last executing test programs: 6m15.519754805s ago: executing program 32 (id=15): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3"], 0x0, 0x4, 0x8f, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m13.1663616s ago: executing program 5 (id=682): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="81000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) 3m13.002128012s ago: executing program 5 (id=686): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x40, 0x15, 0x49, "3d36128b8289fa60080e75a3e360bba87b165fc5a5e835b8b22a0f26f87801ae6ed5289809b307d6270203f951c71aae136ae31be89376dcabee844e2c5e01ba193ffcab3b09a58375"}, 0x0, 0x0, &(0x7f0000000440), 0x0}) 3m10.221904394s ago: executing program 33 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$security_ima(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x1, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) 3m9.931956001s ago: executing program 5 (id=694): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m8.360217607s ago: executing program 5 (id=697): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="81000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) 3m6.412664527s ago: executing program 5 (id=700): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000600)={'veth1_macvtap\x00', @broadcast}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x300000e, 0x401d031, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000001680), 0x80000) fstat(r0, &(0x7f0000002a40)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000004c0)={0x6, 0x9, 0x6, 0x7ff, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x1, 0x10000, 0x1, 0x0, 0x1, 0x40000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1fffffff}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0xff4, &(0x7f0000002000)=""/4084}, 0x80) 3m4.978632607s ago: executing program 5 (id=702): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 2m49.622471201s ago: executing program 34 (id=702): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 2m43.433735438s ago: executing program 0 (id=759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000280)={{0x70000, 0xffff1000, 0xf000, 0x7, 0x7f, 0x9, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x44, 0xfa, 0x5}, {0xa000, 0x200000, 0x0, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x1, 0xb2, 0x80}, {0x10000, 0xeeef0000, 0xb, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x7f, 0x9}, {0x2000, 0x41000, 0xf, 0x9, 0x5, 0x2, 0x6, 0xf1, 0x7, 0x6e, 0x3, 0x2}, {0x0, 0x60000, 0xe, 0x2, 0x6, 0x2, 0x4, 0x5, 0xf7, 0xe, 0x6, 0xa}, {0x54000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x9, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0x9, 0xf, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x7f}, {0xd000, 0x2}, {0x80a0000, 0xff83}, 0x2, 0x0, 0x6000, 0x2021, 0x7, 0xf800, 0x8000900, 0x1, [0x0, 0x4, 0x3, 0x3]}) 2m43.000084953s ago: executing program 0 (id=761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0xc15, &(0x7f0000001940)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) madvise(&(0x7f00005f3000/0x1000)=nil, 0x1000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpid() syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 2m41.140146736s ago: executing program 0 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2d) keyctl$read(0xb, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x9) keyctl$join(0x1, 0xffffffffffffffff) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000440)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x12) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x25fffffc, 0xcffffff, 0x2}) 2m39.098553663s ago: executing program 0 (id=771): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) mkdir(&(0x7f0000000140)='./config\x00', 0xff) mount(0x0, 0x0, &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='0x4', 0x3) 2m37.560040223s ago: executing program 0 (id=775): r0 = syz_ublk_setup_io_uring(0x277c, &(0x7f0000000000)={0x0, 0xcdcb, 0x5ca8d8e385635c54, 0x0, 0x3cd}, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = syz_open_procfs(r1, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000200)={0x1, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32=0x1, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffff0400000100"/28], 0x50) 2m34.631486785s ago: executing program 0 (id=779): r0 = openat$rtc(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x1c91) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r2, &(0x7f0000007180)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x2, 0x4000000) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000300001000000000000000000040100800c0002000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b108"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x13, r1, 0x5d01000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) sendfile(r5, r4, &(0x7f0000001000)=0xef, 0xe) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.'], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@fallback, 0xffffffffffffffff, 0x2f, 0x2008, 0x4}, 0x20) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="11", 0x1, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x3, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x9, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x3, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) mknodat$loop(r4, &(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x641, 0x0) read$hiddev(r5, &(0x7f0000000040)=""/117, 0x75) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000001900)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1158}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c0c5}, 0x51) socket$nl_netfilter(0x10, 0x3, 0xc) 2m34.596080591s ago: executing program 4 (id=780): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2d) keyctl$read(0xb, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x9) keyctl$join(0x1, 0xffffffffffffffff) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000440)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x12) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x25fffffc, 0xcffffff, 0x2}) 2m33.710395134s ago: executing program 4 (id=782): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m32.310178967s ago: executing program 4 (id=783): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0xa, 0x2, '1['}, 0x0, 0x0, 0x0, 0x0}) 2m28.064091735s ago: executing program 4 (id=787): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd, @fda={0x66646185, 0x1, 0x0, 0xb}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1040}], 0x0, 0x0, 0x0}) 2m27.83712681s ago: executing program 4 (id=789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x5, 0x1, 0x401, 0x4000000000, 0x6, 0x0, 0x7fffffffffffffff, 0x7, 0xffffffffffff83a2, 0x6, 0x10, 0x0, 0x80, 0x4, 0x4d7f, 0xa75], 0xdddd1000, 0x29083}) 2m27.510940833s ago: executing program 4 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2d) keyctl$read(0xb, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x9) keyctl$join(0x1, 0xffffffffffffffff) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000440)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x12) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x25fffffc, 0xcffffff, 0x2}) 2m19.075018328s ago: executing program 35 (id=779): r0 = openat$rtc(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x1c91) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r2, &(0x7f0000007180)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x2, 0x4000000) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000300001000000000000000000040100800c0002000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b108"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x13, r1, 0x5d01000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) sendfile(r5, r4, &(0x7f0000001000)=0xef, 0xe) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.'], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@fallback, 0xffffffffffffffff, 0x2f, 0x2008, 0x4}, 0x20) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="11", 0x1, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x3, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x9, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x3, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) mknodat$loop(r4, &(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x641, 0x0) read$hiddev(r5, &(0x7f0000000040)=""/117, 0x75) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000001900)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1158}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c0c5}, 0x51) socket$nl_netfilter(0x10, 0x3, 0xc) 2m11.430512129s ago: executing program 36 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2d) keyctl$read(0xb, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x9) keyctl$join(0x1, 0xffffffffffffffff) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000440)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x12) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x25fffffc, 0xcffffff, 0x2}) 1m30.849007683s ago: executing program 7 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x86}, 0x4e040) 1m29.37621597s ago: executing program 7 (id=1050): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000001700)='./sys\x00', 0xc4) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) write(r0, &(0x7f0000001d00)='0 4 0 2', 0x7) 1m29.244664196s ago: executing program 7 (id=1053): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000300)={[{@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x4, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) sync() unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m28.386949603s ago: executing program 7 (id=1056): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0xa, 0x2, '1['}, 0x0, 0x0, 0x0, 0x0}) 1m25.192172256s ago: executing program 7 (id=1067): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x5}, 0x8) 1m24.287281982s ago: executing program 7 (id=1072): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x80, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x8000007, 0x200005}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 1m20.464454818s ago: executing program 6 (id=1090): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x87}, 0x10) 1m20.30001943s ago: executing program 6 (id=1092): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406", @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000012c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\v3'], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x30, 0x1, "fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x84, 0x1, '6'}, 0x0}) 1m17.509941944s ago: executing program 6 (id=1104): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x1, 0x10000, 0x1, 0x0, 0x1, 0x40000}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1fffffff}]}, &(0x7f0000000380)='GPL\x00', 0x2}, 0x94) 1m17.328239899s ago: executing program 6 (id=1105): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1a9) ioctl$BLKTRACETEARDOWN(r0, 0x1260, 0x0) 1m17.255075074s ago: executing program 6 (id=1106): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000047c0), &(0x7f0000004800), &(0x7f0000004840)) mkdir(&(0x7f0000000040)='my_tracefs\x00', 0x1cc) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {0x0}], 0x2) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1m17.128691088s ago: executing program 6 (id=1107): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000001980)={0x8}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) 1m8.907515772s ago: executing program 37 (id=1072): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x80, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x8000007, 0x200005}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 1m1.465297843s ago: executing program 38 (id=1107): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000001980)={0x8}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) 17.398132347s ago: executing program 8 (id=1403): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.02140998s ago: executing program 9 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) close(0xffffffffffffffff) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.359034159s ago: executing program 9 (id=1434): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1484a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000d00), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x3f, 0x0, &(0x7f0000000c00)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 6.895821275s ago: executing program 9 (id=1438): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = gettid() sched_rr_get_interval(r1, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) syz_mount_image$fuse(0x0, 0x0, 0x1100010, 0x0, 0x1, 0x0, &(0x7f0000000300)="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") pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000000c0)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1040, 0x9) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r4, &(0x7f00000005c0)=ANY=[], 0x78) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r6 = openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r6, &(0x7f0000000900)='0', 0x1) 6.506043351s ago: executing program 8 (id=1442): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="120000"], 0x50) 6.444665153s ago: executing program 1 (id=1443): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000a80)={'veth1_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 6.443664913s ago: executing program 9 (id=1444): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r4, 0xffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x5}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000005c0)={0x2, r4, 'id1\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10, r2}, 0x18) pidfd_getfd(0xffffffffffffffff, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 5.68817216s ago: executing program 2 (id=1445): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3}, 0x28) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x4000003}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a50679baf75e3aa7774f87987e5460c109d882afd2c2bfb760eaaae9b071cf23", @ANYRES16=0x0], 0x1, 0x195, &(0x7f0000000440)="$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") 5.68805245s ago: executing program 8 (id=1446): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0xa, 0x2, '1['}, 0x0, 0x0, 0x0, 0x0}) 4.571688228s ago: executing program 3 (id=1448): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x24d, &(0x7f0000000c80)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r0, &(0x7f00000006c0)=[{0x0}], 0x1, 0x8001, 0x804) 4.45569184s ago: executing program 1 (id=1449): mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xcc84f000) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x77, 0x101301) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b341, 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) 4.45545279s ago: executing program 2 (id=1450): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) write(r3, &(0x7f0000000700)="ffffffffffff0011223344550806", 0xe) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000240)) keyctl$search(0xa, r2, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r2) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x54, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000200900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e61740070000000060a0104"], 0xe0}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d8bcd00005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766c1cb010052f436dd2a", 0x2a}, {&(0x7f0000000440)="aa1d484e0a4e130000008133d576983340cb31a5fc977c2e4891f7c08bfcd111fbdf23ea", 0x24}], 0x2) 4.3061741s ago: executing program 3 (id=1451): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x1a9) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0xc}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 