last executing test programs: 14m42.538670114s ago: executing program 32 (id=115): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000f40)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcggXOIEQEhJSpHKGW8XN4lQJiUtPaQ8MmtlZe+3u2ptXO/TziWaf55ln5pnf/OZlXyJrAnxuXTiR9t10cuHEa7eq9sadhZWNOwvXevUkk0laSbtbpLieFB8k59Od8oVqZjNcMWw7v14+e/HDjzc+6rba2RqveukMD7A9yl6sN1Nmk4w15UPYNt4bDzbe5Fa12MxMlbDjvcTBfhtPUm7z46NbPYOUY32Nodc78PQouu+bfbrX/0xyKMlU7w1tvdvZevIR7um+7kXrjy8OAAAAODAO37ud3Mr0fscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5Pm+f9FM7V69dkUvef/T/Q9Y39in8MdbvfIpnqVu60nEQwAAAAAAAAAPF5fupffXSzL6V67LOr/83+5bhypX5/J27mZpazmZG5lMWtZy2rmk8z0DTRxa3FtbXW+t+anZVkOWfP0wDVPjxhw51HsNQAAAAAAAAD83zjXlD/LhUzvcywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBNkYx1i3o60qvPpNVOMpVkolpuPflHr/40u7vfAQAAAMATcPhe7uVWpnvtsqi/8x+tv/dP5e1cz1qWs5aVLOVS/VtA91t/a+POwsrGnYVr1fTZcb/9n636H6f3DKMeMd3fHgZv+Vi9RCeXs1zPOZk38lZWcimtes3KsV48g+N6r4qpONdVlqMl6FJTVnv+q6Y8GGbqjIxvZmSuia3KxrO7Z6L/6DzAlubT2vzl58h95Pzcrlsp/ts7Jod6c5Jnvr93zsfva2ceys5MnO47+47unonkK3/6/Y+urFy/eqVYP3FwTqP7MPmvratmZyYW+jLx4siZuHzz6czETq28sFm/kO/lhzmR2bye1SznJ1nMWpYym+/WtcXmfK5eZ3bP1Pltrdf3imKiOS5jO2L68uFuuVtML9frTmc5P8hbuZSlvFr/O535fCNnciZn+47wCyNc9a0BV/2fhwd//KtNpZPkl015MFR5fbYvr/333Jm6r39OK+Vkd73nHtm9cVP7i02lOhI/b8qDYTMTU9l8l+hF93wvA+MDM/Gb+rZyc+X61dUrizd2jFusD97eK9m++wfnRlKdL89VB6tubT87qr7nB/bN131HNvtaO/t+29ns2+tKnWg+w312pNN134sD+xbqvmN9fVuftz4ty7L7eQuAA+/Q1w5NdP7d+Xvn/c4vOlc6r019Z/Kbky9NZPxv499qz4290nqp+EPez0+z9zd0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTzffeffq4srK0uqOSlmWt4d0PZZK2sm2OX/9S98ySeqHAY0+YLX0+VZSz2mnqdxfYLcfbHfee9Ak/LM5Jk8k4Y+kMjX0/NlZ+aQsy4MR8yiVsnFQ4tmPyr7eloAn4NTatRunbr7z7teXry2+ufTm0vWzZ86cnTt75tWFU5eXV5bmuq/7HSXwOPR9AgcAAAAAAAAAAACeEqP9cU7xcH/bAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAQLpxI+26KzM+dnKvaG3cWVqqpV99a8pMkrSTFbFJ8kJxPd8pM33DFsO2sJxc//Hjjo26r3Uz18q3d1hvNejNlNslYUw4wNWhmeXvYeEU9zo3h442o2NzDKmHHe4mD/fa/AAAA///tbhq7") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[], 0x841, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) 14m38.098010151s ago: executing program 33 (id=204): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4d2, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fdatasync(r0) 14m2.957734338s ago: executing program 34 (id=315): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 13m48.48235948s ago: executing program 35 (id=370): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) mmap$binder(&(0x7f0000186000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x20000000000000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 13m36.29479745s ago: executing program 36 (id=414): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 9m45.692542027s ago: executing program 37 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 9m29.457738957s ago: executing program 38 (id=2040): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0xfffd, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001980)="d6976d1a0a08dfbf8270c1d5c7fff805b05a0e56", 0x14}], 0x1}}], 0x1, 0x24004044) 9m25.656957379s ago: executing program 39 (id=2056): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) close(r1) 8m54.248756136s ago: executing program 40 (id=2239): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) 7m47.113482067s ago: executing program 41 (id=2692): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48001) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 4m51.325220952s ago: executing program 42 (id=3773): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x40}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002000000ac14"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="020902090900000029bd7000fbdbdf25070019"], 0x48}}, 0x400e004) 4m10.803802437s ago: executing program 43 (id=3999): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x5}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x21}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x14, 0x209, 0x8, 0x1000, 0x1, 0x10, 0x10, 0x10, 0xb, 0x5, 0x100, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4m10.675528592s ago: executing program 6 (id=4003): modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x200, 0x1, 0x6, 0xfffffffffffffffb, 0x8000, 0x9, 0x2}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 4m9.315072027s ago: executing program 6 (id=4010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2}, 0xc) 4m8.577933156s ago: executing program 6 (id=4013): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x18, &(0x7f0000000040)={0x0, 0x30, 0x21, "1965ff1bba48f8f2e1c0f6baaa57a5480e595d8e77ecde48a3e6779c07552f5ff0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x40, 0xb, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000480)={0x40, 0x8, 0x1, 'f'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m5.355644058s ago: executing program 6 (id=4020): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0], 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 4m4.89005907s ago: executing program 6 (id=4024): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m3.854144256s ago: executing program 6 (id=4029): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 4m2.381627923s ago: executing program 44 (id=4029): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 3m43.932629355s ago: executing program 5 (id=4105): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd9f, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x7ffffff5, 0xfffffffe, 0x800, 0x800008, 0x1, 0x0, 0x100}) 3m42.929919289s ago: executing program 5 (id=4112): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x70fd, 0x8, 0x2, 0x20000115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r3, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r3, 0x0, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) 3m42.476096719s ago: executing program 5 (id=4114): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x4000010) setresuid(0xee00, 0xee00, 0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x6, 0x20, 0x9}, 0x2f) recvmsg$inet_nvme(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2) 3m42.232319302s ago: executing program 5 (id=4116): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file1\x00', 0x4) 3m41.845906274s ago: executing program 5 (id=4117): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x85, 0x19, 0x7f, 0x10, 0x5ac, 0x8281, 0xa6c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x28, 0x9, 0x20, 0x2, [{{0x9, 0x4, 0x8e, 0x9b, 0x0, 0x34, 0x41, 0x58, 0xc}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x2, 0x2, 0x6, 0x8, 0x3}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "3665d45a00250d3ccdbc4ff3deeb82ed"}]}, 0x9, [{0xbc, &(0x7f0000000240)=@string={0xbc, 0x3, "ab730d7dd41a9e669518a7c5e14e6aa9ee6c8c69ccdda0624d52dc1fc62bd9b46763fa902059685e0cab0a74f3c3a28766fc8ad1394ac78fbf9a6862d3f2697c2d097997dd588ebdff1ae56ddf7766b75692f4856a1a79487c0fd136070293cc79f82f341e752ba2b349a6348fd21d2b26b3d1a3766e7d93741380709dca08380d8e5ff504181a980888acb736cc6c758b7db7c8a95884a96c6e750998e52b54e7d11e9745cd967bc219e733f42e62f30cc4899b9dcd87649bab"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 3m40.897540969s ago: executing program 5 (id=4122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 3m39.831851704s ago: executing program 45 (id=4122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 3m29.286703884s ago: executing program 4 (id=4176): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 3m26.968342236s ago: executing program 4 (id=4188): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006140)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='4', 0x1}], 0x1}}], 0x1, 0x2400c0c5) 3m26.329878466s ago: executing program 4 (id=4193): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) 3m25.704025503s ago: executing program 4 (id=4198): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000001540)=ANY=[@ANYBLOB='iocharset=iso8859-6,partition=00000000000000000006,gid=forget,session=00000000000000004071,iocharset=iso8859-8,anchor=00000000000000000000,uid=forget,\x00'], 0xfe, 0xc2d, &(0x7f0000003140)="$eJzs3UFsHNd9B+D/Gy5FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI63pXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJOxxcy+lZY0ZcmmKFH299nUb3fmvd333ixnJIJvXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/34vmTz6QH3QoA4H66OPX1k6dc/wHgU+WSf/8DAAAAAAAAAAAAAMBBl6KIRyPF0sWtNFM97xq+0F64fmN6fGL3aodTVXOgKl9+DT9z6vSZrzw7draXH17/Xns8Xp66dL7+wuK1peXWykprrj690J5dnGvd9Svstf5Oo9UA1K+9cn3uypWV+qmnT2/bfWPkvaFHjo2cG3vyxBO9stPjExNTfWVqgx/73T/gdjM8DkURJyLFU9//aWpGRBF7H4s7fHb22+GqE6NVJ6bHJ6qOzLebC6vlzsneQBQR9b5Kjd4Y3YdjsSeNiLWy+WWDR8vuTS01l5uX51v1yebyanu1vbgwmbqtLftTjyLOpoj1iNgc+uDLDUYRtUjx3aNb6XJEDPTG4cvVxODbt6PYxz7ehbKd9cGI9eIhOGYH2FAU8VKk+NnbRcyWY5a/4ksRL5X5w4g3y3w+IpUfjDMR7+7yOeLhVIsi/rw8/ue20lx1PuidVy58o/61hSuLfWV755WH/vpwPx3wc9NwFNGszvhb6eP/ZQcAAAAAAAAAAAAAAACAe+1wFPF4pHjx3/+omlcc1bz0o+fGfn/kF/vnjD92h9cpyz4dEWvF3c3JPZSnEE+myZQe8FziT7PhKOKP8/y/Nx50YwAAAAAAAAAAAAAAAAAAAD7lfhIpnnvneFqP/jXF2wtX65eal+e7q8L21v7trZne6XQ69dTNRs6ZnGs513Nu5NzMGUWun7ORcybnWs71nBs5N3PGQK6fs5FzJudazvWcGzk3c0Yt18/ZyDmTcy3nes6NnJs544Cs3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ElSRBHvR4rvfGsrRYqIRsRMdHNjqFcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiQhlIRP4gU9T9o3NxWi4hU/d91vPzjTDQOlfnZaIyV+Xw0zudsVllrvPEA2s/eDKYifhwphobfunnA8/Ef7D67+TGIN79969mv1Lo50Ns58t7QI8eOnhub+LXHbvc47daA0Qvthes36tPjExNTfZtr+d0/27dtJL9vcW+6TkSsvPraK835+dbyp+ZBEQeiGQ/qQa37oBYHpD3360E+X8Uuu4qD8F3QOCgD1XvwgE9M3Bfl9f/dSPHb7/xH74Lfu/7/QvfZzSt8/PxPbl3/n9v5Qvt0/X+0b9tz+W8jg7WI4dVrS4PHIoZXXn3tRPta82rramvhzMmTXx0b++rpk4OHIoavtOdbfY/2PFQAAAAAAAAAAAAAAAAA91cq4ncjRfPHW6keETeq+Voj58aePPHEQAxU8622zdt6eerS+foLi9eWllsrK625+vRCe3ZxrnW3bzdcTfeaHp/Yl87c0eF9bv/h4RcWl15dbl/9w9Vd9x8ZPn95ZXW5Obv77jgcRUSjf8to1eDp8Ymq0fPt5kJVdXLXyXQf3WAq4j8jxeyZ+qHetjz/b+cM/23z/9d2vtA+zf/7TN+28j1TKuLnkeK3/uKx+GLVziPxgTHL5f4mUoye/UIuF4fKcr02dO8r0J0ZWJb930jxD+9vL9ubD/norbLP3O24PizK4380Uvzgz74Xv563bb//w+7H/8jOF9qn4/+5vm1Htt2vYM9dJx//E5Hi+Uffit/I2z7s/h9FdDqd1yOO58I378+xT8f/833bRqL7vr9577oPAAAAAAAAAADw0BpMRfxtpHhiopaezdvu5vf/5na+0D79/tcv922b6//9v94vZ+7D8id7GlAAAAAAOEAGUxE/iRRXV9+6OYd6+/zvvvmfv3Nr7fXxtGNv9XO+X6ruG3Avf/7XbyS/78zeuw0AAAAAAAAAAAAAAAAAAAAHSkpFPJvXU5+5w3rqG5Hixf9+KpdLx8pyvXXgR6o/hy8uLpw4Pz+/ONtcbV6eb9WnlpqzrbLu5yLF1l9/IdctqvXVv5jrdtd4H+701mJfjhQTf9cr212Lvbc2eXc98O5a7GXZz0SK//r77WV761h//lbZU2XZv4oU3/yn3cseu1X2dFn2e5HiR9+s98oeKcv27o/avSfpcC3mW0/PLs5/4FaoAAAAAAAAAAAAAAAAAAAA8FENpiL+NFL8z7X1WKum/b9xc1fOWm/Dm9/uW+9/hxvVOv8j1fr/t3v8cdb/H7knvQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIdLiiJeixRLF7fSxlD5vGv4Qnvh+o3p8Yndqx1OVc2Bqnz5NfzMqdNnvvLs2Nlefnj9e+3xeHnq0vn6C4vXlpZbKyutufr0Qnt2ca5116+w1/q3hq5rtBqA+rVXrs9dubJSP/X06W27b4y8N/TIsZFzY0+eeKJXdnp8YmKqr0xt8CO8+0dq3C2Hooi/jBRPff+n6Z+HIorY+1jc4bOz3w5XnRitOjE9PlF1ZL7dXFgtd072BqKIqPdVavTG6D4ciz1pRKyVzS8bPFp2b2qpudy8PN+qTzaXV9ur7cWFydRtbdmfehRxNkWsR8TmUP8LHcpZxCuR4rtHt9K/DEUM9Mbhyxenvn7y1O3bUexrL+/g9aqd9cGI9eIhOGYH2FAU8Y+R4mdvH49/HYqoRfcrvhTxUpk/jHizzOcjUvnBOBPx7tCDbjX3Si2K+L/y+J/bSm8PRVTfMtV55cI36l9buLLYV7Z3Xtl5fehExEN1fbifDvi5aTiK+FF1xt9K/+b7GgAAAAAAAAAAAAAAAOAAKeJXO53O6+8cT9X84JtzitsLV+uXmpfnu9P6enP/enOmO51Op5662cg5k3Mt53rOjZybOaPI9XM2cs7kXMu5nnMj52bOGMj1czZyzuRcy7mecyPnZs6o5fo5Gzlncq7lXM+5kXMzZxyQuXsAAAAAAAAAAAAAAAAAAMAnS1H9l+I739pKnaHu+tIz0c0N64F+4v1/AAAA//9TMfu7") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80800, 0x0) 3m24.686698198s ago: executing program 4 (id=4205): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 3m24.080275009s ago: executing program 4 (id=4209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x78, 0xda17, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x4, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000006}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "66d2dad153c9d81291e53a1ee96350e0"}, @timestamp={0x8, 0xa, 0xc4, 0x3ff}, @fastopen={0x22, 0xf, "ec876a521cf0162791f002ab32"}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x6, "aa8db7f4"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) 3m22.459888254s ago: executing program 46 (id=4209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x78, 0xda17, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x4, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000006}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "66d2dad153c9d81291e53a1ee96350e0"}, @timestamp={0x8, 0xa, 0xc4, 0x3ff}, @fastopen={0x22, 0xf, "ec876a521cf0162791f002ab32"}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x6, "aa8db7f4"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) 3m8.520978927s ago: executing program 2 (id=4284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8002f) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0x7000, 0x0, 0xc, 0x2, 0x0, 0x54, 0xc2, 0x5, 0x8, 0x81, 0x1, 0x8}, {0x0, 0x5000, 0xf, 0x1, 0x2, 0x44, 0x2, 0xba, 0x2, 0x3c, 0x16, 0x2}, {0x1000, 0xb000, 0xf, 0xba, 0x4, 0x5, 0x3, 0x1, 0x42, 0x8, 0x2, 0x4}, {0x3000, 0x80a0000, 0xb, 0x8, 0x2, 0xf, 0x6, 0x95, 0x40, 0x9, 0xb2, 0x1}, {0x58000, 0xdddd1000, 0xd, 0x1, 0x6, 0x7f, 0x9, 0x9, 0xf3, 0x5, 0x6, 0x5}, {0x80a0000, 0xe000, 0x8, 0x1, 0x8, 0x88, 0x5, 0x2, 0x72, 0xbf, 0x5, 0x4}, {0x60000, 0x2, 0x6, 0x2, 0x9, 0x6, 0x6, 0x8, 0x0, 0x8, 0x3, 0x3}, {0xffd84000, 0xeefe8000, 0xc, 0x7, 0x6, 0x2, 0x5, 0x0, 0x4, 0xfc, 0x4e, 0x17}, {0x54000, 0x4}, {0xd000, 0x6}, 0x20000002, 0x0, 0x0, 0x300, 0x0, 0x9500, 0x2000, [0xb, 0x8, 0x2, 0x34]}) 3m7.651888621s ago: executing program 2 (id=4287): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xc, {0x8, 0x0, 0x0, {0x5, 0x0, 0x5, 0x80000001, 0x0, 0x1, 0x9e9, 0x9, 0xb877, 0x8000, 0x7893b06e, 0xffffffffffffffff, 0xee01, 0x3d, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) 3m6.27659639s ago: executing program 2 (id=4292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r3, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) 3m5.89925293s ago: executing program 2 (id=4296): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55d, &(0x7f0000001180)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0xa) 3m5.393667688s ago: executing program 2 (id=4299): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000000840)={{@hyper}, {@host}, 0x400, "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"}, 0x418}) close_range(r0, 0xffffffffffffffff, 0x0) 3m4.618846934s ago: executing program 2 (id=4304): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 3m3.213335725s ago: executing program 47 (id=4304): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1m29.51258495s ago: executing program 1 (id=4900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1m23.924362552s ago: executing program 1 (id=4919): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) 1m23.459255648s ago: executing program 1 (id=4924): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) sendto$packet(r0, &(0x7f0000000240)="c8", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r1, 0x1, 0xe0}, 0x14) 1m23.015541781s ago: executing program 1 (id=4927): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000000340)=ANY=[@ANYBLOB="63726561746f723d0448dc1a2c626172726965722c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00102e653d", @ANYRESHEX=0x0, @ANYBLOB=',decompose,part=0x0000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c747970653d0da5b3292c6e6f626172726965722c6e6f626172726965722c00"], 0x20, 0x6fe, &(0x7f0000000c00)="$eJzs3U9oXHkdAPDvm5lMMl3IztZ2t4rQsMWiW22TDIsVBKuI5LBowcteY5tuQydpSbKSFrGz6qo3PUkPe1iReNiTeBBWPIj1JgiC994LHrwVD468N+9NZvJ3Js0ksfv5wJv3e+/9/nx/33nz5k9aXgCfWHNvx1grkpi79NZ6uv1ko9F8stFYKsoRMR4RpYhKZxXJckTyOOJadJb4dLoz7y7ZbZw3n378wcVHHzU6W5V8yeqX9mq3qb3HCK18iamIKOfrIVV26+/GDv09HKrrpBt3mrALReLguLW3aQ3TfIDXLXDSPYwoj+2wvx5xKiIm8s8BkV8dSkcc3qEb6ioHAAAAJ1N5vwovP4tnsR6TRxMOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvBiSzj0Dk3wpFeWpSPL7/38nr5apVo833H18cZ/j7986okAAAAAAAAAA4PCNbRbPP4tnsR6TxXY7yf7m/3q2cSZ7fCnejdVYiJW4HOsxH2uxFisxEzE22dNndX1+bW1lZnvLX0Xast1uP8xbzkZEfVvL2RHPGQAAAAAAAABebD+KuZg87iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBXElHurLLlTFGuR6kSERMRUU3rtSL+VJRPgvoB2/35kOMAAACAE6iWryeT/3YK7ST7zv9q9r1/It6N5ViLxViLZizEzey3gM63/tI/Wo3mk43GUrps7/jr/8p6aw8YR9ZjRJTjvV1Gns5qnO22mItvxXfjUkzF9ViJxfh+zMdaLMRU1NJJxHwkUa91fr2oF3H2x1vOu7rWF8r1rbGd37J9LoukFrdiMYvtctyoFr2VshpJnOsZ7Q/ViC0Zei/NTvK13IA5utnzfP0y/10m1355wD5Go57NfKybkek093k2Xtk594XOeXLgkWai1P0N6szmKOnm1pGKnH9vmJyfytdprn/an/PDNuRPaVszMRul/OyLeLU/5/c+9+h0f+Mv/PMv12+Xlu/cvrV6aYRTOiSVHfeOFYWtmWj0ZOK1vc++PBPNNBOtwTMxtnXHxMBzGalqno3OhW2wq+U3s9J8vN5zCt5dTh+/HNMxE1djOr4Ss9HoO8PO9uW10ljqz0n2Wittv77V9gj+wud7Kv1sn8qjsPt4aV5e6clr75Wunh3L91z7RUz3ZOn03mffQd4FKp/JC+kYP+6+45wEfZnIr81FdMUb1C6Z+HX2OWG1uXxn5fb8vQHHu5iv05ft+/3X5t8892SeS3q+nO5euLKc1IrzJT32qW60/fmq5n9x6bQrbTt2tnusHpOxGN+Ou3EzFnZ4pVbzz3Dbe+oce23HY43s2LmeY32fcuJuNLNPIVtMHU1WARjYqTdOVWtPa3+vfVj7Se127a2Jb4xfHf9sNcb+Wvlj+Xel35a+mrwRH8YPY/K4IwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBfB6v0Hd+abzYWVERaqBxwrSvvW2XhpsA6jHrH3WEleqI46G0MXfp7fr/Dwev73xJ7ZqMWIpvP7vWdRfe4hkkhaI35S0mfiUDosbpyW7WmX9231tysRnT2VaLfbD7uHtj6VlVid2O0ZHN+sHPU7883/tPvq1KLnJQO84K6sLd27snr/wZcWl+bfWXhnYXn2anF73FuLzYXpK9njMQcJjMTq/Qfl444BAAAAAAAAAAAAGE7+r//XVkppIRn+f+lU9qlTXVndeeTzRz1VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/U3Nsx1ookZqYvT6fbTzYazXQpyps1KxFRiojkBxHJ44hr0Vmi3tNdsts4bz79+IOLjz5qbPZVKeqX9mo3mFa+xFRElPP1/sZ36GZ7fzd6+msdKLykO8M0YReKxMFx+18AAAD//yBC8a4=") mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 