\x00'}]}]}, 0x4c}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 5.138351585s ago: executing program 8 (id=5118): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17a) 4.786272657s ago: executing program 6 (id=5119): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) 4.377923439s ago: executing program 6 (id=5120): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x1, r1}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x2, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000001800)=""/203, 0xcb}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 2.299805062s ago: executing program 9 (id=5121): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000000c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000740)={0x0, 0x17, 0x1, '%'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.073594237s ago: executing program 2 (id=5122): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000180)=@ethtool_coalesce={0x12, 0x7fffffff, 0x2, 0xe7c1, 0xffffffff, 0x1, 0x401, 0x2, 0x10001, 0xb1c, 0x401, 0x9, 0xfffffffc, 0xfffffffa, 0x401, 0x2, 0x8, 0x1, 0xe71, 0x2, 0x7, 0xffffffff, 0x22}}) 1.953736401s ago: executing program 6 (id=5123): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 1.641204643s ago: executing program 8 (id=5124): unshare(0x28000600) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000002980)={0x108006300, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x80000000, 0x0) 1.611245182s ago: executing program 5 (id=5125): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 1.502198417s ago: executing program 6 (id=5126): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noauto_da_alloc}, {@grpid}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.502070912s ago: executing program 2 (id=5127): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x30, 0x5a, 0xbd, 0x40, 0x22b8, 0x6425, 0x8ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xae, 0x5, 0x10, 0x2, [{{0x9, 0x4, 0xb2, 0x8, 0x0, 0x2, 0xa, 0x0, 0x6}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000040)=0x18) 378.514271ms ago: executing program 5 (id=5128): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0xb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x1000, {0x0, 0x0, 0x0, 0x4, 0xe3f, 0x0, 0x0, 0x1a, 0xc, "faf98317e5a1371a787e8dbe53ea6acc96e3a2500640bd3fe3955800cad3d0099cebdc25f570659f6b222831aaf904ab1f010000000400", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 227.951126ms ago: executing program 8 (id=5129): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r2, 0x0) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) syz_open_procfs(0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x5f501}}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x40814) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) 144.008892ms ago: executing program 4 (id=5130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x27, 0xb, 0x0, 0xffffffff, {0x8}}, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe, 0x0, @remote, 0x1f}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000480)) 0s ago: executing program 6 (id=5131): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000002000500000000000400040000000000100002000000000020"], 0x24, 0x1) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0xfff}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xe, 0x2b, 0xa4f, 0xc1, 0x28, 0xffffff81, 0x80}, 0x9c) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) kernel console output (not intermixed with test programs): usb 6-1: USB disconnect, device number 18 [ 1298.249587][ T5899] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1298.661595][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1298.878521][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1299.058148][ T5899] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1299.313518][ T5899] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1299.337258][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.354339][ T5899] usb 3-1: Product: syz [ 1299.363319][ T5899] usb 3-1: Manufacturer: syz [ 1299.399004][ T5899] usb 3-1: SerialNumber: syz [ 1299.421935][ T5899] usb 3-1: config 0 descriptor?? [ 1299.435851][T19013] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1299.663883][T19013] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1303.292879][T19033] loop9: detected capacity change from 0 to 1024 [ 1303.425805][T19033] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1303.563108][T19033] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1303.790344][ T30] audit: type=1800 audit(1770940674.045:3711): pid=19033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3676" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1304.198859][T19042] netlink: 'syz.9.3676': attribute type 8 has an invalid length. [ 1304.624883][ T5927] usb 3-1: USB disconnect, device number 13 [ 1304.673745][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.694064][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.940409][T19053] netlink: 'syz.2.3680': attribute type 13 has an invalid length. [ 1305.098003][T13346] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.471669][T19058] netlink: 'syz.9.3681': attribute type 1 has an invalid length. [ 1309.170758][T19061] gretap1: entered promiscuous mode [ 1309.184251][T19061] bond1: (slave gretap1): making interface the new active one [ 1309.286283][T19061] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1311.623472][T19104] fuse: Unknown parameter 'd&}Jgŏ5SQcf20xffffffffffffffff' [ 1314.957328][T19120] 5gQ[: renamed from lo (while UP) [ 1319.160255][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.163003][T19145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3704'. [ 1319.798670][T19138] loop9: detected capacity change from 0 to 32768 [ 1319.955910][T19138] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1321.947210][T19138] XFS (loop9): Ending clean mount [ 1322.043798][T19171] fuse: Unknown parameter 'd&}Jgŏ5SQcf20xffffffffffffffff' [ 1322.187831][T13346] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1322.529495][T19176] random: crng reseeded on system resumption [ 1322.572325][T19176] ALSA: seq fatal error: cannot create timer (-22) [ 1333.562425][T19259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1333.783120][T19261] gretap1: entered promiscuous mode [ 1337.020277][T19297] binder: BINDER_SET_CONTEXT_MGR already set [ 1337.026446][T19297] binder: 19292:19297 ioctl 4018620d 200000000040 returned -16 [ 1337.055253][T19297] binder: 19292:19297 ioctl c0306201 2000000003c0 returned -14 [ 1337.462079][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 1338.942268][T19317] fuse: Unknown parameter 'd&}Jgŏ5SQcf20xffffffffffffffff' [ 1340.637645][T19332] geneve2: left allmulticast mode [ 1341.399883][T19340] netlink: 'syz.4.3753': attribute type 1 has an invalid length. [ 1341.566405][T19342] gretap1: entered promiscuous mode [ 1341.971133][T19351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3756'. [ 1348.539274][T19404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3762'. [ 1349.014939][ T5907] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1349.232558][ T5907] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1349.264011][ T5907] usb 3-1: config 0 has no interface number 0 [ 1349.283089][T19413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3772'. [ 1349.293093][ T5907] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1349.357842][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.400353][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3772'. [ 1349.421030][ T5907] usb 3-1: config 0 descriptor?? [ 1349.531809][ T5907] usb 3-1: selecting invalid altsetting 1 [ 1350.317868][ T5907] dvb_ttusb_budget: ttusb_init_controller: error [ 1350.353974][ T5907] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1351.048857][ T5907] DVB: Unable to find symbol cx22700_attach() [ 1352.704881][ T5907] DVB: Unable to find symbol tda10046_attach() [ 1352.754569][ T5907] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1352.806320][ T5907] usb 3-1: USB disconnect, device number 14 [ 1355.064172][T19450] binder: 19449:19450 ioctl c0306201 2000000003c0 returned -14 [ 1355.362538][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.391947][T19454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3783'. [ 1355.987824][T19464] fuse: Unknown parameter 'user_i00000000000000000000' [ 1356.434452][T19468] netlink: 'syz.8.3787': attribute type 1 has an invalid length. [ 1358.037872][T19471] gretap1: entered promiscuous mode [ 1358.097683][T19471] bond1: (slave gretap1): making interface the new active one [ 1358.150909][T19471] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1360.424845][ T5900] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1360.598208][ T5900] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1360.650905][ T5900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1360.719028][ T5900] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1360.877358][ T5900] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1360.944890][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.069216][ T5900] usb 10-1: Product: syz [ 1361.091523][ T5900] usb 10-1: Manufacturer: syz [ 1361.118959][ T5900] usb 10-1: SerialNumber: syz [ 1361.166335][ T5900] usb 10-1: config 0 descriptor?? [ 1361.306608][T19503] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1361.618957][T19503] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1362.186132][T19512] fuse: Unknown parameter 'user_i00000000000000000000' [ 1363.767462][ T5927] usb 10-1: USB disconnect, device number 6 [ 1363.918434][T19531] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3802'. [ 1363.927615][T19531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3802'. [ 1366.118408][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.129567][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.304834][T14234] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1366.487996][T14234] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1366.526749][T14234] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1366.624991][T14234] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1366.733165][T14234] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1366.743749][T14234] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.919369][T14234] usb 10-1: Product: syz [ 1367.933890][T14234] usb 10-1: Manufacturer: syz [ 1367.940516][T14234] usb 10-1: SerialNumber: syz [ 1367.974612][T14234] usb 10-1: config 0 descriptor?? [ 1370.384346][T19562] loop4: detected capacity change from 0 to 1024 [ 1370.444869][T19562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1370.727817][T19562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1370.798613][ T30] audit: type=1800 audit(1770940741.085:3712): pid=19562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3811" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1370.901728][T19565] netlink: 'syz.4.3811': attribute type 8 has an invalid length. [ 1371.214898][T14234] usb 10-1: can't set config #0, error -71 [ 1371.306189][T14234] usb 10-1: USB disconnect, device number 7 [ 1371.602121][T19576] fuse: Unknown parameter 'user_i00000000000000000000' [ 1372.273313][T17030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.599311][T19601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3817'. [ 1375.608678][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3817'. [ 1378.507977][T19621] fuse: Bad value for 'fd' [ 1384.608034][T19675] fuse: Unknown parameter 'd&}Jgŏ5SQcf20xffffffffffffffff' [ 1385.051360][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3834'. [ 1388.950731][T19698] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3841'. [ 1389.017817][T19699] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3841'. [ 1389.144312][T19701] netlink: 'syz.8.3842': attribute type 1 has an invalid length. [ 1390.012130][T19707] netlink: 'syz.5.3844': attribute type 13 has an invalid length. [ 1394.481786][T19698] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1394.483589][T19699] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1394.494485][T19701] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1395.436641][T19758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3851'. [ 1395.738982][T19765] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3852'. [ 1395.748421][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3852'. [ 1401.012865][T19793] netlink: 'syz.4.3859': attribute type 1 has an invalid length. [ 1402.403830][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3864'. [ 1403.958128][T19833] binder: 19829:19833 ioctl c0306201 2000000003c0 returned -14 [ 1408.194020][T19861] netlink: 'syz.2.3875': attribute type 1 has an invalid length. [ 1408.557203][T19850] loop5: detected capacity change from 0 to 1024 [ 1408.617246][T19850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1408.984315][T19850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1409.145318][ T30] audit: type=1800 audit(1770940779.435:3713): pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3871" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1409.323268][T19863] netlink: 'syz.5.3871': attribute type 8 has an invalid length. [ 1409.594513][ T58] bond0 (unregistering): Released all slaves [ 1409.640419][ T58] bond1 (unregistering): Released all slaves [ 1409.954694][ T58] bond2 (unregistering): Released all slaves [ 1410.293909][T19861] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1410.346546][T19862] gretap1: entered promiscuous mode [ 1410.851245][T17826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.306024][ T30] audit: type=1800 audit(1770940781.565:3714): pid=19892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3878" name="bus" dev="tmpfs" ino=578 res=0 errno=0 [ 1416.430536][T19917] fuse: Unknown parameter 'd&}Jgŏ5SQcf20xffffffffffffffff' [ 1420.697270][ T58] hsr_slave_0: left promiscuous mode [ 1420.824439][ T58] hsr_slave_1: left promiscuous mode [ 1420.968092][ T58] veth1_macvtap: left promiscuous mode [ 1420.973673][ T58] veth0_macvtap: left promiscuous mode [ 1421.043667][ T58] veth1_vlan: left promiscuous mode [ 1421.076541][ T58] veth0_vlan: left promiscuous mode [ 1421.658725][T19941] loop5: detected capacity change from 0 to 1024 [ 1421.740065][T19941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1421.985020][T19941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.183236][ T30] audit: type=1800 audit(1770940792.465:3715): pid=19941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3893" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1422.322856][T19941] netlink: 'syz.5.3893': attribute type 8 has an invalid length. [ 1423.438632][T17826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.753191][ T5907] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1425.183968][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1425.274880][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1425.354831][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1425.421018][ T5907] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1425.444445][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.494827][ T5907] usb 5-1: Product: syz [ 1425.505042][ T5907] usb 5-1: Manufacturer: syz [ 1425.542215][ T5907] usb 5-1: SerialNumber: syz [ 1425.575861][ T5907] usb 5-1: config 0 descriptor?? [ 1425.643360][T19975] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1425.701070][T19986] ISOFS: Unable to identify CD-ROM format. [ 1425.707837][ T30] audit: type=1800 audit(1770940795.965:3716): pid=19986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3904" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 1425.884361][T19975] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1425.974830][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1426.268419][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.299024][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.342761][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1426.390793][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.442785][ T10] usb 3-1: config 0 descriptor?? [ 1426.515588][T19975] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 1426.867065][ T10] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1426.921418][ T10] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1427.070348][ T10] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 1427.650567][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.662845][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.841786][ T10] cp2112 0003:10C4:EA90.000E: error reading lock byte: -32 [ 1428.028516][T19986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.056615][T19986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.576376][T19999] input: syz1 as /devices/virtual/input/input15 [ 1428.745537][T19999] random: crng reseeded on system resumption [ 1428.798529][T19999] netlink: 'syz.9.3907': attribute type 21 has an invalid length. [ 1428.846080][ T5907] usb 3-1: USB disconnect, device number 15 [ 1429.141575][T20006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3908'. [ 1429.150903][T20006] netlink: 'syz.2.3908': attribute type 5 has an invalid length. [ 1429.158960][T20006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3908'. [ 1429.170982][T19999] ALSA: seq fatal error: cannot create timer (-22) [ 1429.225233][ T10] usb 5-1: USB disconnect, device number 14 [ 1429.247001][T20006] geneve2: entered promiscuous mode [ 1429.252266][T20006] geneve2: entered allmulticast mode [ 1429.431326][ T58] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1429.452417][ T58] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1429.480139][ T58] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1431.492818][T20016] netlink: 'syz.6.3912': attribute type 8 has an invalid length. [ 1432.516535][T20029] kAFS: unable to lookup cell '(,c' [ 1432.674864][T14234] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1433.378985][T14234] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1433.401318][T14234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.415321][T14234] usb 6-1: Product: syz [ 1433.423229][T14234] usb 6-1: Manufacturer: syz [ 1433.437760][T14234] usb 6-1: SerialNumber: syz [ 1433.486075][T14234] usb 6-1: config 0 descriptor?? [ 1433.555441][T14234] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1433.622369][T14234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1433.657830][T14234] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1433.676885][T14234] usb 6-1: media controller created [ 1433.773224][T14234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1434.190382][T14234] DVB: Unable to find symbol mt352_attach() [ 1434.559069][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3920'. [ 1434.663077][T14234] DVB: Unable to find symbol nxt6000_attach() [ 1434.706565][T14234] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1434.771189][T14234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 1434.841657][T14234] dvb-usb: schedule remote query interval to 1000 msecs. [ 1434.893856][T14234] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1434.953221][T14234] dvb-usb: bulk message failed: -22 (7/0) [ 1434.996515][T14234] dvb-usb: bulk message failed: -22 (7/0) [ 1435.047139][T14234] usb 6-1: USB disconnect, device number 19 [ 1435.402811][T14234] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1435.485635][T20052] netlink: 'syz.5.3923': attribute type 1 has an invalid length. [ 1437.327093][T20072] loop5: detected capacity change from 0 to 1024 [ 1437.359303][T20072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1437.395537][T20073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3928'. [ 1437.527564][T20072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1437.572543][ T30] audit: type=1800 audit(1770940807.855:3717): pid=20072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3926" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1437.779283][T20078] netlink: 'syz.5.3926': attribute type 8 has an invalid length. [ 1438.232708][T17826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.818144][T14234] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1440.108979][T14234] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1440.162446][T14234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1440.309037][T14234] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1441.941713][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'. [ 1442.066143][ T5900] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1443.207551][T20118] binder: 20116:20118 ioctl 4018620d 0 returned -22 [ 1443.988395][T14234] usb 6-1: string descriptor 0 read error: -71 [ 1444.035035][T14234] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1444.074863][T14234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.140478][T14234] usb 6-1: config 0 descriptor?? [ 1444.167957][T14234] usb 6-1: can't set config #0, error -71 [ 1444.237182][T14234] usb 6-1: USB disconnect, device number 20 [ 1444.395746][T20135] netlink: 'syz.8.3942': attribute type 12 has an invalid length. [ 1444.521495][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1446.413865][ T30] audit: type=1800 audit(1770940816.695:3718): pid=20154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3946" name="bus" dev="tmpfs" ino=425 res=0 errno=0 [ 1448.762708][T20171] loop4: detected capacity change from 0 to 1024 [ 1449.364817][T20174] fuse: Unknown parameter ' [ 1450.334868][T14234] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1450.918789][T14234] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1450.953170][T14234] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1450.982119][T14234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.023125][T14234] usb 3-1: config 0 descriptor?? [ 1451.513777][T14234] usb 3-1: USB disconnect, device number 16 [ 1452.166488][ T13] hfsplus: b-tree write err: -5, ino 25 [ 1452.172449][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1452.238321][ T13] hfsplus: b-tree write err: -5, ino 2 [ 1452.609535][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3958'. [ 1453.625029][T20211] netlink: 'syz.5.3960': attribute type 1 has an invalid length. [ 1453.634535][T20210] netlink: 'syz.2.3961': attribute type 1 has an invalid length. [ 1453.971893][ T30] audit: type=1800 audit(1770940824.255:3719): pid=20218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3962" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 1454.028119][T20218] ISOFS: Unable to identify CD-ROM format. [ 1454.059182][T20213] bond1: (slave gretap1): making interface the new active one [ 1454.150100][T20213] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1454.192087][T20214] gretap1: entered promiscuous mode [ 1454.234167][T20214] bond1: (slave gretap1): making interface the new active one [ 1454.286201][T20214] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1454.356691][T20215] gretap2: entered promiscuous mode [ 1454.425457][ T10] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1454.611918][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.625501][T20223] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3965'. [ 1454.649271][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.670248][ T10] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1454.673326][T20223] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3965'. [ 1454.684297][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.702282][T20226] input: syz1 as /devices/virtual/input/input17 [ 1454.733641][ T10] usb 10-1: config 0 descriptor?? [ 1454.955456][T20232] random: crng reseeded on system resumption [ 1455.014692][T20226] netlink: 'syz.5.3963': attribute type 21 has an invalid length. [ 1455.085118][T20226] ALSA: seq fatal error: cannot create timer (-22) [ 1455.185966][ T10] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1455.237759][ T10] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1455.469352][ T10] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 1456.284836][ T10] cp2112 0003:10C4:EA90.000F: error reading lock byte: -32 [ 1456.357441][T20218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.385370][T20218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.607488][T20248] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3971'. [ 1457.148288][T14234] usb 10-1: USB disconnect, device number 9 [ 1458.782899][T20265] netlink: 'syz.2.3977': attribute type 1 has an invalid length. [ 1458.953509][ T30] audit: type=1800 audit(1770940829.235:3720): pid=20271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3978" name="bus" dev="tmpfs" ino=1432 res=0 errno=0 [ 1459.412328][T20274] netlink: 'syz.2.3980': attribute type 13 has an invalid length. [ 1460.395057][ T30] audit: type=1800 audit(1770940830.655:3721): pid=20287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3981" name="bus" dev="tmpfs" ino=501 res=0 errno=0 [ 1461.457343][T20296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3984'. [ 1462.348108][T20304] fuse: Unknown parameter '' [ 1462.609869][T20310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.649422][T20310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.731751][T20314] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3990'. [ 1463.083987][T20323] fuse: Unknown parameter ' [ 1463.204580][T20322] netlink: 'syz.5.3992': attribute type 1 has an invalid length. [ 1464.494491][T20340] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3997'. [ 1465.206681][T20343] netlink: 'syz.8.3998': attribute type 13 has an invalid length. [ 1468.483552][T20379] netlink: 'syz.5.4007': attribute type 12 has an invalid length. [ 1468.975415][T20381] netlink: 'syz.4.4008': attribute type 1 has an invalid length. [ 1469.128778][T20387] fuse: Unknown parameter 'd&}Jgŏ5SQcf20xffffffffffffffff' [ 1470.485246][T20398] kAFS: unable to lookup cell '(,c' [ 1470.690800][T20401] netlink: 'syz.2.4012': attribute type 13 has an invalid length. [ 1471.922650][ T30] audit: type=1800 audit(1770940842.185:3722): pid=20411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4015" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1472.062410][T20412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.153523][T20412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.190628][T20411] ISOFS: Unable to identify CD-ROM format. [ 1472.263194][T20412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.347122][T20412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.094256][T20418] random: crng reseeded on system resumption [ 1473.356664][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4017'. [ 1473.365712][T20420] netlink: 'syz.8.4017': attribute type 5 has an invalid length. [ 1473.390404][T20420] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4017'. [ 1473.448927][T20420] geneve2: entered promiscuous mode [ 1473.468407][T20420] geneve2: entered allmulticast mode [ 1473.521133][ T12] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1473.541533][ T58] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1473.563399][ T58] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1473.584324][ T58] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1474.994030][T20437] binder: 20435:20437 ioctl 4018620d 0 returned -22 [ 1475.478100][T20443] netlink: 'syz.2.4025': attribute type 13 has an invalid length. [ 1475.686482][T14234] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1475.898515][T14234] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1475.924872][T14234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1475.954897][T14234] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1475.992545][T14234] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1476.006031][T14234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.019293][T14234] usb 6-1: Product: syz [ 1476.024870][T14234] usb 6-1: Manufacturer: syz [ 1476.032466][T14234] usb 6-1: SerialNumber: syz [ 1476.336870][T14234] usb 6-1: config 0 descriptor?? [ 1476.501090][T20457] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4028'. [ 1476.845473][T20441] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1476.946608][T20460] random: crng reseeded on system resumption [ 1477.165043][T20441] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1477.212285][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4029'. [ 1477.222264][T20463] netlink: 'syz.2.4029': attribute type 5 has an invalid length. [ 1477.663976][T20463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4029'. [ 1478.143320][T20469] input: syz1 as /devices/virtual/input/input18 [ 1478.396242][T20471] random: crng reseeded on system resumption [ 1478.639558][T20473] netlink: 'syz.9.4030': attribute type 21 has an invalid length. [ 1479.305876][T20475] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4032'. [ 1479.356940][ T30] audit: type=1800 audit(1770940849.645:3723): pid=20477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4031" name="SYSV00000000" dev="tmpfs" ino=19 res=0 errno=0 [ 1481.487976][ T29] usb 6-1: USB disconnect, device number 21 [ 1481.498807][T20485] fuse: Unknown parameter '' [ 1482.818513][T20502] fuse: Bad value for 'fd' [ 1483.035670][T20506] geneve2: left allmulticast mode [ 1484.440589][T20521] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4045'. [ 1484.465641][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4045'. [ 1484.509332][T20524] fuse: Unknown parameter '' [ 1484.568734][T20526] kAFS: unable to lookup cell '(,c' [ 1488.055144][T20548] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4050'. [ 1488.426020][T20556] fuse: Bad value for 'fd' [ 1488.432765][T20552] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4052'. [ 