last executing test programs: 20.207174706s ago: executing program 4 (id=1941): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$radio(0x0, 0x1, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.957553398s ago: executing program 4 (id=1950): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) prctl$PR_GET_TSC(0x43, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)) ptrace$peek(0x6fc603f4cf936006, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 17.943633557s ago: executing program 4 (id=1954): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfe, 0xf24, &(0x7f0000000f00)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x801) accept$netrom(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1b3, &(0x7f00000007c0)="$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") setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000880)={0x1, 0x0, {0x3b, 0x91, 0xa, 0x7, 0x4, 0x104, 0x80003, 0xd4, 0xffffffffffffffff}}) sendmmsg(r3, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x20}], 0x1}}], 0x1, 0x2c000011) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2}, 0x40800) 17.834221516s ago: executing program 3 (id=1956): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x2810880, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES16, @ANYRESHEX], 0x88, 0x290, &(0x7f0000006940)="$eJzs3U1r1EAcx/HfZNPt1taaWkUQD1IteJK2XsRLQYqvwZOo3RWKSwWtoF4snsUX4N2LL8AX4UkEz3ry5AvoLTKzSXeiedi2dsel3w/sGpN5+E+STeYfKBGAE+v2xvcPN37aj5Faakm6JUV202XFks7rQuf59s7WTr/XrWuoJXXkPkZyNc1fZTa3e2VVbT1XI5PY/8Wa89fheKRpmv4IHQRC6mT/tso2RtJ09uts+YUn3W7oAAIze9rTC82HjgMAEJYZ3N+j7D4/l83fo0hazm77/v3/2+nA8R7VXugAAvPu/y7LSo09vmfcpmG+51I4uz3Ks8SD9mMnj20NzqzCBNM0ZZUulmjm0Va/d33zSb8b6Y3WM16xc5LW1c1y1kxDtEsluWlRW6O3VmPWjWHKjmGtIv7Fsk4P32Mz89l8MfdMovfq7s//4tTY7l0Eyf6RujM1jH+lukU3ymRQqmKUC66Ti8UdWzvKVlVGonxPLaj4gCApxtkurdXWH7UGo1utHp2tMb1YWmutvpY9N2N99GoNz+bqmsfNvDN3zZJ+6ZM2vPl/ZPf2skb5ZdoyrmR2ZuTjKc0NY1cy8VftXiptMzrceHAob/VQNzX/7OWrxw/6/d5TFk7QQn4S/C/x/LuFeDx9tY+86zo6UGGprkx+6Ryhwfwi3dhpmMsSxmt40KvLvB5nQBg3e/Ewg/zPy1dWXIpkv5KaeXraNG3zWlytyA3Ouu9TXksmez5fnQHNVmdwo+ZcV65JV72VDTlXYuOcqR3rJDEb+qr7PP8HAAAAAAAAAAAAAAAAAACYNOP424zQYwQAAAAAAAAAAAAAAAAAAAAAYNJVv/+3o2N8/2/hZTq8/xcI43cAAAD//9jYdJM=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='tunl0\x00', 0x10) r2 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000300)='./file2\x00', 0x100000, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffe000000000}}], [{@hash}]}}, 0x1, 0x0, &(0x7f0000000540)="edfef48a4efd75b5fec52aa41a62cbac01da13b01fa138e96cbdc79dd581799a8bac3ab1d6e841100e8c7f77bd0fecda41b731") r3 = add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000680)={@desc={0x1, 0x0, @auto="454a2d037562d88d"}, 0x21, r3, '\x00', @c}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040094) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./bus\x00') syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x20108c0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64], 0xf6, 0x618a, &(0x7f000000c840)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @auto="57597ab9b39400dd7f5320019f59b38c"}}) mknod(&(0x7f0000000080)='./bus\x00', 0x8, 0x8) 16.362513527s ago: executing program 3 (id=1958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[], 0x0) 14.406789247s ago: executing program 4 (id=1960): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$radio(0x0, 0x1, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.295673837s ago: executing program 3 (id=1961): openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20040084}, 0x8802) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000140)=ANY=[], 0xfb, 0x69d, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvrDd2Ni0hSZM2oEq1GgkQEYkTKy3mQkAI5VBVVTlwthKnseKkxXGRWyHi8HrtoX9AOeSCOCFx4hKpcOBCb70hH5GQuJQD4cKimZ211971Zt0mXpt+PtHs8zrPPPObl32xognwuXXlbJoPUuTK2VdWy/L6/dml9fuztzr5V5tJppKsJWW2kaT4d7vd/jC5nBQbwxTb0j7vL869/vEn63/vlJr1UvVvDFtvm7rf2rbqtW7ddJKJOv0Mtox39TOPV2zM/HKSM3UKY3coSXuLH/3l6Y2WHq1Bax/ekzkCT1bRed/scyw5Ul/o5eeA7jtvY29nN7qpEftt/wQBAAAAB031HbjZV72l5osP8zCrxdE9nBYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcaGubz/8v6qXRzU+n6D7/f7KuS53fX17YXfcHT2oeAAAAAAAAALCHXniYh1nN0W65XVR/83+xKpysXp/K27mThSznXFYzn5WsZDkXkhzrGWhydX5lZapbGrbmxUFrLl98xES7Q7cew04DAAAAAAAAwP+fn+XK5t//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgPyiSiU6S4l5P9bE0mkkOJ5ksK9aSj7r5g+zBuCcAAAAAe2AqeZjVHO2W20VOJnm2+g3gcN7O7axkMStZykKuVb8LdL71N9bvzy6t35+9VS79437nn7uaRjViOr89DN7y6apHK9ezWNWcy9W8maVcS6Nas3S6nk931G3zulfOqfh27eXRZnatTss9f69O+9zd1c7uZJc/phyrInKoE5GJZKaeWxmN490jM/gI7fLobNlSFnIhjY3Jnty2pcmtO7M15ptDNoZt70idlvvzq51iPhadSPy33bGQiz1n37PDY5589Q+/++FMnd8/uzSaiTptV6+t/nNiticSz40SiRtLt2/euH7n7EGLRJ+ZKhKnNspX8v38IGczndeynMX8OPNZyUKm870qN18f/KLnkt8hUpe3lF571Ewm6zO0c7B2N6cXq3WPZjGv5s1cy0Jeqv5dzIW8nEu5lLmeI3xq+BGurvpG/1VfaX9h4OTPfK3OtJL8uk73hzKux3viunnWz1TxPr6lZjNKJ0aI0oB74zDNL9eZchs/f9SNdE9tj8SFnkg8MzwSv6luK3eWbt9cvjH/1mibO/FenSmvo18m0/vnRlKeLyfKg1WVpracHWXbMxttW+NVtp3caGv0tZ3KH9NsdreymLUdr9TJ+jNc/0gXq7bnBrbNVm2ne9oGfd4CYN878vUjk61/tP7a+qD1i9aN1iuHvzv1zannJ3PoT4e+1ZyZ+Erj+eL3+SA/3fz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHp33nn35vzS0sLytky73b770eCmETPd59V8ytW3Z7pPhRqhc6b/9lTZdUDTRNp3d2h6UpkvPZ3s1bb2b+Y/7Xa7ril26PPbP28P1FTGFLr6OX/tfRG6MWXGdksC9sj5lVtvnb/zzrvfWLw1/8bCGwu35y5dmpuZu/TS7Pnri0sLM53Xcc8SeBI23/THPRMAAAAAAAAAAABgVI/5/wysDWoa9z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB9uVs2k+SJELM+dmyvL6/dmlcunmN3s2kzSSFD9Jig+Ty+ksOdYzXLHTdt5fnHv940/W/9XuqMer+jeGrTeatXrJdJKJTnrvcY13tU6HKobtQrGxh2XAznQDB+P2vwAAAP//eL8QGw==") link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sync() unlink(&(0x7f0000000300)='./file1\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000420029170000"], 0x14}}, 0x40004) r1 = socket(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x21) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 14.291632938s ago: executing program 2 (id=1963): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x280000, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x90}, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000040)={0x3, 0x9, 0xacaf}) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="7cecdeb5939258b600708c2fa1d221371be5efd83de9e6c4aef71290393775bc2517a9449e42c7289c18edd4b72195e23675309ea0769ebe566639f5b1e3ae75d2b489faf2a0f67154c57bd74369762d084ed91dce2fc09a29545c072a79bd369026ee3be98c430c6856cfc08687f6a0e6159b97c721dd7805561e0a346e6e3e81b0bf43e60afeca9028c3beff065cb7cd69578fd6d27a893bdd92d7b51ac5c32d44943e2807ce423deac2b4b5ca3f506b141282a094bd45897e773f53a4e86a2576a6828be5053ffd6487b4b1f744122cbee2336313999cc5401570f2b9375166", 0xe1, 0x4048855, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x51c, &(0x7f0000000740)="$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") r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, r7, 0x0, 0x46) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in={0x2, 0x0, @multicast1}, @in={0x2, 0x4e24, @dev}], 0x58) socket$kcm(0x21, 0x2, 0x2) 10.085016698s ago: executing program 2 (id=1969): socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1004042cbd7000fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1b, r7, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x224b5bee36ba75e4}}, 0x14) unshare(0x2c020400) syz_io_uring_setup(0x6a28, &(0x7f0000000240)={0x0, 0x93c9, 0x800, 0xfffffffd, 0x3b5, 0x0, r3}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r10, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}) 9.989111101s ago: executing program 4 (id=1970): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ef) sendfile(r1, r0, 0x0, 0xfffa83) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0x0, 0x7, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3ff, 0x7, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfff6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0xfffe, 0xfffe, 0x0, 0x1, 0xfffe]}}}) r4 = semget$private(0x0, 0x4000000009, 0x0) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f00000001c0)=""/30) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x7) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x0) syz_open_procfs(0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000005000000050091a7487bb17970ceda5c2a2178358f407a619e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x9300) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) 9.981553238s ago: executing program 3 (id=1971): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, 0x0, 0x8db93d1c3839aadb) landlock_restrict_self(r1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x4, 0x2}}}}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x9, 0x1, 0x0, r4, 0x0}]) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000100)={0x0, 0x2}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000040)=0x340, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x1, 0x0, 0x3, 0x8, 0x1, 0x7}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x198, 0x10b, 0x4b4, 0x0, 0xd4feffff, 0x288, 0x20a, 0x278, 0x288, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0xff000000], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x21, 0x0, 0x0, 0x50}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0xc, [0x4e22, 0x4e20, 0x4e22, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e24, 0x4e21, 0x4e20, 0x4e20, 0x81, 0x4e20, 0x4e24], [0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x63c, 'syz0\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @private1, [0xff000000], [], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {}, 0x0, 0xdc}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000005c0)={0xf, r6}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 8.396099707s ago: executing program 0 (id=1974): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 7.50207823s ago: executing program 3 (id=1975): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) 7.305415314s ago: executing program 0 (id=1976): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 6.083258343s ago: executing program 0 (id=1977): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) 6.079659119s ago: executing program 4 (id=1978): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000200)) socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a0080000002000800000000040008800fc5f4e6a846e6f6ec0f662d65ac84f39514a463ec851377d393fcfdc118fc8acabb2ca567a0fda6652aa1c03a66c414ccdaeda53db74f82a7b0a6c497f0b204bfbcfc576072472f68b1cc8673f30fa643d317e2f2022b9b3b84347a6ef9"], 0x20}, 0x1, 0x0, 0x0, 0x4805}, 0x4) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000080)=[{r0, 0x8c4}], 0x1, 0x0, 0x0, 0x0) 5.051760835s ago: executing program 0 (id=1979): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x64c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x608, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x5d8, 0x1, [@m_simple={0x1fc, 0x1e, 0x0, 0x0, {{0xb}, {0x1d0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x142, 0x3, '\xd5\xe9Ji\'\xc9\xb2\xcfE\xcdRO\xbd\xfd\xc8\xbd\x9f\xbb\'q}qqx\xdf\xf8\x82\xfd\x1c(\xafU\n\xeaP\xa1\xf3\x92\xa9\x16)\xb4i\xcf\x81\xb4\x0e\x8a\xa0Ou:\x18z\xad\xb8\x97\x038\xbd\x12lw\xcb\xea\xed\xad\x14E-\x91U\xa5R-\xb5\xb6\x0ehba\ar\xb0N\x9ek\xff}\x00\v\x86\xe8\xd7\xd9\xf4\x1a\a\xb3\xce\x1d\xe3fI\x1f\xdc\xab0G\xc5b\xa3gF\xd5\x9f\xde\t\xcc\xaf*\x90\xea\a\f3l\xf2g?\x9b\x96\xb2\x9b\r\x98\x83\'T\xc4\x810]\xbf4\x8a\x10\x92I\x19\xa5\xa4\x90\xe9u\xc2\xf7\xed\x15\xf9\n6\x98\x85\'\xfb\x00\x00\x00\x00\x00\xe8\xa54*\v&\n\xbb-\x81\xa9\x91E\x94\t\xdew1^hZ\xe5{\x1f\xcb\vzG&\xf1xj\x10\x020\\\xde\\\xdc:\x8aL\xd1\x0e\xbd\xf7F\xce\x88\xd9\xd9\x1a\xc7\vD.\xf9);j}\x8fRY\xae\x01\xeb\xbduw~\xf9\xd1\xd1\x85\xa0\x16%\xb1\x97f\xca\xf2=\'\xb57\x94\xff\x92u\xb8\xa8\xect0\x1d\xb8\xd1\xa6F4\x934M\xe2\x9d\x94I\vf}U\x9f\xbcq\x92\xe8\xd3\xfe\xa3\xd7\xb1\xe3gi<\x00\x98\xaf7,\xec\xca\xfcU\x9f\x83\xb7\xec\'\xde\xb9\x10\x86\x93\x18'}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x3, 0x20000000, 0x7f7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x587, 0x5, 0x81, 0xa}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x2, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x138, 0x13, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x6, 0x4, 0x1, 0x7}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0xed, 0x6, "144d833505e6ef200c20ad2f4ee5c4c2e9f89f0445fba28aca82e7ca2726936d4c717387fc4d2c19168e132d89cb085c4d3f67b08606cf6a0ee5ae00947ff1bc110f7d1c9127ef2557d327af84971cff93750a0a8b0ae8bac7172de9d4238ad596e55b83399a52c605793166c1a5df60a955a53ffe106b9a9539204b0f6e1e616f5bede65b24928c8006419cafe78104617cd7cefd6ddfa266d7eeabd4f247a9a8b3fb7f305b5cefcc033a61ff87294b69eff857bacab41f7d6dd43b0ae9457814ca1daf60f1ee05ebf4b276f9b2b63c5d3cfab7d6663084b4a459c0d4996f9af5d713152a5ef9c5bf"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xd0, 0x15, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x20000000, 0xcdb, 0x305}, 0x5}}]}, {0x65, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded7fbb0c799f243d3827c1ff7060f9d56b77b6373212745232c734d9b45311b3eceeeb16cae2bfd77942d880d60c94991d896d67e1bf08b6ace5ba70ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0xe8, 0x8, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x2, 0x4, 0x3}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x2, 0x3, 0x3, 0x9}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x503e386e, 0x10000000, 0x3, 0xfffffffa}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x200, 0xffffffffffffffff, 0x3, 0x4}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x1ff, 0x10000000, 0x1, 0x1}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfff, 0x7, 0xfffffffe, 0x154f1214}, 0x7c}}]}, {0x11, 0x6, "4ac6768e05c6ec90b23e3707aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.703727693s ago: executing program 0 (id=1980): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$radio(0x0, 0x1, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.423227488s ago: executing program 2 (id=1981): openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20040084}, 0x8802) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000140)=ANY=[], 0xfb, 0x69d, &(0x7f0000000640)="$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") link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sync() unlink(&(0x7f0000000300)='./file1\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000420029170000"], 0x14}}, 0x40004) r1 = socket(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x21) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.070287052s ago: executing program 1 (id=1983): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280)="ca", 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000740), &(0x7f00000006c0)=""/46}, 0x20) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r4, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x26, 0x11001, 0x12007646, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x2, {{0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0xfffffffb, 0x0, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x8000, 0x0, 0x0, 0xee01, 0xfffffffd}}}}, 0x0, 0x0}) read$msr(r1, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) 3.973933638s ago: executing program 1 (id=1984): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00099a14"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x80000000, 0x1}}, 0x20) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1020000, 0x0, 0x3, 0x0, &(0x7f0000006380)) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='smb3\x00', 0x0, &(0x7f0000000500)='acl') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg(r1, 0x0, 0x0) 3.851703593s ago: executing program 0 (id=1985): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) 3.646690883s ago: executing program 2 (id=1986): socket$key(0xf, 0x3, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000", 0xcb}], 