4.015927576s ago: executing program 2 (id=1452): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.652737252s ago: executing program 3 (id=1453): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2.583621685s ago: executing program 8 (id=1454): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(r0, &(0x7f0000004d00)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x9, 0x80000002) 2.531815195s ago: executing program 2 (id=1455): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 2.384231675s ago: executing program 3 (id=1456): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f00000000c0)="03ee01550c"}, 0x20) 2.347766941s ago: executing program 8 (id=1457): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)='|D', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="01", 0x1}], 0x1}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) io_uring_setup(0x1b22, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) shutdown(r0, 0x1) 2.314058608s ago: executing program 1 (id=1458): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711815000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010a29bd7000fbdbdf2500000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00&\x00l\t\x00\x00\b\x00W\x00e\b\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 2.212038488s ago: executing program 2 (id=1459): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000a80)={'veth1_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 2.19898448s ago: executing program 3 (id=1460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) 796.441174ms ago: executing program 1 (id=1461): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x5}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000005c0)={0x2, r3, 'id1\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10}, 0x18) pidfd_getfd(0xffffffffffffffff, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) 713.6129ms ago: executing program 9 (id=1462): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) write(r3, &(0x7f0000000700)="ffffffffffff0011223344550806", 0xe) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000240)) keyctl$search(0xa, r2, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r2) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x54, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000200900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e61740070000000060a010400000000000000000100000008000b400000000048000480300001800b000100746172676574000020000280050003000000"], 0xe0}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d8bcd00005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766c1cb010052f436dd2a", 0x2a}, {&(0x7f0000000440)="aa1d484e0a4e130000008133d576983340cb31a5fc977c2e4891f7c08bfcd111fbdf23ea", 0x24}], 0x2) 322.433677ms ago: executing program 1 (id=1463): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000940)={[{@journal_dev={'journal_dev', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@errors_remount}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) symlinkat(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 298.837551ms ago: executing program 8 (id=1464): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0xa, 0x2, '1['}, 0x0, 0x0, 0x0, 0x0}) 140.626102ms ago: executing program 3 (id=1465): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 85.024013ms ago: executing program 1 (id=1466): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_settime(r1, 0x0, &(0x7f00000003c0)={{}, {0x77359400}}, &(0x7f0000000400)) wait4(r0, 0x0, 0x8, 0x0) ptrace$setopts(0x4200, r0, 0xf32, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$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") 83.999863ms ago: executing program 9 (id=1467): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 0s ago: executing program 2 (id=1468): mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xcc84f000) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x77, 0x101301) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b341, 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) kernel console output (not intermixed with test programs): address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.310371][ T7336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.310377][ T7336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.310384][ T7336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.311182][ T7336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.312905][ T7336] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.312928][ T7336] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.312944][ T7336] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.312960][ T7336] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.352526][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.352972][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.353316][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.353658][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.544546][ T3045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.544562][ T3045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.545314][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.571673][ T7466] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.571748][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.572557][ T7466] device bridge_slave_0 entered promiscuous mode [ 319.581397][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.581458][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.590359][ T7466] device bridge_slave_1 entered promiscuous mode [ 319.695621][ T7466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.708532][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.708552][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.720249][ T7466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.729356][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 319.771852][ T7466] team0: Port device team_slave_0 added [ 319.773962][ T7466] team0: Port device team_slave_1 added [ 319.808730][ T7509] loop6: detected capacity change from 0 to 512 [ 319.894802][ T7509] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 319.939069][ T7509] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 319.939168][ T7509] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.967881][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.967894][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.967909][ T7466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.985893][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.985906][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.985921][ T7466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.100416][ T7516] wlan0 speed is unknown, defaulting to 1000 [ 320.212545][ T7466] device hsr_slave_0 entered promiscuous mode [ 320.223211][ T7466] device hsr_slave_1 entered promiscuous mode [ 320.223571][ T7466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.223586][ T7466] Cannot create hsr debugfs directory [ 320.626448][ T4196] Bluetooth: hci6: command 0x0409 tx timeout [ 320.707822][ T4227] logitech-hidpp-device 0005:046D:B012.0005: unbalanced collection at end of report description [ 320.708083][ T4227] logitech-hidpp-device 0005:046D:B012.0005: hidpp_probe:parse failed [ 320.708160][ T4227] logitech-hidpp-device: probe of 0005:046D:B012.0005 failed with error -22 [ 321.192209][ T7466] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 321.248617][ T7466] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 321.250330][ T7466] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 321.259699][ T7466] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 321.734587][ T7556] loop6: detected capacity change from 0 to 512 [ 321.749587][ T7466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.790558][ T7556] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 321.791842][ T7556] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 321.791911][ T7556] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.804496][ T7556] EXT4-fs (loop6): shut down requested (2) [ 321.815194][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.815573][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.831707][ T7466] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.847705][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.848093][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.848306][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.848330][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.848577][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.869289][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.869708][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.869926][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.869955][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.064036][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.071088][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.118064][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.118875][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.120312][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.138268][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.139399][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.288016][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.288453][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.299419][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.299791][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.557327][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.632927][ T7575] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 322.632991][ T7575] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 322.635683][ T4232] Bluetooth: hci6: command 0x041b tx timeout [ 322.638427][ T7579] vhci_hcd: xmit failed -107 [ 322.653208][ T7575] vhci_hcd vhci_hcd.0: Device attached [ 322.657306][ T3045] vhci_hcd: stop threads [ 322.657326][ T3045] vhci_hcd: release socket [ 322.657350][ T3045] vhci_hcd: disconnect device [ 324.168622][ T7600] loop8: detected capacity change from 0 to 512 [ 324.254804][ T7600] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 324.266278][ T7600] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 324.266355][ T7600] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.268811][ T7600] EXT4-fs (loop8): shut down requested (2) [ 324.676911][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.677004][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.746322][ T7466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.781281][ T1107] Bluetooth: hci6: command 0x040f tx timeout [ 324.819567][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.8.888'. [ 324.949612][ T7627] loop8: detected capacity change from 0 to 256 [ 324.973130][ T7627] exfat: Bad value for 'uid' [ 325.154203][ T7] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 325.581940][ T7] usb 4-1: device descriptor read/64, error -71 [ 327.087083][ T4228] Bluetooth: hci6: command 0x0419 tx timeout [ 327.134243][ T7] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 327.335147][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.899'. [ 327.394256][ T7] usb 4-1: device descriptor read/64, error -71 [ 327.478421][ T7668] loop6: detected capacity change from 0 to 256 [ 327.491039][ T7668] exfat: Bad value for 'uid' [ 327.514362][ T7] usb usb4-port1: attempt power cycle [ 327.518933][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 327.519413][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.626998][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.627440][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.627996][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.628363][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.664385][ T7466] device veth0_vlan entered promiscuous mode [ 327.727163][ T7466] device veth1_vlan entered promiscuous mode [ 327.802396][ T7677] Config c1/1 of g1 needs at least one function. [ 327.802476][ T7677] udc usbip-vudc.0: failed to start g1: -22 [ 327.868823][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 327.869374][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 327.869905][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 327.870345][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.888195][ T7466] device veth0_macvtap entered promiscuous mode [ 327.924256][ T7] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 327.928631][ T7466] device veth1_macvtap entered promiscuous mode [ 328.040792][ T7682] loop7: detected capacity change from 0 to 1024 [ 328.077098][ T7466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.077115][ T7466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.077121][ T7466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.077129][ T7466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.077137][ T7466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.077144][ T7466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.077151][ T7466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.077158][ T7466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.077164][ T7466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.077270][ T7466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.089707][ T7466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.091697][ T7466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.091712][ T7466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.091717][ T7466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.091724][ T7466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.091732][ T7466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.091739][ T7466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.091745][ T7466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.091752][ T7466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.091758][ T7466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.091765][ T7466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.092567][ T7466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.120199][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 328.120681][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 328.121035][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 328.121362][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.121691][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 328.122010][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.129260][ T7466] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.129285][ T7466] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.129301][ T7466] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.129317][ T7466] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.237400][ T7] usb 4-1: device not accepting address 29, error -71 [ 328.256406][ T7682] hfsplus: invalid length 32517 has been corrected to 255 [ 328.271378][ T26] audit: type=1800 audit(1790824300.018:20): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.904" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 329.827177][ T7692] hfsplus: b-tree write err: -5, ino 20 [ 330.063557][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.910'. [ 330.298478][ T4196] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 330.326328][ T4655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.326347][ T4655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.328063][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.677375][ T4655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.677392][ T4655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.677546][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.694207][ T4196] usb 9-1: Using ep0 maxpacket: 16 [ 330.814437][ T4196] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.814458][ T4196] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.844214][ T7] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 330.904373][ T4196] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 330.904395][ T4196] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 330.904408][ T4196] usb 9-1: SerialNumber: syz [ 330.946174][ T4196] usb 9-1: 0:2 : does not exist [ 331.082708][ T7735] loop9: detected capacity change from 0 to 1024 [ 331.095180][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 331.095204][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 331.095219][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.095241][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.095255][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.096357][ T7] usb 4-1: config 0 descriptor?? [ 331.116170][ T7714] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 331.118347][ T4655] hfsplus: b-tree write err: -5, ino 20 [ 331.944928][ T4232] Bluetooth: hci6: command 0x0411 tx timeout [ 332.034164][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 332.034220][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 332.039100][ T7] usb 4-1: USB disconnect, device number 30 [ 332.541885][ T7739] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 332.543706][ T7739] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 332.543989][ T7741] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 332.544776][ T7741] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 332.755542][ T7751] binder: 7743:7751 ioctl c0306201 200000000080 returned -14 [ 332.756802][ T7751] binder: BINDER_SET_CONTEXT_MGR already set [ 332.756812][ T7751] binder: 7743:7751 ioctl 4018620d 200000004a80 returned -16 [ 332.898050][ T7475] usb 9-1: USB disconnect, device number 2 [ 333.360438][ T7763] loop7: detected capacity change from 0 to 256 [ 333.369829][ T7763] exfat: Bad value for 'uid' [ 333.685455][ T7757] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 333.711696][ T3045] hfsplus: b-tree write err: -5, ino 25 [ 333.711878][ T3045] hfsplus: b-tree write err: -5, ino 4 [ 333.711933][ T3045] hfsplus: b-tree write err: -5, ino 2 [ 333.716074][ T3045] hfsplus: b-tree write err: -5, ino 26 [ 333.719629][ T3045] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 333.849173][ T7770] loop3: detected capacity change from 0 to 512 [ 333.878500][ T7770] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 335.610150][ T7770] EXT4-fs (loop3): 1 truncate cleaned up [ 335.610171][ T7770] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.365145][ T7796] loop6: detected capacity change from 0 to 1024 [ 336.406272][ T7796] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 336.423049][ T7796] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 336.423688][ T7796] EXT4-fs (loop6): orphan cleanup on readonly fs [ 336.424011][ T7796] EXT4-fs error (device loop6): ext4_read_inode_bitmap:168: comm syz.6.928: Inode bitmap for bg 0 marked uninitialized [ 336.424810][ T7796] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 336.514172][ T7475] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 336.514237][ T1107] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 336.874405][ T1107] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.874433][ T1107] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 336.874448][ T1107] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 336.874470][ T1107] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 336.874492][ T1107] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 336.874506][ T1107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.875027][ T7475] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 336.875047][ T7475] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 336.875067][ T7475] usb 10-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 336.875082][ T7475] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.879174][ T7475] usb 10-1: config 0 descriptor?? [ 336.895509][ T7793] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 336.895600][ T7793] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 336.916064][ T1107] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 336.916815][ T1107] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 336.917741][ T1107] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 336.918321][ T1107] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 336.918887][ T1107] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 336.919429][ T1107] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 336.919911][ T1107] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 337.073995][ T7816] loop3: detected capacity change from 0 to 1024 [ 337.102419][ T7816] EXT4-fs (loop3): Ignoring removed orlov option [ 337.147923][ T7816] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 337.883744][ T7475] usbhid 10-1:0.0: can't add hid device: -71 [ 337.883796][ T7475] usbhid: probe of 10-1:0.0 failed with error -71 [ 337.887050][ T7475] usb 10-1: USB disconnect, device number 2 [ 338.305172][ T7836] loop3: detected capacity change from 0 to 512 [ 338.431795][ T7836] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nogrpid,dioread_lock,,errors=continue. Quota mode: writeback. [ 338.431867][ T7836] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.573383][ T7475] usb 8-1: USB disconnect, device number 3 [ 338.577683][ T7475] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 338.588382][ T7475] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 338.588709][ T7475] keyspan 8-1:1.0: device disconnected [ 338.965305][ T7843] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 340.553638][ T7863] loop3: detected capacity change from 0 to 1024 [ 340.615423][ T7863] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 340.638895][ T7863] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 340.639523][ T7863] EXT4-fs (loop3): orphan cleanup on readonly fs [ 340.639846][ T7863] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.943: Inode bitmap for bg 0 marked uninitialized [ 340.640270][ T7863] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 341.364895][ T7888] loop3: detected capacity change from 0 to 512 [ 341.383319][ T7888] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 341.391639][ T7888] EXT4-fs (loop3): 1 truncate cleaned up [ 341.391659][ T7888] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 341.582951][ T7892] loop3: detected capacity change from 0 to 512 [ 341.609190][ T7892] EXT4-fs (loop3): Ignoring removed bh option [ 341.629197][ T7892] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.952: corrupted in-inode xattr [ 341.629499][ T7892] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.952: couldn't read orphan inode 15 (err -117) [ 341.629789][ T7892] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 341.684261][ T4227] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 341.751195][ T7900] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.952: Unrecognised inode hash code 4 [ 341.751258][ T7900] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.952: Corrupt directory, running e2fsck is recommended [ 341.751332][ T7900] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #12: comm syz.3.952: corrupted in-inode xattr [ 341.779806][ T7900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.952'. [ 342.055231][ T7902] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 342.104250][ T4227] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 342.104279][ T4227] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 342.104308][ T4227] usb 7-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 342.104323][ T4227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.107015][ T4227] usb 7-1: config 0 descriptor?? [ 343.244298][ T4227] usbhid 7-1:0.0: can't add hid device: -71 [ 343.244357][ T4227] usbhid: probe of 7-1:0.0 failed with error -71 [ 343.249763][ T4227] usb 7-1: USB disconnect, device number 5 [ 343.679903][ T7922] loop7: detected capacity change from 0 to 1024 [ 343.703246][ T7922] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 343.728783][ T7922] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 343.729468][ T7922] EXT4-fs (loop7): orphan cleanup on readonly fs [ 343.729816][ T7922] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.958: Inode bitmap for bg 0 marked uninitialized [ 343.730251][ T7922] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 344.278749][ T7941] loop7: detected capacity change from 0 to 128 [ 344.312578][ T7941] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 344.321581][ T7941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.404169][ T7475] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 344.523902][ T7948] loop7: detected capacity change from 0 to 512 [ 344.562038][ T7948] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 344.738631][ T7948] EXT4-fs (loop7): 1 truncate cleaned up [ 344.738652][ T7948] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 344.762637][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.9.967'. [ 344.851335][ T7959] binder: 7958:7959 ioctl c0306201 200000000080 returned -14 [ 345.033014][ T7475] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 345.033038][ T7475] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 345.033053][ T7475] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.033076][ T7475] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.033091][ T7475] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.034264][ T7475] usb 9-1: config 0 descriptor?? [ 345.150959][ T7934] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 345.154357][ T7957] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 345.238448][ T7968] loop7: detected capacity change from 0 to 1024 [ 345.303189][ T7968] hfsplus: invalid length 32517 has been corrected to 255 [ 345.321165][ T26] audit: type=1800 audit(1790824317.068:21): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.969" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 345.322110][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.7.969'. [ 345.355690][ T7978] loop6: detected capacity change from 0 to 1024 [ 345.384757][ T7969] hfsplus: b-tree write err: -5, ino 20 [ 345.423539][ T7978] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 345.441962][ T7978] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 345.442606][ T7978] EXT4-fs (loop6): orphan cleanup on readonly fs [ 345.442959][ T7978] EXT4-fs error (device loop6): ext4_read_inode_bitmap:168: comm syz.6.972: Inode bitmap for bg 0 marked uninitialized [ 345.443444][ T7978] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 345.607349][ T7475] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 345.608080][ T7475] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 345.612605][ T7475] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 345.626347][ T4196] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 345.880027][ T7475] usb 9-1: USB disconnect, device number 3 [ 345.918603][ T4291] hfsplus: b-tree write err: -5, ino 20 [ 345.931404][ T7987] fido_id[7987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 345.985891][ T4196] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 345.985918][ T4196] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 345.985942][ T4196] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 345.985957][ T4196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.987149][ T4196] usb 4-1: config 0 descriptor?? [ 346.059557][ T7994] capability: warning: `syz.7.977' uses deprecated v2 capabilities in a way that may be insecure [ 346.484177][ T7998] loop7: detected capacity change from 0 to 8 [ 346.719999][ T8008] loop7: detected capacity change from 0 to 512 [ 346.748542][ T8008] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 346.757282][ T8008] EXT4-fs (loop7): 1 truncate cleaned up [ 346.757301][ T8008] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 346.824319][ T4196] usbhid 4-1:0.0: can't add hid device: -71 [ 346.824409][ T4196] usbhid: probe of 4-1:0.0 failed with error -71 [ 346.827041][ T4196] usb 4-1: USB disconnect, device number 31 [ 347.841658][ T8017] loop7: detected capacity change from 0 to 512 [ 348.322974][ T8017] EXT4-fs (loop7): group quota file already specified [ 348.528124][ T8028] loop7: detected capacity change from 0 to 1024 [ 348.563835][ T8028] hfsplus: invalid length 32517 has been corrected to 255 [ 348.593058][ T26] audit: type=1800 audit(1790824320.338:22): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.987" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 348.594591][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.7.987'. [ 348.602701][ T8032] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 348.635966][ T8023] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 348.688830][ T8028] hfsplus: b-tree write err: -5, ino 20 [ 348.815532][ T8035] loop3: detected capacity change from 0 to 8 [ 349.356269][ T4232] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 349.404625][ T4313] hfsplus: b-tree write err: -5, ino 20 [ 349.663396][ T8063] loop7: detected capacity change from 0 to 256 [ 349.674992][ T8063] exfat: Bad value for 'uid' [ 349.714329][ T4232] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 349.714351][ T4232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.715518][ T4232] usb 10-1: config 0 descriptor?? [ 349.758736][ T4232] cp210x 10-1:0.0: cp210x converter detected [ 349.972168][ T8071] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 349.972188][ T8071] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 349.972787][ T8071] vhci_hcd vhci_hcd.0: Device attached [ 349.974315][ T4232] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 349.974338][ T4232] cp210x 10-1:0.0: querying part number failed [ 349.975586][ T4232] usb 10-1: cp210x converter now attached to ttyUSB0 [ 349.982704][ T8075] vhci_hcd: xmit failed -107 [ 350.778318][ T4313] vhci_hcd: stop threads [ 350.778382][ T4313] vhci_hcd: release socket [ 350.779898][ T4313] vhci_hcd: disconnect device [ 350.957495][ T4228] vhci_hcd: vhci_device speed not set [ 351.829499][ T8083] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 351.937237][ T1107] usb 10-1: USB disconnect, device number 3 [ 351.938779][ T1107] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 351.939039][ T1107] cp210x 10-1:0.0: device disconnected [ 352.090312][ T8094] device wlan0 entered promiscuous mode [ 352.130167][ T8096] loop6: detected capacity change from 0 to 1024 [ 352.195250][ T8096] hfsplus: invalid length 32517 has been corrected to 255 [ 352.209478][ T26] audit: type=1800 audit(1790824323.958:23): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1004" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 352.345943][ T8103] loop3: detected capacity change from 0 to 128 [ 352.368011][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1004'. [ 352.393750][ T8102] hfsplus: b-tree write err: -5, ino 20 [ 352.403397][ T8105] loop9: detected capacity change from 0 to 256 [ 352.415837][ T8105] exfat: Bad value for 'uid' [ 352.686415][ T8115] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 352.686435][ T8115] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 352.686502][ T8115] vhci_hcd vhci_hcd.0: Device attached [ 352.688534][ T8119] vhci_hcd: xmit failed -107 [ 352.692754][ T3045] vhci_hcd: stop threads [ 352.692771][ T3045] vhci_hcd: release socket [ 352.692788][ T3045] vhci_hcd: disconnect device [ 352.804690][ T8113] fuse: root generation should be zero [ 353.322782][ T3045] hfsplus: b-tree write err: -5, ino 20 [ 353.900181][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 353.902545][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 