1m22.561364043s ago: executing program 1 (id=4930): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000800000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x4, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x2}}, 0xb4}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc0}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 1m21.009087579s ago: executing program 1 (id=4947): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) 1m19.442111726s ago: executing program 48 (id=4947): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) 5.860762163s ago: executing program 8 (id=5344): r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x2a, 0x0, 0x2a8fdba6}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 5.19020857s ago: executing program 9 (id=5347): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0xddd3, 0x4, 0x0, 0x0) shutdown(r0, 0x1) 5.125375142s ago: executing program 8 (id=5349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x18}, {0x4}}, @TCA_BPF_ACT={0x4}]}}]}, 0x48}}, 0x0) 4.240643769s ago: executing program 8 (id=5352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x1070bd24, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0x4}, {0x1, 0xffff}}}, 0x24}}, 0x4) 4.124064072s ago: executing program 3 (id=5353): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x9ffb, @empty}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 4.07491895s ago: executing program 9 (id=5354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 3.838251289s ago: executing program 7 (id=5355): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, 0x2, 0xb, 0x5, 0x70ad28, 0x25dfdbfe, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x40000) 3.794595018s ago: executing program 8 (id=5356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x24010045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) 3.689852794s ago: executing program 3 (id=5357): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.63334393s ago: executing program 9 (id=5358): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3.132757479s ago: executing program 9 (id=5359): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.129721793s ago: executing program 0 (id=5371): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000c00"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000008001"], 0x80}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000d00000000008000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="0200"], 0x48}}, 0x10) 3.128326542s ago: executing program 7 (id=5360): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0xfffffffffffffff5, 0x401, {0x101, 0x1, 0x0, {0xffffffffffffffff, 0x6, 0x800008, 0x0, 0x7, 0x200000000001, 0x9d12, 0x0, 0x7fff, 0xc000, 0x0, 0x0, 0xee00, 0xb099, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x40, 0xffffffff, 0x0, {0x5, 0x7, 0x0, 0x6, 0x0, 0x2006, 0x0, 0x290, 0x0, 0x2000, 0x5, 0x0, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 3.12699438s ago: executing program 3 (id=5361): unshare(0x4020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) 3.125689916s ago: executing program 8 (id=5363): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6c733d6575632d6a702c6e6f626172726965722c63726561746f723dbd3c66f52c756d61736b3d30303137373737372c666f7263652c6e6f626172726965722c00"/81, @ANYBLOB="7e470ec52ef30c5ac72e1072e77aee1fff5388f306186de2b71167f738c95488f2dfab0487b84972924808fdcdaea358445ecd3928291cb81d39aed37e6e3254b0b86c0ae79d733234ae08d4b97ca8bcb50071d6dd338d153e4bb342d1be670f992a30db0a23e13aff5ce6794f62eb47e59796c3acc9fd1842606adb0c4e8646c1ac44a2a0f98b7a2d", @ANYRES64, @ANYRES16], 0x3, 0x6b2, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x31) chdir(&(0x7f0000000080)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 2.809301598s ago: executing program 0 (id=5364): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000800000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x4, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x2}}, 0xb4}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc0}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 2.805116668s ago: executing program 7 (id=5365): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 2.710343847s ago: executing program 3 (id=5366): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)={[{@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_mixed}, {@fat=@sys_immutable}, {@shortname_winnt}, {}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x2, 0x217, &(0x7f00000004c0)="$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") fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="fa00"], 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 2.641042079s ago: executing program 8 (id=5367): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x24, &(0x7f00000005c0)={0x20, 0xa, 0x2, "e2af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.24800991s ago: executing program 7 (id=5369): r0 = io_uring_setup(0xfc6, &(0x7f0000000100)={0x0, 0x6c05, 0x0, 0x2, 0x20000004}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f00)=""/4093, 0xffd) close_range(r0, 0xffffffffffffffff, 0x0) 1.938557098s ago: executing program 0 (id=5370): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x801) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/74, 0x4a}], 0x1}, 0x0) 1.938424502s ago: executing program 3 (id=5372): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.868530273s ago: executing program 7 (id=5373): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0xf, &(0x7f0000000040)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) 1.379803133s ago: executing program 0 (id=5374): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1c}) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x80800) 374.95461ms ago: executing program 3 (id=5375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 374.802709ms ago: executing program 9 (id=5376): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0xdd12}, {0x0}], 0x2}, 0x20040011) 370.350102ms ago: executing program 0 (id=5385): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34424caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000", @ANYRES16, @ANYBLOB="572a282cefbcf3effe3d34874f4281452b3a043d675715f1cd745175d13207701f0fdbc2f6a2d96e745ab7ef8f117122aa9f4a3caf3f4610b1ad8fcb39a2ee0d5219", @ANYRES32], 0x1, 0x190, &(0x7f0000000e40)="$eJzs2zuPElEYxvHnDAMi3lC8JMbCytjIACaoHX4UAiMhDkrABmKifg8L7fxwEmNnJRvmtsssxQbCHHb5/xrOw8vJvBMy8IaLABytjp7KyKi0Ck/K1S81Y7slADlZxrf/lwCOT+Gf7Q4A2LF4K40l/f77uadCKRkLHiWLVb2T1Mvn54fFN+mxG9dNWdez88VP6Vmy31Q27q+k9Rsb689VjerOTd3Sbd1RVXd1T7W43o/2S+bhbsMQAABHwqiezWt3OHo3DPxGmothbqriRrkU5lZaj/LLNF8Lc733Mejv8SwAbMNR/dfZnL3+C5nr342vfwCX33Q2f98NAn+S0yL6fMCxdPSdFvp6EG1EC6Poe9ottxd1EGcxmc7+XOjBP6x1WMz9oK6sPymrhcUXJQC58D6Nxt50Nn8xHHUH/sD/0G61228ar181vXDw99bHfwBXyOmbvu1OAAAAAAAAAAAAAADAtu7rge0WAAAAAORkj39Qk76LXxYDAAAAAAAAAAAAAAAAALAHJwEAAP//zigUWQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008) write$binfmt_aout(r0, &(0x7f00000192c0)=ANY=[], 0x2b4) 369.028312ms ago: executing program 7 (id=5377): io_setup(0x3, &(0x7f0000000100)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000340)=[{}, {}], 0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000240)=[{}, {}], 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x101, r1, 0x0, 0x0, 0x4}]) io_submit(r0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfff, r1, 0x0, 0x0, 0x5}]) 140.552452ms ago: executing program 9 (id=5378): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffa, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)='O', 0xfe6a, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 0s ago: executing program 0 (id=5379): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) setuid(0xee01) creat(&(0x7f00000008c0)='./file0\x00', 0xba) kernel console output (not intermixed with test programs): 9][T16443] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4030'. [ 878.915372][T16443] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4030'. [ 879.521335][ T5862] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 879.716313][ T5862] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 879.729557][ T5862] usb 5-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 879.744244][ T5862] usb 5-1: Product: syz [ 879.748738][ T5862] usb 5-1: Manufacturer: syz [ 879.753482][ T5862] usb 5-1: SerialNumber: syz [ 879.770620][ T5862] usb 5-1: config 0 descriptor?? [ 880.803831][ T5862] usb 5-1: non-Atmel transceiver xxxx6103 [ 881.003375][ T5862] usb 5-1: Firmware version (0.0) predates our first public release. [ 881.011839][ T5862] usb 5-1: Please update to version 0.2 or newer [ 881.027124][T16471] netlink: 'syz.8.4118': attribute type 10 has an invalid length. [ 881.038707][ T5862] usb 5-1: atusb_probe: initialization failed, error = -19 [ 881.064714][ T5862] usb 5-1: USB disconnect, device number 21 [ 881.096494][T16471] team0: Port device netdevsim3 added [ 881.459830][T11168] syz_tun (unregistering): left allmulticast mode [ 883.430828][T14571] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 883.440644][T14571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 883.456261][T14571] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 883.473749][T14571] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 883.485115][T14571] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 883.967915][ T5862] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 884.117171][T16494] chnl_net:caif_netlink_parms(): no params data found [ 884.145505][ T5863] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 884.177974][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 884.265089][ T5862] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 884.274581][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.282833][ T5862] usb 5-1: Product: syz [ 884.287176][ T5862] usb 5-1: Manufacturer: syz [ 884.296021][ T5862] usb 5-1: SerialNumber: syz [ 884.307349][ T5862] usb 5-1: config 0 descriptor?? [ 884.332282][ T5862] gspca_main: se401-2.14.0 probing 047d:5003 [ 884.398803][ T5863] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 884.408342][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.416718][ T5863] usb 10-1: Product: syz [ 884.426301][ T5863] usb 10-1: Manufacturer: syz [ 884.435059][ T5863] usb 10-1: SerialNumber: syz [ 884.771145][ T5862] gspca_se401: Frame size: 0x0 1/16th janggu [ 884.979185][ T5862] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input76 [ 884.997602][ T5863] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 885.014759][ T5863] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 885.040679][ T5862] usb 5-1: USB disconnect, device number 22 [ 885.098631][T16494] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.106259][T16494] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.114174][T16494] bridge_slave_0: entered allmulticast mode [ 885.123675][T16494] bridge_slave_0: entered promiscuous mode [ 885.158512][T16494] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.166231][T16494] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.174261][T16494] bridge_slave_1: entered allmulticast mode [ 885.183628][T16494] bridge_slave_1: entered promiscuous mode [ 885.320959][T16494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.344782][T16494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.455283][T16494] team0: Port device team_slave_0 added [ 885.476748][T16494] team0: Port device team_slave_1 added [ 885.569291][T14571] Bluetooth: hci4: command tx timeout [ 885.587846][T16494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.595098][T16494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.621963][T16494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.638450][T16494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.645524][T16494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.673116][T16494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.721066][ T5863] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 885.736021][ T5863] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 885.746207][ T5863] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 885.817104][ T5863] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 885.846112][ T5863] usb 10-1: USB disconnect, device number 19 [ 885.978321][T16494] hsr_slave_0: entered promiscuous mode [ 885.988152][T16494] hsr_slave_1: entered promiscuous mode [ 885.996537][T16494] debugfs: 'hsr0' already exists in 'hsr' [ 886.004979][T16494] Cannot create hsr debugfs directory [ 887.044446][T16494] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 887.076378][T16494] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 887.131455][T16494] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 887.162121][T16494] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 887.654960][T14571] Bluetooth: hci4: command tx timeout [ 887.854554][T16494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.986880][T16494] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.039260][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.046777][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.112167][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.119690][T13157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.324710][T16494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.728092][T14571] Bluetooth: hci4: command tx timeout [ 889.739201][T16494] veth0_vlan: entered promiscuous mode [ 889.790449][T16494] veth1_vlan: entered promiscuous mode [ 889.941414][ T30] audit: type=1800 audit(2000000758.542:184): pid=16566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4155" name="file1" dev="overlay" ino=1537 res=0 errno=0 [ 890.037071][T16494] veth0_macvtap: entered promiscuous mode [ 890.121311][T16494] veth1_macvtap: entered promiscuous mode [ 890.310841][T16494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.379862][T16494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.470538][T13157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.481083][T13157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.537012][T13157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.552249][T13157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.597505][T16589] tipc: Started in network mode [ 891.602663][T16589] tipc: Node identity ac1414aa, cluster identity 4711 [ 891.610389][T16589] tipc: New replicast peer: 100.1.1.1 [ 891.616831][T16589] tipc: Enabled bearer , priority 10 [ 891.810767][T14571] Bluetooth: hci4: command tx timeout [ 891.912791][T16596] netlink: 'syz.8.4166': attribute type 83 has an invalid length. [ 892.728427][ T795] tipc: Node number set to 2886997162 [ 893.801367][ T5863] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 894.072826][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 894.084828][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 894.096329][ T5863] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 894.166839][ T5863] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 894.178871][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.187048][ T5863] usb 5-1: Product: syz [ 894.191502][ T5863] usb 5-1: Manufacturer: syz [ 894.196250][ T5863] usb 5-1: SerialNumber: syz [ 894.224605][ T5863] usb 5-1: config 0 descriptor?? [ 894.232227][T16624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 894.495527][T16624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 894.626990][ T4124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.635274][ T4124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.715161][T16643] netlink: 'syz.8.4181': attribute type 12 has an invalid length. [ 894.723241][T16643] netlink: 'syz.8.4181': attribute type 29 has an invalid length. [ 894.733748][T16643] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4181'. [ 894.743090][T16643] netlink: 'syz.8.4181': attribute type 2 has an invalid length. [ 894.751038][T16643] netlink: 'syz.8.4181': attribute type 2 has an invalid length. [ 894.801905][ T4124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.810096][ T4124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.007079][ T795] usb 5-1: USB disconnect, device number 23 [ 895.112904][T16648] loop9: detected capacity change from 0 to 128 [ 895.216296][T16648] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 895.232706][T16648] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 895.428462][T16655] loop2: detected capacity change from 0 to 512 [ 895.456652][T16655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 895.501139][T16655] EXT4-fs (loop2): 1 truncate cleaned up [ 895.509078][T16655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.556397][T16179] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 