0x1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {}, {}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1515, &(0x7f0000000f40)="$eJzs3AuYTlX7MPD7XmvtMaTpSXIY1lr35kkOyyRJDklySJIkSXJKSJrklYTEkFPSkITkMCSHISSHiUnjfD4fkyRpkiQkp2R91xSft7f63vf9v335X+/cv+va17PvZ+177bWf+3mevfaewzddhtZsXKtaQyKC/wj+8pAEALEAMBAArgGAAADK5SmXJ6s9p8Sk/2wn7M/1UOqVHgG7krj+2RvXP3vj+mdvXP/sjeufvXH9szeuf/bG9WcsO9s8veC1vGTfhe//Z2d8/v8vkll67BdrS1/f9d9I4fpnb1z//1rBv7IR1z974/pnb1z/7I3rnx3k+MMWrn/2xvVnLDv76+414xW/183Lb5cr/f5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY9nPGXKQC4tH6lx8UYY4wxxhhjjLE/j89xpUfAGGOMMcYYY4yx//8QBEhQEEAM5IBYyAm5QADA1RAH10AEroU8cB3kheshH+SHAlAQ4qEQFAYNBiwQhFAEikIUboBicCMUhxJQEkqBg9KQADdBGbgZysItUA5uhfJwG1SAilAJKsPtUAXugKpwJ1SDu6A61ICaUAvuhtpwD9SBe6Eu3Af14H6oDw9AA3gQGsJD0AgehsbwCDSBR6EpNIPm0AJa/o/yX4Ae8CL0hF6QBL2hD7wEfaEf9IcBMBBehkHwCgyGVyEZhsBQeA2GweswHN6AETASRsGbMBregjEwFsbBeEiBCTAR3oZJ8A5MhikwFaZBKkyHGfAuzIRZMBvegznwPsyFeTAfFkAafAALYRGkw4ewGD6CDFgCS2EZLIcVsBJWwWpYA2thHayHDbARNsFm2AJ4sVI7YRfsho9hD3wCe+FT2Aef/Uv5W2EbbIcdsBNO/0N+VwQEFChQocIYjMFYjMVcmAtzY26MwziMYATzYB7Mi3kxH+bDAlgA4zEeC2NhNGiQkLAIFsEoRrEYFsPiWBxLYkl06DABE7AM3oxlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78a7sTfWwTpYF+tiPax36fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttiO2yH7bE9JmIidsAO2BE7YifshJ2xM3bBLtgVu2E3fCEH4Iv4IvbC6qI39sE+2BeTc/THATgAX8ZB+Aq+gq9iMg7Bofgavoav43A8hSNwJI7CUVhFvIVjcCySGI8pmIITcSJOwkk4GafgFJyGqTgdZ+AMnImzcBa+h3PwfXwf5+E8XIBpmIYLcRGmYzouxtOYgUtwKS7D5bgCl+MqXI2rcC2uw7W4ATfgJtyEW3ALbsNtuAN34C5UAPgxfoKfYDLuw324H/fjATyAB/EgZmImHsJDeBgP4xE8gkfxKB7D43gCj+NJPImn8DSewTN4Ds/heXwu/qtGu0qsSQaRRQklYkSMiBWxIpfIJXKL3CJOxImIiIg8Io/IK/KKfCKfKCAKiHgRLwqLwsIII0iEMQAgoiIqioliorgoLkqKksIJJxJEgigjyoiyoqwoJ24V5cVtooKoKNq4yqKyqCLauqriTlFNVBPVRQ1RU9QStURtUVvUEXVEXVFX1BP1RH3xgGggemN/fEhkVaaxGIJNxFBsKpoJefFz0UoMx9aijWgrnhAjcQS2F61conhadBBjsKP4mxiLz4rOYjx2Ec+LrqKb6C5eED1Ea9dT9BKTsbfoI6ZhX9FP9BcDxEysId7DOTlrildFctwQMVS8Jhbg62K4eEOMECPFKPGmGC3eEmPEWDFOjBcpYoKYKN4Wk8Q7YrKYIqaKaSJVTBczxLtippglZov3xBzxvpgr5on5YoFIEx+IhWKRSBcfisXiI5EhloilYplYLlaIlWKVWC3WiLVinVgvNoiNYpPYLLaIrWKb2C52iJ1il9gtPhZ7xCdir/hU7BOfif3ic3FAfCEOii9FpvhKHBJfi8PiG3FEfCuOiu/EMXFcnBDfi5PiB3FKnBZnxFlxTvwozoufxAXhBUiUQkqpZCBjZA4ZK3PKXPIqmVsGF1/da2UeeZ3MK6+X+WR+WUAWlPGykCwstTTSSpKhLCKLyqi8QRaTN8risoQsKUtJJ0vLBHmTLCNvlmXlLbKcvFWWl7fJCrKirCQry9tlFXmHhMgv+6gua8iaspa8W9aW98ic8l5ZV94n68n7ZX35gGwgH5QN5UOykXxYNpaPyCbyUdlUNpPNZQvZUj4mW8nHZWvZRraVT8h28knZXj4lE+XTsoP0F98iz8rO8jnZRT4vu8pusrv8SV6QXvaUvSRAb9lHviT7yn6yvxwgB8qX5SD5ihwsX5XJcogcKl+Tw+Trcrh8Q46QI+Uo+aYcLd+SY+RYOU6Olylygpwo35aT5Dtyspwip8ppMlVOl/0v9jRbyn+a//bv5A/+ee+b5Ga5RW6V2+R2uUPulLvkbrlb7pF75F65V+6T++R+uV8ekAfkQXlQZspMeUgekoflYXlEHpFH5VF5TB6XZ+X38qT8QZ6Sp+VpeVaek+fk+YuvAShUQkmlVKBiVA4Vq3KqXOoqlVtdreLUNSqirlV51HUqr7pe5VP5VQFVUMWrQqqw0sooq0iFqogqqqLqhkunKVVSlVJOlVYJ6qZ/J18VUzeq4qrEr/IvjS/pD8bXUrVUrVQr1Vq1Vm1VW9VOtVPtVXuVqBJVB9VBdVQdVSfVSXVWnVUX1UV1VV1Vd9Vd9VA9VE/VUyWpJNVHvaT6qn6qvxqgBqqX1SA1SA1Wg1WySlZD1VA1TA1Tw9VwNUKNUKPUKDVajVZj1Bg1To1TKSpFTVQT1SQ1SU1Wk9VUNVWlqlQ1Q81QM9VMNVvNVnPUHDVXzVXz1XyVptLUQrVQpat0tVgtVhlqiVqilqllaoVaoVapVWqNWqPWqXVqg9qgMtRmtVltVVvVdrVd7VQ71W61W+1Re9RetVftU/vUfrVfHVAH1EF1UGWqTHVIHVKH1WF1RB1RR9VRdUwdUyfUCXVSnVSn1Cl1Rp1R59Q5dV6dVxfUhaxpXyACEahABTFBTBAbxAa5glxB7iB3EBfEBZEgEuQJ8gR5g+uDfEH+oEBQMIgPCgWFAx2YwAbiYtGjwQ1BseDGoHhQIigZlApcUDpICG4KygQ3B2WDW4Jywa1B+eC2oEJQMagUVA5uD6oEdwRVgzuDasFdQfWgRlAzqBXcHdQO7gnqBPcGdYP7gnrB/UH94IGgQfBg0DB4KGgUPBw0Dh4JmgSPBk2DZkHzoEXQ8k/t3/tT+R93PXUvnaR76z76Jd1X99P99QA9UL+sB+lX9GD9qk7WQ/RQ/Zoepl/Xw/UbeoQeqUfpN/Vo/ZYeo8fqcXq8TtET9ET9tp6k39GT9RQ9VU/TqXq6nqHf1TP1LD1bv6fn6Pf1XD1Pz9cLdJr+QC/Ui3S6/lAv1h/pDL1EL9XL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Ga9RW/V2/R2vUPv1Lv0bv2x3qM/0Xv1p3qf/kzv15/rA/oLfVB/qTP1V/qQ/lof1t/oI/pbfVR/p4/p4/qE/l6f1D/oU/q0PqPP6nP6R31e/6QvaJ81uc86vRtllIkxMSbWxJpcJpfJbXKbOBNnIiZi4kwek9fkNflMPlPAFDDxJt4UNoVNFjJkipgiJmqippgpZoqb4qakKWmccSbBJJgypowpa8qacqacKW/KmwqmgqlkKpnbze3mDnOHudPcae4yd5kapoapZWqZ2qa2qWPqmLqmrqln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpbpqblqalaWVamdamtWlr2pp2pp1pb9qbRJNoOpgOpqPpaDqZTqaz6Wy6mC6mq+lqupvupofpYXqanibJJJk+po/pa/qa/qa/GWgGmkFmkBlsBptkk2yGmqFmmBlmhpvhZoQZaUZlTVTNW2aMGWvGmfEmxaSYiWaimWQmmclmsplqpppUk2pmmBlmpplpZpvZZo6ZY+aauWa+mW/STJpZaBaadJNuFpvFJsNkmKVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7Da7zR6zx+w1e80+s8/sN5e+jg+aTJNpDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyX/xfOlNrM1pc9mrbG57tY2z19h/jAvYgjbeFrKFrbb5bP5fxcZaW9yWsCVtKetsaZtgb/pNXMFWtJVsZXu7rWLvsFV/E9e299g69l5b195na9m7fxXXs/fb+vYR2wARwDazjWwL29g+YpvYR21T28w2ty1sO/ukbW+fson2advBPvObeKFdZFfbNXatXWf32E/sGXvWHrbf2HP2R9vT9rID7ct2kH3FDrav2mQ75DfxKPumHW3fsmPsWDvOjv9NPNVOs6l2up1h37Uz7azfxGn2AzvHptu5dp6dbxf8HGeNKd1+aBfbj2yGXWKX2mV2uV1hV9pV/3esy+wGu9Fusrvtx3ar3Wa32x12p931c5x1HHvtp3af/cwesl/bA/YLe9AesZn2q5/jrOM7Yr+1R+139pg9bk/Y7+1J+4M9ZU//fPxZx/69/clesN4CIQFJUhRQDOWgWMpJuegqyk1XUxxdQxG6lvLQdZSXrqd8lJ8KUEGKp0JUmDQZskQUUhEqSlG6gS7N00tSKXJUmhLoJipDN1NZuoXK0a1Unm6jClSRKlFlup2q0B1Ule6kanQXVacaVJNq0d1Um+6hOnQv1aX7qB7dT/XpAWpAD1JDeoga0cPUmB6hJvQoNaVm1JxaUEt6jFrR49Sa2lBbeoLa0ZPUnp6iRHqaOtAz1JH+Rp3oWepMz1EXep66UjfqTi9QD3qRelIvSqLe1Ideor7Uj/rTABpIL9MgeoUG06uUTENoKL1Gw+h1Gk5v0AgaSaPoTRpNb9EYGkvjaDyl0ASaSG/TJHqHJtMUmkrTKJWm0wx6l2bSLJpN79Ecep/m0jyaTwsojT6ghbSI0ulDWkwfUQYtoaW0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMO2km7aDd9THvoE9pLn9I++oz20+d0gL6gg/QlZdJXdIi+psP0DR2hb30v+o6O0XE6Qd/TSfqBTtFpOkNn6Rz9SOfpJ7pAniDEUIQyVGEQxoQ5wtgwZ5grvCrMHV4dxoXXhJHw2jBPeF2YN7w+zBfmDwuEBcP4sFBYONShCW1IYRgWCYuG0fCGsFh4Y1g8LBGWDEuFLiwdJoQ3hWXCm8Oy4S1hufDWsHx4W1ghrBg+cl/l8PawSnhHWDW8M6wW3hVWD2uENcNa4d1h7fCesE54b1g3vC8sG94f1g8fCBuED4YNw4fCRuHDYePwkbBJ+GjYNGwWNg9bhC3Dx8JW4eNh67BN2DZ8ImwXPhm2D58KE8Onww7hMz+337/oj9uTwt5hn/Cl8KXQ+3vl/OiCaFr0g+jC6KJoevTD6OLoR9GM6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66IboxuimqPe1coBDJ5x0ygUuxuVwsS6ny+Wucrnd1S7OXeMi7lqXx13n8rrrXT6X3xVwBV28K+QKO+2Ms45c6Iq4oi7qbnDF3I2uuCvhSrpSzrnSLsG1cC1dS9fKPe5auzaurXvCPeGedE+6p9xT7mnXwT3jOrq/uU7uWdfZPeeec8+7rq6b6+5ecD3chLhfPpNJro/r4/q6vq6/6+8GuoFukBvkBrvBLtklu6FuqBvmhrnhbrgb4Ua4UW6UG+1GuzFujBvnxrkUl+ImuolukpvkJrvJbqqb6lJdqpvhZriZbqarMuuXvcx1c918N9+luTS30GXNGdPdYrfYZbgMt9QtdcvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Xa30+10u91ut8df80unbp/b7/a7A+6AO+i+dJnuK3fIfe0Ou2/cEfetO+q+c8fccXfCfe9Ouh/cKXfanXFn3Tn3ozvvfnIXnHcpkQmRiZG3I5Mi70QmR6ZEpkamRVIj0yMzIu9GZkZmRWZH3ovMibwfmRuZF5kfWRBJi3wQWRhZFEmPfBhZHPkokhFZElkaWRZZHlkR8b7Q1tAX8UV91N/gi/kbfXFfwpf0pbzzpX2Cv8mX8Tf7sv4WX87f6sv723wFX9FX8o/6pr6Zb+5b+Jb+Md/KP+5b+za+rX/Ct/NP+vb+KZ/on/Yd/DO+o/+b7+Sf9Z39c76Lf9539d18d/+C7+Ff9D19L5/ke/s+/iXf1/fz/f0AP9C/7Af5V/xg/6pP9kP8UP+aH+Zf98P9G36EH+lHxbzpR1+6RIbxPsVP8BP9236Sf8dP9lP8VD/Np/rpfoZ/18/0s/xs/56f49/3c/08P98v8Gn+A7/QL/Lp/kO/2H/kM/ySSzeV/Uq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xOv8vv9h/7Pf4Tv9d/6vf5z/x+/7k/4L/wB/2XPtN/5Q/5r/1h/40/4r/1R/13/pg/7k/47/1J/4M/5U/7M/6sP+d/9Of9T/4C/80aY4wxxti/ZMLlVfF77b1/5znxdxv3AYCrtxXM/Pv2rBnl+ny/rPcT8e0iAPB0ry4PXVqqV09KSrq4bYaEoOg8gEs/CcoSA5fjJdAWnoREaANlfnf8/US3c/RP+o/eCpDr73Ji4XJ8uf/P/6D/x54YtbB8eCbP/6P/eQDFi17OyQmX4yXQVmU9toGyf9B//lb/ZPw5v0gBaP13Obnhcnx5/AnwODwDib/akjHGGGOMMcYY+0U/UanTpevPS7/x+XvX5/Hqck4OuBz/s+tzxhhjjDHGGGOMXXnPduv+1GOJiW06/fsrVf9HWbzyv3XFe4BLzygA+A87BPjLj2LLX7Kv5IsfnX9sWn7WB/C/o5R/xsoV/mJijDHGGGOM/ekuT/p//by6UgNijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcayob/i34ld6WNkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGrrT/EwAA//+UUgaU") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.592541168s ago: executing program 1 (id=1987): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="307245880605f805", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$int_in(r0, 0x5452, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) r6 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x22, 0x20}, 0xe) madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) 3.36120839s ago: executing program 1 (id=1988): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="307245880605f805", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$int_in(r0, 0x5452, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) r6 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x22, 0x20}, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4008, 0x3, 0x260, 0x0, 0x500b, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'lo\x00', 'team_slave_0\x00', {}, {}, 0x1, 0x3}, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xe, [0x0, 0x0, 0xa, 0x0, 0xfffe, 0x23, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 3.085467725s ago: executing program 1 (id=1989): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) 2.870581023s ago: executing program 3 (id=1990): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0xb405) 1.943692241s ago: executing program 2 (id=1991): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) 951.226896ms ago: executing program 1 (id=1992): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffffd}, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000240), 0x8, 0x511802) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x0}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x8881}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x101, 0x0, 0xfffffffd, 0x6, 0x2, 0x4, 0x3, 0x0, 0x1, 0xfffffffe, 0xc0, 0x0, 0x0, 0x80000000, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x400, 0x40000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x2, 0x9, 0x0, 0x0, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x10001, 0x20000000, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x40002, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x1, 0x0, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c) syz_io_uring_setup(0x1734, &(0x7f00000003c0)={0x0, 0xfffffffa, 0x40, 0x0, 0x1f}, &(0x7f0000000100), &(0x7f0000000080)) 0s ago: executing program 2 (id=1993): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0xfffffffd) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="307245880605f805", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$int_in(r0, 0x5452, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) r6 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x22, 0x20}, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4008, 0x3, 0x260, 0x0, 0x500b, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'lo\x00', 'team_slave_0\x00', {}, {}, 0x1, 0x3}, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xe, [0x0, 0x0, 0xa, 0x0, 0xfffe, 0x23, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) kernel console output (not intermixed with test programs): : wmediumd released netlink socket, switching to perfect channel medium [ 467.516459][ T9593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.597631][ T5888] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 468.774064][ T5888] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 468.793883][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 468.807846][ T5888] usb 4-1: Product: syz [ 468.812123][ T5888] usb 4-1: SerialNumber: syz [ 468.828252][ T5888] usb 4-1: config 0 descriptor?? [ 468.927764][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 469.085485][ T5888] hso 4-1:0.0: Failed to find BULK IN ep [ 469.111376][ T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 469.131284][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.317322][ T9626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.906671][ T9] usb 3-1: Product: syz [ 469.944491][ T9] usb 3-1: Manufacturer: syz [ 469.957676][ T9] usb 3-1: SerialNumber: syz [ 470.044804][ T5885] usb 4-1: USB disconnect, device number 10 [ 470.089472][ T9] usb 3-1: config 0 descriptor?? [ 471.061259][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 473.195667][ T9661] netlink: 'syz.4.865': attribute type 21 has an invalid length. [ 473.217678][ T9] gspca_sunplus: reg_w_riv err -71 [ 473.319760][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 473.353188][ T9] usb 3-1: USB disconnect, device number 8 [ 473.359445][ T9661] netlink: 156 bytes leftover after parsing attributes in process `syz.4.865'. [ 473.416098][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'. [ 476.555794][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 477.772679][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.815125][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.847478][ T24] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 477.888443][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.920599][ T24] usb 3-1: config 0 descriptor?? [ 477.964233][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.879'. [ 478.249073][ T9716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 478.345966][ T9724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.021612][ T24] hid_mf 0003:0079:1846.0005: unknown main item tag 0x2 [ 479.035648][ T24] hid_mf 0003:0079:1846.0005: item fetching failed at offset 7/11 [ 479.055359][ T24] hid_mf 0003:0079:1846.0005: HID parse failed. [ 479.074358][ T24] hid_mf 0003:0079:1846.0005: probe with driver hid_mf failed with error -22 [ 479.305493][ T9688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.375441][ T9688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.280957][ T9733] loop4: detected capacity change from 0 to 32768 [ 480.301588][ T9733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.886 (9733) [ 480.421811][ T24] usb 3-1: USB disconnect, device number 9 [ 480.431970][ T9733] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.443650][ T9733] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 480.453694][ T9733] BTRFS info (device loop4): using free-space-tree [ 480.920637][ T5832] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.971019][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 481.297614][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 481.313321][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 481.401635][ T9758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 481.533534][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 481.564503][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 481.771847][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.487623][ T24] usb 3-1: Product: syz [ 482.491851][ T24] usb 3-1: Manufacturer: syz [ 482.496501][ T24] usb 3-1: SerialNumber: syz [ 482.565436][ T24] usb 3-1: config 0 descriptor?? [ 482.600075][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 482.644641][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 483.362297][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 483.516249][ T9773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.896'. [ 483.550079][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 483.564796][ T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 483.578134][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 483.621873][ T24] usb 3-1: USB disconnect, device number 10 [ 483.673279][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 483.739288][ T24] em28xx 3-1:0.0: Freeing device [ 484.851225][ T9793] random: crng reseeded on system resumption [ 485.010931][ T9794] kvm: kvm [9788]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 485.691866][ T9778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.898'. [ 486.739063][ T9806] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 486.859711][ T9812] loop4: detected capacity change from 0 to 32768 [ 486.944459][ T9812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.909 (9812) [ 486.971329][ T9812] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 486.981715][ T9812] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 486.990734][ T9812] BTRFS info (device loop4): using free-space-tree [ 487.016902][ T9820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.910'. [ 487.105522][ T9823] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 488.493898][ T5832] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 490.354548][ T9873] netlink: 'syz.4.926': attribute type 21 has an invalid length. [ 490.367887][ T9873] netlink: 156 bytes leftover after parsing attributes in process `syz.4.926'. [ 490.507811][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 491.994389][ T9889] 9pnet_fd: Insufficient options for proto=fd [ 492.128116][ T9886] vlan2: entered allmulticast mode [ 492.151521][ T9886] bond0: entered allmulticast mode [ 492.178832][ T9886] bridge0: port 1(vlan2) entered blocking state [ 492.207989][ T9886] bridge0: port 1(vlan2) entered disabled state [ 492.222441][ T9886] vlan2: entered promiscuous mode [ 492.247785][ T9886] bond0: entered promiscuous mode [ 492.445734][ T9894] loop4: detected capacity change from 0 to 512 [ 492.494084][ T9894] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 492.555792][ T9894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 492.733838][ T9894] System zones: 1-12 [ 492.769553][ T9894] EXT4-fs (loop4): 1 truncate cleaned up [ 492.810559][ T9894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.678416][ T9918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.072735][ T9921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.938'. [ 498.421946][ T9920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.618237][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.939'. [ 499.111844][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.942'. [ 500.304830][ T9943] vlan2: left promiscuous mode [ 500.319172][ T9943] bond0: left promiscuous mode [ 500.329753][ T9943] bridge0: port 1(vlan2) entered disabled state [ 500.365681][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.907104][ T9952] fuse: Bad value for 'fd' [ 501.422824][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.422711][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 505.462407][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.958'. [ 505.765664][T10009] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.960'. [ 505.987721][T10001] vlan2: left promiscuous mode [ 505.992605][T10001] bond0: left promiscuous mode [ 505.998232][T10001] bridge0: port 1(vlan2) entered disabled state [ 508.088569][T10030] loop3: detected capacity change from 0 to 32768 [ 508.118785][T10030] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.964 (10030) [ 508.154301][T10030] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 508.165045][T10030] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 508.174035][T10030] BTRFS info (device loop3): using free-space-tree [ 509.653042][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 512.553385][T10078] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.974'. [ 512.624647][T10079] random: crng