1488.980905][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.105136][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.384677][T20600] binder: BINDER_SET_CONTEXT_MGR already set [ 1492.390862][T20600] binder: 20598:20600 ioctl 4018620d 200000000040 returned -16 [ 1492.412005][T20600] binder: 20598:20600 ioctl c0306201 2000000003c0 returned -14 [ 1492.892583][T20602] netlink: 'syz.5.4065': attribute type 1 has an invalid length. [ 1493.244165][T20604] bond3: (slave gretap2): making interface the new active one [ 1493.318449][T20604] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1496.085040][T20629] ISOFS: Unable to identify CD-ROM format. [ 1496.128420][ T30] audit: type=1800 audit(1770940866.355:3724): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4072" name="SYSV00000000" dev="tmpfs" ino=12 res=0 errno=0 [ 1496.364821][T18671] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1496.392440][T20635] fuse: Unknown parameter '' [ 1496.556899][T18671] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1496.569207][T18671] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.600916][T18671] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1496.634257][T18671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.715995][T18671] usb 3-1: config 0 descriptor?? [ 1497.159343][T18671] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1497.245800][T18671] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1497.348989][T18671] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 1497.916733][T20655] fuse: Unknown parameter 'd&}Jgŏ5SQcf20xffffffffffffffff' [ 1498.095224][ T30] audit: type=1800 audit(1770940868.365:3725): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4079" name="bus" dev="tmpfs" ino=1537 res=0 errno=0 [ 1498.326210][T20629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.336542][T20629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.116549][ T5907] usb 3-1: USB disconnect, device number 17 [ 1499.972675][T18671] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1500.328140][T18671] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1500.370446][T18671] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1500.508745][T18671] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1500.602962][T18671] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1500.670953][T18671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.706435][T18671] usb 3-1: Product: syz [ 1500.724791][T18671] usb 3-1: Manufacturer: syz [ 1500.741322][T18671] usb 3-1: SerialNumber: syz [ 1500.770163][T18671] usb 3-1: config 0 descriptor?? [ 1500.795584][T20679] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1501.121159][T20679] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1501.557406][T20684] netlink: 'syz.8.4086': attribute type 1 has an invalid length. [ 1505.437970][ T10] usb 3-1: USB disconnect, device number 18 [ 1507.441642][T20730] binder: 20729:20730 ioctl 4018620d 0 returned -22 [ 1507.707182][T20733] netlink: 'syz.9.4100': attribute type 1 has an invalid length. [ 1510.315888][T20753] xt_hashlimit: overflow, rate too high: 0 [ 1510.567331][T20753] pim6reg: entered allmulticast mode [ 1510.764926][T20758] binder: 20757:20758 ioctl 4018620d 0 returned -22 [ 1511.026069][T20763] random: crng reseeded on system resumption [ 1511.146221][ T5907] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1511.404782][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 1511.424020][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.573896][ T5907] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1511.605848][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.733991][ T5907] usb 3-1: config 0 descriptor?? [ 1512.193480][ T5907] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1512.203526][ T5907] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1512.305119][ T5907] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1512.328503][ T5907] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1512.381930][ T5907] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1512.409840][ T5907] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1512.638563][ T5907] usb 3-1: USB disconnect, device number 19 [ 1513.611547][T20781] xt_hashlimit: overflow, rate too high: 0 [ 1513.638932][T20781] pim6reg: entered allmulticast mode [ 1514.297996][T20792] kAFS: unable to lookup cell '(,c' [ 1514.792312][T20796] binder: BINDER_SET_CONTEXT_MGR already set [ 1514.798923][T20796] binder: 20794:20796 ioctl 4018620d 200000000040 returned -16 [ 1514.876577][T20796] binder: 20794:20796 ioctl c0306201 2000000003c0 returned -14 [ 1515.769352][T20802] binder: 20798:20802 ioctl c0306201 2000000003c0 returned -14 [ 1517.355034][T20839] netlink: 'syz.9.4126': attribute type 12 has an invalid length. [ 1517.368546][T20840] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4128'. [ 1519.327683][T20844] netlink: 'syz.2.4127': attribute type 12 has an invalid length. [ 1521.924607][T20884] netlink: 124 bytes leftover after parsing attributes in process `syz.9.4141'. [ 1522.211636][T20884] VFS: Lookup of 'devices.allow' in fuse fuse would have caused loop [ 1526.590231][T20931] fuse: Unknown parameter '' [ 1527.163684][T20937] syzkaller0: entered promiscuous mode [ 1527.178378][T20937] syzkaller0: entered allmulticast mode [ 1527.190201][T20943] netlink: 124 bytes leftover after parsing attributes in process `syz.9.4157'. [ 1529.541818][T20973] syzkaller0: entered promiscuous mode [ 1529.588622][T20973] syzkaller0: entered allmulticast mode [ 1531.876312][T21004] fuse: Unknown parameter 'd&}Jgŏ5SQcf20xffffffffffffffff' [ 1533.508872][T21019] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4172'. [ 1537.492978][T21054] loop9: detected capacity change from 0 to 1024 [ 1538.178159][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1538.183872][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1538.193095][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1538.628598][T21061] xt_hashlimit: overflow, rate too high: 0 [ 1538.860526][T21061] pim6reg: entered allmulticast mode [ 1539.534637][T21079] xt_hashlimit: overflow, rate too high: 0 [ 1539.664626][T21074] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4185'. [ 1542.824883][ T5900] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1543.021158][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1543.073646][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1543.134851][ T5900] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1543.188657][ T5900] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1543.215293][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.372682][ T5900] usb 3-1: Product: syz [ 1543.395375][ T5900] usb 3-1: Manufacturer: syz [ 1543.428983][ T5900] usb 3-1: SerialNumber: syz [ 1543.532956][ T5900] usb 3-1: config 0 descriptor?? [ 1543.643129][T21106] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1543.940607][T21106] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1545.314780][ T30] audit: type=1800 audit(1770940915.585:3726): pid=21140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4200" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1545.397036][T21140] ISOFS: Unable to identify CD-ROM format. [ 1545.777598][ T29] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1546.257783][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.276620][T18671] usb 3-1: USB disconnect, device number 20 [ 1546.387652][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.493768][ T29] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1546.602990][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.629462][ T29] usb 6-1: config 0 descriptor?? [ 1547.085557][ T29] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1547.096523][ T29] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1547.293547][ T29] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 1547.977005][ T5907] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1548.316726][T21140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.344883][T21140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.377627][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1548.460651][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1548.626932][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1548.799952][ T5907] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1548.821178][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.839844][ T5907] usb 5-1: Product: syz [ 1548.851309][ T5907] usb 5-1: Manufacturer: syz [ 1548.863439][ T5907] usb 5-1: SerialNumber: syz [ 1548.891722][ T5907] usb 5-1: config 0 descriptor?? [ 1548.916353][T21162] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1549.096341][ T5900] usb 6-1: USB disconnect, device number 22 [ 1549.386489][T21173] xt_hashlimit: overflow, rate too high: 0 [ 1549.498116][T21162] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1549.642707][T21177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4208'. [ 1549.747654][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4208'. [ 1550.308540][T21181] input: syz1 as /devices/virtual/input/input20 [ 1550.446089][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.477983][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.529325][T21186] random: crng reseeded on system resumption [ 1552.303075][ T5907] usb 5-1: USB disconnect, device number 15 [ 1552.509929][T21203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.552282][T21203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.418331][T21217] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4220'. [ 1555.805444][T21246] random: crng reseeded on system resumption [ 1556.395335][T21260] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4235'. [ 1556.516110][T18671] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1556.833406][T21267] netlink: 'syz.5.4236': attribute type 21 has an invalid length. [ 1556.876268][T18671] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1556.897802][T21263] ALSA: seq fatal error: cannot create timer (-22) [ 1556.936427][T18671] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1557.029327][T18671] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1557.101907][T18671] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1557.228372][T18671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.275071][T18671] usb 5-1: Product: syz [ 1557.304285][T18671] usb 5-1: Manufacturer: syz [ 1557.326603][T18671] usb 5-1: SerialNumber: syz [ 1557.364113][T18671] usb 5-1: config 0 descriptor?? [ 1557.400766][T21254] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1557.620905][T21254] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1557.662991][T21279] netlink: 'syz.2.4238': attribute type 12 has an invalid length. [ 1561.414579][ T5899] usb 5-1: USB disconnect, device number 16 [ 1561.801550][T21306] binder: 21305:21306 ioctl 4018620d 0 returned -22 [ 1565.527147][T21351] fuse: Unknown parameter '' [ 1566.355396][T21345] loop2: detected capacity change from 0 to 1024 [ 1566.386296][T21345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1566.389219][T21358] input: syz1 as /devices/virtual/input/input21 [ 1566.661503][T21360] random: crng reseeded on system resumption [ 1566.822304][T21345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1566.921312][T21358] ALSA: seq fatal error: cannot create timer (-22) [ 1567.005648][ T30] audit: type=1800 audit(1770940937.225:3727): pid=21345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4257" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1567.010480][T21354] netlink: 'syz.2.4257': attribute type 21 has an invalid length. [ 1567.068408][T21364] netlink: 'syz.2.4257': attribute type 8 has an invalid length. [ 1568.315069][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1568.346348][ T29] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1568.475961][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1568.510521][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.041603][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1569.061177][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.066287][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1569.125100][ T29] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1569.134388][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.255829][ T10] usb 6-1: config 0 descriptor?? [ 1569.388910][T18189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1569.446326][ T29] usb 5-1: config 0 descriptor?? [ 1569.765049][ T10] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1569.835898][ T10] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1569.862469][ T10] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1569.897461][ T29] usb 5-1: USB disconnect, device number 17 [ 1569.934049][ T10] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1569.999840][ T10] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1570.070292][ T10] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1570.339278][ T10] usb 6-1: USB disconnect, device number 23 [ 1572.694148][T21421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4273'. [ 1573.855224][T21428] netlink: 'syz.9.4276': attribute type 13 has an invalid length. [ 1577.479388][T21456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.607165][T21450] netlink: 'syz.5.4280': attribute type 12 has an invalid length. [ 1577.775488][T21456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.168532][T21471] input: syz1 as /devices/virtual/input/input22 [ 1579.383370][T21478] fuse: Unknown parameter '' [ 1579.418090][T21477] random: crng reseeded on system resumption [ 1579.580452][T21471] ALSA: seq fatal error: cannot create timer (-22) [ 1583.901618][T21502] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.4294'. [ 1583.921997][T21501] netlink: 'syz.8.4293': attribute type 13 has an invalid length. [ 1585.453619][ T10] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1586.807532][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.854950][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1586.949252][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1586.999081][ T10] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1587.044942][ T10] usb 5-1: Product: syz [ 1587.184877][ T10] usb 5-1: Manufacturer: syz [ 1587.196091][ T10] usb 5-1: SerialNumber: syz [ 1587.653186][T21538] geneve2: left allmulticast mode [ 1587.675329][ T10] usb 5-1: 0:2 : does not exist [ 1587.690755][ T10] usb 5-1: unit 9 not found! [ 1587.737089][ T10] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1587.912532][ T10] usb 5-1: USB disconnect, device number 18 [ 1588.059563][T19514] udevd[19514]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1588.526342][T21544] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.4308'. [ 