895.952182][T16494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.041230][T16683] bridge0: port 3(erspan0) entered blocking state [ 897.050888][T16683] bridge0: port 3(erspan0) entered disabled state [ 897.058216][T16683] erspan0: entered allmulticast mode [ 897.066731][T16683] erspan0: entered promiscuous mode [ 897.073986][T16683] bridge0: port 3(erspan0) entered blocking state [ 897.080895][T16683] bridge0: port 3(erspan0) entered forwarding state [ 897.171970][T16683] erspan0: left allmulticast mode [ 897.180036][T16683] erspan0: left promiscuous mode [ 897.185943][T16683] bridge0: port 3(erspan0) entered disabled state [ 897.246240][T16685] loop4: detected capacity change from 0 to 2048 [ 897.289326][T16685] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2361, location=2361 [ 897.353173][T16685] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 897.377948][T16685] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 897.407927][T16685] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 2016: 0x5c != 0x1b [ 897.480794][T16685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 897.660640][T16685] loop4: detected capacity change from 2048 to 0 [ 897.664521][ C1] I/O error, dev loop4, sector 1408 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 898.120136][T16699] loop8: detected capacity change from 0 to 256 [ 898.209388][T15001] buffer_io_error: 916 callbacks suppressed [ 898.209465][T15001] Buffer I/O error on dev loop4, logical block 128, lost sync page write [ 898.530921][ T134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.567731][T13157] kworker/u8:3: attempt to access beyond end of device [ 898.567731][T13157] loop8: rw=1, sector=280, nr_sectors = 32 limit=256 [ 898.607591][T13157] kworker/u8:3: attempt to access beyond end of device [ 898.607591][T13157] loop8: rw=1, sector=344, nr_sectors = 32 limit=256 [ 898.705876][ T134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.760671][T16710] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4208'. [ 898.835190][ T134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.014835][T16713] loop8: detected capacity change from 0 to 256 [ 899.154631][ T134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.528002][ T134] team0: left allmulticast mode [ 899.533049][ T134] team_slave_0: left allmulticast mode [ 899.538887][ T134] team_slave_1: left allmulticast mode [ 899.544497][ T134] bridge1: left allmulticast mode [ 899.549829][ T134] team0: left promiscuous mode [ 899.554739][ T134] team_slave_0: left promiscuous mode [ 899.561151][ T134] team_slave_1: left promiscuous mode [ 899.567647][ T134] bridge1: left promiscuous mode [ 899.574033][ T134] bridge0: port 3(team0) entered disabled state [ 899.600329][ T134] bridge_slave_1: left allmulticast mode [ 899.606150][ T134] bridge_slave_1: left promiscuous mode [ 899.612743][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.626033][ T134] bridge_slave_0: left allmulticast mode [ 899.632159][ T134] bridge_slave_0: left promiscuous mode [ 899.641761][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.064933][ T134] team0: Port device bridge1 removed [ 900.134185][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.218685][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.261760][ T134] bond0 (unregistering): Released all slaves [ 900.306505][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.313345][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.580240][ T134] tipc: Disabling bearer [ 900.585951][ T134] tipc: Left network mode [ 901.126754][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 901.142072][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 901.151795][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 901.186938][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 901.196074][ T134] hsr_slave_0: left promiscuous mode [ 901.207079][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 901.255636][ T134] hsr_slave_1: left promiscuous mode [ 901.263496][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.271135][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.320806][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.333240][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.366548][ T134] veth1_macvtap: left promiscuous mode [ 901.374988][ T134] veth0_macvtap: left promiscuous mode [ 901.380866][ T134] veth1_vlan: left promiscuous mode [ 901.386347][ T134] veth0_vlan: left promiscuous mode [ 902.032220][ T134] team0 (unregistering): Port device team_slave_1 removed [ 902.111833][ T134] team0 (unregistering): Port device team_slave_0 removed [ 903.210627][T16729] chnl_net:caif_netlink_parms(): no params data found [ 903.247829][T14571] Bluetooth: hci1: command tx timeout [ 903.351657][T16755] loop9: detected capacity change from 0 to 1024 [ 903.461507][ T30] audit: type=1800 audit(2000000773.070:185): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4226" name="bus" dev="loop9" ino=2 res=0 errno=0 [ 903.923053][T16766] netlink: 'syz.9.4231': attribute type 4 has an invalid length. [ 903.996623][T16766] netlink: 'syz.9.4231': attribute type 4 has an invalid length. [ 904.426068][T16729] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.433628][T16729] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.441393][T16729] bridge_slave_0: entered allmulticast mode [ 904.452731][T16729] bridge_slave_0: entered promiscuous mode [ 904.520401][T16729] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.528011][T16729] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.535766][T16729] bridge_slave_1: entered allmulticast mode [ 904.547517][T16729] bridge_slave_1: entered promiscuous mode [ 904.739980][T16729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.793447][T16729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.935926][T16729] team0: Port device team_slave_0 added [ 904.958682][T16729] team0: Port device team_slave_1 added [ 905.289898][T16729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.297008][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.329914][T16729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.363351][T16729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.368033][T14571] Bluetooth: hci1: command tx timeout [ 905.370554][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.405275][T16729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.928605][T16729] hsr_slave_0: entered promiscuous mode [ 905.944681][T16729] hsr_slave_1: entered promiscuous mode [ 905.955714][T16729] debugfs: 'hsr0' already exists in 'hsr' [ 905.961735][T16729] Cannot create hsr debugfs directory [ 906.483257][T16802] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4244'. [ 906.740038][T16729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.871745][T16807] overlayfs: failed to resolve './file0': -2 [ 906.896184][T16729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.002252][T16729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.115805][T16729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.427067][T14571] Bluetooth: hci1: command tx timeout [ 907.485664][T16729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 907.525829][T16729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 907.582684][T16729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 907.628566][T16729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 908.018848][T16828] loop9: detected capacity change from 0 to 128 [ 908.132400][T16828] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 908.150868][T16828] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.269429][T16729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.362215][T16729] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.404954][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.412528][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.455931][T16834] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4256'. [ 908.500110][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.507662][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.591562][T16179] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 908.981947][T16840] netlink: 'syz.2.4257': attribute type 12 has an invalid length. [ 908.990206][T16840] netlink: 'syz.2.4257': attribute type 29 has an invalid length. [ 908.998490][T16840] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4257'. [ 909.340927][T16845] loop8: detected capacity change from 0 to 1024 [ 909.440481][T16845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.502314][T14571] Bluetooth: hci1: command tx timeout [ 909.606102][T16117] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.644234][T16729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.855767][T16853] loop2: detected capacity change from 0 to 2048 [ 909.912304][T16729] veth0_vlan: entered promiscuous mode [ 909.950026][T16853] loop2: p1 p3 < > p4 < p5 > [ 909.954995][T16853] loop2: partition table partially beyond EOD, truncated [ 909.960796][T16729] veth1_vlan: entered promiscuous mode [ 909.962659][T16853] loop2: p1 size 33024 extends beyond EOD, truncated [ 909.982552][T16853] loop2: p3 start 4284289 is beyond EOD, truncated [ 909.995275][T16853] loop2: p5 size 33024 extends beyond EOD, truncated [ 910.172553][T16729] veth0_macvtap: entered promiscuous mode [ 910.238726][T16729] veth1_macvtap: entered promiscuous mode [ 910.421780][T16729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.474807][T16729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.503008][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4266'. [ 910.573572][T13947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.584452][T13947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.593628][T13947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.609047][ T795] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 910.624904][T13947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.805276][ T795] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 910.814896][ T795] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.823293][ T795] usb 9-1: Product: syz [ 910.827666][ T795] usb 9-1: Manufacturer: syz [ 910.832408][ T795] usb 9-1: SerialNumber: syz [ 911.350523][ T795] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 911.365902][ T795] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 911.838613][ T5867] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 911.990817][ T795] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 912.003264][ T795] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 912.020849][ T795] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 912.046923][ T795] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 912.108326][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.119638][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.130461][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 912.143868][ T5867] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 912.153200][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.198667][ T795] usb 9-1: USB disconnect, device number 22 [ 912.262082][ T5867] usb 3-1: config 0 descriptor?? [ 912.689005][ T5867] plantronics 0003:047F:FFFF.0034: reserved main item tag 0xd [ 912.810814][ T5867] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 913.010887][ T5867] usb 3-1: USB disconnect, device number 4 [ 913.112242][T16895] loop8: detected capacity change from 0 to 512 [ 913.142684][T16895] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 913.151223][T16895] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 913.165200][T16895] EXT4-fs (loop8): 1 truncate cleaned up [ 913.173305][T16895] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.507000][T16117] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.955625][T16916] binder: 16914:16916 ioctl 4018620d 0 returned -22 [ 913.977455][ T5862] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 914.222985][ T5862] usb 10-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=fb.88 [ 914.238408][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.245571][T13953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.248713][ T5862] usb 10-1: Product: syz [ 914.254754][T13953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.261269][ T5862] usb 10-1: Manufacturer: syz [ 914.271065][ T5862] usb 10-1: SerialNumber: syz [ 914.371943][T16918] netlink: 'syz.8.4283': attribute type 1 has an invalid length. [ 914.386845][ T1874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.395363][ T1874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.399399][ T5862] usb 10-1: config 0 descriptor?? [ 914.467976][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4283'. [ 914.512123][T16918] bond1: entered promiscuous mode [ 914.518948][T16918] bond1: entered allmulticast mode [ 914.646344][ T5862] kaweth 10-1:0.0: Firmware present in device. [ 914.667886][T16922] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 914.692253][T16922] bond1: (slave bridge1): making interface the new active one [ 914.700141][T16922] bridge1: entered promiscuous mode [ 914.706182][T16922] bridge1: entered allmulticast mode [ 914.716823][T16922] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 914.838051][ T5862] kaweth 10-1:0.0: Statistics collection: 0 [ 914.849379][ T5862] kaweth 10-1:0.0: Multicast filter limit: 0 [ 914.855539][ T5862] kaweth 10-1:0.0: MTU: 0 [ 914.861481][ T5862] kaweth 10-1:0.0: Read MAC address 00:00:00:00:00:00 [ 915.460948][ T5862] kaweth 10-1:0.0: kaweth interface created at eth5 [ 915.730359][ T5867] usb 10-1: USB disconnect, device number 20 [ 916.636828][T16946] loop9: detected capacity change from 0 to 512 [ 916.692823][T16946] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 916.790281][T16946] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 916.807018][T16946] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 916.882224][T16954] loop2: detected capacity change from 0 to 1024 [ 916.921006][T16954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.925764][ T30] audit: type=1800 audit(2000000786.520:186): pid=16946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4293" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 917.106701][T16179] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 917.252124][T16494] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 917.280647][T16494] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 917.637714][T16965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4300'. [ 917.646879][T16965] netlink: 'syz.3.4300': attribute type 12 has an invalid length. [ 917.678606][T16965] vxlan0: entered promiscuous mode [ 917.704079][ T1874] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.794752][T16494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.816884][T13959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.847075][ T1874] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.882497][ T134] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.977637][T13959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.032411][ T134] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.087770][T13959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.454132][T13959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.824770][T13959] bridge_slave_1: left allmulticast mode [ 918.830921][T13959] bridge_slave_1: left promiscuous mode [ 918.840430][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.856471][T13959] bridge_slave_0: left allmulticast mode [ 918.864789][T13959] bridge_slave_0: left promiscuous mode [ 918.871576][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.298757][T13959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.325483][T13959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.362598][T13959] bond0 (unregistering): Released all slaves [ 920.151698][T13959] hsr_slave_0: left promiscuous mode [ 920.190347][T13959] hsr_slave_1: left promiscuous mode [ 920.198287][T13959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.205814][T13959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.216810][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 920.226146][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 920.235780][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 920.252371][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 920.262886][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 920.292133][T13959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.302270][T13959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.336848][T13959] veth1_macvtap: left promiscuous mode [ 920.342761][T13959] veth0_macvtap: left promiscuous mode [ 920.349398][T13959] veth1_vlan: left promiscuous mode [ 920.354877][T13959] veth0_vlan: left promiscuous mode [ 921.222454][T13959] team0 (unregistering): Port device team_slave_1 removed [ 921.248879][T13959] team0 (unregistering): Port device team_slave_0 removed [ 921.587583][ T5867] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 921.878560][T17011] netlink: 