reseeded on system resumption [ 520.297760][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 521.615697][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.707685][ T24] usb 3-1: config 0 has no interfaces? [ 521.716266][ T24] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 521.728055][T10126] netlink: 'syz.0.987': attribute type 72 has an invalid length. [ 521.764495][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.794586][ T24] usb 3-1: Product: syz [ 521.810706][ T24] usb 3-1: Manufacturer: syz [ 521.815368][ T24] usb 3-1: SerialNumber: syz [ 521.835373][ T24] usb 3-1: config 0 descriptor?? [ 522.106328][ T24] usb 3-1: USB disconnect, device number 11 [ 522.151220][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 522.496753][T10145] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 522.793934][T10148] IPv6: Can't replace route, no match found [ 523.463198][T10154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.645753][T10161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 525.171456][T10160] IPv6: Can't replace route, no match found [ 527.226130][T10186] netlink: 'syz.1.1002': attribute type 72 has an invalid length. [ 528.347758][T10191] lo speed is unknown, defaulting to 1000 [ 528.759509][T10179] sp0: Synchronizing with TNC [ 529.006674][T10202] lo speed is unknown, defaulting to 1000 [ 530.673891][T10224] lo speed is unknown, defaulting to 1000 [ 530.847275][T10221] IPv6: Can't replace route, no match found [ 531.196496][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 532.696811][T10248] fuse: Bad value for 'fd' [ 533.477741][T10252] loop3: detected capacity change from 0 to 4096 [ 533.517024][T10252] ext4: Unknown parameter 'dont_appraise' [ 535.802357][T10270] Falling back ldisc for ptm0. [ 536.259737][T10274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1023'. [ 537.791941][T10269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.889633][T10286] netlink: 'syz.1.1025': attribute type 39 has an invalid length. [ 538.532715][T10290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.154111][T10305] loop3: detected capacity change from 0 to 64 [ 540.353253][T10303] syz.3.1026: attempt to access beyond end of device [ 540.353253][T10303] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 540.366934][T10303] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 540.405046][T10303] Trying to free block not in datazone [ 541.823470][T10313] IPv6: Can't replace route, no match found [ 545.416995][T10324] IPv6: Can't replace route, no match found [ 546.207666][ T5957] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 546.360752][ T5957] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.451484][ T5957] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 546.476982][ T5957] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 546.656664][T10344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1041'. [ 547.255247][T10343] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 547.390018][ T5957] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.454244][T10346] IPv6: Can't replace route, no match found [ 547.465901][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.495320][ T5957] usb 5-1: Product: syz [ 547.525092][ T5957] usb 5-1: Manufacturer: syz [ 547.534922][ T5957] usb 5-1: SerialNumber: syz [ 547.557141][T10336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.090872][T10359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1044'. [ 549.240063][T10358] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 549.725362][ T5957] cdc_ncm 5-1:1.0: bind() failure [ 549.860054][ T5957] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 549.932181][ T5957] usb 5-1: USB disconnect, device number 10 [ 550.745541][T10379] binder: 10377:10379 ioctl c0306201 0 returned -14 [ 550.758524][T10379] binder: 10377:10379 ioctl c0306201 200000000640 returned -22 [ 552.152386][T10390] sp0: Synchronizing with TNC [ 553.767701][T10405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.215661][T10429] binder: 10428:10429 ioctl c0306201 200000000640 returned -22 [ 557.981171][T10442] netlink: 'syz.2.1067': attribute type 39 has an invalid length. [ 558.621362][T10444] mmap: syz.3.1068 (10444) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 560.067801][T10464] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 561.241672][T10469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.565987][T10471] binder: 10470:10471 ioctl c0306201 200000000640 returned -22 [ 562.226398][T10478] loop2: detected capacity change from 0 to 512 [ 562.375090][T10478] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 562.462006][T10478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 562.492019][T10478] System zones: 1-12 [ 562.509391][T10478] EXT4-fs (loop2): 1 truncate cleaned up [ 562.516254][T10478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.874669][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.593394][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.074439][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.425373][T10510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.002781][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.330704][T10522] binder: 10519:10522 ioctl c0306201 200000000640 returned -22 [ 568.752432][T10532] random: crng reseeded on system resumption [ 568.906177][T10525] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 569.110691][T10536] kvm: kvm [10526]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 572.314178][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1101'. [ 572.500913][T10570] binder: 10569:10570 ioctl c0306201 200000000640 returned -22 [ 572.583136][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'. [ 572.718606][T10564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 573.015009][T10578] netlink: 'syz.4.1104': attribute type 39 has an invalid length. [ 575.910072][T10595] loop3: detected capacity change from 0 to 32768 [ 575.935208][T10595] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1106 (10595) [ 575.972658][T10595] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 575.982928][T10595] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 575.991831][T10595] BTRFS info (device loop3): using free-space-tree [ 577.223359][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 577.519333][T10627] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1111'. [ 577.948010][T10633] binder: 10631:10633 ioctl c0306201 200000000640 returned -22 [ 578.253138][T10636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.387903][T10639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.694796][T10634] IPv6: Can't replace route, no match found [ 582.874702][T10684] loop4: detected capacity change from 0 to 64 [ 583.490020][T10683] syz.4.1129: attempt to access beyond end of device [ 583.490020][T10683] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 583.504326][T10683] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 583.538636][T10683] Trying to free block not in datazone [ 584.468777][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 585.732222][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.774898][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.817785][ T9] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 585.852838][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.887334][ T9] usb 4-1: config 0 descriptor?? [ 587.180829][ T9] hid_mf 0003:0079:1846.0006: unknown main item tag 0x2 [ 587.211997][ T9] hid_mf 0003:0079:1846.0006: item fetching failed at offset 7/11 [ 587.239777][ T9] hid_mf 0003:0079:1846.0006: HID parse failed. [ 587.280436][ T9] hid_mf 0003:0079:1846.0006: probe with driver hid_mf failed with error -22 [ 587.403703][T10690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.431771][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 587.595090][T10690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.989313][ T9] usb 4-1: USB disconnect, device number 11 [ 589.116970][T10743] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1147'. [ 589.464136][T10747] sp0: Synchronizing with TNC [ 591.925747][T10759] IPv6: Can't replace route, no match found [ 594.127583][ T5888] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 594.332001][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 594.355823][ T5888] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 594.393744][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.602510][ T5888] usb 5-1: config 0 has no interface number 0 [ 594.615287][ T5888] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 594.637587][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.363165][ T5888] usb 5-1: Product: syz [ 595.367606][ T5888] usb 5-1: Manufacturer: syz [ 595.377612][ T5888] usb 5-1: SerialNumber: syz [ 595.395091][ T5888] usb 5-1: config 0 descriptor?? [ 595.416433][ T5888] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 595.427025][ T5888] usb 5-1: No valid video chain found. [ 596.702859][ T9] usb 5-1: USB disconnect, device number 11 [ 599.286762][T10828] random: crng reseeded on system resumption [ 599.463099][T10828] kvm: kvm [10819]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 600.087644][ T5888] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 600.466770][ T5888] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 600.683565][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.693022][ T5888] usb 3-1: Product: syz [ 600.697321][ T5888] usb 3-1: Manufacturer: syz [ 600.703266][ T5888] usb 3-1: SerialNumber: syz [ 600.729770][ T5888] usb 3-1: config 0 descriptor?? [ 600.750408][ T5888] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 601.382395][ T5888] gspca_sunplus: reg_r err -110 [ 602.344050][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'. [ 603.224342][ T5885] usb 3-1: USB disconnect, device number 12 [ 604.787614][ T5888] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 605.020628][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.071775][ T5888] usb 3-1: config 0 has no interfaces? [ 605.111138][ T5888] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 605.149982][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.179289][ T5888] usb 3-1: Product: syz [ 605.190840][ T5888] usb 3-1: Manufacturer: syz [ 605.197521][ T5888] usb 3-1: SerialNumber: syz [ 605.249516][ T5888] usb 3-1: config 0 descriptor?? [ 607.431513][T10908] loop3: detected capacity change from 0 to 32768 [ 607.478091][T10908] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1194 (10908) [ 607.518309][T10908] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 607.528653][T10908] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 607.537580][T10908] BTRFS info (device loop3): using free-space-tree [ 607.563548][ T9] usb 3-1: USB disconnect, device number 13 [ 607.726303][T10936] loop4: detected capacity change from 0 to 256 [ 607.857992][T10939] netlink: 'syz.1.1195': attribute type 39 has an invalid length. [ 607.938445][T10931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 607.970280][T10931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1197'. [ 608.149597][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 609.477739][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 610.133919][T10960] netlink: 'syz.3.1199': attribute type 39 has an invalid length. [ 615.846031][T11005] random: crng reseeded on system resumption [ 615.942535][T11006] kvm: kvm [11003]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 617.508675][T11013] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 621.369033][T11052] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 622.406586][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'. [ 624.791869][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.706776][T11089] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 627.422190][T11099] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1236'. [ 631.948397][T11135] loop4: detected capacity change from 0 to 256 [ 631.956275][T11135] vfat: Unknown parameter 'nnonumtail' [ 632.240904][T11135] loop4: detected capacity change from 0 to 1024 [ 632.259443][T11135] hfsplus: Unknown parameter './file0' [ 632.449126][T11144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 633.331415][T11147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 633.531735][T11147] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 633.545175][T11147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 633.553159][T11147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 634.746865][T11147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 634.779618][T11147] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 634.850619][T11147] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 634.872599][T11147] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 635.084390][T11147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 635.107706][T11147] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 635.460948][T11173] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 636.104693][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 636.112029][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 637.307628][T11177] Bluetooth: hci2: command 0x0406 tx timeout [ 637.313773][T11177] Bluetooth: hci4: command 0x0406 tx timeout [ 637.319925][T11177] Bluetooth: hci3: command 0x0406 tx timeout [ 637.657053][T11189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'. [ 637.729753][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1260'. [ 637.867865][T11187] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.137564][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 638.143752][T11177] Bluetooth: hci0: command 0x0406 tx timeout [ 639.067042][T11204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'. [ 639.297115][T11189] veth3: entered promiscuous mode [ 639.338253][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 639.927371][T11177] Bluetooth: hci3: command 0x0406 tx timeout [ 640.079593][ T5156] Bluetooth: hci2: command 0x0406 tx timeout [ 641.825186][T11235] overlayfs: failed to clone upperpath [ 642.761490][T11241] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1272'. [ 644.776649][T11260] Invalid logical block size (4) [ 647.495532][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 647.602343][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 648.538384][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 648.550946][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 648.559253][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.605477][ T9] usb 4-1: config 0 has no interface number 0 [ 648.631887][ T9] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 648.677491][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.769503][ T9] usb 4-1: Product: syz [ 648.792459][ T9] usb 4-1: Manufacturer: syz [ 648.834852][ T9] usb 4-1: SerialNumber: syz [ 649.030372][ T9] usb 4-1: config 0 descriptor?? [ 649.151777][ T9] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 649.160140][ T9] usb 4-1: No valid video chain found. [ 650.621467][T11307] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 650.854423][ T24] usb 4-1: USB disconnect, device number 12 [ 651.398155][T11321] loop4: detected capacity change from 0 to 256 [ 652.558271][T11321] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 653.280106][T11325] loop2: detected capacity change from 0 to 32768 [ 653.570985][T11322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 653.715394][T11325] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1295 (11325) [ 653.735257][T11325] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 653.745664][T11325] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 653.754576][T11325] BTRFS info (device loop2): using free-space-tree [ 654.462350][T11355] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 654.665514][T11355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 655.299318][ T5833] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 655.705612][T11368] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1299'. [ 657.639791][T11380] loop2: detected capacity change from 0 to 1764 [ 657.742519][ T30] kauditd_printk_skb: 801 callbacks suppressed [ 657.742543][ T30] audit: type=1326 audit(1748311494.022:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11379 comm="syz.2.1307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f909978e969 code=0x0 [ 663.402135][T11452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.758321][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1327'. [ 665.512246][T11473] vlan2: entered allmulticast mode [ 665.539100][T11473] bond0: entered allmulticast mode [ 667.621966][T11497] loop4: detected capacity change from 0 to 512 [ 668.172660][T11497] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 669.226012][T11497] EXT4-fs (loop4): 1 truncate cleaned up [ 669.387268][T11497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.265256][ T30] audit: type=1800 audit(1748311506.542:814): pid=11497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1341" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 