1589.388033][T21551] netlink: 'syz.6.4310': attribute type 13 has an invalid length. [ 1591.252955][T21583] kAFS: unable to lookup cell '(,c' [ 1593.425353][ T30] audit: type=1800 audit(1770940963.715:3728): pid=21605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4318" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 1593.527977][T21605] ISOFS: Unable to identify CD-ROM format. [ 1593.824840][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1594.052306][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.074223][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1594.093813][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1594.134242][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.166403][ T10] usb 6-1: config 0 descriptor?? [ 1594.207606][T21610] 9p: Bad value for 'rfdno' [ 1594.608787][ T5907] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1594.627940][ T10] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1594.657002][ T10] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1594.825383][ T10] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 1594.845510][ T5907] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1594.887028][ T5907] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1594.941561][ T5907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.998689][ T5907] usb 10-1: config 0 descriptor?? [ 1595.061686][T21620] netlink: 'syz.4.4324': attribute type 13 has an invalid length. [ 1595.178794][T21625] xt_hashlimit: overflow, rate too high: 0 [ 1595.319963][ T5927] usb 10-1: USB disconnect, device number 10 [ 1595.787063][T21605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.796363][T21605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.934918][ T5927] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 1596.726717][ T10] usb 6-1: USB disconnect, device number 24 [ 1598.332828][T21648] netlink: 'syz.8.4330': attribute type 1 has an invalid length. [ 1599.884842][ T5907] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1600.048521][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.072679][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1600.115707][ T5907] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1600.162507][ T5907] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1600.224786][ T5907] usb 6-1: Product: syz [ 1600.230672][ T5907] usb 6-1: Manufacturer: syz [ 1600.235713][ T5907] usb 6-1: SerialNumber: syz [ 1600.466456][ T5907] usb 6-1: 0:2 : does not exist [ 1600.477203][ T5907] usb 6-1: unit 9 not found! [ 1600.538235][ T5907] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1600.727043][ T5907] usb 6-1: USB disconnect, device number 25 [ 1601.140119][T19514] udevd[19514]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1601.238052][T21683] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4341'. [ 1601.264881][ T5927] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1601.264933][T21671] loop9: detected capacity change from 0 to 1024 [ 1601.343208][T21685] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4341'. [ 1601.359473][T21671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1601.455284][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 1601.465836][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.478990][T21671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1601.575015][ T30] audit: type=1800 audit(1770940971.805:3729): pid=21669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4337" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1601.605042][ T5927] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1601.624511][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.634832][T21669] netlink: 'syz.9.4337': attribute type 21 has an invalid length. [ 1601.644313][T21687] syzkaller0: entered promiscuous mode [ 1601.705817][T21671] netlink: 'syz.9.4337': attribute type 8 has an invalid length. [ 1601.723979][T21687] syzkaller0: entered allmulticast mode [ 1601.797101][ T5927] usb 3-1: config 0 descriptor?? [ 1602.108776][T21696] netlink: 'syz.8.4343': attribute type 12 has an invalid length. [ 1602.266575][ T5927] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1602.301096][T13346] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.305726][ T5927] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1602.345025][ T5927] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1602.378560][ T5927] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1602.525693][ T5927] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 1602.533603][ T5927] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1602.729194][ T5927] usb 3-1: USB disconnect, device number 21 [ 1603.963938][T21707] xt_hashlimit: overflow, rate too high: 0 [ 1607.253689][T21707] pim6reg: entered allmulticast mode [ 1607.347618][T21715] gretap1: entered promiscuous mode [ 1607.905140][T21733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4353'. [ 1608.384700][ T5927] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1608.846695][ T5927] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.864867][ T5927] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1608.886968][ T5927] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1608.993730][ T5927] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1609.012227][ T5927] usb 6-1: Product: syz [ 1609.022514][ T5927] usb 6-1: Manufacturer: syz [ 1609.032493][ T5927] usb 6-1: SerialNumber: syz [ 1609.376338][ T5927] usb 6-1: 0:2 : does not exist [ 1609.396494][ T5927] usb 6-1: unit 9 not found! [ 1609.425958][ T5927] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1609.787337][T21751] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4359'. [ 1609.811010][ T5927] usb 6-1: USB disconnect, device number 26 [ 1610.101935][T19514] udevd[19514]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1611.044312][T21767] netlink: 'syz.6.4363': attribute type 1 has an invalid length. [ 1611.097199][T21765] syzkaller0: entered promiscuous mode [ 1611.110336][T21769] kAFS: unable to lookup cell '(,c' [ 1611.143639][T21765] syzkaller0: entered allmulticast mode [ 1611.863111][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1611.869561][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.976448][T21773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.003014][T21773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.595500][T21803] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4371'. [ 1617.280989][T21807] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4373'. [ 1617.424851][ T5927] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1617.624120][ T5927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.653076][ T5927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1617.706289][ T5927] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1617.717057][ T5927] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1617.727685][ T5927] usb 5-1: Product: syz [ 1617.731942][ T5927] usb 5-1: Manufacturer: syz [ 1617.743476][ T5927] usb 5-1: SerialNumber: syz [ 1618.022423][ T5927] usb 5-1: 0:2 : does not exist [ 1618.029482][ T5927] usb 5-1: unit 9 not found! [ 1618.052123][ T5927] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1618.139723][ T5927] usb 5-1: USB disconnect, device number 19 [ 1620.582884][T21767] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1620.584925][ T29] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1620.590748][T21771] gretap1: entered promiscuous mode [ 1620.821334][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1620.833680][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.891713][ T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1620.911174][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.955554][ T29] usb 6-1: config 0 descriptor?? [ 1621.067663][T21841] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4380'. [ 1621.077381][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4380'. [ 1621.153289][T21845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4382'. [ 1621.595770][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 1621.643913][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1621.659174][ T29] usb 6-1: USB disconnect, device number 27 [ 1621.718056][T21857] cifs: Unknown parameter ' [ 1621.718381][T21857] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1621.900721][T21857] CIFS mount error: No usable UNC path provided in device string! [ 1621.900721][T21857] [ 1621.911112][T21857] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1622.066856][T21860] input: syz1 as /devices/virtual/input/input23 [ 1622.189217][T21860] random: crng reseeded on system resumption [ 1622.213021][T21860] netlink: 'syz.8.4387': attribute type 21 has an invalid length. [ 1622.227198][T21860] ALSA: seq fatal error: cannot create timer (-22) [ 1623.401292][T21876] loop2: detected capacity change from 0 to 1024 [ 1623.854863][ T5899] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1624.064350][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1624.079545][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1624.099241][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1624.231028][ T5899] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.291519][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1624.349692][ T5899] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1624.373598][T21880] netlink: 'syz.2.4392': attribute type 1 has an invalid length. [ 1624.392935][ T5899] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1624.426790][ T5899] usb 6-1: Product: syz [ 1624.454717][ T5899] usb 6-1: Manufacturer: syz [ 1624.489879][ T5899] usb 6-1: SerialNumber: syz [ 1624.958660][ T5899] usb 6-1: 0:2 : does not exist [ 1625.015518][ T5899] usb 6-1: unit 9 not found! [ 1625.028880][ T5899] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1625.256148][ T5899] usb 6-1: USB disconnect, device number 28 [ 1625.360218][T21887] syzkaller0: entered promiscuous mode [ 1625.391988][T21887] syzkaller0: entered allmulticast mode [ 1625.453520][T19514] udevd[19514]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1625.733411][T21892] kAFS: unable to lookup cell '(,c' [ 1627.685979][T21904] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4394'. [ 1628.297094][T21917] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4401'. [ 1628.920188][T21924] binder: 21922:21924 ioctl c0306201 0 returned -14 [ 1628.935525][T21924] binder_alloc: 21922: binder_alloc_buf, no vma [ 1630.504546][T21944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1630.517807][T21944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1630.533504][T21944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1630.571171][T21944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1630.588857][T21944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1632.013072][T21955] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4410'. [ 1632.022485][T21955] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4410'. [ 1632.563113][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.636862][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.655415][ T5832] Bluetooth: hci0: command tx timeout [ 1632.693165][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1633.002139][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1633.220423][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.230943][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1633.342646][T21959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4413'. [ 1633.689505][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1633.728143][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.739355][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1634.110481][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 1634.377770][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 1634.735477][ T5832] Bluetooth: hci0: command tx timeout [ 1636.029088][T21943] chnl_net:caif_netlink_parms(): no params data found [ 1636.815009][ T5832] Bluetooth: hci0: command tx timeout [ 1636.877787][ T5927] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1637.206946][ T5927] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.373015][ T5927] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1637.388477][T22003] binder: 21997:22003 ioctl 4018620d 0 returned -22 [ 1637.398628][ T5927] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1637.413016][ T5927] usb 10-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1637.422987][ T5927] usb 10-1: Product: syz [ 1637.490798][ T5927] usb 10-1: Manufacturer: syz [ 1637.506248][ T5927] usb 10-1: SerialNumber: syz [ 1637.537281][ T12] gretap0 (unregistering): left promiscuous mode [ 1637.763418][ T12] bond0 (unregistering): left promiscuous mode [ 1637.922557][ T5927] usb 10-1: 0:2 : does not exist [ 1637.959817][ T5927] usb 10-1: unit 9 not found! [ 1638.377054][ T12] bond0 (unregistering): Released all slaves [ 1638.448134][ T5927] usb 10-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1638.506391][T22015] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4421'. [ 1638.637153][ T5927] usb 10-1: USB disconnect, device number 11 [ 1638.860365][T19514] udevd[19514]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1638.895250][ T5832] Bluetooth: hci0: command tx timeout [ 1639.024916][ T12] tipc: Left network mode [ 1639.186580][T21943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.300013][T21943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.311152][T21943] bridge_slave_0: entered allmulticast mode [ 1639.318657][T21943] bridge_slave_0: entered promiscuous mode [ 1639.438353][T21943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.460746][T21943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.478270][T21943] bridge_slave_1: entered allmulticast mode [ 1639.489961][T21943] bridge_slave_1: entered promiscuous mode [ 1639.530658][T21943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.558779][T21943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.989018][T21943] team0: Port device team_slave_0 added [ 1640.076443][T22035] syzkaller0: entered promiscuous mode [ 1640.082023][T22035] syzkaller0: entered allmulticast mode [ 1640.132259][T21943] team0: Port device team_slave_1 added [ 1640.735888][ T5927] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1640.940271][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 1640.981488][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.025800][ T5927] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1641.074375][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.155008][ T5927] usb 5-1: config 0 descriptor?? [ 1641.923761][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 1642.117038][T22057] fuse: Unknown parameter '' [ 1642.574625][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1642.681811][ T5927] usb 5-1: USB disconnect, device number 20 [ 1643.634437][T22063] loop8: detected capacity change from 0 to 1024 [ 1643.726504][T22063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1643.870684][T22063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1643.953434][ T30] audit: type=1800 audit(1770941014.235:3730): pid=22063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4428" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1644.073128][T22072] netlink: 'syz.8.4428': attribute type 21 has an invalid length. [ 1644.180553][T22078] netlink: 'syz.8.4428': attribute type 8 has an invalid length. [ 1645.228687][T12924] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.518802][T21943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1649.546431][T21943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.690371][T21943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.782292][T21943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.807925][T21943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.838847][T21943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1649.895025][ T10] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1650.182400][T22117] binder: 22116:22117 ioctl 4018620d 0 returned -22 [ 1650.185338][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.232363][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1650.258205][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1650.450434][ T10] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1650.487697][ T10] usb 3-1: Product: syz [ 1650.508481][ T10] usb 3-1: Manufacturer: syz [ 1650.596646][ T10] usb 3-1: SerialNumber: syz [ 1650.712123][T21943] hsr_slave_0: entered promiscuous mode [ 1650.732408][T21943] hsr_slave_1: entered promiscuous mode [ 1650.798743][T21943] debugfs: 'hsr0' already exists in 'hsr' [ 1650.950308][T21943] Cannot create hsr debugfs directory [ 1651.047409][ T10] usb 3-1: 0:2 : does not exist [ 1651.052391][ T10] usb 3-1: unit 9 not found! [ 1651.157092][ T10] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1651.392726][ T10] usb 3-1: USB disconnect, device number 22 [ 1651.466881][ T12] hsr_slave_0: left promiscuous mode [ 1651.479834][T19514] udevd[19514]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1651.518580][ T12] hsr_slave_1: left promiscuous mode [ 1651.627531][ T12] veth1_macvtap: left promiscuous mode [ 1651.667971][ T12] veth0_macvtap: left promiscuous mode [ 1651.693654][ T12] veth1_vlan: left promiscuous mode [ 1651.734221][ T12] veth0_vlan: left promiscuous mode [ 1652.801407][T22136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.846503][T22136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.356437][T22191] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4449'. [ 1658.795166][ T10] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1658.827214][T21943] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1658.902820][T21943] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1658.974582][T21943] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1658.976930][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.025424][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1659.033517][T21943] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1659.077533][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1659.110334][ T10] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1659.144575][ T10] usb 6-1: Product: syz [ 1659.162873][ T10] usb 6-1: Manufacturer: syz [ 1659.187206][ T10] usb 6-1: SerialNumber: syz [ 1659.661016][T22222] binder: 22220:22222 ioctl 4018620d 0 returned -22 [ 1659.710304][T21943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1659.723838][ T10] usb 6-1: 0:2 : does not exist [ 1659.737020][ T10] usb 6-1: unit 9 not found! [ 1659.771763][ T10] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1659.823556][T21943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.906731][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.914067][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1659.999447][ T10] usb 6-1: USB disconnect, device number 29 [ 1660.065175][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.072377][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1660.116227][T19514] udevd[19514]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1660.735055][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1661.674838][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1661.827529][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.585542][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1662.607107][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.630683][ T10] usb 6-1: config 0 descriptor?? [ 1663.296112][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1663.302174][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1663.332575][ T10] usb 6-1: USB disconnect, device number 30 [ 1663.398856][T21943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1665.214449][T22292] loop8: detected capacity change from 0 to 1024 [ 1665.773171][T21943] veth0_vlan: entered promiscuous mode [ 1665.880368][T21943] veth1_vlan: entered promiscuous mode [ 1665.908507][T21943] veth0_macvtap: entered promiscuous mode [ 1665.918456][T21943] veth1_macvtap: entered promiscuous mode [ 1665.936327][T21943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1665.966060][ T2994] hfsplus: b-tree write err: -5, ino 25 [ 1665.972132][ T2994] hfsplus: b-tree write err: -5, ino 4 [ 1666.035911][ T2994] hfsplus: b-tree write err: -5, ino 2 [ 1666.172549][T21943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.301917][T11830] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.412685][T11830] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.474421][T11830] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.510130][T11830] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.772016][T11830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.795946][T11830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.094361][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.112833][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.756763][T22313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.766489][T22313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.176371][ T29] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1668.368448][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.394547][T22323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4471'. [ 1668.464068][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1668.506295][ T29] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1668.540416][ T29] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1668.591778][ T29] usb 5-1: Product: syz [ 1668.604598][ T29] usb 5-1: Manufacturer: syz [ 1668.624401][ T29] usb 5-1: SerialNumber: syz [ 1669.056201][ T29] usb 5-1: 0:2 : does not exist [ 1669.075921][ T29] usb 5-1: unit 9 not found! [ 1669.111432][ T29] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1669.390242][ T29] usb 5-1: USB disconnect, device number 21 [ 1673.311477][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.318600][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.623454][T22405] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4486'. [ 1676.834950][ T5900] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1677.036732][ T5900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.082411][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1677.534540][ T5900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1677.684036][ T5900] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1677.729737][ T5900] usb 3-1: Product: syz [ 1677.734042][ T5900] usb 3-1: Manufacturer: syz [ 1678.131495][T22440] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4493'. [ 1678.169168][ T5900] usb 3-1: SerialNumber: syz [ 1679.965134][T22448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1680.066570][ T5900] usb 3-1: 0:2 : does not exist [ 1680.071779][ T5900] usb 3-1: unit 9 not found! [ 1680.086622][ T5900] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1680.163181][ T5900] usb 3-1: USB disconnect, device number 23 [ 1681.683856][T22463] fuse: Unknown parameter 'd&}Jgŏ5SQcf20xffffffffffffffff' [ 1683.180601][T22469] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4504'. [ 1687.725032][T22503] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4498'. [ 1689.537713][ T5907] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1689.745859][T22513] loop6: detected capacity change from 0 to 1024 [ 1690.302664][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.343208][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1690.376838][ T5907] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1690.394231][ T5907] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1690.437830][ T5907] usb 6-1: Product: syz [ 1690.442043][ T5907] usb 6-1: Manufacturer: syz [ 1690.544836][ T5907] usb 6-1: SerialNumber: syz [ 1690.597501][ T58] hfsplus: b-tree write err: -5, ino 25 [ 1690.603410][ T58] hfsplus: b-tree write err: -5, ino 4 [ 1690.638840][ T58] hfsplus: b-tree write err: -5, ino 2 [ 1691.589394][T22529] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4520'. [ 1691.678069][ T5907] usb 6-1: 0:2 : does not exist [ 1691.723629][ T5907] usb 6-1: unit 9 not found! [ 1691.744432][ T5907] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1691.819078][ T30] audit: type=1800 audit(1770941062.085:3731): pid=22531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4521" name="SYSV00000000" dev="tmpfs" ino=16 res=0 errno=0 [ 1691.844474][T22531] ISOFS: Unable to identify CD-ROM format. [ 1691.911390][ T5907] usb 6-1: USB disconnect, device number 31 [ 1692.135633][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1692.351679][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.412807][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1692.443145][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1692.505733][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.554949][ T5927] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1692.622142][ T10] usb 3-1: config 0 descriptor?? [ 1692.760654][ T5927] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1692.829502][ T2994] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.848602][ T5927] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1692.868428][ T5927] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.919994][ T2994] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1692.929455][ T5927] usb 10-1: Product: syz [ 1692.944587][ T5927] usb 10-1: Manufacturer: syz [ 1692.961821][T19514] udevd[19514]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1692.984149][ T5927] usb 10-1: SerialNumber: syz [ 1693.045698][ T10] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 1693.175517][ T5927] usb 10-1: config 0 descriptor?? [ 1693.236149][ T10] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1693.315718][ T10] cp2112 0003:10C4:EA90.0016: Part Number: 0x82 Device Version: 0xFE [ 1693.781419][ T5927] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1694.267461][T20063] udevd[20063]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1694.399432][T22531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.475963][T22531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.485032][ T10] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 1695.476165][ T5927] usb 3-1: USB disconnect, device number 24 [ 1697.576824][T22572] loop6: detected capacity change from 0 to 1024 [ 1698.398124][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1698.496259][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1698.518048][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1700.009010][T22590] netlink: 'syz.2.4536': attribute type 1 has an invalid length. [ 1700.120839][ T5900] usb 10-1: USB disconnect, device number 12 [ 1700.307086][T22592] gretap1: entered promiscuous mode [ 1700.595129][ T5900] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1700.722513][ T2994] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.799185][ T5900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.839890][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1700.878974][ T5900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1700.891351][ T5900] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1700.935867][ T5900] usb 3-1: Product: syz [ 1700.954194][ T5900] usb 3-1: Manufacturer: syz [ 1700.972481][ T5900] usb 3-1: SerialNumber: syz [ 1701.255793][ T5900] usb 3-1: 0:2 : does not exist [ 1701.261409][ T5900] usb 3-1: unit 9 not found! [ 1701.283944][ T5900] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1701.904439][ T5900] usb 3-1: USB disconnect, device number 25 [ 1702.161920][T19514] udevd[19514]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1702.986834][T22619] loop2: detected capacity change from 0 to 1024 [ 1703.226273][T22619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1703.423797][T22619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1703.529733][ T30] audit: type=1800 audit(1770941073.815:3732): pid=22619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4546" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1703.618012][T22622] netlink: 'syz.2.4546': attribute type 21 has an invalid length. [ 1704.823655][T18189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.752650][ T5927] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1706.128890][T22658] binder: 22657:22658 ioctl 4018620d 0 returned -22 [ 1706.294961][T22652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1706.341085][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1706.358593][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1706.441646][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1706.598927][ T5927] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1706.633798][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.664084][ T5927] usb 3-1: Product: syz [ 1706.712952][ T5927] usb 3-1: Manufacturer: syz [ 1706.740073][ T5927] usb 3-1: SerialNumber: syz [ 1706.997945][ T5927] usb 3-1: config 0 descriptor?? [ 1707.040232][T22643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1707.348714][T22643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1707.766993][T22675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.985905][T22675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.064430][T22691] fuse: Unknown parameter '' [ 1710.189019][ T5993] usb 3-1: USB disconnect, device number 26 [ 1710.450234][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4563'. [ 1710.471907][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4563'. [ 1712.669204][T22711] binder: 22707:22711 ioctl 4018620d 0 returned -22 [ 1712.681617][T22710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4569'. [ 1714.282452][T22728] xt_hashlimit: overflow, rate too high: 0 [ 1716.929079][T22759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1716.963339][T22758] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4580'. [ 1717.047528][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4580'. [ 1718.017720][T22770] binder: 22769:22770 ioctl 4018620d 0 returned -22 [ 1718.201741][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4585'. [ 1720.368174][ T30] audit: type=1800 audit(1770941090.655:3733): pid=22799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4593" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 1720.398614][T22799] ISOFS: Unable to identify CD-ROM format. [ 1720.467384][T22801] kAFS: unable to lookup cell '(,c' [ 1720.685180][ T5993] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1720.866367][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.902200][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.939133][ T5993] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1720.973684][ T5993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.015254][ T5993] usb 10-1: config 0 descriptor?? [ 1721.438059][ T5993] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 1721.475556][ T5993] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1721.636131][ T5993] cp2112 0003:10C4:EA90.0017: Part Number: 0x82 Device Version: 0xFE [ 1721.995687][T22810] binder: 22808:22810 ioctl 4018620d 0 returned -22 [ 1722.653122][T22799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.699070][T22799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1722.774907][ T5927] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1722.874867][ T29] usb 10-1: reset high-speed USB device number 13 using dummy_hcd [ 1722.982790][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1723.005362][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1723.047065][ T5927] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1723.403891][ T5927] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1723.439281][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4601'. [ 1723.456643][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.519651][ T5927] usb 5-1: Product: syz [ 1723.543472][ T5927] usb 5-1: Manufacturer: syz [ 1723.581556][ T5927] usb 5-1: SerialNumber: syz [ 1723.626245][ T5927] usb 5-1: config 0 descriptor?? [ 1723.649843][T22819] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1723.700429][ T5993] usb 10-1: USB disconnect, device number 13 [ 1723.971748][T22819] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1726.744776][T22857] input: syz1 as /devices/virtual/input/input24 [ 1726.920026][T22859] random: crng reseeded on system resumption [ 1727.221011][T22858] netlink: 'syz.8.4608': attribute type 21 has an invalid length. [ 1727.275874][ T5993] usb 5-1: USB disconnect, device number 22 [ 1727.595395][T22858] ALSA: seq fatal error: cannot create timer (-22) [ 1730.694593][T22890] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4616'. [ 1734.743715][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1734.753488][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.547692][T22944] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4631'. [ 1740.820447][T22991] kAFS: unable to lookup cell '(,c' [ 1741.077811][T22993] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1748.677523][T23062] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4659'. [ 1750.984589][T23093] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1753.960047][T23100] netlink: 'syz.9.4667': attribute type 1 has an invalid length. [ 1754.441334][T23111] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1757.535036][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 1761.305747][T23171] netlink: 'syz.2.4685': attribute type 1 has an invalid length. [ 1763.085095][ T5927] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1763.301378][ T5927] usb 3-1: config 17 has an invalid interface number: 255 but max is 0 [ 1763.427606][ T5927] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.468175][ T5927] usb 3-1: config 17 has no interface number 0 [ 1763.474404][ T5927] usb 3-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1763.581422][ T5927] usb 3-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1763.669713][ T5927] usb 3-1: config 17 interface 255 has no altsetting 0 [ 1763.717759][ T5927] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1763.773018][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.829369][ T5927] aiptek 3-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 1764.594624][T23199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1764.606491][T23199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.915237][ T5993] usb 3-1: USB disconnect, device number 27 [ 1767.036032][T23230] netlink: 'syz.4.4699': attribute type 1 has an invalid length. [ 1769.923652][ T5927] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1770.225594][ T5927] usb 5-1: config 17 has an invalid interface number: 255 but max is 0 [ 1770.234264][ T5927] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.276247][ T5927] usb 5-1: config 17 has no interface number 0 [ 1770.282558][ T5927] usb 5-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1770.582123][ T5927] usb 5-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1770.664595][ T5927] usb 5-1: config 17 interface 255 has no altsetting 0 [ 1770.682334][ T5927] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1770.829043][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.861833][ T5927] aiptek 5-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 1772.097526][ T29] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1772.346724][ T29] usb 10-1: config 17 has an invalid interface number: 255 but max is 0 [ 1772.355497][ T29] usb 10-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.394979][ T29] usb 10-1: config 17 has no interface number 0 [ 1772.419023][ T29] usb 10-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1772.454883][ T29] usb 10-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1772.517667][ T29] usb 10-1: config 17 interface 255 has no altsetting 0 [ 1772.548925][ T29] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1772.570719][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.631386][ T29] aiptek 10-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 1773.319273][ T5927] usb 5-1: USB disconnect, device number 23 [ 1775.609124][ T29] usb 10-1: USB disconnect, device number 14 [ 1776.686087][T23313] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4718'. [ 1776.696529][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4718'. [ 1777.199659][T23317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4720'. [ 1778.108349][T23337] rdma_op ffff88806a20b9f0 conn xmit_rdma 0000000000000000 [ 1778.412027][T23343] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1778.444452][T23343] xt_hashlimit: size too large, truncated to 1048576 [ 1780.535473][T23358] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4729'. [ 1780.564936][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4729'. [ 1781.516513][T23367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.616145][T23367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.111465][T23405] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4742'. [ 1787.378950][T23412] rdma_op ffff88807d80d9f0 conn xmit_rdma 0000000000000000 [ 1787.707758][T23419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.791744][T23419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.930632][T23438] kAFS: unable to lookup cell '(,c' [ 1790.705131][ T5927] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1790.913603][ T5927] usb 10-1: config 17 has an invalid interface number: 255 but max is 0 [ 1790.945672][ T5927] usb 10-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.020587][ T5927] usb 10-1: config 17 has no interface number 0 [ 1791.087286][ T5927] usb 10-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1791.190730][ T5927] usb 10-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1791.282101][ T5927] usb 10-1: config 17 interface 255 has no altsetting 0 [ 1791.326350][ T5927] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1791.358338][ T5927] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.457511][ T5927] aiptek 10-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 1794.395949][ T5993] usb 10-1: USB disconnect, device number 15 [ 1796.183405][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.190134][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.774991][ T5920] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1798.694701][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1798.777298][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1798.864490][ T5920] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1798.986206][ T5920] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1799.014801][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.022872][ T5920] usb 3-1: Product: syz [ 1799.058870][ T5920] usb 3-1: Manufacturer: syz [ 1799.086590][ T5920] usb 3-1: SerialNumber: syz [ 1799.120721][T23497] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4762'. [ 1799.186006][ T5920] usb 3-1: config 0 descriptor?? [ 1799.192520][T23494] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1799.414892][T23494] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1801.267667][T23517] fuse: Bad value for 'fd' [ 1801.412285][T23520] kAFS: unable to lookup cell '(,c' [ 1802.572435][ T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1802.765652][ T29] usb 5-1: config 17 has an invalid interface number: 255 but max is 0 [ 1802.772940][ T10] usb 3-1: USB disconnect, device number 28 [ 1802.825244][ T29] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1802.886021][ T29] usb 5-1: config 17 has no interface number 0 [ 1803.024316][ T29] usb 5-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1803.275983][ T29] usb 5-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1803.561864][ T29] usb 5-1: config 17 interface 255 has no altsetting 0 [ 1803.680730][ T29] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1803.824885][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.417207][ T29] aiptek 5-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 1806.583537][T23554] fuse: Unknown parameter '' [ 1806.812276][ T5920] usb 5-1: USB disconnect, device number 24 [ 1808.107220][ T5920] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1808.445409][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 1808.467919][T23572] fuse: Unknown parameter '0x0000000000000003' [ 1808.473221][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.546578][ T5920] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1808.599911][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.679397][ T5920] usb 5-1: config 0 descriptor?? [ 1809.284372][T23570] loop6: detected capacity change from 0 to 1024 [ 1809.435746][T23570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1809.623920][ T5920] usbhid 5-1:0.0: can't add hid device: -71 [ 1809.675030][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1809.686652][T23570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1809.761009][ T5920] usb 5-1: USB disconnect, device number 25 [ 1809.804526][ T30] audit: type=1800 audit(1770941180.085:3734): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4785" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1809.940255][T23575] netlink: 'syz.6.4785': attribute type 21 has an invalid length. [ 1809.941498][T23582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4785'. [ 1811.162214][T21943] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1811.290617][T23598] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1811.310775][T23598] xt_hashlimit: size too large, truncated to 1048576 [ 1812.576834][ T9746] nci: nci_rx_work: unknown MT 0x7 [ 1812.585488][ T5920] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1812.769224][ T5920] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1812.788587][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1812.841317][ T5920] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1813.493761][T23617] batman_adv: batadv0: Adding interface: gretap2 [ 1813.501758][T23617] batman_adv: batadv0: Interface activated: gretap2 [ 1814.332119][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.190443][ T5920] usb 7-1: config 0 descriptor?? [ 1815.258648][ T5920] usb 7-1: can't set config #0, error -71 [ 1815.335111][ T5920] usb 7-1: USB disconnect, device number 35 [ 1816.627376][ T30] audit: type=1800 audit(1770941186.885:3735): pid=23621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4795" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 1816.652705][T23621] ISOFS: Unable to identify CD-ROM format. [ 1817.024960][ T5920] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1817.237476][ T5920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.494233][ T5920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.606903][T23631] fuse: Unknown parameter '0x0000000000000003' [ 1817.614994][ T5920] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1817.631068][ T5920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.866058][ T5920] usb 10-1: config 0 descriptor?? [ 1818.162852][T23640] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4801'. [ 1818.278752][ T5920] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 1818.337307][ T5920] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1818.476477][ T5920] cp2112 0003:10C4:EA90.0018: Part Number: 0x82 Device Version: 0xFE [ 1819.455780][T23621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.465061][T23621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.546499][ T5920] usb 10-1: reset high-speed USB device number 16 using dummy_hcd [ 1819.727492][T23644] loop5: detected capacity change from 0 to 1024 [ 1819.787935][T23644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1819.928355][T23644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1819.964259][ T30] audit: type=1800 audit(1770941190.235:3736): pid=23644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4802" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1820.084480][T23648] netlink: 'syz.5.4802': attribute type 21 has an invalid length. [ 1820.278540][T23656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4802'. [ 1820.436897][ T10] usb 10-1: USB disconnect, device number 16 [ 1821.116454][ T2994] nci: nci_rx_work: unknown MT 0x7 [ 1821.321001][T23672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4808'. [ 1821.655774][T23676] xt_hashlimit: overflow, rate too high: 0 [ 1821.928280][T17826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1822.416225][T23688] xt_hashlimit: size too large, truncated to 1048576 [ 1822.590778][T23685] xt_hashlimit: size too large, truncated