'syz.3.4319': attribute type 1 has an invalid length. [ 921.894005][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4319'. [ 921.922021][T17011] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 921.953314][ T5867] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 921.963642][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.005981][ T5867] usb 9-1: config 0 descriptor?? [ 922.382712][ T5806] Bluetooth: hci4: command tx timeout [ 923.026779][T16986] chnl_net:caif_netlink_parms(): no params data found [ 923.285258][ T5867] usb 9-1: Cannot set autoneg [ 923.291234][ T5867] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 923.312028][ T5867] usb 9-1: USB disconnect, device number 23 [ 923.593315][T17033] loop9: detected capacity change from 0 to 128 [ 923.636265][T17033] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 923.666636][T17033] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 923.877934][T16179] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 923.882995][T16986] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.900854][T16986] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.908656][T16986] bridge_slave_0: entered allmulticast mode [ 923.918422][T16986] bridge_slave_0: entered promiscuous mode [ 923.999568][T16986] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.007018][T16986] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.014911][T16986] bridge_slave_1: entered allmulticast mode [ 924.031011][T16986] bridge_slave_1: entered promiscuous mode [ 924.161610][T17043] loop9: detected capacity change from 0 to 16 [ 924.188476][T16986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.199408][T17043] erofs (device loop9): mounted with root inode @ nid 36. [ 924.236648][T16986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.446336][T16986] team0: Port device team_slave_0 added [ 924.454316][ T5806] Bluetooth: hci4: command tx timeout [ 924.481019][T16986] team0: Port device team_slave_1 added [ 924.581966][T16986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.589213][T16986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.621319][T16986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.722153][T16986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.729736][T16986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.756103][T16986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.999459][T16986] hsr_slave_0: entered promiscuous mode [ 925.011630][T16986] hsr_slave_1: entered promiscuous mode [ 925.020082][T16986] debugfs: 'hsr0' already exists in 'hsr' [ 925.025943][T16986] Cannot create hsr debugfs directory [ 925.046168][T17053] netlink: 'syz.3.4335': attribute type 1 has an invalid length. [ 925.241657][T17055] binder: 17054:17055 ioctl 4018620d 0 returned -22 [ 925.983176][T16986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 926.015113][T16986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 926.039084][T16986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 926.081118][T16986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 926.529452][ T5806] Bluetooth: hci4: command tx timeout [ 926.742733][T16986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.869551][T16986] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.969699][T13947] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.977123][T13947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.071581][T13947] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.079124][T13947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.382973][T16986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.607867][ T5806] Bluetooth: hci4: command tx timeout [ 928.705900][T16986] veth0_vlan: entered promiscuous mode [ 928.828059][T16986] veth1_vlan: entered promiscuous mode [ 929.055733][T16986] veth0_macvtap: entered promiscuous mode [ 929.147927][T16986] veth1_macvtap: entered promiscuous mode [ 929.268897][T16986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.343556][T16986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.439312][ T134] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.467806][ T795] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 929.513202][ T134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.544307][ T134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.582420][ T134] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.677713][ T795] usb 10-1: Using ep0 maxpacket: 8 [ 929.725492][ T795] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 929.736983][ T795] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.746219][ T795] usb 10-1: Product: syz [ 929.750792][ T795] usb 10-1: Manufacturer: syz [ 929.755623][ T795] usb 10-1: SerialNumber: syz [ 929.861319][ T795] usb 10-1: config 0 descriptor?? [ 929.875583][ T795] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 930.232580][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4352'. [ 930.275127][T17104] netlink: 190 bytes leftover after parsing attributes in process `syz.3.4352'. [ 931.142094][ T795] gspca_sonixj: reg_w1 err -71 [ 931.228086][ T795] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 931.274390][ T795] usb 10-1: USB disconnect, device number 21 [ 931.700559][T17128] netlink: 84 bytes leftover after parsing attributes in process `syz.8.4360'. [ 933.421892][T13953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.430067][T13953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.455894][T13953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.464465][T13953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.264828][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4306'. [ 934.451871][T17174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4377'. [ 935.699570][T17191] dvmrp0: entered allmulticast mode [ 936.318082][T17205] loop9: detected capacity change from 0 to 1024 [ 937.317048][T17222] netlink: 'syz.8.4397': attribute type 4 has an invalid length. [ 940.477591][T17285] IPv4: Oversized IP packet from 127.202.26.0 [ 942.129762][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4436'. [ 942.171480][T17310] tipc: Started in network mode [ 942.176584][T17310] tipc: Node identity ac14140f, cluster identity 4711 [ 942.185896][T17310] tipc: New replicast peer: 255.255.255.255 [ 942.194487][T17310] tipc: Enabled bearer , priority 10 [ 942.317903][ T795] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 942.517965][ T795] usb 2-1: Using ep0 maxpacket: 16 [ 942.571696][ T795] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 942.581563][ T795] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 942.589854][ T795] usb 2-1: Product: syz [ 942.594747][ T795] usb 2-1: SerialNumber: syz [ 942.685440][ T795] usb 2-1: config 0 descriptor?? [ 942.722211][ T795] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 942.758227][ T795] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 942.770679][ T795] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 942.778319][ T795] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 943.035278][ T5862] usb 2-1: USB disconnect, device number 16 [ 943.317607][ T795] tipc: Node number set to 2886997007 [ 943.465768][T17325] loop8: detected capacity change from 0 to 764 [ 943.563783][T17325] Symlink component flag not implemented [ 943.570461][T17325] Symlink component flag not implemented [ 943.576370][T17325] Symlink component flag not implemented (129) [ 943.583130][T17325] Symlink component flag not implemented (6) [ 943.848193][ T795] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 944.031287][T17336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4446'. [ 944.040789][T17336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4446'. [ 944.052567][T17336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4446'. [ 944.063040][T17336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4446'. [ 944.075740][T17335] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 944.094088][ T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.105919][ T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.116235][ T795] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 944.130861][ T795] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 944.140668][ T795] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.199383][ T795] usb 10-1: config 0 descriptor?? [ 944.670961][ T795] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 944.679220][ T795] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 944.704967][ T795] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 946.775988][ T795] libceph: connect (1)[c::]:6789 error -101 [ 946.782534][ T795] libceph: mon0 (1)[c::]:6789 connect error [ 946.786566][ T5863] usb 10-1: USB disconnect, device number 22 [ 946.837974][ T795] libceph: connect (1)[c::]:6789 error -101 [ 946.844462][ T795] libceph: mon0 (1)[c::]:6789 connect error [ 946.945380][T17387] sctp: [Deprecated]: syz.9.4467 (pid 17387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 946.945380][T17387] Use struct sctp_sack_info instead [ 947.088730][ T795] libceph: connect (1)[c::]:6789 error -101 [ 947.095011][ T795] libceph: mon0 (1)[c::]:6789 connect error [ 947.138910][ T795] libceph: connect (1)[c::]:6789 error -101 [ 947.145132][ T795] libceph: mon0 (1)[c::]:6789 connect error [ 947.497728][T17395] syzkaller1: entered promiscuous mode [ 947.503461][T17395] syzkaller1: entered allmulticast mode [ 947.592652][T17377] ceph: No mds server is up or the cluster is laggy [ 947.599978][T17382] ceph: No mds server is up or the cluster is laggy [ 947.609727][ T795] libceph: connect (1)[c::]:6789 error -101 [ 947.615984][ T795] libceph: mon0 (1)[c::]:6789 connect error [ 947.658859][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 947.665117][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 948.234996][T17406] dvmrp6: entered allmulticast mode [ 948.294998][T17406] pimreg: entered allmulticast mode [ 948.314247][T17406] dvmrp6: left allmulticast mode [ 948.446068][T17403] pimreg: left allmulticast mode [ 948.655031][T17414] binder: 17412:17414 ioctl c0306201 80000640 returned -22 [ 948.906032][T17418] loop8: detected capacity change from 0 to 512 [ 948.937120][T17418] EXT4-fs (loop8): filesystem is read-only [ 948.984047][T17418] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 949.018052][T17418] EXT4-fs (loop8): filesystem is read-only [ 949.025873][T17418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 949.258231][T16117] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.313275][ T795] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 949.510696][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.522127][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.532384][ T795] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 949.541764][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.604439][ T795] usb 2-1: config 0 descriptor?? [ 949.991317][T17435] loop9: detected capacity change from 0 to 4096 [ 950.004690][T17435] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 950.120852][T17435] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 950.250318][ T795] usb 2-1: string descriptor 0 read error: -22 [ 950.285292][ T30] audit: type=1800 audit(2000000819.890:187): pid=17435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4489" name="file1" dev="loop9" ino=30 res=0 errno=0 [ 950.367969][ T5806] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 950.370856][T14571] Bluetooth: hci5: command 0x1003 tx timeout [ 950.504823][ T795] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0036/input/input79 [ 950.606203][ T795] uclogic 0003:256C:006D.0036: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 950.712640][ T795] usb 2-1: USB disconnect, device number 17 [ 951.199939][T17454] input: syz0 as /devices/virtual/input/input80 [ 951.937990][ T5806] block nbd9: Receive control failed (result -32) [ 951.946222][T17471] block nbd9: shutting down sockets [ 952.027589][ T795] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 952.208030][ T795] usb 9-1: Using ep0 maxpacket: 16 [ 952.229532][ T795] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 952.238007][ T795] usb 9-1: config 1 has no interface number 0 [ 952.245749][ T795] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 952.259600][ T795] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 952.270128][ T795] usb 9-1: config 1 interface 105 has no altsetting 0 [ 952.304738][ T795] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 952.314678][ T795] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.323722][ T795] usb 9-1: Product: syz [ 952.328361][ T795] usb 9-1: Manufacturer: syz [ 952.333132][ T795] usb 9-1: SerialNumber: syz [ 952.354741][T17479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4508'. [ 952.424328][T17467] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 952.458208][T17467] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 952.788523][T17486] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 952.921874][T17467] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 952.955698][T17467] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 953.414115][ T795] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 953.640125][ T795] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 953.670610][ T795] aqc111 9-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:23:8a:52:19:f9 [ 953.696511][ T795] usb 9-1: USB disconnect, device number 24 [ 953.705014][ T795] aqc111 9-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 953.778713][ T795] aqc111 9-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 953.788832][ T795] aqc111 9-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 953.798728][ T795] aqc111 9-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 955.058106][T17523] loop1: detected capacity change from 0 to 2048 [ 955.127875][T17523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.143370][T17523] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.241603][ T30] audit: type=1800 audit(2000000824.850:188): pid=17523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4529" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 955.338425][ T30] audit: type=1800 audit(2000000824.950:189): pid=17531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4529" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 955.518225][T16986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.945181][ T30] audit: type=1326 audit(2000000825.550:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.1.4534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 956.043696][ T30] audit: type=1326 audit(2000000825.580:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.1.4534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d539 code=0x7fc00000 [ 956.069061][ T30] audit: type=1326 audit(2000000825.590:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.1.4534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 956.091703][ T30] audit: type=1326 audit(2000000825.590:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.1.4534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 956.120006][ T30] audit: type=1326 audit(2000000825.590:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.1.4534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 956.148582][ T30] audit: type=1326 audit(2000000825.590:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.1.4534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 956.171041][ T30] audit: type=1326 audit(2000000825.590:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.1.4534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 956.195820][ T30] audit: type=1326 audit(2000000825.590:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.1.4534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 956.224243][ T30] audit: type=1326 audit(2000000825.590:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.1.4534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 957.942748][T17568] loop1: detected capacity change from 0 to 256 [ 958.248938][T17571] loop9: detected capacity change from 0 to 4096 [ 958.346498][T17576] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 958.433652][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4549'. [ 958.492361][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4549'. [ 960.307345][T17609] loop8: detected capacity change from 0 to 256 [ 960.421957][T17609] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 961.342791][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4565'. [ 961.750780][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.757605][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 962.918325][T17638] tipc: Started in network mode [ 962.923536][T17638] tipc: Node identity ac1414aa, cluster identity 4711 [ 962.931849][T17638] tipc: Enabled bearer , priority 10 [ 963.422483][T17645] loop1: detected capacity change from 0 to 2048 [ 963.469530][T17645] loop1: p2 < > p3 < p5 > p4 [ 963.474710][T17645] loop1: partition table partially