670.778595][T11509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 670.906747][ T5888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 670.986429][T11521] loop3: detected capacity change from 0 to 512 [ 671.013804][T11521] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 671.059335][T11521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 671.070548][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.093948][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.105127][ T5888] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 671.114982][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.127075][ T5888] usb 5-1: config 0 descriptor?? [ 671.153084][T11521] System zones: 1-12 [ 671.215348][T11521] EXT4-fs (loop3): 1 truncate cleaned up [ 671.225438][T11521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.829592][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.849385][ T5888] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 672.013539][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'. [ 672.102903][T11543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1352'. [ 672.251102][T11546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1352'. [ 672.318644][T11545] veth3: entered promiscuous mode [ 672.605973][ T5890] usb 5-1: USB disconnect, device number 12 [ 672.690253][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.037808][ T5888] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 674.433209][T11553] loop3: detected capacity change from 0 to 4096 [ 674.547576][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 674.567983][ T5888] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 674.595723][T11563] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 674.609032][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.642840][ T5888] usb 5-1: config 0 has no interface number 0 [ 674.679751][ T5888] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 674.727731][ T5888] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 674.778632][ T5888] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 674.820513][ T5888] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 675.787535][ T5888] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 675.818037][ T5888] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 675.829024][ T5888] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 675.844992][ T5888] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 675.877620][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.904535][ T5888] usb 5-1: Product: syz [ 675.923823][ T5888] usb 5-1: Manufacturer: syz [ 675.952892][ T5888] usb 5-1: SerialNumber: syz [ 675.976824][ T5888] usb 5-1: config 0 descriptor?? [ 676.016635][T11559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 676.043372][ T5888] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 676.201655][ T5888] usb 5-1: USB disconnect, device number 13 [ 676.700928][T11581] loop3: detected capacity change from 0 to 256 [ 677.323096][T11581] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 677.604207][T11584] loop2: detected capacity change from 0 to 512 [ 677.717650][T11584] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 678.686810][T11584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 678.803707][T11584] System zones: 1-12 [ 678.833775][T11593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1365'. [ 678.888298][T11584] EXT4-fs (loop2): 1 truncate cleaned up [ 678.916695][T11584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.311792][T11600] Invalid logical block size (4) [ 679.698065][T11602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1365'. [ 680.510516][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.671341][T11597] veth3: entered promiscuous mode [ 682.529267][T11628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 684.658787][T11638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.417674][ T5951] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 685.471613][T11648] netlink: 'syz.4.1380': attribute type 21 has an invalid length. [ 685.483533][T11648] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1380'. [ 685.578542][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 685.598303][ T5951] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 685.606565][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.638630][ T5951] usb 4-1: config 0 has no interface number 0 [ 685.657593][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 685.669240][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 685.682189][T11653] netlink: 'syz.0.1382': attribute type 1 has an invalid length. [ 685.697559][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 685.717504][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 685.743463][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.753658][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 685.801221][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 685.812129][T11656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1382'. [ 685.841868][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 685.867480][ T5951] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 685.870631][T11653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.897976][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.920978][ T5951] usb 4-1: Product: syz [ 685.925484][ T5951] usb 4-1: Manufacturer: syz [ 685.947897][ T5951] usb 4-1: SerialNumber: syz [ 685.954436][T11655] veth3: entered promiscuous mode [ 685.986846][ T5951] usb 4-1: config 0 descriptor?? [ 685.997311][T11655] bond1: (slave veth3): Enslaving as an active interface with a down link [ 686.032825][T11642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 686.042199][ T5951] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 687.623279][T11672] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1387'. [ 687.867538][ T24] usb 4-1: USB disconnect, device number 13 [ 687.956241][T11677] loop4: detected capacity change from 0 to 512 [ 687.988415][T11677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 688.214684][T11677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 688.349496][T11677] System zones: 1-12 [ 688.609365][T11677] EXT4-fs (loop4): 1 truncate cleaned up [ 688.649985][T11677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.657300][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.719942][T11682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.055497][T11695] netlink: 'syz.4.1393': attribute type 39 has an invalid length. [ 690.327642][ T5837] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 690.529308][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.576448][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.586943][ T5837] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 690.609146][ T5837] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 690.661895][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.688860][ T5837] usb 3-1: config 0 descriptor?? [ 691.111317][T11712] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 691.248028][T11712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1399'. [ 691.909529][ T5837] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 691.924233][ T5837] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 691.952907][ T5837] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 692.508979][T11724] Invalid logical block size (4) [ 693.293233][T11727] loop3: detected capacity change from 0 to 512 [ 693.331448][T11727] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 693.374927][T11727] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 693.387731][T11727] System zones: 1-12 [ 693.518130][ T9] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 693.535241][T11727] EXT4-fs (loop3): 1 truncate cleaned up [ 693.626740][T11727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.419474][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.020115][T11746] netlink: 'syz.2.1408': attribute type 6 has an invalid length. [ 695.139834][T11177] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 695.363765][ T5837] usb 3-1: USB disconnect, device number 14 [ 696.396909][T11755] fuse: Bad value for 'fd' [ 697.261553][T11770] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1411'. [ 698.054766][T11774] loop2: detected capacity change from 0 to 512 [ 698.063314][T11774] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 698.094372][T11774] EXT4-fs (loop2): 1 truncate cleaned up [ 698.115783][T11774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.183209][ T30] audit: type=1800 audit(1748311534.427:815): pid=11774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1413" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 698.401439][T11177] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 698.422283][T11780] netlink: 'syz.1.1414': attribute type 6 has an invalid length. [ 698.448625][T11781] loop3: detected capacity change from 0 to 512 [ 698.478188][ T5888] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 698.493848][T11781] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 698.536767][T11781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 698.636296][T11781] System zones: 1-12 [ 698.666242][T11781] EXT4-fs (loop3): 1 truncate cleaned up [ 698.693282][T11781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.755714][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.798597][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.814827][ T5888] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 698.993176][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.008140][ T5888] usb 3-1: config 0 descriptor?? [ 699.374516][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.407174][T11793] loop4: detected capacity change from 0 to 1024 [ 699.729395][ T5888] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 699.731776][T11800] 9pnet_fd: Insufficient options for proto=fd [ 700.108703][T11793] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 700.178074][T11793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 700.203804][T11793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 700.346782][T11812] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 700.594105][T11793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 700.894576][T11793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 700.922573][T11777] EXT4-fs (loop2): shut down requested (2) [ 701.127984][ T24] usb 3-1: USB disconnect, device number 15 [ 701.630100][T11821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 701.887759][T11177] Bluetooth: hci0: command 0x0406 tx timeout [ 702.277615][T11177] Bluetooth: hci2: command 0x0406 tx timeout [ 702.284746][T11217] Bluetooth: hci1: command 0x0406 tx timeout [ 702.627502][T11217] Bluetooth: hci4: command 0x0406 tx timeout [ 702.937547][T11217] Bluetooth: hci3: command 0x0406 tx timeout [ 703.413380][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.628645][ T5888] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 703.898404][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 703.907139][ T5888] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 703.934951][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.946038][ T5888] usb 4-1: config 0 has no interface number 0 [ 703.957603][ T5888] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 703.973865][ T5888] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 703.986231][ T5888] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 704.012965][ T5888] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 704.036116][ T5888] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 704.060689][ T5888] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 704.109643][ T5888] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 704.132473][ T5888] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 704.141746][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.353578][ T5888] usb 4-1: Product: syz [ 704.358779][ T5888] usb 4-1: Manufacturer: syz [ 704.364552][ T5888] usb 4-1: SerialNumber: syz [ 704.380063][ T5888] usb 4-1: config 0 descriptor?? [ 704.385969][T11834] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 704.402379][ T5888] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 704.991791][T11859] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1434'. [ 705.720066][ T5957] usb 4-1: USB disconnect, device number 14 [ 707.282936][T11870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 707.386241][T11870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1436'. [ 707.687491][ T5957] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 708.047464][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 708.580321][T11876] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 708.657076][ T5957] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 708.837732][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.900349][ T5957] usb 5-1: config 0 has no interface number 0 [ 708.906529][ T5957] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 708.932723][ T5957] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 708.944862][ T5957] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 708.956924][ T5957] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 708.968105][ T5957] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 709.001325][ T5957] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 709.015691][ T5957] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 709.045657][ T5957] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 709.064983][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.074129][ T5957] usb 5-1: Product: syz [ 709.081279][ T5957] usb 5-1: Manufacturer: syz [ 709.090916][ T5957] usb 5-1: SerialNumber: syz [ 709.131744][ T5957] usb 5-1: config 0 descriptor?? [ 709.153404][ T5957] usb 5-1: can't set config #0, error -71 [ 709.179755][ T5957] usb 5-1: USB disconnect, device number 14 [ 709.294295][T11887] loop4: detected capacity change from 0 to 512 [ 709.340032][T11887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 709.581680][T11887] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 709.711330][T11887] System zones: 1-12 [ 709.835572][T11887] EXT4-fs (loop4): 1 truncate cleaned up [ 710.023927][T11887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.274753][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.411630][T11900] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 713.624088][T11900] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 713.684745][T11900] veth3: entered promiscuous mode [ 714.606106][T11910] loop4: detected capacity change from 0 to 512 [ 714.627176][T11910] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 714.652879][T11914] loop2: detected capacity change from 0 to 256 [ 715.004743][T11910] EXT4-fs (loop4): 1 truncate cleaned up [ 715.039822][T11217] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 715.671678][T11920] netlink: 'syz.0.1451': attribute type 6 has an invalid length. [ 715.690808][T11910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.813180][ T30] audit: type=1800 audit(1748311552.089:816): pid=11910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1448" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 716.037480][T11929] IPv6: Can't replace route, no match found [ 716.110981][T11924] loop3: detected capacity change from 0 to 4096 [ 716.200846][T11931] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 716.437535][ T5957] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 716.568654][T11933] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 717.963874][ T5957] usb 5-1: device descriptor read/all, error -71 [ 718.625439][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.834027][T11952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 720.096666][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1460'. [ 722.787293][T11963] loop4: detected capacity change from 0 to 256 [ 722.883796][T11963] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 723.785705][T11967] loop4: detected capacity change from 0 to 512 [ 724.044273][T11967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.087563][T11967] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.102638][T11973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.194508][T11973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.011546][T11987] lo: entered allmulticast mode [ 725.145596][T11990] loop3: detected capacity change from 0 to 1024 [ 725.318124][T11987] dvmrp1: entered allmulticast mode [ 725.347662][T11990] EXT4-fs: test_dummy_encryption requires encrypt feature [ 726.327840][ T5951] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 727.323470][T11967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.364575][ T5951] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 727.385212][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.523987][T11217] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 727.528922][T12008] netlink: 'syz.2.1478': attribute