to 1048576 [ 1822.912461][T23694] fuse: Unknown parameter '0xffffffffffffffff' [ 1823.307311][T23696] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1828.095394][T23736] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4823'. [ 1828.816130][T23745] fuse: Unknown parameter '0x0000000000000003' [ 1829.027272][T23748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4825'. [ 1829.036569][T23748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4825'. [ 1834.196597][T23788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.206444][T23788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.726774][T23795] fuse: Unknown parameter '0x0000000000000003' [ 1836.016162][T23805] xt_hashlimit: overflow, rate too high: 0 [ 1837.144675][T23815] gretap1: entered promiscuous mode [ 1837.181649][T23815] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1838.056944][T23824] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4847'. [ 1838.067450][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4847'. [ 1841.101040][T23846] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4853'. [ 1841.265872][T23849] fuse: Unknown parameter '0x0000000000000003' [ 1847.587900][T23897] fuse: Unknown parameter 'fd0x0000000000000003' [ 1848.570435][T23915] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4871'. [ 1848.581585][T23915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4871'. [ 1848.767114][T23919] xt_hashlimit: size too large, truncated to 1048576 [ 1849.330195][T23925] fuse: Unknown parameter '' [ 1850.151087][T23933] rdma_op ffff888063d931f0 conn xmit_rdma 0000000000000000 [ 1850.372347][T23934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.381462][T23934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1856.898228][T23986] xt_hashlimit: size too large, truncated to 1048576 [ 1857.767598][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1857.773964][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.917288][T24007] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4896'. [ 1863.112366][ T3551] nci: nci_rx_work: unknown MT 0x7 [ 1864.351817][T24059] kAFS: unable to lookup cell '(,c' [ 1870.555726][T24099] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1875.394864][T18671] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1875.649118][T18671] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1875.716013][T18671] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1875.882755][T18671] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1875.950779][T18671] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1876.830918][T18671] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.849290][T18671] usb 7-1: Product: syz [ 1876.884849][T18671] usb 7-1: Manufacturer: syz [ 1876.890722][T18671] usb 7-1: SerialNumber: syz [ 1876.945811][T18671] usb 7-1: config 0 descriptor?? [ 1876.953717][T24157] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1877.183872][T24157] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1880.470678][ T29] usb 7-1: USB disconnect, device number 36 [ 1885.895748][ T36] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 1889.195242][T24240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1891.155406][T24268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1891.219141][T24268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.479852][T24304] xt_hashlimit: overflow, rate too high: 0 [ 1895.508032][T24304] pim6reg: entered allmulticast mode [ 1895.654716][ T2994] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 1897.905512][T24327] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4983'. [ 1898.284994][T24299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1901.108709][ T30] audit: type=1800 audit(1770941271.395:3737): pid=24360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5001" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 1901.250581][T24360] ISOFS: Unable to identify CD-ROM format. [ 1901.293623][T24364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.358821][T24364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.420723][T24360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.477050][T24360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.345066][ T5900] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1902.358742][T24377] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5007'. [ 1902.422938][ T1157] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 1902.577335][ T5900] usb 7-1: config 17 has an invalid interface number: 255 but max is 0 [ 1902.640893][ T5900] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.683509][ T5900] usb 7-1: config 17 has no interface number 0 [ 1902.747808][ T5900] usb 7-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1902.787121][ T5900] usb 7-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1902.816883][ T5900] usb 7-1: config 17 interface 255 has no altsetting 0 [ 1903.030981][ T5900] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1903.040723][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.999332][ T5900] aiptek 7-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 1905.356672][ T10] usb 7-1: USB disconnect, device number 37 [ 1906.441488][ T5993] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1906.815462][ T5993] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1906.859819][T24428] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5021'. [ 1906.871291][ T5993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1906.907029][ T5993] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1907.048840][ T5993] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1907.069630][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.079358][ T5993] usb 7-1: Product: syz [ 1907.083551][ T5993] usb 7-1: Manufacturer: syz [ 1907.088616][ T5993] usb 7-1: SerialNumber: syz [ 1907.108379][ T5993] usb 7-1: config 0 descriptor?? [ 1907.156805][T24420] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1907.417073][ T36] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 1907.552746][T24420] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1910.219618][T24430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1910.329357][T24459] rdma_op ffff88807bbbb9f0 conn xmit_rdma 0000000000000000 [ 1910.436468][T24460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1910.507338][T24460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1910.600570][ T5920] usb 7-1: USB disconnect, device number 38 [ 1911.364905][ T5920] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1911.658419][ T5920] usb 7-1: config 17 has an invalid interface number: 255 but max is 0 [ 1911.677221][ T5920] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.715449][ T5920] usb 7-1: config 17 has no interface number 0 [ 1911.727691][ T5920] usb 7-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1911.821152][ T5920] usb 7-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1911.886898][ T5920] usb 7-1: config 17 interface 255 has no altsetting 0 [ 1911.906103][T24480] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5034'. [ 1911.920606][ T5920] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1911.938319][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.004575][ T5920] aiptek 7-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 1913.945117][T24484] loop5: detected capacity change from 0 to 1024 [ 1914.012010][T24484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1914.272873][T24484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1914.376826][ T30] audit: type=1800 audit(1770941284.665:3738): pid=24484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5035" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1914.445781][T24484] netlink: 'syz.5.5035': attribute type 21 has an invalid length. [ 1914.540645][ T10] usb 7-1: USB disconnect, device number 39 [ 1915.009780][T17826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1916.058123][ T2994] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 1917.698584][T24533] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1917.709976][T24533] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1917.744339][T24547] Invalid argument reading file caps for ./file0 [ 1917.759567][T24533] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1917.767354][T24533] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1917.826822][T24533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1917.832850][T24533] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1917.902074][T24533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1917.908277][T24533] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1918.177780][T24559] random: crng reseeded on system resumption [ 1918.336247][ T29] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1918.507115][ T29] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1918.515586][ T29] usb 10-1: config 0 has no interface number 0 [ 1918.521873][ T29] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1918.531231][ T29] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1918.540516][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.548737][ T29] usb 10-1: Product: syz [ 1918.553015][ T29] usb 10-1: Manufacturer: syz [ 1918.557778][ T29] usb 10-1: SerialNumber: syz [ 1918.574928][ T29] usb 10-1: config 0 descriptor?? [ 1918.926337][T24517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1918.975861][T21944] Bluetooth: hci6: command 0x0406 tx timeout [ 1919.062031][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.068480][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.192154][T24577] random: crng reseeded on system resumption [ 1919.541202][T24592] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1919.548973][T24592] tmpfs: Unknown parameter 'noinode32aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1919.609087][ T29] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1919.656321][T24592] @0: renamed from bond_slave_1 (while UP) [ 1919.748372][ T29] usb 10-1: USB disconnect, device number 17 [ 1919.776891][T21944] Bluetooth: hci4: command 0x0406 tx timeout [ 1919.856943][T21944] Bluetooth: hci2: command 0x0406 tx timeout [ 1919.935406][T21944] Bluetooth: hci0: command 0x0406 tx timeout [ 1920.004894][ T5900] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1920.157041][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1920.195748][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1920.212914][ T5900] usb 7-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 1920.222590][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.234189][ T5900] usb 7-1: config 0 descriptor?? [ 1920.664901][T18671] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 1920.678369][ T5900] ntrig 0003:1B96:0012.0019: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.6-1/input0 [ 1920.863195][ T5900] ntrig 0003:1B96:0012.0019: Firmware version: 5.7.18.63.5 (5e5b ed4f) [ 1920.877957][T18671] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1920.924026][T18671] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1920.978215][T18671] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1921.012464][T18671] usb 5-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 1921.057356][T21944] Bluetooth: hci6: command 0x0406 tx timeout [ 1921.059838][T18671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.154953][T18671] usb 5-1: config 0 descriptor?? [ 1921.167225][T24614] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1921.520066][T24651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5097'. [ 1921.609369][ T5920] usb 7-1: USB disconnect, device number 40 [ 1921.623196][T18671] wacom 0003:056A:00BC.001A: unknown main item tag 0x0 [ 1921.668561][T18671] wacom 0003:056A:00BC.001A: unknown main item tag 0x0 [ 1921.699898][T18671] wacom 0003:056A:00BC.001A: unknown main item tag 0x0 [ 1921.718237][T18671] wacom 0003:056A:00BC.001A: unknown main item tag 0x0 [ 1921.734815][T18671] wacom 0003:056A:00BC.001A: unknown main item tag 0x0 [ 1921.769360][T18671] wacom 0003:056A:00BC.001A: unknown main item tag 0x0 [ 1923.421105][T21944] Bluetooth: hci4: command 0x0406 tx timeout [ 1923.427291][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 1923.427678][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 1923.539205][ T5825] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1923.592702][ T29] usb 5-1: USB disconnect, device number 26 [ 1923.755837][ T5920] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1923.779776][T24670] loop5: detected capacity change from 0 to 256 [ 1923.912214][T24670] FAT-fs (loop5): Directory bread(block 64) failed [ 1923.945508][T24670] FAT-fs (loop5): Directory bread(block 65) failed [ 1923.962375][T24670] FAT-fs (loop5): Directory bread(block 66) failed [ 1923.969582][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 1923.990592][T24670] FAT-fs (loop5): Directory bread(block 67) failed [ 1924.000414][ T5920] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1924.021728][ T5920] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1924.033701][T24670] FAT-fs (loop5): Directory bread(block 68) failed [ 1924.047170][ T5920] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1924.056842][T24670] FAT-fs (loop5): Directory bread(block 69) failed [ 1924.066976][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.081815][T24670] FAT-fs (loop5): Directory bread(block 70) failed [ 1924.090031][ T5920] usb 7-1: Product: syz [ 1924.106472][ T5920] usb 7-1: Manufacturer: syz [ 1924.111243][T24670] FAT-fs (loop5): Directory bread(block 71) failed [ 1924.126774][ T5920] usb 7-1: SerialNumber: syz [ 1924.138947][T24670] FAT-fs (loop5): Directory bread(block 72) failed [ 1924.156125][ T5920] usb 7-1: config 0 descriptor?? [ 1924.170412][T24670] FAT-fs (loop5): Directory bread(block 73) failed [ 1926.100004][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1926.205145][ T5920] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input32 [ 1926.246276][ T5920] imon:send_packet: packet tx failed (-71) [ 1926.287440][ T5920] imon 7-1:0.0: panel buttons/knobs setup failed [ 1927.144914][ T5920] rc_core: IR keymap rc-imon-pad not found [ 1927.150779][ T5920] Registered IR keymap rc-empty [ 1927.255852][ T5920] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1927.302889][ T5920] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1927.350337][ T5920] imon:send_packet: packet tx failed (-71) [ 1927.382184][ T5920] imon 7-1:0.0: remote input dev register failed [ 1927.417010][ T5920] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 1927.592916][T24697] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1928.310470][ T5920] imon 7-1:0.0: unable to initialize intf0, err 0 [ 1928.461401][ T5920] imon:imon_probe: failed to initialize context! [ 1928.538282][ T5920] imon 7-1:0.0: unable to register, err -19 [ 