beyond EOD, truncated [ 963.486151][T17645] loop1: p2 start 4278190080 is beyond EOD, truncated [ 963.503574][T17645] loop1: p4 size 8192 extends beyond EOD, truncated [ 963.513563][T17645] loop1: p5 size 8192 extends beyond EOD, truncated [ 963.928782][ T795] tipc: Node number set to 2886997162 [ 964.410330][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4581'. [ 964.422558][T17662] netlink: 'syz.8.4581': attribute type 13 has an invalid length. [ 964.453950][T17662] vxlan0: entered promiscuous mode [ 964.476143][T13955] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.496639][T13955] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.527919][T13955] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 964.561765][T13955] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.591414][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 965.591464][ T30] audit: type=1326 audit(2000000835.180:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17678 comm="syz.3.4588" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x0 [ 967.789919][ T5863] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 967.808570][ T5806] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 967.974959][ T5863] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.990021][ T5863] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.003599][ T5863] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 968.016941][ T5863] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 968.026331][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.080616][ T5863] usb 9-1: config 0 descriptor?? [ 968.563609][ T5863] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 968.718017][T17727] Bluetooth: hci0: unsupported parameter 256 [ 968.724268][T17727] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 970.226713][T17750] netlink: 'syz.9.4617': attribute type 1 has an invalid length. [ 970.234934][T17750] netlink: 'syz.9.4617': attribute type 4 has an invalid length. [ 970.243858][T17750] netlink: 15334 bytes leftover after parsing attributes in process `syz.9.4617'. [ 970.399951][T17752] input: syz0 as /devices/virtual/input/input81 [ 971.045378][ T5867] usb 9-1: USB disconnect, device number 25 [ 971.123977][T17766] block nbd1: shutting down sockets [ 972.716401][T17793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input82 [ 973.526278][T17798] loop9: detected capacity change from 0 to 4096 [ 973.594499][T17798] EXT4-fs: inline encryption not supported [ 973.603239][T17798] EXT4-fs: Ignoring removed mblk_io_submit option [ 973.623101][T17798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 973.634539][T17798] EXT4-fs (loop9): Test dummy encryption mode enabled [ 973.642598][T17806] block nbd8: shutting down sockets [ 973.679681][T17798] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002] [ 973.706452][T17798] System zones: 0-5 [ 973.735210][T17798] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.866914][T16179] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.022659][T17814] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4645'. [ 976.148170][ T5863] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 976.348205][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 976.416324][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.430013][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.440068][ T5863] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 976.450704][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.772170][ T5863] usb 4-1: config 0 descriptor?? [ 976.897379][T17854] loop8: detected capacity change from 0 to 32768 [ 976.912572][T17854] (syz.8.4661,17854,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 976.930329][T17854] (syz.8.4661,17854,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 976.987843][T17854] JBD2: Ignoring recovery information on journal [ 977.080605][T17862] loop9: detected capacity change from 0 to 1024 [ 977.184623][T17854] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 977.241665][T17862] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.425536][ T5863] savu 0003:1E7D:2D5A.0038: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 977.623096][T16117] ocfs2: Unmounting device (7,8) on (node local) [ 977.673324][T16179] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.702644][ T5867] usb 4-1: USB disconnect, device number 27 [ 979.180846][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 980.167751][ T5863] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 980.405880][ T5863] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 980.417157][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.441774][ T5863] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 980.451665][ T5863] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 980.460055][ T5863] usb 4-1: Manufacturer: syz [ 980.501301][ T5863] usb 4-1: config 0 descriptor?? [ 980.533966][T17903] loop8: detected capacity change from 0 to 1024 [ 980.630118][ T30] audit: type=1804 audit(2000000850.230:227): pid=17903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4677" name="/newroot/132/file0/bus" dev="loop8" ino=26 res=1 errno=0 [ 980.664839][T17903] Invalid ELF header magic: != ELF [ 980.810760][ T5863] rc_core: IR keymap rc-hauppauge not found [ 980.816833][ T5863] Registered IR keymap rc-empty [ 980.823295][ T5863] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 980.839742][ T5863] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input83 [ 980.885918][T13959] hfsplus: b-tree write err: -5, ino 4 [ 980.915758][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 980.995521][ T795] usb 4-1: USB disconnect, device number 28 [ 981.216321][T17915] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4683'. [ 981.273017][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 981.279391][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 981.286746][T17923] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4683'. [ 981.298981][T17923] nbd: device at index 64 is going down [ 981.362598][T17918] ceph: No mds server is up or the cluster is laggy [ 981.367808][ T795] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 981.558276][ T795] usb 2-1: Using ep0 maxpacket: 16 [ 981.592672][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.604406][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.615265][ T795] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 981.628645][ T795] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 981.639772][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.735410][ T795] usb 2-1: config 0 descriptor?? [ 982.263194][ T795] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0039/input/input84 [ 982.353081][ T795] microsoft 0003:045E:07DA.0039: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 982.407589][ T5863] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 982.491683][ T5862] usb 2-1: USB disconnect, device number 18 [ 982.614908][ T5863] usb 9-1: Using ep0 maxpacket: 32 [ 982.652802][ T5863] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 982.661446][ T5863] usb 9-1: config 0 has no interface number 0 [ 982.670368][ T5863] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 982.735210][ T5863] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 982.745855][ T5863] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.754125][ T5863] usb 9-1: Product: syz [ 982.760943][ T5863] usb 9-1: Manufacturer: syz [ 982.765679][ T5863] usb 9-1: SerialNumber: syz [ 982.810540][ T5863] usb 9-1: config 0 descriptor?? [ 982.821092][T17936] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 983.140573][T17936] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 983.696063][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4700'. [ 984.223240][ T5863] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 984.234425][ T5863] asix 9-1:0.188: probe with driver asix failed with error -71 [ 984.248735][T17967] loop6: detected capacity change from 0 to 7 [ 984.263621][T17967] Dev loop6: unable to read RDB block 7 [ 984.270569][T17967] loop6: unable to read partition table [ 984.274686][ T5863] usb 9-1: USB disconnect, device number 26 [ 984.285019][T17967] loop6: partition table beyond EOD, truncated [ 984.285106][T17967] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 984.294177][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 985.415040][T17984] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4709'. [ 985.424700][T17984] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4709'. [ 986.543622][T18001] input: syz1 as /devices/virtual/input/input85 [ 988.504828][T18043] loop8: detected capacity change from 0 to 1024 [ 988.578022][ T4124] hfsplus: b-tree write err: -5, ino 4 [ 989.077169][T18049] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4738'. [ 989.090971][T18049] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4738'. [ 989.104491][T18049] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4738'. [ 989.114070][T18049] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4738'. [ 989.845602][T18064] loop9: detected capacity change from 0 to 1024 [ 989.885480][ T30] audit: type=1326 audit(2000000859.490:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18062 comm="syz.1.4743" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d539 code=0x0 [ 989.977910][ T30] audit: type=1804 audit(2000000859.550:229): pid=18064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4745" name="/newroot/139/file0/bus" dev="loop9" ino=26 res=1 errno=0 [ 990.035634][T18064] Invalid ELF header magic: != ELF [ 990.229010][T13953] hfsplus: b-tree write err: -5, ino 4 [ 990.404470][T18074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4749'. [ 990.571634][T18079] sctp: [Deprecated]: syz.8.4751 (pid 18079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 990.571634][T18079] Use struct sctp_sack_info instead [ 990.734128][T18081] syzkaller1: entered promiscuous mode [ 990.739952][T18081] syzkaller1: entered allmulticast mode [ 990.765398][ T795] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 990.938022][ T795] usb 10-1: Using ep0 maxpacket: 32 [ 990.964713][ T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.978606][ T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.989526][ T795] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 990.999021][ T795] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.010332][T18086] ceph: No mds server is up or the cluster is laggy [ 991.032137][ T795] usb 10-1: config 0 descriptor?? [ 991.639904][ T795] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 992.102655][ T5863] usb 10-1: USB disconnect, device number 23 [ 993.205304][T18114] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4764'. [ 993.214785][T18114] netlink: 'syz.9.4764': attribute type 18 has an invalid length. [ 993.241448][T18114] vxlan0: entered promiscuous mode [ 993.260821][ T134] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.272820][ T134] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.292369][ T134] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.301655][ T134] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.035096][T18129] dvmrp6: entered allmulticast mode [ 994.076691][T18129] pimreg: entered allmulticast mode [ 994.128173][T18131] dvmrp6: left allmulticast mode [ 994.241504][T18127] pimreg: left allmulticast mode [ 994.564557][T18134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 994.877827][ T795] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 995.055824][ T795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 995.067701][ T795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.079174][ T795] usb 9-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 995.088701][ T795] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.106440][ T795] usb 9-1: config 0 descriptor?? [ 995.350313][ T795] usbhid 9-1:0.0: can't add hid device: -71 [ 995.359826][ T795] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 995.388628][ T795] usb 9-1: USB disconnect, device number 27 [ 996.445237][T18166] openvswitch: netlink: IP tunnel attribute has 1620 unknown bytes. [ 997.708165][ T795] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 997.875779][ T795] usb 2-1: Using ep0 maxpacket: 16 [ 997.906427][ T795] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 997.916913][ T795] usb 2-1: config 1 has no interface number 0 [ 997.924135][ T795] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 997.934398][ T795] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 997.949301][ T795] usb 2-1: config 1 interface 105 has no altsetting 0 [ 997.975484][ T795] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 997.985252][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.994110][ T795] usb 2-1: Product: syz [ 997.998752][ T795] usb 2-1: Manufacturer: syz [ 998.003500][ T795] usb 2-1: SerialNumber: syz [ 998.059238][T18180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 998.067061][T18180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 998.333933][T18198] loop8: detected capacity change from 0 to 128 [ 998.393645][T18198] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 998.410343][T18198] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 998.569945][T18180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 998.585008][T18180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 998.600301][ T5863] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 998.640630][T16117] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 998.829611][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 998.857698][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 998.865980][ T5863] usb 4-1: config 0 has no interface number 0 [ 998.899291][ T5863] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 998.911185][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.923044][ T5863] usb 4-1: Product: syz [ 998.928751][ T5863] usb 4-1: Manufacturer: syz [ 998.933500][ T5863] usb 4-1: SerialNumber: syz [ 998.972563][ T5863] usb 4-1: config 0 descriptor?? [ 998.987369][ T5863] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 998.996772][ T5863] usb 4-1: selecting invalid altsetting 1 [ 999.005063][ T5863] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 999.031182][ T795] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 999.039088][ T5863] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 999.053442][ T5863] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 999.064484][ T5863] usb 4-1: media controller created [ 999.123309][T18207] loop8: detected capacity change from 0 to 512 [ 999.149152][T18207] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00097272 (sector = 1) [ 999.172262][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 999.263998][ T795] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 999.290825][ T795] aqc111 2-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 46:16:51:14:a0:c4 [ 999.326958][ T5863] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 999.334586][ T5863] zl10353_read_register: readreg error (reg=127, ret==-71) [ 999.346156][ T5863] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 999.380667][ T795] usb 2-1: USB disconnect, device number 19 [ 999.389125][ T795] aqc111 2-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 999.509543][ T795] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 999.520621][ T795] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 999.531666][ T795] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 999.662460][ T5863] usb 4-1: USB disconnect, device number 29 [ 1000.396730][T18227] gfs2: gfs2 mount does not exist [ 1000.686395][T18231] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4813'. [ 1001.113234][T18238] loop9: detected capacity change from 0 to 512 [ 1001.159411][T18238] EXT4-fs: Ignoring removed nobh option [ 1001.172190][T18238] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1001.181700][T18238] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1001.279752][T18238] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000e01c, mo2=0006] [ 1001.308560][T18238] System zones: 0-2, 18-18, 34-35 [ 1001.320399][T18238] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1001.469147][T18238] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1001.518041][T18238] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000e01c, mo2=0006] [ 1001.526252][T18238] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1001.692915][T16179] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.096494][T18256] macvlan2: entered promiscuous mode [ 1002.108833][T18256] team_slave_0: entered promiscuous mode [ 1002.114766][T18256] team_slave_1: entered promiscuous mode [ 1002.120736][T18256] team0: entered promiscuous mode [ 1002.133181][T18256] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1002.148770][T18256] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1003.291416][T18273] loop1: detected capacity change from 0 to 512 [ 1003.325318][T18273] EXT4-fs: Ignoring removed nobh option [ 1003.341900][T18273] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1003.351266][T18273] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1003.447828][T18273] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000e01c, mo2=0006] [ 1003.478598][T18273] System zones: 0-2, 18-18, 34-35 [ 1003.486569][T18273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1003.533700][T18273] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1003.595976][T18273] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000e01c, mo2=0006] [ 1003.640595][T18273] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1003.751209][ T30] audit: type=1326 audit(2000000873.350:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18283 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1003.773905][ T30] audit: type=1326 audit(2000000873.350:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18283 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1003.798774][ T30] audit: type=1326 audit(2000000873.350:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18283 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1003.821221][ T30] audit: type=1326 audit(2000000873.380:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18283 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1004.090194][T16986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.565383][T18297] loop9: detected capacity change from 0 to 64 [ 1004.755789][ T30] audit: type=1800 audit(2000000874.360:234): pid=18297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4842" name="bus" dev="loop9" ino=23 res=0 errno=0 [ 1005.388755][ T795] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1005.484098][T18316] loop8: detected capacity change from 0 to 512 [ 1005.504722][T18316] EXT4-fs: Ignoring removed nobh option [ 1005.521805][T18316] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1005.531281][T18316] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1005.550111][T18316] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000e01c, mo2=0006] [ 1005.558886][T18316] System zones: 0-2, 18-18, 34-35 [ 1005.567944][T18316] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1005.607063][ T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.619058][ T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.629159][ T795] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1005.638957][ T795] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.653247][T18316] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1005.663893][T18316] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000e01c, mo2=0006] [ 1005.678384][T18316] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1005.811284][ T795] usb 10-1: config 0 descriptor?? [ 1005.865277][T16117] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.438103][ T795] usb 10-1: string descriptor 0 read error: -22 [ 1006.557857][ T5867] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1006.680549][ T795] input: HID 256c:006d as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.003B/input/input86 [ 1006.727769][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 1006.763509][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.777031][ T5867] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 1006.787507][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.822495][ T795] uclogic 0003:256C:006D.003B: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.9-1/input0 [ 1006.845406][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4860'. [ 1006.855118][T18336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.866465][ T5867] usb 2-1: config 0 descriptor?? [ 1006.941274][ T795] usb 10-1: USB disconnect, device number 24 [ 1006.956099][T18336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.099634][T18338] pim6reg1: entered promiscuous mode [ 1007.113150][T18338] pim6reg1: entered allmulticast mode [ 1007.343322][ T5867] smartjoyplus 0003:6666:8801.003C: unknown main item tag 0x0 [ 1007.351380][ T5867] smartjoyplus 0003:6666:8801.003C: unknown main item tag 0x0 [ 1007.359303][ T5867] smartjoyplus 0003:6666:8801.003C: item fetching failed at offset 2/5 [ 1007.382990][ T5867] smartjoyplus 0003:6666:8801.003C: parse failed [ 1007.390756][ T5867] smartjoyplus 0003:6666:8801.003C: probe with driver smartjoyplus failed with error -22 [ 1007.563828][ T5863] usb 2-1: USB disconnect, device number 20 [ 1008.197683][ T5867] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1008.416202][ T5867] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.426897][ T5867] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1008.486327][ T5867] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1008.496000][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.504432][ T5867] usb 10-1: Product: syz [ 1008.508961][ T5867] usb 10-1: Manufacturer: syz [ 1008.513796][ T5867] usb 10-1: SerialNumber: syz [ 1008.593459][ T5867] usb 10-1: config 0 descriptor?? [ 1008.615276][ T5867] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1008.667021][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1008.700659][ T5867] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1008.709623][ T5867] usb 10-1: media controller created [ 1008.802911][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1008.995199][ T5867] DVB: Unable to find symbol tda10046_attach() [ 1009.002259][ T5867] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1009.014911][ T5867] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1009.088050][ T795] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1009.208354][ T30] audit: type=1326 audit(2000000878.820:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18373 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7fc00000 [ 1009.257587][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.269299][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.293632][ T795] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 8.00 [ 1009.303182][ T795] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1009.311682][ T795] usb 2-1: Product: syz [ 1009.335843][ T795] usb 2-1: config 0 descriptor?? [ 1009.491200][T18381] loop6: detected capacity change from 0 to 7 [ 1009.500185][T18381] Dev loop6: unable to read RDB block 7 [ 1009.506090][T18381] loop6: unable to read partition table [ 1009.519826][T18381] loop6: partition table beyond EOD, truncated [ 1009.526248][T18381] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1009.756280][ T30] audit: type=1326 audit(2000000879.350:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18373 comm="syz.3.4876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x7fc00000 [ 1009.818979][ T795] cm6533_jd 0003:0D8C:0022.003D: unknown main item tag 0x0 [ 1009.826858][ T795] cm6533_jd 0003:0D8C:0022.003D: unknown main item tag 0x0 [ 1009.888270][ T795] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.003D/input/input87 [ 1009.986022][ T795] cm6533_jd 0003:0D8C:0022.003D: input,hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1010.059825][ T795] usb 2-1: USB disconnect, device number 21 [ 1010.069882][ T5867] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1010.105263][ T5867] usb 10-1: USB disconnect, device number 25 [ 1011.304037][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4888'. [ 1011.313549][T18405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.396317][T18405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.747698][T18431] loop1: detected capacity change from 0 to 1024 [ 1013.030220][T13955] hfsplus: b-tree write err: -5, ino 4 [ 1015.988071][T18457] netlink: 'syz.3.4908': attribute type 3 has an invalid length. [ 1018.301792][T18440] Set syz1 is full, maxelem 65536 reached [ 1019.740083][ T5863] [U]  [ 1019.770991][T18507] loop1: detected capacity change from 0 to 1024 [ 1020.178203][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4931'. [ 1020.556563][T13944] hfsplus: b-tree write err: -5, ino 4 [ 1023.188836][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.198371][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.302082][T18589] loop8: detected capacity change from 0 to 256 [ 1023.830162][T18597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1023.842852][T18597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1023.852739][T18597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1023.871702][T18597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1023.890427][T18597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1024.883977][T18596] chnl_net:caif_netlink_parms(): no params data found [ 1025.247948][T18597] Bluetooth: hci1: command 0x0406 tx timeout [ 1025.321314][T18620] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.4952'. [ 1025.864269][T18596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.873398][T18596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.881415][T18596] bridge_slave_0: entered allmulticast mode [ 1025.890952][T18596] bridge_slave_0: entered promiscuous mode [ 1025.975112][ T5806] Bluetooth: hci4: command tx timeout [ 1025.989969][T18596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.997687][T18596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.005481][T18596] bridge_slave_1: entered allmulticast mode [ 1026.015241][T18596] bridge_slave_1: entered promiscuous mode [ 1026.155534][T18596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.172396][ T5863] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1026.176161][T18596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.347749][ T5863] usb 10-1: Using ep0 maxpacket: 8 [ 1026.419490][ T5863] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1026.428205][ T5863] usb 10-1: config 0 has no interface number 0 [ 1026.501930][ T5863] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1026.511474][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.520296][ T5863] usb 10-1: Product: syz [ 1026.524705][ T5863] usb 10-1: Manufacturer: syz [ 1026.532132][ T5863] usb 10-1: SerialNumber: syz [ 1026.585355][ T5863] usb 10-1: config 0 descriptor?? [ 1026.646021][T18596] team0: Port device team_slave_0 added [ 1026.681295][T18596] team0: Port device team_slave_1 added [ 1026.825024][ T5863] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1026.836782][ T5863] uvcvideo 10-1:0.31: No valid video chain found. [ 1026.862025][ T5863] usb 10-1: USB disconnect, device number 26 [ 1026.883944][T18596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.893694][T18596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.922583][T18596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.002941][T18596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.013982][T18596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.043024][T18596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.243804][T18596] hsr_slave_0: entered promiscuous mode [ 1027.254123][T18596] hsr_slave_1: entered promiscuous mode [ 1027.262617][T18596] debugfs: 'hsr0' already exists in 'hsr' [ 1027.268556][T18596] Cannot create hsr debugfs directory [ 1027.530509][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4962'. [ 1027.998317][ T795] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1028.049698][ T5806] Bluetooth: hci4: command tx timeout [ 1028.076463][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4963'. [ 1028.187511][ T795] usb 10-1: Using ep0 maxpacket: 32 [ 1028.215937][ T795] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1028.225719][ T795] usb 10-1: config 0 has no interface number 0 [ 1028.232918][ T795] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1028.295990][ T795] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1028.306964][ T795] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.315894][ T795] usb 10-1: Product: syz [ 1028.320444][ T795] usb 10-1: Manufacturer: syz [ 1028.326120][ T795] usb 10-1: SerialNumber: syz [ 1028.449787][ T795] usb 10-1: config 0 descriptor?? [ 1028.461379][ T795] smsc75xx v1.0.0 [ 1028.750849][T18596] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1028.800476][T18596] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1028.845217][T18596] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1028.938565][T18596] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1029.751660][T18596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.853017][T18596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.864789][ T795] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1029.876333][ T795] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1029.923425][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.931060][T13157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.950974][ T795] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1029.964453][ T795] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1029.976877][ T795] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1029.988763][ T795] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1029.999864][ T795] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 1030.134558][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.142081][T13157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.173452][ T5806] Bluetooth: hci4: command tx timeout [ 1030.287015][ T795] usb 10-1: USB disconnect, device number 27 [ 1030.439877][T18677] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1030.447091][T18677] overlayfs: failed to set xattr on upper [ 1030.454460][T18677] overlayfs: ...falling back to redirect_dir=nofollow. [ 1030.461917][T18677] overlayfs: ...falling back to index=off. [ 1030.467937][T18677] overlayfs: ...falling back to uuid=null. [ 1031.543868][T18596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.208304][ T5806] Bluetooth: hci4: command tx timeout [ 1032.883950][T18596] veth0_vlan: entered promiscuous mode [ 1032.942163][T18596] veth1_vlan: entered promiscuous mode [ 1033.101916][T18596] veth0_macvtap: entered promiscuous mode [ 1033.154488][T18596] veth1_macvtap: entered promiscuous mode [ 1033.282857][T18596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.340774][T18596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.424573][T18564] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.443771][T18564] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.482058][ T142] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.502323][ T142] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.743634][T18727] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4991'. [ 1033.756067][T18727] netlink: 'syz.9.4991': attribute type 15 has an invalid length. [ 1033.764189][T18727] netlink: 'syz.9.4991': attribute type 18 has an invalid length. [ 1036.531967][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5001'. [ 1037.058875][T13944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.066880][T13944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.191911][T18564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.200079][T18564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.548005][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5005'. [ 1037.601568][T18781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5005'. [ 1037.696352][T18784] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4938'. [ 1037.781603][T18784] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4938'. [ 1039.048306][ T5867] kernel read not supported for file /vcs (pid: 5867 comm: kworker/0:5) [ 1040.318899][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5024'. [ 1040.913325][T18834] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1040.922356][T18834] overlayfs: failed to set xattr on upper [ 1040.928548][T18834] overlayfs: ...falling back to redirect_dir=nofollow. [ 1040.935516][T18834] overlayfs: ...falling back to index=off. [ 1040.941547][T18834] overlayfs: ...falling back to xino=off. [ 1040.947612][T18834] overlayfs: maximum fs stacking depth exceeded [ 1041.696667][ T30] audit: type=1326 audit(2000000911.290:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.5032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 1041.724976][ T30] audit: type=1326 audit(2000000911.300:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.5032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 1041.752999][ T30] audit: type=1326 audit(2000000911.330:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.5032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 1041.775789][ T30] audit: type=1326 audit(2000000911.330:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.5032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 1041.800569][ T30] audit: type=1326 audit(2000000911.330:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.5032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 1041.822933][ T30] audit: type=1326 audit(2000000911.330:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.5032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 1041.852418][ T30] audit: type=1326 