type 6 has an invalid length. [ 728.008014][ T5951] usb 4-1: config 0 descriptor?? [ 728.075999][ T5951] usb 4-1: can't set config #0, error -71 [ 728.130181][ T5951] usb 4-1: USB disconnect, device number 15 [ 728.437479][ T5888] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 728.578055][ T5888] usb 5-1: device descriptor read/64, error -71 [ 728.581238][T12017] netlink: 'syz.2.1481': attribute type 2 has an invalid length. [ 728.837489][ T5888] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 729.010649][ T5888] usb 5-1: device descriptor read/64, error -71 [ 729.118758][ T5888] usb usb5-port1: attempt power cycle [ 729.700229][T12029] loop3: detected capacity change from 0 to 256 [ 730.307801][ T5888] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 730.322681][T12029] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 730.411226][ T5888] usb 5-1: device descriptor read/8, error -71 [ 730.809624][ T5888] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 730.924613][T12033] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 731.617636][ T5888] usb 5-1: device descriptor read/8, error -71 [ 731.853468][T12035] loop3: detected capacity change from 0 to 32768 [ 731.932239][ T5888] usb usb5-port1: unable to enumerate USB device [ 731.996106][T12034] IPv6: Can't replace route, no match found [ 732.062061][T12035] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 732.577661][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 732.604317][T12035] XFS (loop3): Starting recovery (logdev: internal) [ 732.634631][T12053] loop2: detected capacity change from 0 to 1024 [ 732.659462][T12035] XFS (loop3): Ending recovery (logdev: internal) [ 732.811257][T12055] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 733.038517][T12055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1490'. [ 733.499548][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 733.566070][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.644310][ T9] usb 5-1: config 0 descriptor?? [ 733.689933][ T9] cp210x 5-1:0.0: cp210x converter detected [ 733.871378][ T5834] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 733.976156][T12058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 734.016074][T12058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 734.033285][T12058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 734.042864][T12058] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 734.089744][T12058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 734.126089][ T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 734.316289][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 734.346061][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 734.375165][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 734.533686][ T5888] usb 5-1: USB disconnect, device number 21 [ 734.625495][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 734.666418][ T5888] cp210x 5-1:0.0: device disconnected [ 735.897874][T11217] Bluetooth: hci0: command 0x0406 tx timeout [ 736.057812][T11217] Bluetooth: hci4: command 0x0406 tx timeout [ 736.064232][T11217] Bluetooth: hci2: command 0x0406 tx timeout [ 736.070800][T11217] Bluetooth: hci1: command 0x0406 tx timeout [ 736.139557][T11177] Bluetooth: hci3: command 0x0406 tx timeout [ 736.675983][T12097] netlink: 'syz.0.1505': attribute type 2 has an invalid length. [ 737.286676][T12107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 739.433665][T12122] 9pnet_fd: Insufficient options for proto=fd [ 740.159650][T12138] netlink: 'syz.1.1520': attribute type 1 has an invalid length. [ 740.357436][ T5837] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 740.358130][T12142] veth5: entered promiscuous mode [ 740.912184][T12142] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 741.107480][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 741.137067][ T5837] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 741.166365][ T5837] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 741.211238][ T5837] usb 3-1: config 179 has no interface number 0 [ 741.240108][ T5837] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 741.332715][ T5837] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 741.366884][ T5837] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 742.353592][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.525402][T12131] loop3: detected capacity change from 0 to 32768 [ 742.996678][T12131] JBD2: Ignoring recovery information on journal [ 743.813325][ T10] usb 3-1: USB disconnect, device number 16 [ 743.849676][T12131] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 743.897548][T12170] lo: entered allmulticast mode [ 743.936952][T12170] dvmrp1: entered allmulticast mode [ 744.003751][ T5834] ocfs2: Unmounting device (7,3) on (node local) [ 744.024480][T12170] loop4: detected capacity change from 0 to 1024 [ 744.073323][T12170] EXT4-fs: test_dummy_encryption requires encrypt feature [ 744.166629][T12172] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 744.210140][T12172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1526'. [ 744.527554][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 744.660784][T12176] 9pnet_fd: Insufficient options for proto=fd [ 744.889058][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 744.898432][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.920019][ T24] usb 5-1: config 0 descriptor?? [ 744.928331][ T24] cp210x 5-1:0.0: cp210x converter detected [ 745.332887][ T24] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 745.415677][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 746.371190][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1535'. [ 747.193595][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.531650][T12215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.594980][T12215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.632608][T12217] 9pnet_fd: Insufficient options for proto=fd [ 748.831642][ T5888] usb 5-1: USB disconnect, device number 22 [ 749.202805][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 749.394579][ T5888] cp210x 5-1:0.0: device disconnected [ 750.592074][T12231] loop4: detected capacity change from 0 to 1024 [ 750.701719][T12233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.718168][T12234] hfsplus: invalid extended attribute record [ 750.801355][T12237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1547'. [ 750.833018][T12233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.449407][T12242] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 751.657752][T12242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1548'. [ 752.123939][T12234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 752.239315][T12234] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 752.267722][T12234] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 752.288143][T12234] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 752.377929][T12234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 752.857758][T11177] Bluetooth: hci0: command 0x0406 tx timeout [ 753.548198][T12256] 9pnet_fd: Insufficient options for proto=fd [ 753.597636][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 753.768248][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 753.832439][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 753.846162][ T10] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 753.857143][ T10] usb 4-1: config 179 has no interface number 0 [ 753.995950][T12264] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 754.298082][T11217] Bluetooth: hci2: command 0x0406 tx timeout [ 754.304482][T11217] Bluetooth: hci1: command 0x0406 tx timeout [ 754.311093][T11177] Bluetooth: hci4: command 0x0406 tx timeout [ 754.539198][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 754.549576][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 754.563165][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 754.577458][T11177] Bluetooth: hci3: command 0x0406 tx timeout [ 754.709688][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.259624][T12270] loop2: detected capacity change from 0 to 512 [ 755.408750][T12270] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 755.628570][T12270] EXT4-fs (loop2): 1 truncate cleaned up [ 755.640300][T12270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.470176][ T24] usb 4-1: USB disconnect, device number 16 [ 756.485718][ T30] audit: type=1800 audit(1748311592.754:817): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1556" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 756.827470][ T5951] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 757.255907][T12286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 757.488764][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1560'. [ 757.909326][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.018697][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.054065][ T5951] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 758.132238][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.173954][ T5951] usb 3-1: config 0 descriptor?? [ 758.234369][ T5951] usb 3-1: can't set config #0, error -71 [ 758.241810][T12293] loop3: detected capacity change from 0 to 4096 [ 758.284759][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.294448][ T5951] usb 3-1: USB disconnect, device number 17 [ 758.401577][T12296] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 758.481951][T12297] 9pnet_fd: Insufficient options for proto=fd [ 759.080341][T12303] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 759.109322][T12304] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 761.690193][T12318] netlink: 'syz.2.1570': attribute type 10 has an invalid length. [ 762.442396][T12318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.451221][T12318] batadv0: entered allmulticast mode [ 762.465529][T12318] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 763.956683][T12333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 765.029225][T12337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 765.295298][T12336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1572'. [ 765.350094][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 765.630244][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1574'. [ 765.827431][ T24] usb 4-1: device not accepting address 17, error -71 [ 767.352423][T12362] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 770.196133][T12384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 772.981693][T12406] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 773.244517][T12408] veth5: entered promiscuous mode [ 773.253658][T12408] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 773.558823][T11177] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 773.561798][T12417] netlink: 'syz.4.1595': attribute type 6 has an invalid length. [ 775.471085][T12431] loop2: detected capacity change from 0 to 4096 [ 776.504766][T12444] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 777.391221][T12453] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 778.030634][T12454] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 778.467519][T12454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1604'. [ 779.514251][T12465] loop4: detected capacity change from 0 to 1024 [ 779.577932][ T5888] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 779.870776][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 779.882885][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 780.083197][T12469] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 780.102617][T12469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 780.121482][T12469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 780.148835][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 780.158988][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 780.171958][ T5888] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 780.181087][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.192738][ T5888] usb 3-1: config 0 descriptor?? [ 780.230914][T12469] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 780.239821][T12469] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 780.273952][T12478] loop3: detected capacity change from 0 to 512 [ 780.350195][T12478] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 780.429763][T12478] EXT4-fs (loop3): 1 truncate cleaned up [ 780.662479][ T5888] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 780.710445][T12478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.738235][ T5888] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 781.348056][ T5888] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 781.639217][ T5885] usb 3-1: USB disconnect, device number 18 [ 781.720689][ T30] audit: type=1800 audit(1748311617.989:818): pid=12478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1610" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 781.817601][T11177] Bluetooth: hci0: command 0x0406 tx timeout [ 781.868490][T12486] fido_id[12486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 781.934261][T12489] loop4: detected capacity change from 0 to 4096 [ 782.031442][T12492] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 782.067547][ T5837] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 782.274280][T11177] Bluetooth: hci2: command 0x0406 tx timeout [ 782.893201][T11177] Bluetooth: hci1: command 0x0406 tx timeout [ 782.899587][T11177] Bluetooth: hci3: command 0x0406 tx timeout [ 782.905833][T11177] Bluetooth: hci4: command 0x0406 tx timeout [ 783.342044][T12497] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 784.047668][ T5837] usb 4-1: device descriptor read/all, error -71 [ 784.104779][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.115883][T12502] loop2: detected capacity change from 0 to 256 [ 784.408778][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 784.599627][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 784.676716][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 784.727420][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 784.740337][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 784.753682][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 784.772270][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.910826][T12520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 785.114949][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1618'. [ 785.500495][ T10] usb 5-1: config 0 descriptor?? [ 785.760130][T12528] loop2: detected capacity change from 0 to 512 [ 785.772147][T12528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 785.828910][T12528] EXT4-fs (loop2): 1 truncate cleaned up [ 785.891988][T12528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.955668][ T10] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 785.981220][ T10] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 786.005136][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 786.049873][ T30] audit: type=1800 audit(1748311622.319:819): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1622" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 786.256488][T12534] loop3: detected capacity change from 0 to 1024 [ 787.327028][ T5846] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 787.354608][T12548] netlink: 'syz.0.1627': attribute type 6 has an invalid length. [ 787.517800][T12534] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 787.524450][T12534] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 787.538835][T12534] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 787.545120][T12534] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 787.554019][T12534] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 787.800892][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.550584][ T10] usb 5-1: USB disconnect, device number 23 [ 789.761870][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 789.770512][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 789.777214][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 789.783612][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 789.790294][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 791.232459][T12586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1636'. [ 791.741428][T12596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 791.948360][T12596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1639'. [ 793.587821][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 793.773247][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 794.594876][T12621] serio: Serial port ptm0 [ 794.715941][T12621] loop3: detected capacity change from 0 to 512 [ 794.911515][T12621] EXT4-fs (loop3): orphan cleanup on readonly fs [ 795.002296][T12621] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1647: bg 0: block 248: padding at end of block bitmap is not set [ 795.129700][T12621] Quota error (device loop3): write_blk: dquota write failed [ 795.138032][T12621] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 795.148301][T12621] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1647: Failed to acquire dquot type 1 [ 795.358889][T12621] EXT4-fs (loop3): 1 truncate cleaned up [ 795.588533][ T10] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 796.568803][T12621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 796.998865][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 797.007978][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64 [ 797.020111][ T10] usb 5-1: string descriptor 0 read error: -71 [ 797.026406][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 797.035983][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 797.047948][ T10] usb 5-1: can't set config #1, error -71 [ 797.068418][ T10] usb 5-1: USB disconnect, device number 24 [ 797.376163][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.093889][T12635] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 798.194689][T12639] netlink: 'syz.3.1650': attribute type 1 has an invalid length. [ 798.346171][T12635] veth7: entered promiscuous mode [ 799.487883][T12642] veth3: entered promiscuous mode [ 799.496211][T12642] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 799.938912][ T5888] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 800.144464][ T5888] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 800.211154][ T5888] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 800.294555][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 800.539979][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64 [ 800.854082][ T5888] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 800.949955][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 801.019866][ T5888] usb 4-1: Product: syz [ 801.036019][ T5888] usb 4-1: Manufacturer: syz [ 801.127057][ T5888] cdc_wdm 4-1:1.0: skipping garbage [ 801.139856][ T5888] cdc_wdm 4-1:1.0: skipping garbage [ 801.183651][ T5888] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 801.404538][T12673] can0: slcan on ptm0. [ 801.619195][T12673] can0 (unregistered): slcan off ptm0. [ 803.086566][ T5888] usb 4-1: USB disconnect, device number 21 [ 803.258720][T12690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.399464][T12689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.090899][ T5888] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 804.514502][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 804.532896][ T5888] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 804.541476][T12704] fuse: Bad value for 'fd' [ 804.551428][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.572269][T12705] netlink: 'syz.4.1668': attribute type 39 has an invalid length. [ 804.668834][ T5888] usb 4-1: config 0 has no interface number 0 [ 804.683892][ T5888] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 804.737148][ T5888] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 804.917416][ T5888] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 804.952049][ T5888] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 804.983665][ T5888] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 805.016822][ T5888] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 805.046774][ T5888] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 805.085262][ T5888] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 805.122501][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.154665][ T5888] usb 4-1: Product: syz [ 805.172631][ T5888] usb 4-1: Manufacturer: syz [ 805.218001][ T5888] usb 4-1: SerialNumber: syz [ 805.254699][ T5888] usb 4-1: config 0 descriptor?? [ 805.268639][T12697] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 805.278008][ T5888] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 806.741726][ T10] usb 4-1: USB disconnect, device number 22 [ 807.452414][T12724] fuse: Bad value for 'fd' [ 807.567900][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1671'. [ 808.430218][T12740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.587592][ T5951] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 808.622104][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.860384][ T5951] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 808.877355][ T5951] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 808.891387][ T5951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 808.921569][ T5951] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64 [ 808.969868][ T5951] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 808.987102][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 809.013689][ T5951] usb 3-1: Product: syz [ 809.031247][ T5951] usb 3-1: Manufacturer: syz [ 809.064036][ T5951] cdc_wdm 3-1:1.0: skipping garbage [ 809.085703][ T5951] cdc_wdm 3-1:1.0: skipping garbage [ 809.106965][ T5951] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 809.553576][T12748] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 809.638135][T12752] IPv6: Can't replace route, no match found [ 809.698831][T12750] veth9: entered promiscuous mode [ 810.118082][T12760] serio: Serial port ptm0 [ 810.289016][T12763] loop3: detected capacity change from 0 to 512 [ 811.837497][ T10] usb 3-1: USB disconnect, device number 19 [ 812.378490][T12755] bond1: (slave veth3): Releasing active interface [ 812.386806][T12763] EXT4-fs (loop3): orphan cleanup on readonly fs [ 812.434990][T12763] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1682: bg 0: block 248: padding at end of block bitmap is not set [ 812.472150][T12763] Quota error (device loop3): write_blk: dquota write failed [ 812.488608][T12763] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 812.511958][T12763] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1682: Failed to acquire dquot type 1 [ 812.524946][T12755] bond2: (slave veth5): Releasing backup interface [ 812.692818][T12763] EXT4-fs (loop3): 1 truncate cleaned up [ 812.729129][T12763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 813.084912][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.390666][T11217] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 815.045160][T12799] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 815.071868][T12792] netlink: 'syz.4.1692': attribute type 6 has an invalid length. [ 815.453730][T12803] netlink: 'syz.4.1694': attribute type 1 has an invalid length. [ 815.618894][T12810] bond0: (slave batadv0): Releasing backup interface [ 815.635006][T12810] batadv0: left allmulticast mode [ 815.886005][T12803] veth3: entered promiscuous mode [ 815.943901][T12814] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 816.511199][T11217] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 816.513733][T12825] netlink: 'syz.2.1698': attribute type 6 has an invalid length. [ 816.579135][ T9] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 816.916390][T12828] fuse: Bad value for 'fd' [ 817.049969][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.084247][ T9] usb 5-1: config 0 has no interfaces? [ 817.122520][ T9] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 817.150592][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.176250][ T9] usb 5-1: Product: syz [ 817.199612][ T9] usb 5-1: Manufacturer: syz [ 817.217532][ T9] usb 5-1: SerialNumber: syz [ 817.235534][ T9] usb 5-1: config 0 descriptor?? [ 817.844673][T12836] loop2: detected capacity change from 0 to 4096 [ 817.882520][T12836] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 818.607991][ T5890] usb 5-1: USB disconnect, device number 25 [ 820.890278][T12851] bond2: (slave ip6gretap1): Releasing backup interface [ 821.096135][T12851] bond3: (slave veth5): Releasing backup interface [ 823.117575][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 823.337594][ T5888] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 823.476089][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'. [ 823.607504][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 823.630134][ T5888] usb 4-1: config 0 has an invalid interface number: 145 but max is 1 [ 823.709638][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 823.712222][ T5888] usb 4-1: config 0 has an invalid interface number: 43 but max is 1 [ 823.728218][ T5888] usb 4-1: config 0 has no interface number 0 [ 823.729521][ T9] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 823.734904][ T5888] usb 4-1: config 0 has no interface number 1 [ 823.775496][ T5888] usb 4-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 823.787336][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.803073][ T5888] usb 4-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 823.814965][ T5888] usb 4-1: config 0 interface 145 has no altsetting 0 [ 823.825274][ T5888] usb 4-1: config 0 interface 43 has no altsetting 0 [ 823.832338][ T9] usb 5-1: config 0 has no interface number 0 [ 823.836030][ T5888] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 823.853093][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.853645][ T9] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.935393][ T9] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 823.949344][ T5888] usb 4-1: Product: syz [ 823.973233][ T9] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 823.974102][ T5888] usb 4-1: Manufacturer: syz [ 824.010196][ T5888] usb 4-1: SerialNumber: syz [ 824.025193][ T9] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 824.026516][ T5888] usb 4-1: config 0 descriptor?? [ 824.109268][ T9] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 824.154390][ T9] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.198477][ T9] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.266220][ T5888] keyspan_pda 4-1:0.145: required endpoints missing [ 824.277855][ T9] usb 5-1: string descriptor 0 read error: -71 [ 824.295928][ T9] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 824.312742][ T5888] keyspan_pda 4-1:0.43: required endpoints missing [ 824.358701][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.382594][ T5888] usb 4-1: USB disconnect, device number 23 [ 824.516371][ T9] usb 5-1: config 0 descriptor?? [ 824.624998][ T9] usb 5-1: can't set config #0, error -71 [ 824.676406][ T9] usb 5-1: USB disconnect, device number 26 [ 825.068589][T12895] can0: slcan on ptm0. [ 825.148809][T12895] can0 (unregistered): slcan off ptm0. [ 826.780685][T12910] netlink: 'syz.3.1718': attribute type 39 has an invalid length. [ 828.277395][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 828.372825][T12920] loop4: detected capacity change from 0 to 256 [ 828.449176][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 828.471885][T12920] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 828.490070][ T9] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 828.524957][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.585647][ T9] usb 3-1: config 0 has no interface number 0 [ 828.616391][ T9] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 828.674495][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.707955][ T9] usb 3-1: Product: syz [ 828.712179][ T9] usb 3-1: Manufacturer: syz [ 828.744271][ T9] usb 3-1: SerialNumber: syz [ 828.930349][ T9] usb 3-1: config 0 descriptor?? [ 828.986091][ T9] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 829.008237][ T9] usb 3-1: No valid video chain found. [ 829.249696][T12919] fuse: Bad value for 'fd' [ 829.515802][ T9] usb 3-1: USB disconnect, device number 20 [ 829.717423][ T5951] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 830.359574][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.370831][ T5951] usb 4-1: config 0 has no interfaces? [ 830.389307][ T5951] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 830.406937][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.451669][ T5951] usb 4-1: Product: syz [ 830.493858][ T5951] usb 4-1: Manufacturer: syz [ 830.512648][T12940] fuse: Bad value for 'group_id' [ 830.518135][T12940] fuse: Bad value for 'group_id' [ 830.532260][ T5951] usb 4-1: SerialNumber: syz [ 831.020029][ T5951] usb 4-1: config 0 descriptor?? [ 831.647877][ T5890] usb 4-1: USB disconnect, device number 24 [ 832.547642][T12955] can0: slcan on ptm0. [ 832.910290][T12955] can0 (unregistered): slcan off ptm0. [ 834.244287][T12969] serio: Serial port ptm0 [ 834.346336][T12970] loop2: detected capacity change from 0 to 512 [ 836.367342][T12964] 9pnet: Could not find request transport: fd0x0000000000000005 [ 836.467774][T12970] EXT4-fs (loop2): orphan cleanup on readonly fs [ 836.478112][T12970] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1735: bg 0: block 248: padding at end of block bitmap is not set [ 836.570039][T12970] Quota error (device loop2): write_blk: dquota write failed [ 836.577672][T12970] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 836.588637][T12970] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1735: Failed to acquire dquot type 1 [ 836.605814][T12970] EXT4-fs (loop2): 1 truncate cleaned up [ 836.619477][T12970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 838.824903][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.722556][T12993] loop3: detected capacity change from 0 to 32768 [ 840.747136][T12993] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1740 (12993) [ 840.769795][T12993] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 840.780481][T12993] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 840.789342][T12993] BTRFS info (device loop3): using free-space-tree [ 841.408329][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 842.167846][ T5837] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 842.254812][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1745'. [ 842.473080][T13029] 9pnet_fd: Insufficient options for proto=fd [ 842.519474][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.544056][ T5837] usb 4-1: config 0 has no interfaces? [ 842.580287][ T5837] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 842.628768][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.838638][ T5837] usb 4-1: Product: syz [ 842.849190][ T5837] usb 4-1: Manufacturer: syz [ 842.856590][ T5837] usb 4-1: SerialNumber: syz [ 843.035124][ T5837] usb 4-1: config 0 descriptor?? [ 844.338692][ T5837] usb 4-1: USB disconnect, device number 25 [ 844.652595][T13044] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 844.755472][T13044] veth5: entered promiscuous mode [ 844.783354][T13044] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 845.857904][T13063] loop2: detected capacity change from 0 to 256 [ 845.969167][T13063] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 846.746753][T13067] 9pnet_fd: Insufficient options for proto=fd [ 846.984707][T13071] loop2: detected capacity change from 0 to 512 [ 846.996383][T13071] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 848.053183][T13071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 848.097578][T13071] System zones: 1-12 [ 848.135436][T13071] EXT4-fs (loop2): 1 truncate cleaned up [ 848.173495][T13071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.292470][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.960272][T12949] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 850.125903][T13094] overlayfs: failed to resolve './file1': -2 [ 850.180898][T13095] Invalid logical block size (4) [ 850.818011][T12949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.852163][T12949] usb 3-1: config 0 has no interfaces? [ 850.876041][T12949] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 850.901314][T12949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.920264][T12949] usb 3-1: Product: syz [ 850.928254][T12949] usb 3-1: Manufacturer: syz [ 850.932910][T12949] usb 3-1: SerialNumber: syz [ 850.953751][T12949] usb 3-1: config 0 descriptor?? [ 851.166292][T13104] 9pnet_fd: Insufficient options for proto=fd [ 851.503310][ T5957] usb 3-1: USB disconnect, device number 21 [ 852.349567][T13115] loop4: detected capacity change from 0 to 1024 [ 852.583528][T13118] loop3: detected capacity change from 0 to 4096 [ 854.004679][T13131] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 854.117635][T13121] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 854.167864][T13121] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 854.233820][T13121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 854.272136][T13121] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 854.303104][T13121] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 854.736001][T13144] serio: Serial port ptm0 [ 854.898167][T13146] loop4: detected capacity change from 0 to 512 [ 855.987370][T11217] Bluetooth: hci0: command 0x0406 tx timeout [ 856.227369][T11217] Bluetooth: hci1: command 0x0406 tx timeout [ 856.297409][T11217] Bluetooth: hci4: command 0x0406 tx timeout [ 856.303517][T11217] Bluetooth: hci2: command 0x0406 tx timeout [ 856.377403][T11217] Bluetooth: hci3: command 0x0406 tx timeout [ 856.483939][T13147] serio: Serial port ptm1 [ 856.709648][T13149] loop2: detected capacity change from 0 to 512 [ 856.883162][T13149] EXT4-fs (loop2): orphan cleanup on readonly fs [ 856.905182][T13149] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1781: bg 0: block 248: padding at end of block bitmap is not set [ 856.938719][T13149] Quota