1928.615061][ T5920] usb 7-1: USB disconnect, device number 41 [ 1929.669938][T24715] loop9: detected capacity change from 0 to 128 [ 1931.499323][T24707] loop8: detected capacity change from 0 to 32768 [ 1931.578859][T24707] (syz.8.5118,24707,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1931.646932][ T49] kworker/u8:3: attempt to access beyond end of device [ 1931.646932][ T49] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1931.651187][T24707] (syz.8.5118,24707,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1931.753928][T24707] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1931.756573][T24707] (syz.8.5118,24707,1):ocfs2_initialize_super:2229 ERROR: status = -12 [ 1931.845522][T24707] (syz.8.5118,24707,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 1932.264902][ T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1932.429463][T24734] loop6: detected capacity change from 0 to 4096 [ 1932.508773][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1932.533569][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.707670][ T10] usb 10-1: Product: syz [ 1932.781003][ T10] usb 10-1: Manufacturer: syz [ 1932.890830][ T10] usb 10-1: SerialNumber: syz [ 1933.258789][T24734] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1933.369450][T24734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1933.382246][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1933.406491][ T5927] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1933.424314][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1933.486170][T24734] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1933.511962][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1933.561242][T24748] loop7: detected capacity change from 0 to 7 [ 1933.588522][ T10] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 1933.598909][T24748] buffer_io_error: 11 callbacks suppressed [ 1933.598928][T24748] Buffer I/O error on dev loop7, logical block 0, async page read [ 1933.633616][T24748] Buffer I/O error on dev loop7, logical block 0, async page read [ 1933.683834][T24748] Buffer I/O error on dev loop7, logical block 0, async page read [ 1933.709796][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1933.755293][ T5927] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1933.773298][ T5927] usb 3-1: can't read configurations, error -71 [ 1933.801405][T24748] Buffer I/O error on dev loop7, logical block 0, async page read [ 1933.826265][T21943] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1933.890287][T24757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.906093][T24757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.957158][T24753] [ 1933.959548][T24753] ====================================================== [ 1933.966550][T24753] WARNING: possible circular locking dependency detected [ 1933.973563][T24753] syzkaller #0 Tainted: G L [ 1933.979526][T24753] ------------------------------------------------------ [ 1933.986532][T24753] syz.5.5128/24753 is trying to acquire lock: [ 1933.992599][T24753] ffff88801b6c5a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 1934.002988][T24753] [ 1934.002988][T24753] but task is already holding lock: [ 1934.010343][T24753] ffff8880259872c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 1934.020106][T24753] [ 1934.020106][T24753] which lock already depends on the new lock. [ 1934.020106][T24753] [ 1934.030494][T24753] [ 1934.030494][T24753] the existing dependency chain (in reverse order) is: [ 1934.039500][T24753] [ 1934.039500][T24753] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 1934.048127][T24753] blk_alloc_queue+0x546/0x680 [ 1934.053403][T24753] __blk_mq_alloc_disk+0x197/0x390 [ 1934.059029][T24753] loop_add+0x482/0xb40 [ 1934.063884][T24753] loop_init+0xd9/0x170 [ 1934.068561][T24753] do_one_initcall+0x250/0x840 [ 1934.073845][T24753] do_initcall_level+0x104/0x190 [ 1934.079300][T24753] do_initcalls+0x59/0xa0 [ 1934.084149][T24753] kernel_init_freeable+0x2a6/0x3d0 [ 1934.089863][T24753] kernel_init+0x1d/0x1d0 [ 1934.094711][T24753] ret_from_fork+0x51e/0xb90 [ 1934.099818][T24753] ret_from_fork_asm+0x1a/0x30 [ 1934.105109][T24753] [ 1934.105109][T24753] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1934.112409][T24753] fs_reclaim_acquire+0x71/0x100 [ 1934.117871][T24753] kmem_cache_alloc_noprof+0x40/0x650 [ 1934.123765][T24753] __kernfs_iattrs+0xdf/0x340 [ 1934.128970][T24753] kernfs_iop_setattr+0xea/0x3f0 [ 1934.134434][T24753] notify_change+0xc1a/0xf40 [ 1934.139555][T24753] do_truncate+0x1c2/0x250 [ 1934.144665][T24753] path_openat+0x2f89/0x3860 [ 1934.149775][T24753] do_file_open+0x23e/0x4a0 [ 1934.154800][T24753] do_sys_openat2+0x113/0x200 [ 1934.159990][T24753] __x64_sys_openat+0x138/0x170 [ 1934.165351][T24753] do_syscall_64+0x14d/0xf80 [ 1934.170489][T24753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.176901][T24753] [ 1934.176901][T24753] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1934.185421][T24753] __lock_acquire+0x15a5/0x2cf0 [ 1934.190795][T24753] lock_acquire+0x106/0x330 [ 1934.195815][T24753] down_read+0x47/0x2e0 [ 1934.200495][T24753] kernfs_iop_getattr+0x9e/0x450 [ 1934.205949][T24753] vfs_getattr_nosec+0x2e1/0x430 [ 1934.211411][T24753] loop_assign_backing_file+0x27a/0x4b0 [ 1934.217496][T24753] lo_ioctl+0x1acb/0x1fb0 [ 1934.222450][T24753] blkdev_ioctl+0x5e3/0x740 [ 1934.227572][T24753] __se_sys_ioctl+0xfc/0x170 [ 1934.232685][T24753] do_syscall_64+0x14d/0xf80 [ 1934.237795][T24753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.244210][T24753] [ 1934.244210][T24753] other info that might help us debug this: [ 1934.244210][T24753] [ 1934.254454][T24753] Chain exists of: [ 1934.254454][T24753] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 1934.254454][T24753] [ 1934.268911][T24753] Possible unsafe locking scenario: [ 1934.268911][T24753] [ 1934.276915][T24753] CPU0 CPU1 [ 1934.282264][T24753] ---- ---- [ 1934.287623][T24753] lock(&q->q_usage_counter(io)#24); [ 1934.293088][T24753] lock(fs_reclaim); [ 1934.299583][T24753] lock(&q->q_usage_counter(io)#24); [ 1934.307576][T24753] rlock(&root->kernfs_iattr_rwsem); [ 1934.312943][T24753] [ 1934.312943][T24753] *** DEADLOCK *** [ 1934.312943][T24753] [ 1934.321072][T24753] 3 locks held by syz.5.5128/24753: [ 1934.326256][T24753] #0: ffff888025c70448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 1934.335332][T24753] #1: ffff8880259872c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 1934.345553][T24753] #2: ffff8880259872f8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 1934.355939][T24753] [ 1934.355939][T24753] stack backtrace: [ 1934.361816][T24753] CPU: 1 UID: 0 PID: 24753 Comm: syz.5.5128 Tainted: G L syzkaller #0 PREEMPT(full) [ 1934.361845][T24753] Tainted: [L]=SOFTLOCKUP [ 1934.361854][T24753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1934.361868][T24753] Call Trace: [ 1934.361879][T24753] [ 1934.361890][T24753] dump_stack_lvl+0xe8/0x150 [ 1934.361921][T24753] print_circular_bug+0x2e1/0x300 [ 1934.361954][T24753] check_noncircular+0x12e/0x150 [ 1934.361986][T24753] __lock_acquire+0x15a5/0x2cf0 [ 1934.362022][T24753] ? kernfs_iop_getattr+0x9e/0x450 [ 1934.362050][T24753] lock_acquire+0x106/0x330 [ 1934.362072][T24753] ? kernfs_iop_getattr+0x9e/0x450 [ 1934.362103][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362133][T24753] down_read+0x47/0x2e0 [ 1934.362165][T24753] ? kernfs_iop_getattr+0x9e/0x450 [ 1934.362195][T24753] kernfs_iop_getattr+0x9e/0x450 [ 1934.362226][T24753] vfs_getattr_nosec+0x2e1/0x430 [ 1934.362262][T24753] loop_assign_backing_file+0x27a/0x4b0 [ 1934.362294][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362321][T24753] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 1934.362369][T24753] lo_ioctl+0x1acb/0x1fb0 [ 1934.362403][T24753] ? __pfx_lo_ioctl+0x10/0x10 [ 1934.362436][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362461][T24753] ? is_bpf_text_address+0x292/0x2b0 [ 1934.362491][T24753] ? is_bpf_text_address+0x26/0x2b0 [ 1934.362522][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362547][T24753] ? kernel_text_address+0xa5/0xe0 [ 1934.362600][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362625][T24753] ? __lock_acquire+0x6b5/0x2cf0 [ 1934.362651][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362681][T24753] ? __lock_acquire+0x6b5/0x2cf0 [ 1934.362706][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362731][T24753] ? __lock_acquire+0x6b5/0x2cf0 [ 1934.362755][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362780][T24753] ? __lock_acquire+0x6b5/0x2cf0 [ 1934.362806][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362830][T24753] ? __lock_acquire+0x6b5/0x2cf0 [ 1934.362854][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362880][T24753] ? __lock_acquire+0x6b5/0x2cf0 [ 1934.362907][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362936][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362964][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.362993][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363019][T24753] ? is_bpf_text_address+0x26/0x2b0 [ 1934.363050][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363075][T24753] ? is_bpf_text_address+0x292/0x2b0 [ 1934.363105][T24753] ? is_bpf_text_address+0x26/0x2b0 [ 1934.363135][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363160][T24753] ? kernel_text_address+0xa5/0xe0 [ 1934.363193][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363218][T24753] ? __kernel_text_address+0xd/0x30 [ 1934.363250][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363275][T24753] ? unwind_get_return_address+0x4d/0x90 [ 1934.363305][T24753] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1934.363337][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363363][T24753] ? arch_stack_walk+0xfb/0x150 [ 1934.363398][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363424][T24753] ? stack_trace_save+0xa9/0x100 [ 1934.363455][T24753] ? __pfx_stack_trace_save+0x10/0x10 [ 1934.363485][T24753] ? kasan_save_free_info+0x46/0x50 [ 1934.363510][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363535][T24753] ? stack_depot_save_flags+0x33/0x810 [ 1934.363569][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363594][T24753] ? kasan_save_track+0x4f/0x80 [ 1934.363620][T24753] ? kasan_save_track+0x3e/0x80 [ 1934.363645][T24753] ? kasan_save_free_info+0x46/0x50 [ 1934.363672][T24753] ? __kasan_slab_free+0x5c/0x80 [ 1934.363699][T24753] ? kfree+0x1c1/0x610 [ 1934.363722][T24753] ? tomoyo_path_number_perm+0x501/0x630 [ 1934.363750][T24753] ? security_file_ioctl+0xc3/0x2a0 [ 1934.363774][T24753] ? __se_sys_ioctl+0x47/0x170 [ 1934.363805][T24753] ? do_syscall_64+0x14d/0xf80 [ 1934.363832][T24753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.363857][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363882][T24753] ? __asan_memset+0x22/0x50 [ 1934.363905][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.363930][T24753] ? blk_get_meta_cap+0x16d/0x7a0 [ 1934.363957][T24753] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1934.363986][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.364011][T24753] ? blkdev_common_ioctl+0x14b7/0x3250 [ 1934.364042][T24753] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1934.364071][T24753] ? kasan_quarantine_put+0xbb/0x1f0 [ 1934.364097][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.364125][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.364151][T24753] ? tomoyo_path_number_perm+0x219/0x630 [ 1934.364179][T24753] ? tomoyo_path_number_perm+0x219/0x630 [ 1934.364207][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.364232][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.364258][T24753] ? do_vfs_ioctl+0x1166/0x1530 [ 1934.364287][T24753] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1934.364317][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.364341][T24753] ? do_raw_spin_lock+0x12b/0x2f0 [ 1934.364386][T24753] ? __pfx_lo_ioctl+0x10/0x10 [ 1934.364414][T24753] blkdev_ioctl+0x5e3/0x740 [ 1934.364444][T24753] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1934.364470][T24753] ? __fget_files+0x2a/0x420 [ 1934.364493][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.364517][T24753] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1934.364543][T24753] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1934.364570][T24753] __se_sys_ioctl+0xfc/0x170 [ 1934.364600][T24753] do_syscall_64+0x14d/0xf80 [ 1934.364628][T24753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.364649][T24753] ? trace_irq_disable+0x37/0x100 [ 1934.364682][T24753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.364705][T24753] RIP: 0033:0x7f7b9bd9bf79 [ 1934.364725][T24753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1934.364745][T24753] RSP: 002b:00007f7b9cca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1934.364769][T24753] RAX: ffffffffffffffda RBX: 00007f7b9c016090 RCX: 00007f7b9bd9bf79 [ 1934.364785][T24753] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 1934.364799][T24753] RBP: 00007f7b9be327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1934.364813][T24753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1934.364827][T24753] R13: 00007f7b9c016128 R14: 00007f7b9c016090 R15: 00007fffe6393fd8 [ 1934.364853][T24753] [ 1935.001184][T24748] Buffer I/O error on dev loop7, logical block 0, async page read [ 1935.079386][T24748] Buffer I/O error on dev loop7, logical block 0, async page read [ 1935.610947][T24748] Buffer I/O error on dev loop7, logical block 0, async page read [ 1935.668731][T24748] ldm_validate_partition_table(): Disk read failed. [ 1935.676267][T24748] Buffer I/O error on dev loop7, logical block 0, async page read [ 1935.684239][T24748] Buffer I/O error on dev loop7, logical block 0, async page read [ 1935.692454][T24748] Buffer I/O error on dev loop7, logical block 0, async page read [ 1935.703116][T24748] Dev loop7: unable to read RDB block 0 [ 1935.708889][T24748] loop7: unable to read partition table [ 1935.716798][T24748] loop7: partition table beyond EOD, truncated [ 1935.726344][ T10] usb 10-1: USB disconnect, device number 18 [ 1935.757088][T24748] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P@?X) failed (rc=-5) [ 1935.769263][T19514] ldm_validate_partition_table(): Disk read failed. [ 1935.800193][T19514] Dev loop7: unable to read RDB block 0 [ 1935.814644][T19514] loop7: unable to read partition table [ 1935.830632][T19514] loop7: partition table beyond EOD, truncated [ 1935.910508][T24753] ldm_validate_partition_table(): Disk read failed. [ 1935.937407][T24753] Dev loop7: unable to read RDB block 0 [ 1935.949809][T24753] loop7: unable to read partition table [ 1935.975914][T24753] loop7: partition table beyond EOD, truncated [ 1936.027917][T24753] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P@?X) failed (rc=-5)