audit(2000000911.330:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.5032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 1041.876293][ T30] audit: type=1326 audit(2000000911.330:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.5032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 1041.901076][ T30] audit: type=1326 audit(2000000911.330:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.5032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 1041.926609][ T30] audit: type=1326 audit(2000000911.330:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.5032" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 1042.274828][T18850] input: syz0 as /devices/virtual/input/input88 [ 1042.674625][T18856] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5047'. [ 1042.775235][T18861] loop9: detected capacity change from 0 to 128 [ 1042.951716][ T795] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1043.164219][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.176691][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.186809][ T795] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1043.203844][ T795] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1043.213246][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.332583][ T795] usb 4-1: config 0 descriptor?? [ 1043.526716][T18871] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1043.533449][T18871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1043.541608][T18871] vhci_hcd vhci_hcd.0: Device attached [ 1043.792300][T18872] usbip_core: unknown command [ 1043.797463][T18872] vhci_hcd: unknown pdu 4244635647 [ 1043.802878][T18872] usbip_core: unknown command [ 1043.819846][T13157] vhci_hcd vhci_hcd.0: stop threads [ 1043.825231][T13157] vhci_hcd vhci_hcd.0: release socket [ 1043.830933][T13157] vhci_hcd vhci_hcd.0: disconnect device [ 1043.857699][ T5862] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1043.897560][ T795] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1044.452080][ T5867] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1044.458711][ T5867] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1044.462403][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 1045.874180][ T5863] usb 4-1: USB disconnect, device number 30 [ 1046.529635][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 1046.552804][ T5867] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1046.559279][ T5867] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1047.381798][T18928] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1047.945935][ T5863] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1048.110201][ T5863] usb 9-1: Using ep0 maxpacket: 32 [ 1048.124588][ T5863] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1048.134315][ T5863] usb 9-1: config 0 has no interface number 0 [ 1048.143375][ T5863] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1048.162121][ T5863] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1048.175066][ T5863] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.183334][ T5863] usb 9-1: Product: syz [ 1048.187806][ T5863] usb 9-1: Manufacturer: syz [ 1048.194018][ T5863] usb 9-1: SerialNumber: syz [ 1048.224467][ T5863] usb 9-1: config 0 descriptor?? [ 1048.247140][ T5863] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1048.259724][ T5863] em28xx 9-1:0.132: Video interface 132 found: [ 1048.653448][ T5863] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1049.069698][ T5863] em28xx 9-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1049.085096][ T5863] em28xx 9-1:0.132: board has no eeprom [ 1049.087923][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 1049.097370][ T5867] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1049.103588][ T5867] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1049.332019][ T5863] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1049.340255][ T5863] em28xx 9-1:0.132: analog set to bulk mode. [ 1049.348491][ T5862] em28xx 9-1:0.132: Registering V4L2 extension [ 1049.383586][ T5863] usb 9-1: USB disconnect, device number 28 [ 1049.393721][ T5863] em28xx 9-1:0.132: Disconnecting em28xx [ 1050.055309][ T5862] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1050.062647][ T5862] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1050.070065][ T5862] em28xx 9-1:0.132: No AC97 audio processor [ 1050.124006][ T5862] usb 9-1: Decoder not found [ 1050.131460][ T5862] em28xx 9-1:0.132: failed to create media graph [ 1050.142189][ T5862] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1050.153082][ T5862] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1050.162865][ T5863] em28xx 9-1:0.132: Closing input extension [ 1050.178442][ T5863] em28xx 9-1:0.132: Freeing device [ 1050.339043][T18978] loop7: detected capacity change from 0 to 760 [ 1051.250466][ T5806] Bluetooth: hci4: command 0x0c1a tx timeout [ 1051.256745][ T5867] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1051.263089][ T5867] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1052.287988][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1052.288061][ T30] audit: type=1326 audit(2000000921.890:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19010 comm="syz.8.5099" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x0 [ 1052.328036][T19014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1052.337605][ T5867] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1052.338320][T19014] bridge0: port 3(bond1) entered blocking state [ 1052.354952][T19014] bridge0: port 3(bond1) entered disabled state [ 1052.365246][T19014] bond1: entered allmulticast mode [ 1052.376624][T19014] bond1: entered promiscuous mode [ 1052.386764][T19014] bridge0: port 3(bond1) entered blocking state [ 1052.393534][T19014] bridge0: port 3(bond1) entered forwarding state [ 1052.412594][T13944] bridge0: port 3(bond1) entered disabled state [ 1052.540335][ T5867] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1052.550038][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.558362][ T5867] usb 4-1: Product: syz [ 1052.562674][ T5867] usb 4-1: Manufacturer: syz [ 1052.567639][ T5867] usb 4-1: SerialNumber: syz [ 1053.409313][T18597] Bluetooth: hci5: command 0x1003 tx timeout [ 1053.416081][ T5806] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1053.479547][T19032] futex_wake_op: syz.7.5107 tries to shift op by 144; fix this program [ 1053.631092][ T5867] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1053.638178][ T5867] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1053.645824][ T5867] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1054.187815][ T5867] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1054.207640][ T5867] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1054.268403][ T5867] usb 4-1: USB disconnect, device number 31 [ 1054.279667][ T5867] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1054.574471][T19044] netlink: 'syz.8.5112': attribute type 10 has an invalid length. [ 1054.613077][T19044] syz_tun: entered promiscuous mode [ 1054.644130][T19044] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1054.905868][T19053] Invalid ELF header len 1 [ 1055.324001][T19064] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5120'. [ 1056.060549][T19079] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5127'. [ 1056.072194][T19079] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5127'. [ 1056.081982][T19079] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5127'. [ 1056.091694][T19079] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5127'. [ 1056.167454][ T5863] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1056.390080][ T5863] usb 10-1: Using ep0 maxpacket: 16 [ 1056.405446][ T5863] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 1056.414137][ T5863] usb 10-1: config 1 has no interface number 0 [ 1056.422913][ T5863] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1056.433228][ T5863] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1056.443571][ T5863] usb 10-1: config 1 interface 105 has no altsetting 0 [ 1056.482967][ T5863] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1056.492551][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.500895][ T5863] usb 10-1: Product: syz [ 1056.505297][ T5863] usb 10-1: Manufacturer: syz [ 1056.512562][ T5863] usb 10-1: SerialNumber: syz [ 1056.556916][T19077] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1056.566060][T19077] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1057.014959][T19077] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1057.037859][T19077] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1057.448059][T19105] netlink: 'syz.8.5138': attribute type 8 has an invalid length. [ 1057.456059][T19105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5138'. [ 1057.485449][T19105] bond0: entered promiscuous mode [ 1057.490777][T19105] bond_slave_0: entered promiscuous mode [ 1057.501955][T19105] bond_slave_1: entered promiscuous mode [ 1057.519371][T19105] gretap0: entered promiscuous mode [ 1057.529640][T19105] ip6gretap0: entered promiscuous mode [ 1057.542748][T19105] hsr1: entered promiscuous mode [ 1057.549435][ T5863] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1057.765185][ T5863] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1057.793071][ T5863] aqc111 10-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fa:6a:80:f3:16:af [ 1057.865045][ T5863] usb 10-1: USB disconnect, device number 28 [ 1057.876205][ T5863] aqc111 10-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1058.001454][ T5863] aqc111 10-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1058.011629][ T5863] aqc111 10-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1058.023978][ T5863] aqc111 10-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1058.191835][ T5867] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1058.383014][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 1058.413848][ T5867] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1058.425294][ T5867] usb 4-1: config 0 has no interface number 0 [ 1058.431674][ T5867] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1058.459592][T19118] netlink: 'syz.7.5144': attribute type 5 has an invalid length. [ 1058.470033][T19118] netlink: 'syz.7.5144': attribute type 11 has an invalid length. [ 1058.491244][ T5867] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1058.500740][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.509683][ T5867] usb 4-1: Product: syz [ 1058.514672][ T5867] usb 4-1: Manufacturer: syz [ 1058.520049][ T5867] usb 4-1: SerialNumber: syz [ 1058.543338][ T5867] usb 4-1: config 0 descriptor?? [ 1058.564931][ T5867] smsc75xx v1.0.0 [ 1058.726127][T19123] loop8: detected capacity change from 0 to 64 [ 1058.751813][T19124] vlan2: entered promiscuous mode [ 1058.757091][T19124] bridge0: entered promiscuous mode [ 1058.763220][T19124] vlan2: entered allmulticast mode [ 1058.771113][T19124] bridge0: entered allmulticast mode [ 1058.853729][T19125] bridge_slave_0: left allmulticast mode [ 1058.862091][T19125] bridge_slave_0: left promiscuous mode [ 1058.868738][T19125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.904399][T19125] bridge_slave_1: left allmulticast mode [ 1058.910554][T19125] bridge_slave_1: left promiscuous mode [ 1058.917103][T19125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.960798][T19125] bond0: (slave bond_slave_0): Releasing backup interface [ 1058.986122][T19125] bond0: (slave bond_slave_1): Releasing backup interface [ 1059.055684][T19125] team0: Port device team_slave_0 removed [ 1059.097404][T19125] team0: Port device team_slave_1 removed [ 1059.109518][T19125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.117148][T19125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.144211][T19125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.152603][T19125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.174423][T19125] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1059.240057][T19127] netlink: 'syz.7.5148': attribute type 1 has an invalid length. [ 1059.250145][T19127] netlink: 'syz.7.5148': attribute type 2 has an invalid length. [ 1059.737979][T19134] bridge0: port 3(vlan2) entered blocking state [ 1059.744693][T19134] bridge0: port 3(vlan2) entered disabled state [ 1059.751820][T19134] vlan2: entered allmulticast mode [ 1059.757102][T19134] bridge0: entered allmulticast mode [ 1059.789428][T19134] vlan2: left allmulticast mode [ 1059.794683][T19134] bridge0: left allmulticast mode [ 1059.930191][ T5867] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 1059.945267][ T5867] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1060.011691][ T5867] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1060.023218][ T5867] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1060.033270][ T5867] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1060.043791][ T5867] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1060.054336][ T5867] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1060.241039][ T5867] usb 4-1: USB disconnect, device number 32 [ 1060.529589][T19139] loop9: detected capacity change from 0 to 32768 [ 1060.540819][T19139] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5152 (19139) [ 1060.551686][T19140] syz_tun: entered allmulticast mode [ 1060.569798][T19139] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1060.575145][T19136] syz_tun: left allmulticast mode [ 1060.582604][T19139] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1060.743433][T19139] BTRFS info (device loop9): rebuilding free space tree [ 1060.782435][T19139] BTRFS info (device loop9): disabling free space tree [ 1060.792333][T19139] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1060.802613][T19139] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1060.844624][T19139] BTRFS info (device loop9): setting nodatasum [ 1060.853670][T19139] BTRFS info (device loop9): setting nodatacow [ 1060.860076][T19139] BTRFS info (device loop9): turning off barriers [ 1060.866647][T19139] BTRFS info (device loop9): force clearing of disk cache [ 1061.098234][T16179] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1061.592130][T19171] binder: 19170:19171 ioctl c06c4124 0 returned -22 [ 1061.910794][T19178] Invalid ELF header magic: != ELF [ 1064.701075][T19224] syz_tun: entered allmulticast mode [ 1064.714751][T19223] syz_tun: left allmulticast mode [ 1067.179004][T19251] IPv4: Oversized IP packet from 172.20.20.24 [ 1067.191791][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1067.200003][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1067.222114][T19253] loop9: detected capacity change from 0 to 128 [ 1067.865824][T19266] loop9: detected capacity change from 0 to 16 [ 1067.874861][T19266] erofs: Unknown parameter '/dev/ttyS3' [ 1067.881313][ T5867] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1068.055306][ T5867] usb 9-1: Using ep0 maxpacket: 32 [ 1068.089378][ T5867] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1068.098063][ T5867] usb 9-1: config 0 has no interface number 0 [ 1068.131952][ T5867] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1068.141369][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.149787][ T5867] usb 9-1: Product: syz [ 1068.154109][ T5867] usb 9-1: Manufacturer: syz [ 1068.158992][ T5867] usb 9-1: SerialNumber: syz [ 1068.206234][ T5867] usb 9-1: config 0 descriptor?? [ 1068.243576][ T5867] smsc95xx v2.0.0 [ 1068.620632][ T5862] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1068.652240][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5210'. [ 1068.669026][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5210'. [ 1068.683669][T19282] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5210'. [ 1068.693241][T19282] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5210'. [ 1068.800347][ T5862] usb 10-1: Using ep0 maxpacket: 16 [ 1068.822060][ T5862] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.835891][ T5862] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.846292][ T5862] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1068.862123][ T5862] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1068.871546][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.907811][ T5862] usb 10-1: config 0 descriptor?? [ 1069.362680][ T5862] HID 045e:07da: Invalid code 65791 type 1 [ 1069.374001][ T5862] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.003F/input/input89 [ 1069.443996][ T5862] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1069.479652][ T5867] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1069.493358][ T5867] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1069.533701][ T5867] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1069.546267][ T5867] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1069.564432][ T5867] usb 9-1: USB disconnect, device number 29 [ 1069.585030][ T5862] usb 10-1: USB disconnect, device number 29 [ 1069.830513][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5227'. [ 1069.857100][T19298] binder: 