error (device loop2): write_blk: dquota write failed [ 856.946803][T13149] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 856.957210][T13149] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1781: Failed to acquire dquot type 1 [ 857.006166][T13146] EXT4-fs (loop4): orphan cleanup on readonly fs [ 857.066497][T13149] EXT4-fs (loop2): 1 truncate cleaned up [ 857.240265][T13146] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1780: bg 0: block 248: padding at end of block bitmap is not set [ 857.470069][T13149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 857.961611][T13146] Quota error (device loop4): write_blk: dquota write failed [ 858.115607][T13146] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 858.218523][T13146] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1780: Failed to acquire dquot type 1 [ 858.231772][T13146] EXT4-fs (loop4): 1 truncate cleaned up [ 858.284302][T13146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 858.356330][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.390154][T13155] 9pnet_fd: Insufficient options for proto=fd [ 858.436921][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.886621][T13164] fuse: Bad value for 'fd' [ 860.155475][T13172] loop2: detected capacity change from 0 to 512 [ 860.213178][T13172] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 860.699011][T13172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 860.715079][T13172] System zones: 1-12 [ 860.732212][T13172] EXT4-fs (loop2): 1 truncate cleaned up [ 860.739935][T13172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.449208][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.693614][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1792'. [ 862.892972][T13195] loop2: detected capacity change from 0 to 4096 [ 863.070040][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 863.218149][T13207] Invalid logical block size (4) [ 863.885821][T13211] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 865.135732][T13215] 9pnet_fd: Insufficient options for proto=fd [ 865.186919][T13217] loop3: detected capacity change from 0 to 512 [ 865.254531][T13217] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 865.449839][T13217] EXT4-fs (loop3): 1 truncate cleaned up [ 865.561906][T13217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.803652][ T30] audit: type=1800 audit(1748311702.079:820): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1798" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 866.717420][ T5957] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 866.883734][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.925582][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.966585][ T5957] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 867.017633][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.054562][ T5957] usb 4-1: config 0 descriptor?? [ 867.366686][T13226] loop4: detected capacity change from 0 to 32768 [ 867.465397][T13226] JBD2: Ignoring recovery information on journal [ 867.548130][T13226] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 868.520666][ T5957] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 868.577442][ T5837] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 868.869937][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.049702][ T5837] usb 3-1: config 0 has no interfaces? [ 869.089229][ T5832] ocfs2: Unmounting device (7,4) on (node local) [ 869.115829][ T5837] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 869.123073][T13248] netlink: 'syz.0.1807': attribute type 1 has an invalid length. [ 869.155164][T13224] EXT4-fs (loop3): shut down requested (2) [ 869.166635][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.195521][ T5837] usb 3-1: Product: syz [ 869.212604][ T5837] usb 3-1: Manufacturer: syz [ 869.228367][ T5837] usb 3-1: SerialNumber: syz [ 869.248163][T13248] veth11: entered promiscuous mode [ 869.262161][ T5837] usb 3-1: config 0 descriptor?? [ 869.356856][T13175] usb 4-1: USB disconnect, device number 26 [ 869.440953][ T5846] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 869.454689][T13252] netlink: 'syz.0.1809': attribute type 6 has an invalid length. [ 869.570430][ T5837] usb 3-1: USB disconnect, device number 22 [ 870.077711][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.313001][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.401259][T13260] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 870.460116][T13260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 870.479024][T13263] loop3: detected capacity change from 0 to 64 [ 870.695589][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1811'. [ 871.337165][T13263] hfs: request for non-existent node 1536 in B*Tree [ 871.344171][T13263] hfs: request for non-existent node 1536 in B*Tree [ 871.691642][T13268] loop2: detected capacity change from 0 to 4096 [ 872.307414][T13268] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 873.710815][T13264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 873.714008][ T13] hfs: request for non-existent node 1317 in B*Tree [ 873.726988][ T13] hfs: request for non-existent node 1317 in B*Tree [ 873.767926][T13264] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 873.834978][T13264] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 873.988489][T13260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 874.042275][T13267] ntfs3(loop2): ino=0, attr_set_size [ 874.700002][T13276] loop3: detected capacity change from 0 to 4096 [ 874.753176][T13276] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 875.204192][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 875.837324][T13276] ntfs3(loop3): ino=0, attr_set_size [ 876.353691][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 876.411597][ T10] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 876.487077][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 876.556883][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 877.133569][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 877.220443][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 877.330279][ T10] usb 5-1: Product: syz [ 877.368758][ T10] usb 5-1: Manufacturer: syz [ 877.704095][ T10] usb 5-1: can't set config #1, error -71 [ 877.765734][ T10] usb 5-1: USB disconnect, device number 27 [ 878.445629][T13299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.617451][T12867] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 878.921575][T13300] IPv6: Can't replace route, no match found [ 878.939749][T12867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.956081][T12867] usb 4-1: config 0 has no interfaces? [ 878.969213][T12867] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 878.980922][T12867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.990427][T12867] usb 4-1: Product: syz [ 878.994715][T12867] usb 4-1: Manufacturer: syz [ 879.004901][T12867] usb 4-1: SerialNumber: syz [ 880.122378][T12867] usb 4-1: config 0 descriptor?? [ 880.603090][T13312] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 881.314123][T13320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1828'. [ 881.512011][T13312] 8021q: adding VLAN 0 to HW filter on device bond3 [ 881.561394][ T10] usb 4-1: USB disconnect, device number 27 [ 881.669249][T13317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 881.735204][T13317] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 881.799962][T13317] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 881.858044][T13320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 882.273310][T13326] loop3: detected capacity change from 0 to 4096 [ 882.835073][T13326] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 883.571348][T13326] ntfs3(loop3): ino=0, attr_set_size [ 884.106691][T13330] loop4: detected capacity change from 0 to 64 [ 884.907554][T13341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 885.218965][T13330] hfs: request for non-existent node 1536 in B*Tree [ 885.225633][T13330] hfs: request for non-existent node 1536 in B*Tree [ 885.279265][ T13] hfs: request for non-existent node 1317 in B*Tree [ 885.297330][ T13] hfs: request for non-existent node 1317 in B*Tree [ 886.993924][T13359] serio: Serial port ptm0 [ 887.333899][T13360] loop4: detected capacity change from 0 to 512 [ 888.549274][T13360] EXT4-fs (loop4): orphan cleanup on readonly fs [ 888.614602][T13360] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1837: bg 0: block 248: padding at end of block bitmap is not set [ 888.673249][T13360] Quota error (device loop4): write_blk: dquota write failed [ 888.689043][T13360] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 888.699831][T13360] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1837: Failed to acquire dquot type 1 [ 888.866219][T13360] EXT4-fs (loop4): 1 truncate cleaned up [ 889.042148][T13360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 890.140152][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.567586][T12867] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 890.608825][T13390] serio: Serial port ptm0 [ 891.654738][T12867] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 891.665909][T12867] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 891.676451][T12867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 891.685645][T12867] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 891.706861][T13394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.708452][T12867] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 891.775122][T12867] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 891.796166][T12867] usb 3-1: Product: syz [ 891.807206][T12867] usb 3-1: Manufacturer: syz [ 891.857698][T12867] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 893.372716][T13405] loop3: detected capacity change from 0 to 4096 [ 893.402278][T13405] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 894.228226][T13405] ntfs3(loop3): ino=0, attr_set_size [ 894.351938][T13175] usb 3-1: USB disconnect, device number 23 [ 894.905973][T13415] Invalid logical block size (4) [ 895.421352][T13418] lo: entered allmulticast mode [ 895.477745][T13418] dvmrp1: entered allmulticast mode [ 895.563527][T13418] netlink: 'syz.2.1855': attribute type 39 has an invalid length. [ 895.596686][T13418] loop2: detected capacity change from 0 to 1024 [ 895.609811][T13422] loop4: detected capacity change from 0 to 64 [ 895.663185][T13418] EXT4-fs: test_dummy_encryption requires encrypt feature [ 896.485268][T13422] hfs: request for non-existent node 1536 in B*Tree [ 896.491982][T13422] hfs: request for non-existent node 1536 in B*Tree [ 896.527683][ T5846] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 896.560351][ T1156] hfs: request for non-existent node 1317 in B*Tree [ 896.567002][ T1156] hfs: request for non-existent node 1317 in B*Tree [ 896.837343][T13175] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 897.573501][T13175] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 897.593980][T13175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.787444][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 897.933329][T13175] usb 3-1: config 0 descriptor?? [ 897.946120][T13175] cp210x 3-1:0.0: cp210x converter detected [ 897.954213][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 898.231921][T13175] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 898.608636][ T9] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 898.626139][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 898.635561][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 898.650674][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 898.660259][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 898.783704][ T9] usb 5-1: Product: syz [ 898.792537][T13175] cp210x 3-1:0.0: querying part number failed [ 898.804744][ T9] usb 5-1: Manufacturer: syz [ 898.854417][T13175] usb 3-1: cp210x converter now attached to ttyUSB0 [ 898.855114][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 899.069350][T13175] usb 5-1: USB disconnect, device number 28 [ 899.647344][ T5951] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 899.785137][T13450] loop2: detected capacity change from 0 to 32768 [ 899.801134][ T5951] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 899.951561][ T5951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.969693][ T5951] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 899.973005][T13450] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 899.995208][ C1] hrtimer: interrupt took 2176561 ns [ 900.730790][T13450] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR [ 900.737295][ T5951] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 900.754417][T13450] XFS (loop2): log mount failed [ 900.795713][ T5951] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 900.814232][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 900.831560][ T5951] usb 4-1: Product: syz [ 900.835795][ T5951] usb 4-1: Manufacturer: syz [ 900.864281][ T5951] cdc_wdm 4-1:1.0: skipping garbage [ 900.879651][ T5951] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 901.177797][T12867] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 901.271915][ T9] usb 3-1: USB disconnect, device number 24 [ 901.295602][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 901.328066][ T9] cp210x 3-1:0.0: device disconnected [ 901.348652][T12867] usb 5-1: Using ep0 maxpacket: 32 [ 901.370753][T12867] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 901.396589][T12867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.435775][T12867] usb 5-1: config 0 has no interface number 0 [ 901.461529][T12867] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 901.534356][T12867] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 902.014545][T12867] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 902.097584][T12867] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 902.129433][T12867] usb 5-1: config 0 interface 146 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.184712][T12867] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 902.215262][T12867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.244732][T12867] usb 5-1: Product: syz [ 902.255639][T12867] usb 5-1: Manufacturer: syz [ 902.294985][T12867] usb 5-1: SerialNumber: syz [ 902.318503][T12867] usb 5-1: config 0 descriptor?? [ 902.341581][T13461] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 902.390251][T12867] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 902.687280][T13479] lo speed is unknown, defaulting to 1000 [ 903.126144][ T9] usb 4-1: USB disconnect, device number 28 [ 903.738412][ T5957] usb 5-1: USB disconnect, device number 29 [ 906.636656][T13515] loop3: detected capacity change from 0 to 256 [ 907.177537][T13515] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 908.587735][ T5957] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 908.830166][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.861568][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.905702][ T5957] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 908.942259][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.995954][ T5957] usb 4-1: config 0 descriptor?? [ 910.129262][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'. [ 910.286955][ T5957] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 910.300754][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 910.460593][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 910.517605][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.652250][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 911.471698][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 911.535640][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 911.585678][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 911.634750][ T9] usb 5-1: Product: syz [ 911.649864][ T9] usb 5-1: Manufacturer: syz [ 911.711421][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 911.751397][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 913.138973][T12867] usb 4-1: reset high-speed USB device number 29 using dummy_hcd [ 913.405754][T13561] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 913.443800][ T9] usb 5-1: USB disconnect, device number 30 [ 913.484517][T13561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 913.710248][T13566] veth13: entered promiscuous mode [ 914.074240][T13563] 8021q: adding VLAN 0 to HW filter on device bond5 [ 914.087895][T13561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1894'. [ 914.107827][T13563] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 914.830295][T13563] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 914.830766][T13175] usb 4-1: USB disconnect, device number 29 [ 914.948409][T13561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 915.453678][T13582] loop4: detected capacity change from 0 to 512 [ 915.467708][T13175] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 915.488293][T13582] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 915.526284][T13585] lo speed is unknown, defaulting to 1000 [ 