19297:19298 ioctl c06c4124 0 returned -22 [ 1070.715674][T19311] loop8: detected capacity change from 0 to 1024 [ 1070.974480][T18566] hfsplus: b-tree write err: -5, ino 4 [ 1071.385627][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5229'. [ 1073.170195][T19339] input: syz1 as /devices/virtual/input/input90 [ 1073.825947][T19347] loop7: detected capacity change from 0 to 2048 [ 1073.930254][T19347] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.023042][ T30] audit: type=1800 audit(2000000943.630:251): pid=19347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5240" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1074.036547][T19347] EXT4-fs (loop7): shut down requested (1) [ 1074.294138][T18596] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.530831][T19360] input: syz0 as /devices/virtual/input/input91 [ 1075.422917][T19366] loop9: detected capacity change from 0 to 32768 [ 1075.434185][T19366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5248 (19366) [ 1075.468107][T19366] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1075.479663][T19366] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1075.645644][T19366] BTRFS info (device loop9): rebuilding free space tree [ 1075.676266][T19366] BTRFS info (device loop9): disabling free space tree [ 1075.683667][T19366] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1075.693649][T19366] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1075.714517][T19366] BTRFS info (device loop9): checking UUID tree [ 1075.724570][T19366] BTRFS info (device loop9): setting nodatasum [ 1075.733210][T19366] BTRFS info (device loop9): setting nodatacow [ 1075.739652][T19366] BTRFS info (device loop9): enabling ssd optimizations [ 1075.746745][T19366] BTRFS info (device loop9): using spread ssd allocation scheme [ 1075.755093][T19366] BTRFS info (device loop9): turning off barriers [ 1075.761761][T19366] BTRFS info (device loop9): turning on async discard [ 1075.768839][T19366] BTRFS info (device loop9): force clearing of disk cache [ 1075.776109][T19366] BTRFS info (device loop9): max_inline set to 435 [ 1076.056161][T16179] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1076.209131][T19397] input: syz1 as /devices/virtual/input/input92 [ 1077.062266][ T30] audit: type=1326 audit(2000000946.660:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19401 comm="syz.7.5258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 1077.452124][ T30] audit: type=1326 audit(2000000947.060:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19401 comm="syz.7.5258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70dd539 code=0x7fc00000 [ 1077.952672][ T5867] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1078.069675][T19426] loop7: detected capacity change from 0 to 1024 [ 1078.113644][T19426] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.158463][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 1078.170526][ T5867] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1078.179065][ T5867] usb 4-1: config 0 has no interface number 0 [ 1078.230690][ T5867] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1078.240433][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.249119][ T5867] usb 4-1: Product: syz [ 1078.253431][ T5867] usb 4-1: Manufacturer: syz [ 1078.258258][ T5867] usb 4-1: SerialNumber: syz [ 1078.356409][ T5867] usb 4-1: config 0 descriptor?? [ 1078.409583][ T5867] smsc95xx v2.0.0 [ 1078.570302][T18596] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.594900][T19439] loop7: detected capacity change from 0 to 32768 [ 1079.611416][T19439] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5268 (19439) [ 1079.633640][T19439] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1079.647649][T19439] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1079.788013][T19439] BTRFS info (device loop7): rebuilding free space tree [ 1079.795421][ T5867] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1079.806805][ T5867] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1079.823948][T19439] BTRFS info (device loop7): disabling free space tree [ 1079.831214][T19439] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1079.841147][T19439] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1079.864500][T19439] BTRFS info (device loop7): checking UUID tree [ 1079.883762][T19439] BTRFS info (device loop7): setting nodatasum [ 1079.891813][ T5867] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1079.892775][ T5867] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1079.914656][ T5867] usb 4-1: USB disconnect, device number 33 [ 1079.921260][T19439] BTRFS info (device loop7): setting nodatacow [ 1079.927674][T19439] BTRFS info (device loop7): enabling ssd optimizations [ 1079.934760][T19439] BTRFS info (device loop7): using spread ssd allocation scheme [ 1079.944989][T19439] BTRFS info (device loop7): turning off barriers [ 1079.951657][T19439] BTRFS info (device loop7): turning on async discard [ 1079.958621][T19439] BTRFS info (device loop7): force clearing of disk cache [ 1079.965884][T19439] BTRFS info (device loop7): max_inline set to 435 [ 1080.165075][T18596] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1081.349638][T19481] input: syz0 as /devices/virtual/input/input93 [ 1081.847994][T19493] syzkaller1: entered promiscuous mode [ 1081.853649][T19493] syzkaller1: entered allmulticast mode [ 1081.874722][T19492] binder: 19488:19492 ioctl c0306201 80000600 returned -14 [ 1082.870055][ T5862] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1083.034041][ T5862] usb 10-1: Using ep0 maxpacket: 32 [ 1083.055417][ T5862] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1083.066429][ T5862] usb 10-1: config 0 has no interface number 0 [ 1083.066819][T19507] loop7: detected capacity change from 0 to 2048 [ 1083.093077][ T5862] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1083.094511][T19507] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1083.102617][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.102737][ T5862] usb 10-1: Product: syz [ 1083.102827][ T5862] usb 10-1: Manufacturer: syz [ 1083.102918][ T5862] usb 10-1: SerialNumber: syz [ 1083.109867][ T5862] usb 10-1: config 0 descriptor?? [ 1083.134830][T19507] syz.7.5291: attempt to access beyond end of device [ 1083.134830][T19507] loop7: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 1083.144866][ T5862] smsc95xx v2.0.0 [ 1083.166609][T19508] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1083.194512][T19507] syz.7.5291: attempt to access beyond end of device [ 1083.194512][T19507] loop7: rw=8388608, sector=9437254, nr_sectors = 2 limit=2048 [ 1083.211386][T19507] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=0) [ 1084.564989][ T5862] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1084.576334][ T5862] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1084.705962][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.714524][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.830375][ T5862] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1084.844776][ T5862] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1085.583188][ T5862] usb 10-1: USB disconnect, device number 30 [ 1086.179484][T19522] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5296'. [ 1086.188899][T19522] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5296'. [ 1086.198387][T19522] macvlan0: entered allmulticast mode [ 1086.203908][T19522] veth1_vlan: entered allmulticast mode [ 1087.961012][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 1088.266337][T19539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1088.444608][T19545] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5308'. [ 1088.563723][T19545] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5308'. [ 1088.649005][T19548] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5308'. [ 1088.658565][T19548] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5308'. [ 1088.757773][T19510] Set syz1 is full, maxelem 65536 reached [ 1089.683746][T19566] loop7: detected capacity change from 0 to 128 [ 1089.758672][ T795] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1089.783325][T19566] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1089.867484][T19566] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.983754][ T795] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1089.994902][ T795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.006112][ T795] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.016268][ T795] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1090.055724][ T795] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1090.065184][ T795] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1090.073689][ T795] usb 9-1: Manufacturer: syz [ 1090.086253][ T795] usb 9-1: config 0 descriptor?? [ 1090.271186][T18596] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1090.496681][T19579] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.5320'. [ 1090.526131][ T795] appleir 0003:05AC:8243.0040: unknown main item tag 0x0 [ 1090.553296][ T795] appleir 0003:05AC:8243.0040: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1091.789947][ T5863] usb 9-1: USB disconnect, device number 30 [ 1093.158677][T19595] ALSA: seq fatal error: cannot create timer (-16) [ 1096.425069][T19581] Set syz1 is full, maxelem 65536 reached [ 1096.968048][T19634] loop9: detected capacity change from 0 to 2048 [ 1097.042501][T19634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1097.196870][T19641] netlink: 'syz.3.5346': attribute type 9 has an invalid length. [ 1097.207433][T19641] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.5346'. [ 1097.402748][ T5863] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1097.607682][ T5863] usb 8-1: Using ep0 maxpacket: 8 [ 1097.632572][ T5863] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1097.643595][ T5863] usb 8-1: config 0 has no interface number 0 [ 1097.690245][ T5863] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1097.702202][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.711131][ T5863] usb 8-1: Product: syz [ 1097.715452][ T5863] usb 8-1: Manufacturer: syz [ 1097.720875][ T5863] usb 8-1: SerialNumber: syz [ 1097.784215][ T5863] usb 8-1: config 0 descriptor?? [ 1098.046643][ T5863] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1098.058296][ T5863] uvcvideo 8-1:0.31: No valid video chain found. [ 1098.104412][ T5863] usb 8-1: USB disconnect, device number 15 [ 1098.415991][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5352'. [ 1099.603054][T19678] loop8: detected capacity change from 0 to 1024 [ 1099.913071][T13157] hfsplus: b-tree write err: -5, ino 4 [ 1100.567706][ T795] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1100.753402][ T795] usb 9-1: Using ep0 maxpacket: 32 [ 1100.791248][ T795] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1100.799828][ T795] usb 9-1: config 0 has no interface number 0 [ 1100.806083][ T795] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1100.902079][ T795] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1100.911621][ T795] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.920057][ T795] usb 9-1: Product: syz [ 1100.924380][ T795] usb 9-1: Manufacturer: syz [ 1100.930721][ T795] usb 9-1: SerialNumber: syz [ 1100.940211][ T795] usb 9-1: config 0 descriptor?? [ 1100.959159][ T795] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1100.969328][ T795] em28xx 9-1:0.132: Video interface 132 found: [ 1101.431676][ T795] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1102.056333][ T795] em28xx 9-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1102.065370][ T795] em28xx 9-1:0.132: failed to read eeprom (err=-5) [ 1102.072356][ T795] em28xx 9-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1102.137492][ T795] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1102.145507][ T795] em28xx 9-1:0.132: analog set to bulk mode. [ 1102.153982][ T5867] em28xx 9-1:0.132: Registering V4L2 extension [ 1102.165077][ T795] usb 9-1: USB disconnect, device number 31 [ 1102.172710][ T795] em28xx 9-1:0.132: Disconnecting em28xx [ 1102.586992][T19716] Dead loop on virtual device ipvlan1, fix it urgently! [ 1102.594660][T19716] ===================================================== [ 1102.602130][T19716] BUG: KMSAN: uninit-value in __schedule+0x91e/0x82e0 [ 1102.609510][T19716] __schedule+0x91e/0x82e0 [ 1102.614060][T19716] schedule+0x17d/0x3c0 [ 1102.618624][T19716] exit_to_user_mode_loop+0xa0/0x1b70 [ 1102.624180][T19716] __do_fast_syscall_32+0x245/0x330 [ 1102.629748][T19716] do_fast_syscall_32+0x38/0x80 [ 1102.634758][T19716] do_SYSENTER_32+0x1f/0x30 [ 1102.639553][T19716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1102.646037][T19716] [ 1102.648845][T19716] Local variable acpar created at: [ 1102.654031][T19716] ip6t_do_table+0x70/0x2280 [ 1102.658880][T19716] nf_hook_slow+0xe1/0x3d0 [ 1102.663455][T19716] [ 1102.665862][T19716] CPU: 0 UID: 0 PID: 19716 Comm: syz.9.5378 Tainted: G L syzkaller #0 PREEMPT(none) [ 1102.677142][T19716] Tainted: [L]=SOFTLOCKUP [ 1102.681665][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1102.692498][T19716] ===================================================== [ 1102.699861][T19716] Disabling lock debugging due to kernel taint [ 1102.706105][T19716] Kernel panic - not syncing: kmsan.panic set ... [ 1102.712632][T19716] CPU: 0 UID: 0 PID: 19716 Comm: syz.9.5378 Tainted: G B L syzkaller #0 PREEMPT(none) [ 1102.723749][T19716] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1102.729371][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1102.739527][T19716] Call Trace: [ 1102.742872][T19716] [ 1102.745879][T19716] __dump_stack+0x26/0x30 [ 1102.750343][T19716] dump_stack_lvl+0x50/0x1c0 [ 1102.755063][T19716] ? dump_stack+0x12/0x25 [ 1102.759528][T19716] dump_stack+0x1e/0x25 [ 1102.763817][T19716] vpanic+0x435/0xd30 [ 1102.767957][T19716] panic+0x15d/0x160 [ 1102.772044][T19716] kmsan_report+0x31c/0x320 [ 1102.776710][T19716] ? kmsan_get_metadata+0xfb/0x160 [ 1102.781970][T19716] ? __msan_warning+0x1b/0x30 [ 1102.786791][T19716] ? __schedule+0x91e/0x82e0 [ 1102.791500][T19716] ? schedule+0x17d/0x3c0 [ 1102.795950][T19716] ? exit_to_user_mode_loop+0xa0/0x1b70 [ 1102.801648][T19716] ? __do_fast_syscall_32+0x245/0x330 [ 1102.807171][T19716] ? do_fast_syscall_32+0x38/0x80 [ 1102.812353][T19716] ? do_SYSENTER_32+0x1f/0x30 [ 1102.817172][T19716] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1102.823837][T19716] ? sctp_do_sm+0x90a0/0x9720 [ 1102.828660][T19716] ? kmsan_get_metadata+0xfb/0x160 [ 1102.833931][T19716] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1102.840318][T19716] ? kmsan_get_metadata+0xfb/0x160 [ 1102.845585][T19716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1102.851553][T19716] ? __schedule+0x31/0x82e0 [ 1102.856180][T19716] ? filter_irq_stacks+0x49/0x190 [ 1102.861357][T19716] ? stack_depot_save_flags+0x35/0x790 [ 1102.866945][T19716] ? kmsan_get_metadata+0xfb/0x160 [ 1102.872211][T19716] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1102.878694][T19716] ? kmsan_get_metadata+0xfb/0x160 [ 1102.883982][T19716] __msan_warning+0x1b/0x30 [ 1102.888627][T19716] __schedule+0x91e/0x82e0 [ 1102.893170][T19716] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1102.899426][T19716] ? kmsan_get_metadata+0xfb/0x160 [ 1102.904694][T19716] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1102.911170][T19716] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1102.917387][T19716] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1102.923366][T19716] ? kmsan_get_metadata+0xfb/0x160 [ 1102.928636][T19716] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1102.935133][T19716] schedule+0x17d/0x3c0 [ 1102.939419][T19716] ? __sys_connect+0x449/0x680 [ 1102.944323][T19716] exit_to_user_mode_loop+0xa0/0x1b70 [ 1102.949849][T19716] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1102.956060][T19716] ? kmsan_get_metadata+0xfb/0x160 [ 1102.961324][T19716] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1102.966907][T19716] ? __ia32_sys_connect+0x95/0x100 [ 1102.972162][T19716] __do_fast_syscall_32+0x245/0x330 [ 1102.977536][T19716] do_fast_syscall_32+0x38/0x80 [ 1102.982538][T19716] do_SYSENTER_32+0x1f/0x30 [ 1102.987188][T19716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1102.993677][T19716] RIP: 0023:0xf70cd539 [ 1102.997825][T19716] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1103.017564][T19716] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 1103.026102][T19716] RAX: ffffffffffffff8d RBX: 0000000000000003 RCX: 0000000080000100 [ 1103.034162][T19716] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 1103.042219][T19716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.050279][T19716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1103.058346][T19716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.066470][T19716] [ 1103.069925][T19716] Kernel Offset: disabled [ 1103.074294][T19716] Rebooting in 86400 seconds..