915.610050][T13582] EXT4-fs (loop4): 1 truncate cleaned up [ 915.659147][T13582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.310764][T13175] usb 4-1: Using ep0 maxpacket: 32 [ 916.336980][T13175] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 916.357339][T13175] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.386871][T13175] usb 4-1: config 0 has no interface number 0 [ 916.402558][T13175] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 916.467683][T13175] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 916.471740][ T30] audit: type=1800 audit(1748311752.640:821): pid=13582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1900" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 916.512811][T13175] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 916.606178][T13175] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 916.679291][T13175] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 916.694972][T12867] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 916.708633][T13175] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 916.733521][T13175] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 917.137705][T12867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.028376][T12867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.171461][T12867] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 918.221035][T12867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.247359][T12867] usb 5-1: config 0 descriptor?? [ 918.369260][T12867] usb 5-1: can't set config #0, error -71 [ 919.305631][T12867] usb 5-1: USB disconnect, device number 31 [ 919.354007][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.697849][T13175] usb 4-1: string descriptor 0 read error: -71 [ 920.704218][T13175] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 920.834248][T13175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.859207][T13175] usb 4-1: config 0 descriptor?? [ 921.059105][T13175] usb 4-1: can't set config #0, error -71 [ 921.068028][T13175] usb 4-1: USB disconnect, device number 30 [ 921.310633][T13622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1908'. [ 922.912190][T13631] netlink: 'syz.3.1911': attribute type 6 has an invalid length. [ 922.969861][ T5846] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 923.905837][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 924.048283][T13640] netlink: 'syz.1.1915': attribute type 6 has an invalid length. [ 929.452836][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 929.458062][T13657] netlink: 'syz.1.1920': attribute type 6 has an invalid length. [ 930.342992][T13678] overlayfs: failed to clone upperpath [ 930.488947][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 930.812965][T13680] loop4: detected capacity change from 0 to 256 [ 931.030237][T13680] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 931.569794][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.630253][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.655310][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 931.695996][T11217] Bluetooth: hci3: command 0x0406 tx timeout [ 931.708789][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 931.719509][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 931.733489][ T5846] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 931.742274][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 931.752102][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.762806][T13682] netlink: 'syz.0.1928': attribute type 6 has an invalid length. [ 931.781671][ T9] usb 4-1: config 0 descriptor?? [ 933.214060][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 933.236617][T13699] netlink: 'syz.1.1933': attribute type 6 has an invalid length. [ 933.298745][ T9] usb 4-1: USB disconnect, device number 31 [ 934.417371][T13175] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 934.494126][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 934.587478][T13175] usb 4-1: Using ep0 maxpacket: 16 [ 934.629481][T13727] fuse: Bad value for 'fd' [ 935.082820][T13175] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 935.101658][T13175] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.128591][T13728] veth15: entered promiscuous mode [ 935.137308][T13175] usb 4-1: config 0 has no interface number 0 [ 935.164081][T13175] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 935.204927][T13175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.226289][T13175] usb 4-1: Product: syz [ 935.240780][T13175] usb 4-1: Manufacturer: syz [ 935.252438][T13175] usb 4-1: SerialNumber: syz [ 935.272988][T13175] usb 4-1: config 0 descriptor?? [ 935.300816][T13175] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 935.314028][T13175] usb 4-1: No valid video chain found. [ 935.532710][T13712] fuse: Bad value for 'fd' [ 936.053969][T13175] usb 4-1: USB disconnect, device number 32 [ 936.794132][T13764] loop3: detected capacity change from 0 to 64 [ 936.808521][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1955'. [ 938.140097][T13764] hfs: request for non-existent node 1536 in B*Tree [ 938.146725][T13764] hfs: request for non-existent node 1536 in B*Tree [ 938.186715][T13499] hfs: request for non-existent node 1317 in B*Tree [ 938.215311][T13767] loop4: detected capacity change from 0 to 4096 [ 938.224002][T13499] hfs: request for non-existent node 1317 in B*Tree [ 938.227952][T13772] veth15: entered promiscuous mode [ 938.773689][T13778] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 940.335453][T13790] loop3: detected capacity change from 0 to 1024 [ 941.357494][T13799] loop2: detected capacity change from 0 to 512 [ 942.172820][T13801] hfsplus: invalid extended attribute record [ 942.235349][T13799] EXT4-fs (loop2): orphan cleanup on readonly fs [ 942.283193][T13799] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1963: bg 0: block 248: padding at end of block bitmap is not set [ 942.318813][T13799] Quota error (device loop2): write_blk: dquota write failed [ 942.326865][T13799] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 942.337699][T13799] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1963: Failed to acquire dquot type 1 [ 942.394658][T13801] hfsplus: unable to mark blocks free: error -4 [ 942.453882][T13799] EXT4-fs (loop2): 1 truncate cleaned up [ 942.505656][T13801] hfsplus: can't free extent [ 944.360255][T13799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 944.456025][T13799] syz.2.1963 (13799) used greatest stack depth: 19984 bytes left [ 944.475291][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.992393][T13825] netlink: 'syz.3.1971': attribute type 6 has an invalid length. [ 945.001048][ T5846] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 945.167326][ T5837] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 945.333697][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.390273][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.454998][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1969'. [ 945.476545][ T5837] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 945.880174][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.935172][ T5837] usb 5-1: config 0 descriptor?? [ 946.449532][ T5837] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 948.437125][ T5837] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 950.019014][T13369] usb 5-1: USB disconnect, device number 32 [ 950.511127][T13862] loop2: detected capacity change from 0 to 1024 [ 950.534204][T13867] fuse: Bad value for 'fd' [ 950.602298][T13863] IPv6: Can't replace route, no match found [ 950.714493][T13869] smb3: Unknown parameter 'aclš' [ 950.735215][T13870] hfsplus: invalid extended attribute record [ 951.848120][T13882] loop2: detected capacity change from 0 to 256 [ 951.885010][T13882] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 952.805520][T13886] loop3: detected capacity change from 0 to 512 [ 952.957935][T13886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 953.852137][T13886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 954.064244][T13886] System zones: 1-12 [ 954.543742][T13886] EXT4-fs (loop3): 1 truncate cleaned up [ 954.552443][T13886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.950197][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.607153][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1059.614165][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5833/1:b..l [ 1059.622738][ C0] rcu: (detected by 0, t=10502 jiffies, g=53341, q=244 ncpus=2) [ 1059.630578][ C0] task:syz-executor state:R running task stack:21736 pid:5833 tgid:5833 ppid:5829 task_flags:0x400140 flags:0x00004002 [ 1059.645585][ C0] Call Trace: [ 1059.648904][ C0] [ 1059.651882][ C0] __schedule+0x16f5/0x4d00 [ 1059.656466][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 1059.661800][ C0] ? __pfx___schedule+0x10/0x10 [ 1059.666770][ C0] ? __page_table_check_zero+0x406/0x530 [ 1059.672437][ C0] ? __page_table_check_zero+0xba/0x530 [ 1059.678046][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1059.683386][ C0] preempt_schedule_irq+0xb5/0x150 [ 1059.688548][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1059.694324][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1059.700184][ C0] irqentry_exit+0x6f/0x90 [ 1059.704647][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1059.710677][ C0] RIP: 0010:rcu_is_watching+0x70/0xb0 [ 1059.716086][ C0] Code: c3 58 cf 9d 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 99 8f f5 10 74 11 83 e0 04 c1 e8 02 5b <41> 5e 41 5f c3 cc cc cc cc cc e8 21 86 8c ff eb e8 48 c7 c7 00 4e [ 1059.735752][ C0] RSP: 0018:ffffc9000449f458 EFLAGS: 00000202 [ 1059.741862][ C0] RAX: 0000000000000001 RBX: ffffffff9034a801 RCX: a3c10a08c3b31c00 [ 1059.749866][ C0] RDX: ffffc9000449f501 RSI: ffffffff8be292e0 RDI: ffffffff8be292a0 [ 1059.757875][ C0] RBP: dffffc0000000000 R08: ffffc9000449f6e0 R09: 0000000000000000 [ 1059.765882][ C0] R10: ffffc9000449f5f8 R11: fffff52000893ec1 R12: ffffc9000449f6f0 [ 1059.773900][ C0] R13: ffffffff81728a45 R14: ffffffff8dba6c60 R15: dffffc0000000000 [ 1059.781923][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1059.787110][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1059.792272][ C0] lock_release+0x4b/0x3e0 [ 1059.796737][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 1059.802083][ C0] ? deref_stack_reg+0x19f/0x230 [ 1059.807083][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1059.812259][ C0] unwind_next_frame+0x19a9/0x2390 [ 1059.817444][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1059.822622][ C0] ? stack_trace_save+0x9c/0xe0 [ 1059.827525][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1059.833728][ C0] arch_stack_walk+0x11c/0x150 [ 1059.838541][ C0] ? kasan_save_track+0x3e/0x80 [ 1059.843452][ C0] stack_trace_save+0x9c/0xe0 [ 1059.848173][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1059.853595][ C0] ? __lock_acquire+0xab9/0xd20 [ 1059.858491][ C0] kasan_save_track+0x3e/0x80 [ 1059.863285][ C0] kasan_save_free_info+0x46/0x50 [ 1059.868443][ C0] __kasan_slab_free+0x62/0x70 [ 1059.873238][ C0] ? xt_free_table_info+0xf2/0x160 [ 1059.878391][ C0] kfree+0x18e/0x440 [ 1059.882336][ C0] xt_free_table_info+0xf2/0x160 [ 1059.887318][ C0] __do_replace+0x7a2/0x980 [ 1059.891872][ C0] ? __pfx___do_replace+0x10/0x10 [ 1059.896938][ C0] ? _copy_from_user+0x94/0xb0 [ 1059.901754][ C0] do_ip6t_set_ctl+0xa16/0xce0 [ 1059.906564][ C0] ? rcu_is_watching+0x15/0xb0 [ 1059.911362][ C0] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1059.916745][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1059.921809][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1059.927823][ C0] ? aa_sk_perm+0x81e/0x950 [ 1059.932371][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 1059.937263][ C0] ? count_memcg_event_mm+0x21/0x260 [ 1059.942599][ C0] nf_setsockopt+0x26c/0x290 [ 1059.947223][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1059.953597][ C0] do_sock_setsockopt+0x25a/0x3e0 [ 1059.958676][ C0] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1059.964268][ C0] ? exc_page_fault+0x76/0xf0 [ 1059.969002][ C0] __x64_sys_setsockopt+0x18b/0x220 [ 1059.974330][ C0] do_syscall_64+0xfa/0x3b0 [ 1059.978873][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1059.984109][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.990209][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1059.994927][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.000955][ C0] RIP: 0033:0x7f909979085a [ 1060.005428][ C0] RSP: 002b:00007ffdcab263e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 1060.013895][ C0] RAX: ffffffffffffffda RBX: 00007ffdcab26470 RCX: 00007f909979085a [ 1060.021911][ C0] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1060.029917][ C0] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 1060.037922][ C0] R10: 00007f909997ece0 R11: 0000000000000202 R12: 00007f909997ec80 [ 1060.045930][ C0] R13: 00007ffdcab2640c R14: 0000000000000000 R15: 00007f9099980e40 [ 1060.054096][ C0] [ 1060.057155][ C0] rcu: rcu_preempt kthread starved for 10273 jiffies! g53341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1060.068392][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1060.078745][ C0] rcu: RCU grace-period kthread stack dump: [ 1060.084666][ C0] task:rcu_preempt state:R running task stack:27000 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1060.098304][ C0] Call Trace: [ 1060.101620][ C0] [ 1060.104604][ C0] __schedule+0x16f5/0x4d00 [ 1060.109180][ C0] ? schedule+0x165/0x360 [ 1060.113553][ C0] ? __pfx___schedule+0x10/0x10 [ 1060.118471][ C0] ? schedule+0x91/0x360 [ 1060.122752][ C0] schedule+0x165/0x360 [ 1060.126955][ C0] schedule_timeout+0x12b/0x270 [ 1060.132012][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1060.137414][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1060.143342][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1060.148680][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1060.154272][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1060.159189][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1060.165386][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1060.170712][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1060.175955][ C0] ? finish_swait+0xcd/0x1f0 [ 1060.180588][ C0] rcu_gp_kthread+0x99/0x390 [ 1060.185226][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1060.190558][ C0] ? __kthread_parkme+0x7b/0x200 [ 1060.195530][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1060.200607][ C0] kthread+0x711/0x8a0 [ 1060.204722][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1060.209965][ C0] ? __pfx_kthread+0x10/0x10 [ 1060.214594][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1060.219837][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1060.225200][ C0] ? __pfx_kthread+0x10/0x10 [ 1060.229829][ C0] ret_from_fork+0x3fc/0x770 [ 1060.234549][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1060.239708][ C0] ? __switch_to_asm+0x39/0x70 [ 1060.244500][ C0] ? __switch_to_asm+0x33/0x70 [ 1060.249296][ C0] ? __pfx_kthread+0x10/0x10 [ 1060.253933][ C0] ret_from_fork_asm+0x1a/0x30 [ 1060.258775][ C0] [ 1060.261815][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1060.268202][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc7-next-20250526-syzkaller #0 PREEMPT(full) [ 1060.279347][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1060.289448][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1060.295291][ C0] Code: c3 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 45 23 00 f3 0f 1e fa fb f4 98 d5 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1060.314931][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 1060.321040][ C0] RAX: 0af309ed43d7db00 RBX: ffffffff81974a08 RCX: 0af309ed43d7db00 [ 1060.329045][ C0] RDX: 0000000000000001 RSI: ffffffff8d98094e RDI: ffffffff8be29300 [ 1060.337052][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1060.345062][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa12ef0 [ 1060.353072][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1060.361078][ C0] FS: 0000000000000000(0000) GS:ffff888125c56000(0000) knlGS:0000000000000000 [ 1060.370045][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1060.376839][ C0] CR2: 00007f87e08180ec CR3: 00000000284c4000 CR4: 00000000003526f0 [ 1060.384844][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1060.392849][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1060.400855][ C0] Call Trace: [ 1060.404166][ C0] [ 1060.407124][ C0] default_idle+0x13/0x20 [ 1060.411496][ C0] default_idle_call+0x74/0xb0 [ 1060.416303][ C0] do_idle+0x1e8/0x510 [ 1060.420412][ C0] ? __pfx_do_idle+0x10/0x10 [ 1060.425052][ C0] cpu_startup_entry+0x44/0x60 [ 1060.429847][ C0] rest_init+0x2de/0x300 [ 1060.434135][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1060.439722][ C0] start_kernel+0x47d/0x500 [ 1060.444266][ C0] x86_64_start_reservations+0x24/0x30 [ 1060.449765][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1060.454928][ C0] common_startup_64+0x13e/0x147 [ 1060.459921][ C0]