353.943754][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 354.066081][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 354.104983][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 354.106359][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 354.107632][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 354.456525][ T8153] loop6: detected capacity change from 0 to 256 [ 354.473295][ T8153] exfat: Bad value for 'uid' [ 354.621096][ T8157] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 354.621116][ T8157] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 354.621157][ T8157] vhci_hcd vhci_hcd.0: Device attached [ 354.623125][ T8159] vhci_hcd: xmit failed -107 [ 354.623318][ T154] vhci_hcd: stop threads [ 354.623329][ T154] vhci_hcd: release socket [ 354.623471][ T154] vhci_hcd: disconnect device [ 354.843164][ T8164] sctp_transport_update_pmtu: 48 callbacks suppressed [ 354.843228][ T8164] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 354.843449][ T8164] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 354.843619][ T8164] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 354.843803][ T8164] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 354.845579][ T8164] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 354.845774][ T8164] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 354.845960][ T8164] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 354.846149][ T8164] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 354.846355][ T8164] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 354.846540][ T8164] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 354.869187][ T8169] binder: BINDER_SET_CONTEXT_MGR already set [ 354.869198][ T8169] binder: 8167:8169 ioctl 4018620d 200000004a80 returned -16 [ 355.795234][ T8183] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 355.907237][ T8196] loop7: detected capacity change from 0 to 256 [ 355.933638][ T8196] exfat: Bad value for 'uid' [ 356.164096][ T7475] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 356.381454][ T8200] vhci_hcd vhci_hcd.0: failed to lookup sock [ 356.524365][ T7475] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 356.524542][ T7475] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 356.524565][ T7475] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.524615][ T7475] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.524635][ T7475] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.531737][ T7475] usb 7-1: config 0 descriptor?? [ 356.544357][ T8195] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 357.137371][ T8211] binder: BINDER_SET_CONTEXT_MGR already set [ 357.137383][ T8211] binder: 8209:8211 ioctl 4018620d 200000004a80 returned -16 [ 357.244376][ T7475] usbhid 7-1:0.0: can't add hid device: -71 [ 357.244428][ T7475] usbhid: probe of 7-1:0.0 failed with error -71 [ 357.249813][ T7475] usb 7-1: USB disconnect, device number 6 [ 357.702663][ T8223] binder: 8220:8223 ioctl c0306201 200000000080 returned -14 [ 357.847943][ T8228] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 357.914672][ T8231] loop9: detected capacity change from 0 to 128 [ 357.944959][ T8231] EXT4-fs (loop9): Test dummy encryption mode enabled [ 357.968957][ T8231] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 357.969071][ T8231] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 357.974491][ T8231] EXT4-fs warning (device loop9): verify_group_input:165: Last group not full [ 358.256795][ T8241] loop9: detected capacity change from 0 to 256 [ 358.284958][ T8241] exfat: Bad value for 'uid' [ 359.689344][ T8251] vhci_hcd vhci_hcd.0: failed to lookup sock [ 360.007178][ T8238] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 360.021390][ T8260] loop7: detected capacity change from 0 to 512 [ 360.181624][ T8267] loop3: detected capacity change from 0 to 1024 [ 360.188264][ T8260] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 360.188338][ T8260] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.277189][ T8267] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 360.293543][ T8267] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 360.294279][ T8267] EXT4-fs (loop3): orphan cleanup on readonly fs [ 360.294886][ T8267] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1054: Inode bitmap for bg 0 marked uninitialized [ 360.295398][ T8267] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 361.190120][ T4196] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 361.264178][ T4232] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 361.374189][ T4196] usb 8-1: device descriptor read/64, error -71 [ 361.504166][ T4232] usb 7-1: Using ep0 maxpacket: 16 [ 361.617022][ T8295] kvm: emulating exchange as write [ 361.624510][ T4232] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.624532][ T4232] usb 7-1: config 0 interface 0 has no altsetting 0 [ 361.624552][ T4232] usb 7-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 361.624567][ T4232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.625923][ T4232] usb 7-1: config 0 descriptor?? [ 361.651266][ T4196] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 361.836917][ T4196] usb 8-1: device descriptor read/64, error -71 [ 361.954207][ T4196] usb usb8-port1: attempt power cycle [ 362.424123][ T4196] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 362.514286][ T4196] usb 8-1: device descriptor read/8, error -71 [ 362.784454][ T4196] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 362.874267][ T4196] usb 8-1: device descriptor read/8, error -71 [ 362.994210][ T4196] usb usb8-port1: unable to enumerate USB device [ 363.875098][ T8318] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 364.014647][ T4232] usbhid 7-1:0.0: can't add hid device: -71 [ 364.014701][ T4232] usbhid: probe of 7-1:0.0 failed with error -71 [ 364.019266][ T4232] usb 7-1: USB disconnect, device number 7 [ 364.394271][ T7] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 364.405349][ T8331] loop9: detected capacity change from 0 to 1024 [ 364.478252][ T8331] attempt to access beyond end of device [ 364.478252][ T8331] loop9: rw=0, want=917506, limit=1024 [ 364.478459][ T8331] Buffer I/O error on dev loop9, logical block 458752, async page read [ 364.478529][ T8331] attempt to access beyond end of device [ 364.478529][ T8331] loop9: rw=0, want=917506, limit=1024 [ 364.478542][ T8331] Buffer I/O error on dev loop9, logical block 458752, async page read [ 364.619062][ T8335] binder: BINDER_SET_CONTEXT_MGR already set [ 364.619073][ T8335] binder: 8334:8335 ioctl 4018620d 200000000040 returned -16 [ 364.737848][ T7] usb 9-1: not running at top speed; connect to a high speed hub [ 364.822972][ T7] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 364.822991][ T7] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.823002][ T7] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 364.823026][ T7] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 364.823041][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.867208][ T7] uvcvideo 9-1:1.0: Found multiple Units with ID 1 [ 364.867252][ T7] usb 9-1: Found UVC 71.01 device (0000:0000) [ 364.867393][ T7] usb 9-1: No streaming interface found for terminal 2. [ 365.068684][ T7475] usb 9-1: USB disconnect, device number 4 [ 365.984206][ T7475] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 366.034210][ T4232] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 366.184104][ T7475] usb 9-1: device descriptor read/64, error -71 [ 366.274130][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 366.394386][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.394405][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.454231][ T7475] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 366.474386][ T4232] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 366.474408][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 366.474420][ T4232] usb 4-1: SerialNumber: syz [ 366.529215][ T4232] usb 4-1: 0:2 : does not exist [ 366.529253][ T4232] usb 4-1: unit 5 not found! [ 366.644118][ T7475] usb 9-1: device descriptor read/64, error -71 [ 366.764215][ T7475] usb usb9-port1: attempt power cycle [ 367.174174][ T7475] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 367.264213][ T7475] usb 9-1: device descriptor read/8, error -71 [ 367.534141][ T7475] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 367.624211][ T7475] usb 9-1: device descriptor read/8, error -71 [ 367.747228][ T7475] usb usb9-port1: unable to enumerate USB device [ 367.925537][ T4232] usb 4-1: USB disconnect, device number 32 [ 368.212948][ T8411] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 368.228748][ T8409] device wlan0 entered promiscuous mode [ 368.298784][ T8414] loop6: detected capacity change from 0 to 1024 [ 368.334758][ T8414] hfsplus: invalid length 32517 has been corrected to 255 [ 368.345064][ T26] audit: type=1800 audit(1790824340.098:24): pid=8414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1088" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 368.365163][ T8414] hfsplus: b-tree write err: -5, ino 20 [ 368.571873][ T154] hfsplus: b-tree write err: -5, ino 20 [ 369.614164][ T7] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 369.854182][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 369.974207][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.974228][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.054779][ T7] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 370.054806][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.054819][ T7] usb 7-1: SerialNumber: syz [ 370.096138][ T7] usb 7-1: 0:2 : does not exist [ 370.096176][ T7] usb 7-1: unit 5 not found! [ 370.988651][ T8456] loop9: detected capacity change from 0 to 16 [ 371.010006][ T8456] erofs: (device loop9): mounted with root inode @ nid 36. [ 371.094160][ T7475] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 371.284148][ T7475] usb 4-1: device descriptor read/64, error -71 [ 371.502287][ T4196] usb 7-1: USB disconnect, device number 8 [ 371.554180][ T7475] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 371.744283][ T7475] usb 4-1: device descriptor read/64, error -71 [ 371.864299][ T7475] usb usb4-port1: attempt power cycle [ 372.274231][ T7475] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 372.364318][ T7475] usb 4-1: device descriptor read/8, error -71 [ 372.634280][ T7475] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 372.724292][ T7475] usb 4-1: device descriptor read/8, error -71 [ 372.844345][ T7475] usb usb4-port1: unable to enumerate USB device [ 374.852239][ T8510] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1111'. [ 375.454314][ T7] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 375.694220][ T7] usb 10-1: Using ep0 maxpacket: 16 [ 375.820089][ T7] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.820110][ T7] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.831477][ T8522] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 6 (only 8 groups) [ 375.894401][ T7] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 375.894422][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 375.894434][ T7] usb 10-1: SerialNumber: syz [ 375.935890][ T7] usb 10-1: 0:2 : does not exist [ 375.935928][ T7] usb 10-1: unit 5 not found! [ 376.016555][ T8526] loop8: detected capacity change from 0 to 512 [ 376.099360][ T8526] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 376.099926][ T8526] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 376.099948][ T8526] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 376.099957][ T8526] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 376.109888][ T8526] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 376.109905][ T8526] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8842c118, mo2=0000] [ 376.110523][ T8526] EXT4-fs (loop8): orphan cleanup on readonly fs [ 376.124732][ T8526] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1117: bg 0: block 34: padding at end of block bitmap is not set [ 376.136902][ T8526] Quota error (device loop8): write_blk: dquota write failed [ 376.137078][ T8526] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 376.137097][ T8526] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.1117: Failed to acquire dquot type 1 [ 376.158602][ T8526] EXT4-fs (loop8): 1 truncate cleaned up [ 376.178362][ T8526] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,debug,mb_optimize_scan=0x0000000000000001,acl,data_err=ignore,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback. [ 376.204822][ T8526] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 376.204859][ T8526] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8842c118, mo2=0080] [ 377.194598][ T8536] binder: 8535:8536 ioctl 4018620d 0 returned -22 [ 378.563091][ T4196] usb 10-1: USB disconnect, device number 4 [ 378.654491][ T8543] loop9: detected capacity change from 0 to 512 [ 378.677055][ T8545] loop3: detected capacity change from 0 to 512 [ 378.699547][ T8543] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 378.717735][ T8543] EXT4-fs (loop9): 1 truncate cleaned up [ 378.717757][ T8543] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 378.737989][ T8545] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 378.748477][ T8545] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1123: corrupted in-inode xattr [ 378.754352][ T8545] EXT4-fs (loop3): Remounting filesystem read-only [ 378.754405][ T8545] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1123: couldn't read orphan inode 15 (err -117) [ 378.754635][ T8545] EXT4-fs (loop3): Remounting filesystem read-only [ 378.754647][ T8545] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,inode_readahead_blks=0x0000000008000000,errors=remount-ro,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,. Quota mode: none. [ 378.796306][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.796337][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.975706][ T8554] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 6 (only 8 groups) [ 379.226451][ T4227] logitech-hidpp-device 0005:046D:B012.0007: Device not connected [ 379.423306][ T8567] binder: 8565:8567 ioctl 4018620d 0 returned -22 [ 379.723267][ T8550] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input55 [ 379.732721][ T8550] input: failed to attach handler evdev to device input55, error: -4 [ 381.914473][ T4196] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 381.994932][ T4232] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 382.021756][ T7] logitech-hidpp-device 0005:046D:B012.0008: Device not connected [ 382.049059][ T8588] wlan0 speed is unknown, defaulting to 1000 [ 382.106591][ T8594] loop8: detected capacity change from 0 to 128 [ 382.126721][ T8594] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 382.133928][ T8594] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 382.147562][ T8594] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 382.147643][ T8594] FAT-fs (loop8): Filesystem has been set read-only [ 382.159963][ T8594] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 382.242020][ T4232] usb 10-1: Using ep0 maxpacket: 16 [ 382.273890][ T4196] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.273910][ T4196] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.296610][ T8596] binder: 8595:8596 ioctl 4018620d 0 returned -22 [ 382.355046][ T4196] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 382.355067][ T4196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 382.355080][ T4196] usb 4-1: SerialNumber: syz [ 382.355593][ T4232] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 382.355607][ T4232] usb 10-1: config 0 has no interface number 0 [ 382.355624][ T4232] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 382.355639][ T4232] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 382.395367][ T8588] chnl_net:caif_netlink_parms(): no params data found [ 382.507195][ T4232] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 382.507217][ T4232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.507230][ T4232] usb 10-1: Product: syz [ 382.507238][ T4232] usb 10-1: Manufacturer: syz [ 382.507247][ T4232] usb 10-1: SerialNumber: syz [ 382.508382][ T4232] usb 10-1: config 0 descriptor?? [ 382.526267][ T8586] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 382.526325][ T8586] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 382.573209][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.578700][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.579405][ T8588] device bridge_slave_0 entered promiscuous mode [ 382.605197][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.605261][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.605982][ T8588] device bridge_slave_1 entered promiscuous mode [ 382.730413][ T4196] usb 4-1: 0:2 : does not exist [ 382.742982][ T8586] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 382.743050][ T8586] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 382.765604][ T8588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.767125][ T8588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.000912][ T4232] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 383.004756][ T4196] usb 4-1: USB disconnect, device number 37 [ 383.076637][ T8588] team0: Port device team_slave_0 added [ 383.082440][ T8588] team0: Port device team_slave_1 added [ 383.139999][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.140011][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.140026][ T8588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.143230][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.143241][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.143254][ T8588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.227581][ T8588] device hsr_slave_0 entered promiscuous mode [ 383.228768][ T8588] device hsr_slave_1 entered promiscuous mode [ 383.229455][ T8588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.229470][ T8588] Cannot create hsr debugfs directory [ 383.241288][ T7381] udevd[7381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.513535][ T8614] loop3: detected capacity change from 0 to 2048 [ 383.661057][ T4232] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 383.661083][ T4232] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 383.690229][ T4232] asix: probe of 10-1:0.34 failed with error -71 [ 383.816474][ T4196] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 383.930144][ T4232] usb 10-1: USB disconnect, device number 5 [ 384.049613][ T4196] usb 4-1: Using ep0 maxpacket: 8 [ 384.166275][ T4196] usb 4-1: config 245 has an invalid interface number: 249 but max is 2 [ 384.166296][ T4196] usb 4-1: config 245 has an invalid descriptor of length 0, skipping remainder of the config [ 384.166308][ T4196] usb 4-1: config 245 has no interface number 2 [ 384.166338][ T4196] usb 4-1: config 245 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 384.166354][ T4196] usb 4-1: config 245 interface 249 has no altsetting 0 [ 384.166364][ T4196] usb 4-1: config 245 interface 1 has no altsetting 0 [ 384.321971][ T4196] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 384.321993][ T4196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.322005][ T4196] usb 4-1: Product: syz [ 384.322014][ T4196] usb 4-1: Manufacturer: syz [ 384.322023][ T4196] usb 4-1: SerialNumber: syz [ 384.405787][ T7] Bluetooth: hci7: command 0x0409 tx timeout [ 384.595890][ T4196] usb 4-1: Fast Track Pro config OK [ 384.672531][ T4196] usb 4-1: selecting invalid altsetting 0 [ 384.672551][ T4196] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 384.672561][ T4196] usb 4-1: selecting invalid altsetting 0 [ 384.672573][ T4196] usb 4-1: 0:2 : does not exist [ 385.037014][ T4196] usb 4-1: USB disconnect, device number 38 [ 385.230878][ T8633] Config c1/1 of g1 needs at least one function. [ 385.230934][ T8633] udc usbip-vudc.0: failed to start g1: -22 [ 385.316230][ T7381] udevd[7381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:245.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.373150][ T7475] logitech-hidpp-device 0005:046D:B012.0009: Device not connected [ 386.055793][ T4232] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 386.407248][ T4232] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 386.407270][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.412852][ T4232] usb 4-1: config 0 descriptor?? [ 386.608644][ T4232] cp210x 4-1:0.0: cp210x converter detected [ 386.611403][ T7475] Bluetooth: hci7: command 0x041b tx timeout [ 386.755881][ T4232] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 386.755916][ T4232] cp210x 4-1:0.0: querying part number failed [ 386.826501][ T4232] usb 4-1: cp210x converter now attached to ttyUSB0 [ 388.511590][ T8691] wlan0 speed is unknown, defaulting to 1000 [ 388.540458][ T1158] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.583188][ T1158] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.613234][ T8702] loop9: detected capacity change from 0 to 256 [ 388.627027][ T7475] Bluetooth: hci7: command 0x040f tx timeout [ 388.664141][ T1158] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.679545][ T8702] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 388.689371][ T8704] device wlan0 entered promiscuous mode [ 388.767720][ T8702] exFAT-fs (loop9): hint_cluster is invalid (17) [ 388.770722][ T4232] usb 4-1: USB disconnect, device number 39 [ 388.774598][ T26] audit: type=1800 audit(1790824360.699:25): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1173" name="file2" dev="loop9" ino=1048794 res=0 errno=0 [ 388.780092][ T4232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 388.790566][ T4232] cp210x 4-1:0.0: device disconnected [ 388.814785][ T1158] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.384889][ T7475] Bluetooth: hci5: command 0x0409 tx timeout [ 390.524210][ T4227] logitech-hidpp-device 0005:046D:B012.000A: Device not connected [ 390.584773][ T8588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 390.602163][ T8588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 390.603833][ T8588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 390.648714][ T8588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 390.933842][ T4196] Bluetooth: hci7: command 0x0419 tx timeout [ 390.955052][ T8691] chnl_net:caif_netlink_parms(): no params data found [ 391.387194][ T8748] loop3: detected capacity change from 0 to 1024 [ 391.412084][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.412112][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.413625][ T8691] device bridge_slave_0 entered promiscuous mode [ 391.415076][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.415098][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.433124][ T8748] hfsplus: invalid length 32517 has been corrected to 255 [ 391.435072][ T8691] device bridge_slave_1 entered promiscuous mode [ 391.444565][ T26] audit: type=1800 audit(1790824363.421:26): pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1184" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 391.506667][ T8749] loop9: detected capacity change from 0 to 8 [ 391.538268][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 391.550434][ T4227] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 391.566023][ T8588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.594418][ T8748] hfsplus: b-tree write err: -5, ino 20 [ 391.617941][ T8588] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.651588][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.652777][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 391.653181][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 391.653488][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 391.653763][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.653967][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.653988][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.654293][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 391.658306][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.690675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 391.691036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 391.691260][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.691282][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.691513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 391.793627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 391.794383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 391.799373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 391.813403][ T8691] team0: Port device team_slave_0 added [ 391.825339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 391.828776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 391.831023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 391.838849][ T8691] team0: Port device team_slave_1 added [ 391.861162][ T8588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.861180][ T8588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.865473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 391.865834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 391.866294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 391.866598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 391.871546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 391.904385][ T4227] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 391.904408][ T4227] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.905636][ T4227] usb 9-1: config 0 descriptor?? [ 391.918322][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.918335][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.918349][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.925871][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.925893][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.925907][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.944321][ T4227] cp210x 9-1:0.0: cp210x converter detected [ 392.077239][ T8691] device hsr_slave_0 entered promiscuous mode [ 392.077841][ T8691] device hsr_slave_1 entered promiscuous mode [ 392.078176][ T8691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.078191][ T8691] Cannot create hsr debugfs directory [ 392.166265][ T4227] usb 9-1: cp210x converter now attached to ttyUSB0 [ 392.508672][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 392.567582][ T4313] hfsplus: b-tree write err: -5, ino 20 [ 392.607582][ T1158] device hsr_slave_0 left promiscuous mode [ 392.607947][ T1158] device hsr_slave_1 left promiscuous mode [ 392.608324][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.608385][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.608866][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.608885][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.609198][ T1158] device bridge_slave_1 left promiscuous mode [ 392.609269][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.704199][ T1158] device bridge_slave_0 left promiscuous mode [ 392.704285][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.723803][ T1158] device veth1_macvtap left promiscuous mode [ 392.723838][ T1158] device veth0_macvtap left promiscuous mode [ 392.723882][ T1158] device veth1_vlan left promiscuous mode [ 392.723920][ T1158] device veth0_vlan left promiscuous mode [ 393.404625][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 393.432353][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 393.447251][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.472708][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.711634][ T1158] bond0 (unregistering): Released all slaves [ 393.784380][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 393.784558][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 393.812748][ T8588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.905256][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 393.905665][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 394.944086][ T4228] Bluetooth: hci5: command 0x040f tx timeout [ 394.951916][ T8811] loop3: detected capacity change from 0 to 8 [ 395.159303][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 395.159759][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.160138][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.160430][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.180176][ T8588] device veth0_vlan entered promiscuous mode [ 395.191287][ T8817] binder: BINDER_SET_CONTEXT_MGR already set [ 395.191300][ T8817] binder: 8816:8817 ioctl 4018620d 200000004a80 returned -16 [ 395.226929][ T4232] usb 9-1: USB disconnect, device number 9 [ 395.230817][ T4232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 395.231827][ T4232] cp210x 9-1:0.0: device disconnected [ 395.567118][ T8588] device veth1_vlan entered promiscuous mode [ 395.602707][ T8822] loop8: detected capacity change from 0 to 1024 [ 395.680547][ T8822] hfsplus: invalid length 32517 has been corrected to 255 [ 395.685040][ T26] audit: type=1800 audit(1790824367.716:27): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1195" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 395.865188][ T8828] hfsplus: b-tree write err: -5, ino 20 [ 396.466134][ T8588] device veth0_macvtap entered promiscuous mode [ 396.666102][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1195'. [ 396.672890][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 396.673397][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 396.673728][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.674044][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.676854][ T8588] device veth1_macvtap entered promiscuous mode [ 396.682740][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.682755][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.682760][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.682768][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.682775][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.682783][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.682788][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.682795][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.682802][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.682809][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.683502][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.685837][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.686242][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.686578][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.716589][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.716838][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.716846][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.716854][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.716865][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.716883][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.716891][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.716898][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.716905][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.716913][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.717615][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.736163][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.736692][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.738481][ T8588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.738504][ T8588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.738542][ T8588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.738559][ T8588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.784278][ T4317] hfsplus: b-tree write err: -5, ino 20 [ 397.252452][ T7475] Bluetooth: hci5: command 0x0419 tx timeout [ 399.769305][ T1107] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 399.801688][ T8588] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 399.898041][ T7] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 400.006944][ T1107] usb 9-1: Using ep0 maxpacket: 16 [ 400.125862][ T1107] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.125882][ T1107] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.204949][ T1107] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 400.204970][ T1107] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 400.204983][ T1107] usb 9-1: SerialNumber: syz [ 400.254477][ T7] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.254505][ T7] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 400.254520][ T7] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 400.254533][ T7] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 400.254555][ T7] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 400.254570][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.274461][ T8878] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 400.274516][ T8878] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 400.461597][ T1107] usb 9-1: 0:2 : does not exist [ 400.549415][ T7] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 400.550143][ T7] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 400.550172][ T7] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 400.885212][ T7] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 400.886318][ T7] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 400.886346][ T7] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 400.887122][ T7] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 400.901011][ T7] usb 10-1: USB disconnect, device number 6 [ 400.913018][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 400.923264][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 400.928939][ T7] keyspan 10-1:1.0: device disconnected [ 401.352200][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.352218][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.352354][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 401.364235][ T8588] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 401.448462][ T8899] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 401.461228][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.461245][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.468219][ T8904] loop3: detected capacity change from 0 to 1024 [ 401.528279][ T8904] hfsplus: invalid length 32517 has been corrected to 255 [ 401.533968][ T26] audit: type=1800 audit(1790824373.641:28): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1209" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 401.550305][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 401.561171][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 401.644449][ T8691] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.659665][ T8691] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.663558][ T8906] hfsplus: b-tree write err: -5, ino 20 [ 401.685276][ T8691] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.704586][ T8691] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.734820][ T1107] usb 9-1: USB disconnect, device number 10 [ 401.794871][ T8912] loop1: detected capacity change from 0 to 512 [ 401.869649][ T8912] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 401.916650][ T8912] EXT4-fs (loop1): 1 truncate cleaned up [ 401.916673][ T8912] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 402.123739][ T154] hfsplus: b-tree write err: -5, ino 20 [ 402.147231][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.227421][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.227756][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.256917][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.339444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.339821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.340025][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.340047][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.340297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.708843][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 403.709180][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.709396][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.709418][ T4291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.711657][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 403.727736][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 403.762091][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 403.763002][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 403.763913][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 403.826161][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 403.826668][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 403.839297][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 403.839666][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.860108][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 403.860491][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.898337][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.982079][ T8953] siw: device registration error -23 [ 404.324044][ T7] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 404.465189][ T8971] loop3: detected capacity change from 0 to 1024 [ 404.475409][ T8972] loop8: detected capacity change from 0 to 512 [ 404.525267][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.530974][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.531143][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 404.544977][ T8971] hfsplus: invalid length 32517 has been corrected to 255 [ 404.557424][ T7] usb 10-1: Using ep0 maxpacket: 16 [ 404.568444][ T8972] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 404.579352][ T26] audit: type=1800 audit(1790824376.706:29): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1224" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 404.580259][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 404.621999][ T8972] EXT4-fs (loop8): 1 truncate cleaned up [ 404.622020][ T8972] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 404.637058][ T8971] hfsplus: b-tree write err: -5, ino 20 [ 404.680733][ T7] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.680761][ T7] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.748236][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.748674][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 404.756181][ T7] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 404.756202][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 404.756214][ T7] usb 10-1: SerialNumber: syz [ 404.797502][ T7] usb 10-1: 0:2 : does not exist [ 404.861979][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 404.862369][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 404.862745][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 404.863024][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 404.871374][ T4291] hfsplus: b-tree write err: -5, ino 20 [ 404.876422][ T8691] device veth0_vlan entered promiscuous mode [ 404.950016][ T8691] device veth1_vlan entered promiscuous mode [ 405.027266][ T8987] loop8: detected capacity change from 0 to 512 [ 405.085862][ T8691] device veth0_macvtap entered promiscuous mode [ 405.114344][ T8987] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 405.114344][ T8987] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 405.114344][ T8987] [ 405.114371][ T8987] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 405.114380][ T8987] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 405.121103][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 405.121594][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 405.121938][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 405.122347][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 405.122716][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 405.130316][ T8691] device veth1_macvtap entered promiscuous mode [ 405.132290][ T8987] EXT4-fs error (device loop8): __ext4_iget:4919: inode #11: block 2: comm syz.8.1228: invalid block [ 405.132644][ T8987] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.1228: couldn't read orphan inode 11 (err -117) [ 405.132838][ T8987] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,jqfmt=vfsv0,acl,quota,nouser_xattr,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 405.280163][ T8991] loop3: detected capacity change from 0 to 1024 [ 406.686959][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 406.692094][ T4196] Bluetooth: hci0: command 0x0406 tx timeout [ 406.732470][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.732487][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.732492][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.732500][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.732508][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.732515][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.732537][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.732544][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.732550][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.732557][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.732565][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.732572][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.741282][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.744407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 406.745013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.767963][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.767981][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.767987][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.767995][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.768003][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.768011][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.768017][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.768024][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.768030][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.768038][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.768044][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.768051][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.779650][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.779757][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 406.780218][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.801799][ T8920] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 425: padding at end of block bitmap is not set [ 406.817736][ T8691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.817763][ T8691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.817779][ T8691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.817795][ T8691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.368972][ T8691] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 407.415039][ T7] usb 10-1: USB disconnect, device number 7 [ 407.525236][ T4655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.525253][ T4655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.525392][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 407.536021][ T8691] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 407.595473][ T9013] siw: device registration error -23 [ 407.599986][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1232'. [ 407.700546][ T4655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.700564][ T4655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.700739][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 408.043086][ T9024] binder: 9020:9024 ioctl c0306201 0 returned -14 [ 408.123841][ T4231] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 408.172341][ T9028] loop8: detected capacity change from 0 to 1024 [ 408.190117][ T9029] loop2: detected capacity change from 0 to 512 [ 408.221155][ T9029] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 408.237903][ T9028] hfsplus: invalid length 32517 has been corrected to 255 [ 408.256108][ T26] audit: type=1800 audit(1790824380.410:30): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1236" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 408.256991][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1236'. [ 408.261032][ T9029] EXT4-fs (loop2): 1 truncate cleaned up [ 408.261049][ T9029] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 408.306020][ T9028] hfsplus: b-tree write err: -5, ino 20 [ 408.470169][ T9037] loop2: detected capacity change from 0 to 1024 [ 408.486762][ T4231] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.486781][ T4231] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.566012][ T4231] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 408.566033][ T4231] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 408.566046][ T4231] usb 10-1: SerialNumber: syz [ 408.583243][ T4291] hfsplus: b-tree write err: -5, ino 20 [ 408.591403][ T9037] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 408.591447][ T9037] hfsplus: xattr searching failed [ 408.592897][ T9037] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 408.592943][ T9037] hfsplus: xattr searching failed [ 408.717062][ T9040] hfsplus: b-tree write err: -5, ino 26 [ 408.850829][ T4231] usb 10-1: 0:2 : does not exist [ 408.850866][ T4231] usb 10-1: unit 5 not found! [ 408.880194][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 408.881519][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 408.881616][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 408.881694][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 408.881779][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 408.881852][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 408.881931][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 408.890318][ T4231] usb 10-1: USB disconnect, device number 8 [ 408.949964][ T4317] hfsplus: b-tree write err: -5, ino 25 [ 408.950118][ T4317] hfsplus: b-tree write err: -5, ino 4 [ 408.950169][ T4317] hfsplus: b-tree write err: -5, ino 2 [ 408.966519][ T9045] sctp_transport_update_pmtu: 48 callbacks suppressed [ 408.966532][ T9045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 408.966752][ T9045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 408.966959][ T9045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 408.967288][ T9045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 408.968208][ T9045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 408.968459][ T9045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 408.988794][ T9045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 408.989157][ T9045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 408.989408][ T9045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 408.989634][ T9045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 409.138851][ T7381] udevd[7381]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.458954][ T9060] loop9: detected capacity change from 0 to 128 [ 409.462547][ T9054] loop2: detected capacity change from 0 to 4096 [ 409.504110][ T9054] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 409.507173][ T9060] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 409.521495][ T9060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.667478][ T4231] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 409.864651][ T9054] EXT4-fs (loop2): Test dummy encryption mode enabled [ 409.903659][ T4231] usb 9-1: Using ep0 maxpacket: 16 [ 409.909742][ T9078] siw: device registration error -23 [ 409.916387][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1245'. [ 409.932257][ T9054] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 409.955731][ T9080] loop1: detected capacity change from 0 to 512 [ 409.988066][ T9080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 410.005270][ T9080] EXT4-fs (loop1): 1 truncate cleaned up [ 410.005290][ T9080] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 410.023113][ T4231] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.023131][ T4231] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.102807][ T4231] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 410.102830][ T4231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 410.102842][ T4231] usb 9-1: SerialNumber: syz [ 410.144648][ T4231] usb 9-1: 0:2 : does not exist [ 410.317845][ T9089] loop9: detected capacity change from 0 to 512 [ 410.355229][ T9089] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 410.366313][ T9089] EXT4-fs (loop9): 1 truncate cleaned up [ 410.366335][ T9089] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 410.401842][ T9054] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 410.632309][ T9096] loop9: detected capacity change from 0 to 1024 [ 410.704188][ T9096] hfsplus: invalid length 32517 has been corrected to 255 [ 410.714464][ T26] audit: type=1800 audit(1790824382.873:31): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1249" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 410.793006][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1249'. [ 410.852579][ T9100] hfsplus: b-tree write err: -5, ino 20 [ 410.970241][ T9107] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 411.100112][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 411.101475][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 411.101576][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 411.101657][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 411.101871][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 411.101993][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 411.102081][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 411.102632][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 411.119912][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 411.139232][ T9113] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 411.139278][ T9113] caif:caif_disconnect_client(): nothing to disconnect [ 411.143965][ T9113] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 411.144000][ T9113] chnl_net:chnl_net_open(): state disconnected [ 411.144012][ T9113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.181910][ T9117] loop1: detected capacity change from 0 to 128 [ 411.234388][ T9117] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 411.235997][ T9117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.445493][ T4231] usb 9-1: USB disconnect, device number 11 [ 411.632041][ T9131] siw: device registration error -23 [ 411.635361][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1258'. [ 411.889794][ T9134] loop3: detected capacity change from 0 to 1024 [ 411.930937][ T9134] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 411.950645][ T9134] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 411.951899][ T9134] EXT4-fs (loop3): orphan cleanup on readonly fs [ 411.952609][ T9134] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1259: Inode bitmap for bg 0 marked uninitialized [ 411.953175][ T9134] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 412.034502][ T7381] udevd[7381]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.712412][ T4313] hfsplus: b-tree write err: -5, ino 20 [ 413.481126][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 413.483192][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 413.485648][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 413.487194][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 413.488625][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 413.489667][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 413.490845][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 413.648671][ T9159] loop9: detected capacity change from 0 to 128 [ 413.691316][ T9159] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 413.716228][ T9159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.818314][ T9165] loop8: detected capacity change from 0 to 512 [ 413.846374][ T9165] EXT4-fs (loop8): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 414.385956][ T9165] bridge0: port 3(syz_tun) entered blocking state [ 414.385986][ T9165] bridge0: port 3(syz_tun) entered disabled state [ 414.386974][ T9165] device syz_tun entered promiscuous mode [ 414.387803][ T9165] bridge0: port 3(syz_tun) entered blocking state [ 414.387850][ T9165] bridge0: port 3(syz_tun) entered forwarding state [ 414.791546][ T4227] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 414.811688][ T9188] siw: device registration error -23 [ 414.812728][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1274'. [ 415.259768][ T4227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.259800][ T4227] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 415.259816][ T4227] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 415.259830][ T4227] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 415.259852][ T4227] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 415.259866][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.319764][ T9173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 415.319819][ T9173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 415.359029][ T4227] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 415.604572][ T4227] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 415.604607][ T4227] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 415.910372][ T4227] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 416.110908][ T4227] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 416.110942][ T4227] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 416.111839][ T4227] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 416.457214][ T4227] usb 3-1: USB disconnect, device number 11 [ 416.470971][ T9201] loop1: detected capacity change from 0 to 512 [ 416.507319][ T4227] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 416.509423][ T4227] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 416.513707][ T9201] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 416.521639][ T4227] keyspan 3-1:1.0: device disconnected [ 416.565664][ T9201] EXT4-fs (loop1): 1 truncate cleaned up [ 416.565738][ T9201] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.130626][ T9214] loop9: detected capacity change from 0 to 1024 [ 417.171200][ T9214] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 417.191316][ T9214] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 417.191995][ T9214] EXT4-fs (loop9): orphan cleanup on readonly fs [ 417.192629][ T9214] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.1283: Inode bitmap for bg 0 marked uninitialized [ 417.193824][ T9214] EXT4-fs (loop9): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 417.748461][ T9239] loop9: detected capacity change from 0 to 8 [ 417.960263][ T9248] siw: device registration error -23 [ 417.965602][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1293'. [ 418.479466][ T9252] loop9: detected capacity change from 0 to 1024 [ 418.518355][ T9252] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 418.519086][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 418.529725][ T9252] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 418.530429][ T9252] EXT4-fs (loop9): orphan cleanup on readonly fs [ 418.530778][ T9252] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.1296: Inode bitmap for bg 0 marked uninitialized [ 418.531255][ T9252] EXT4-fs (loop9): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 418.807980][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 418.929661][ T1107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.929682][ T1107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.007601][ T1107] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 419.007631][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 419.007648][ T1107] usb 2-1: SerialNumber: syz [ 419.048925][ T1107] usb 2-1: 0:2 : does not exist [ 419.472601][ T9304] siw: device registration error -23 [ 419.473016][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1310'. [ 419.898421][ T1107] usb 2-1: USB disconnect, device number 2 [ 419.957390][ T9314] wlan0 speed is unknown, defaulting to 1000 [ 420.135141][ T7381] udevd[7381]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.468942][ T9345] siw: device registration error -23 [ 420.772470][ T4228] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 421.036701][ T9367] tap0: tun_chr_ioctl cmd 1074025677 [ 421.036873][ T9367] tap0: linktype set to 0 [ 421.066514][ T9370] tap0: tun_chr_ioctl cmd 1074025677 [ 421.066709][ T9370] tap0: linktype set to 777 [ 421.131647][ T4228] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 421.131670][ T4228] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.133530][ T4228] usb 10-1: config 0 descriptor?? [ 421.172196][ T4228] cp210x 10-1:0.0: cp210x converter detected [ 421.697361][ T9389] loop8: detected capacity change from 0 to 1024 [ 421.710122][ T4228] cp210x 10-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 421.710151][ T4228] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 421.711747][ T9383] bridge0: port 3(syzkaller0) entered blocking state [ 421.711839][ T9383] bridge0: port 3(syzkaller0) entered disabled state [ 421.714341][ T4228] usb 10-1: cp210x converter now attached to ttyUSB0 [ 421.720694][ T4228] usb 10-1: USB disconnect, device number 9 [ 421.741875][ T9389] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 421.745063][ T9383] device syzkaller0 entered promiscuous mode [ 421.745328][ T9383] bridge0: port 3(syzkaller0) entered blocking state [ 421.745356][ T9383] bridge0: port 3(syzkaller0) entered forwarding state [ 421.749482][ T4228] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 421.749750][ T4228] cp210x 10-1:0.0: device disconnected [ 421.753766][ T9389] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 421.754407][ T9389] EXT4-fs (loop8): orphan cleanup on readonly fs [ 421.754754][ T9389] EXT4-fs error (device loop8): ext4_read_inode_bitmap:168: comm syz.8.1337: Inode bitmap for bg 0 marked uninitialized [ 421.755196][ T9389] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 421.765548][ T9383] sg_write: process 37 (syz.2.1338) changed security contexts after opening file descriptor, this is not allowed. [ 421.785789][ T9379] bridge0: port 3(syzkaller0) entered disabled state [ 421.873464][ T9379] device syzkaller0 left promiscuous mode [ 421.875169][ T9379] bridge0: port 3(syzkaller0) entered disabled state [ 421.920051][ T9393] loop3: detected capacity change from 0 to 8 [ 422.556518][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 422.558094][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 422.558207][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 422.558296][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 422.558371][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 422.558443][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 422.558520][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 422.645530][ T9425] sctp_transport_update_pmtu: 107 callbacks suppressed [ 422.645543][ T9425] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 422.645771][ T9425] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 422.645995][ T9425] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 422.646310][ T9425] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 422.647450][ T9425] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 422.716109][ T9425] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 422.716466][ T9425] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 422.716721][ T9425] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 422.717169][ T9425] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 422.717400][ T9425] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 422.805372][ T9422] wlan0 speed is unknown, defaulting to 1000 [ 422.942512][ T9438] bridge0: port 3(syzkaller0) entered blocking state [ 422.942587][ T9438] bridge0: port 3(syzkaller0) entered disabled state [ 422.957353][ T9438] device syzkaller0 entered promiscuous mode [ 422.961192][ T9438] bridge0: port 3(syzkaller0) entered blocking state [ 422.961223][ T9438] bridge0: port 3(syzkaller0) entered forwarding state [ 423.009387][ T9436] bridge0: port 3(syzkaller0) entered disabled state [ 423.068230][ T9436] device syzkaller0 left promiscuous mode [ 423.068266][ T9436] bridge0: port 3(syzkaller0) entered disabled state [ 423.237826][ T9443] loop2: detected capacity change from 0 to 8 [ 423.743747][ T9457] loop3: detected capacity change from 0 to 1024 [ 423.768171][ T9457] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 423.798363][ T9457] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 423.799134][ T9457] EXT4-fs (loop3): orphan cleanup on readonly fs [ 423.799576][ T9457] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1356: Inode bitmap for bg 0 marked uninitialized [ 423.800116][ T9457] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 424.223945][ T4228] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 424.473706][ T9484] bridge0: port 3(syzkaller0) entered blocking state [ 424.474169][ T9484] bridge0: port 3(syzkaller0) entered disabled state [ 424.480878][ T9484] device syzkaller0 entered promiscuous mode [ 424.481158][ T9484] bridge0: port 3(syzkaller0) entered blocking state [ 424.481184][ T9484] bridge0: port 3(syzkaller0) entered forwarding state [ 424.525216][ T9482] bridge0: port 3(syzkaller0) entered disabled state [ 424.573860][ T4228] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 424.573883][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.575042][ T4228] usb 3-1: config 0 descriptor?? [ 424.604632][ T9482] device syzkaller0 left promiscuous mode [ 424.604660][ T9482] bridge0: port 3(syzkaller0) entered disabled state [ 424.615618][ T4228] cp210x 3-1:0.0: cp210x converter detected [ 424.904310][ T9493] loop3: detected capacity change from 0 to 8 [ 425.053181][ T4228] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 425.053208][ T4228] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 425.054550][ T4228] usb 3-1: cp210x converter now attached to ttyUSB0 [ 425.059934][ T4228] usb 3-1: USB disconnect, device number 12 [ 425.061654][ T4228] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 425.062249][ T4228] cp210x 3-1:0.0: device disconnected [ 426.909522][ T9526] bridge0: port 3(syzkaller0) entered blocking state [ 426.909600][ T9526] bridge0: port 3(syzkaller0) entered disabled state [ 426.910295][ T9526] device syzkaller0 entered promiscuous mode [ 426.910528][ T9526] bridge0: port 3(syzkaller0) entered blocking state [ 426.910554][ T9526] bridge0: port 3(syzkaller0) entered forwarding state [ 426.925188][ T9530] loop3: detected capacity change from 0 to 512 [ 426.966508][ T9530] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 426.981061][ T9525] bridge0: port 3(syzkaller0) entered disabled state [ 426.990653][ T9525] device syzkaller0 left promiscuous mode [ 426.990688][ T9525] bridge0: port 3(syzkaller0) entered disabled state [ 427.072572][ T9530] EXT4-fs (loop3): 1 truncate cleaned up [ 427.072593][ T9530] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 427.123629][ T9531] loop2: detected capacity change from 0 to 8 [ 427.300584][ T9551] loop1: detected capacity change from 0 to 128 [ 427.343816][ T9551] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 427.359157][ T9551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.456619][ T9557] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 429.537960][ T9573] loop8: detected capacity change from 0 to 512 [ 429.607581][ T9573] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 429.634140][ T9573] EXT4-fs error (device loop8): ext4_iget_extra_inode:4573: inode #15: comm syz.8.1393: corrupted in-inode xattr [ 429.634416][ T9573] EXT4-fs (loop8): Remounting filesystem read-only [ 429.634461][ T9573] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.1393: couldn't read orphan inode 15 (err -117) [ 429.635339][ T9573] EXT4-fs (loop8): Remounting filesystem read-only [ 429.635354][ T9573] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,inode_readahead_blks=0x0000000008000000,errors=remount-ro,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,. Quota mode: none. [ 431.349733][ T9601] loop9: detected capacity change from 0 to 128 [ 431.407716][ T9601] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 431.409202][ T9601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.501903][ T9610] syz_tun: refused to change device tx_queue_len [ 431.504025][ T9607] loop1: detected capacity change from 0 to 8 [ 431.640201][ T9611] loop2: detected capacity change from 0 to 1024 [ 431.700786][ T9611] hfsplus: invalid length 32517 has been corrected to 255 [ 431.722178][ T26] audit: type=1800 audit(1790824403.941:32): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1400" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 431.774749][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 431.876535][ T9627] loop9: detected capacity change from 0 to 512 [ 431.960729][ T9627] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 431.972246][ T9627] EXT4-fs error (device loop9): ext4_iget_extra_inode:4573: inode #15: comm syz.9.1405: corrupted in-inode xattr [ 431.979063][ T9627] EXT4-fs (loop9): Remounting filesystem read-only [ 431.979133][ T9627] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.1405: couldn't read orphan inode 15 (err -117) [ 431.981246][ T9627] EXT4-fs (loop9): Remounting filesystem read-only [ 431.981265][ T9627] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,inode_readahead_blks=0x0000000008000000,errors=remount-ro,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,. Quota mode: none. [ 432.011613][ T4232] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 432.086598][ T9631] FAULT_INJECTION: forcing a failure. [ 432.086598][ T9631] name failslab, interval 1, probability 0, space 0, times 0 [ 432.086652][ T9631] CPU: 0 PID: 9631 Comm: syz.1.1406 Not tainted syzkaller #0 [ 432.086665][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.086715][ T9631] Call Trace: [ 432.086736][ T9631] [ 432.086775][ T9631] dump_stack_lvl+0x188/0x250 [ 432.086851][ T9631] ? show_regs_print_info+0x20/0x20 [ 432.086864][ T9631] ? load_image+0x410/0x410 [ 432.086877][ T9631] ? __might_sleep+0xf0/0xf0 [ 432.086912][ T9631] ? __lock_acquire+0x7b50/0x7b50 [ 432.086947][ T9631] should_fail+0x383/0x4b0 [ 432.087020][ T9631] should_failslab+0x5/0x20 [ 432.087053][ T9631] slab_pre_alloc_hook+0x51/0xc0 [ 432.087080][ T9631] __kmalloc+0x6b/0x340 [ 432.087090][ T9631] ? tomoyo_encode+0x28a/0x550 [ 432.087138][ T9631] tomoyo_encode+0x28a/0x550 [ 432.087153][ T9631] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 432.087173][ T9631] tomoyo_path_number_perm+0x251/0x6b0 [ 432.087187][ T9631] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 432.087200][ T9631] ? do_futex+0xdc2/0x12b0 [ 432.087245][ T9631] security_file_ioctl+0x6c/0xa0 [ 432.087271][ T9631] __se_sys_ioctl+0x48/0x170 [ 432.087308][ T9631] do_syscall_64+0x4c/0xa0 [ 432.087324][ T9631] ? clear_bhb_loop+0x30/0x80 [ 432.087374][ T9631] ? clear_bhb_loop+0x30/0x80 [ 432.087387][ T9631] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 432.087405][ T9631] RIP: 0033:0x7f1eea6dc159 [ 432.087431][ T9631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.087456][ T9631] RSP: 002b:00007f1ee8934028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.087472][ T9631] RAX: ffffffffffffffda RBX: 00007f1eea963fa0 RCX: 00007f1eea6dc159 [ 432.087481][ T9631] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 432.087489][ T9631] RBP: 00007f1eea77306b R08: 0000000000000000 R09: 0000000000000000 [ 432.087497][ T9631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.087504][ T9631] R13: 00007f1eea964038 R14: 00007f1eea963fa0 R15: 00007ffed3663b98 [ 432.087521][ T9631] [ 432.087607][ T9631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.471077][ T4232] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 432.471101][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.472275][ T4232] usb 4-1: config 0 descriptor?? [ 432.660198][ T4232] cp210x 4-1:0.0: cp210x converter detected [ 432.960468][ T4232] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 432.960498][ T4232] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 433.102252][ T4232] usb 4-1: cp210x converter now attached to ttyUSB0 [ 433.531500][ T4232] usb 4-1: USB disconnect, device number 40 [ 433.753360][ T4232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 433.754282][ T4232] cp210x 4-1:0.0: device disconnected [ 433.792507][ T4313] hfsplus: b-tree write err: -5, ino 20 [ 433.839775][ T9643] bridge0: port 3(syzkaller0) entered blocking state [ 433.839805][ T9643] bridge0: port 3(syzkaller0) entered disabled state [ 433.854211][ T9643] device syzkaller0 entered promiscuous mode [ 433.854481][ T9643] bridge0: port 3(syzkaller0) entered blocking state [ 433.854504][ T9643] bridge0: port 3(syzkaller0) entered forwarding state [ 433.919917][ T9641] bridge0: port 3(syzkaller0) entered disabled state [ 434.869588][ T9641] device syzkaller0 left promiscuous mode [ 434.869614][ T9641] bridge0: port 3(syzkaller0) entered disabled state [ 434.971743][ T9659] loop3: detected capacity change from 0 to 128 [ 435.022817][ T9659] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 435.026255][ T9659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.989617][ T9670] loop1: detected capacity change from 0 to 8 [ 436.501322][ T9689] loop9: detected capacity change from 0 to 1024 [ 436.526453][ T9689] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 436.532592][ T9689] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 436.533388][ T9689] EXT4-fs (loop9): orphan cleanup on readonly fs [ 436.534026][ T9689] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.1418: Inode bitmap for bg 0 marked uninitialized [ 436.534483][ T9689] EXT4-fs (loop9): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 436.729409][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 438.335522][ T9707] bridge0: port 3(syzkaller0) entered blocking state [ 438.335553][ T9707] bridge0: port 3(syzkaller0) entered disabled state [ 438.336165][ T9707] device syzkaller0 entered promiscuous mode [ 438.336392][ T9707] bridge0: port 3(syzkaller0) entered blocking state [ 438.336423][ T9707] bridge0: port 3(syzkaller0) entered forwarding state [ 438.384301][ T9702] bridge0: port 3(syzkaller0) entered disabled state [ 438.437552][ T9702] device syzkaller0 left promiscuous mode [ 438.437579][ T9702] bridge0: port 3(syzkaller0) entered disabled state [ 439.757797][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.757852][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.538769][ T9732] loop2: detected capacity change from 0 to 8 [ 440.824913][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 442.024296][ T9747] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 442.024366][ T9747] overlayfs: failed to set xattr on upper [ 442.024372][ T9747] overlayfs: ...falling back to index=off,metacopy=off. [ 442.038239][ T9751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.285763][ T9762] bridge0: port 3(syzkaller0) entered blocking state [ 442.285791][ T9762] bridge0: port 3(syzkaller0) entered disabled state [ 442.286408][ T9762] device syzkaller0 entered promiscuous mode [ 442.286650][ T9762] bridge0: port 3(syzkaller0) entered blocking state [ 442.286672][ T9762] bridge0: port 3(syzkaller0) entered forwarding state [ 442.322086][ T7] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 442.346682][ T9761] bridge0: port 3(syzkaller0) entered disabled state [ 442.402537][ T9761] device syzkaller0 left promiscuous mode [ 442.402568][ T9761] bridge0: port 3(syzkaller0) entered disabled state [ 442.681996][ T7] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 442.682020][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.744208][ T7] usb 4-1: config 0 descriptor?? [ 442.907865][ T7] cp210x 4-1:0.0: cp210x converter detected [ 443.221551][ T7] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 443.221581][ T7] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 443.314117][ T7] usb 4-1: cp210x converter now attached to ttyUSB0 [ 443.341958][ T7] usb 4-1: USB disconnect, device number 41 [ 443.385035][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 443.385643][ T7] cp210x 4-1:0.0: device disconnected [ 444.340825][ T4196] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 444.554042][ T9800] loop3: detected capacity change from 0 to 512 [ 444.664415][ T9804] loop1: detected capacity change from 0 to 1024 [ 444.682075][ T9805] bridge0: port 3(syzkaller0) entered blocking state [ 444.682140][ T9805] bridge0: port 3(syzkaller0) entered disabled state [ 444.682824][ T9805] device syzkaller0 entered promiscuous mode [ 444.683057][ T9805] bridge0: port 3(syzkaller0) entered blocking state [ 444.683078][ T9805] bridge0: port 3(syzkaller0) entered forwarding state [ 444.700836][ T4196] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 444.700867][ T4196] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.706759][ T4196] usb 9-1: config 0 descriptor?? [ 444.749382][ T9804] hfsplus: invalid length 32517 has been corrected to 255 [ 444.794440][ T26] audit: type=1800 audit(1790824417.032:33): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1449" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 444.828863][ T9803] bridge0: port 3(syzkaller0) entered disabled state [ 444.910859][ T9803] device syzkaller0 left promiscuous mode [ 444.910898][ T9803] bridge0: port 3(syzkaller0) entered disabled state [ 444.934497][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 444.992543][ T9804] hfsplus: b-tree write err: -5, ino 20 [ 445.120936][ T4196] usb 9-1: Cannot read MAC address [ 445.121005][ T4196] MOSCHIP usb-ethernet driver: probe of 9-1:0.0 failed with error -61 [ 446.424767][ T4232] usb 9-1: USB disconnect, device number 12 [ 446.719862][ T154] hfsplus: b-tree write err: -5, ino 20 [ 448.770008][ T9857] loop1: detected capacity change from 0 to 512 [ 448.820630][ T9859] bridge0: port 3(syzkaller0) entered blocking state [ 448.820659][ T9859] bridge0: port 3(syzkaller0) entered disabled state [ 448.821258][ T9859] device syzkaller0 entered promiscuous mode [ 448.821511][ T9859] bridge0: port 3(syzkaller0) entered blocking state [ 448.821533][ T9859] bridge0: port 3(syzkaller0) entered forwarding state [ 448.831790][ T9857] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 448.852049][ T9846] bridge0: port 3(syzkaller0) entered disabled state [ 448.860204][ T9846] device syzkaller0 left promiscuous mode [ 448.860236][ T9846] bridge0: port 3(syzkaller0) entered disabled state [ 448.892400][ T9857] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.1463: corrupted in-inode xattr [ 448.893942][ T9857] EXT4-fs (loop1): Remounting filesystem read-only [ 448.893995][ T9857] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1463: couldn't read orphan inode 15 (err -117) [ 448.895747][ T9857] EXT4-fs (loop1): Remounting filesystem read-only [ 448.895763][ T9857] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,inode_readahead_blks=0x0000000008000000,errors=remount-ro,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,. Quota mode: none. [ 449.038592][ T4227] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 450.293213][ T27] INFO: task kworker/0:8:4912 blocked for more than 144 seconds. [ 450.293240][ T27] Not tainted syzkaller #0 [ 450.293247][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.293253][ T27] task:kworker/0:8 state:D stack:25200 pid: 4912 ppid: 2 flags:0x00004000 [ 450.293281][ T27] Workqueue: events console_callback [ 450.293344][ T27] Call Trace: [ 450.293349][ T27] [ 450.293358][ T27] __schedule+0x11c3/0x4350 [ 450.293390][ T27] ? release_firmware_map_entry+0x190/0x190 [ 450.293404][ T27] ? __lock_acquire+0x13dc/0x7b50 [ 450.293421][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 450.293432][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 450.293483][ T27] schedule+0x11b/0x1e0 [ 450.293497][ T27] schedule_timeout+0xbd/0x2d0 [ 450.293509][ T27] ? console_conditional_schedule+0x40/0x40 [ 450.293520][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 450.293533][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 450.293546][ T27] ? lock_chain_count+0x20/0x20 [ 450.293559][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 450.293571][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 450.293584][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 450.293597][ T27] __down_common+0x289/0x3b0 [ 450.293610][ T27] ? __up+0x150/0x150 [ 450.293619][ T27] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 450.293645][ T27] down+0x7e/0xd0 [ 450.293659][ T27] console_lock+0x29/0x70 [ 450.293669][ T27] console_callback+0x66/0x440 [ 450.293682][ T27] ? vc_scrolldelta_helper+0x220/0x220 [ 450.293693][ T27] ? __schedule+0x11cb/0x4350 [ 450.293706][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 450.293720][ T27] process_one_work+0x867/0xff0 [ 450.293759][ T27] ? worker_detach_from_pool+0x240/0x240 [ 450.293770][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 450.293785][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 450.293803][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 450.293817][ T27] ? wq_worker_running+0x97/0x170 [ 450.293830][ T27] worker_thread+0xad7/0x12a0 [ 450.293849][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 450.293867][ T27] kthread+0x42e/0x520 [ 450.293896][ T27] ? rcu_lock_release+0x20/0x20 [ 450.293907][ T27] ? kthread_blkcg+0xd0/0xd0 [ 450.293919][ T27] ret_from_fork+0x1f/0x30 [ 450.293957][ T27] [ 450.293967][ T27] INFO: task syz.4.791:7148 blocked for more than 144 seconds. [ 450.293975][ T27] Not tainted syzkaller #0 [ 450.293981][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.293986][ T27] task:syz.4.791 state:D stack:27888 pid: 7148 ppid: 4191 flags:0x00004004 [ 450.294009][ T27] Call Trace: [ 450.294013][ T27] [ 450.294020][ T27] __schedule+0x11c3/0x4350 [ 450.294032][ T27] ? kasan_set_track+0x62/0x70 [ 450.299840][ T27] ? verify_lock_unused+0x140/0x140 [ 450.299865][ T27] ? release_firmware_map_entry+0x190/0x190 [ 450.299882][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 450.299899][ T27] schedule+0x11b/0x1e0 [ 450.299913][ T27] schedule_timeout+0xbd/0x2d0 [ 450.299924][ T27] ? console_conditional_schedule+0x40/0x40 [ 450.299935][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 450.299948][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 450.299970][ T27] ? lock_chain_count+0x20/0x20 [ 450.299983][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 450.299996][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 450.300007][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 450.300023][ T27] __down_common+0x289/0x3b0 [ 450.300036][ T27] ? __up+0x150/0x150 [ 450.300045][ T27] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 450.300063][ T27] down+0x7e/0xd0 [ 450.300078][ T27] console_lock+0x29/0x70 [ 450.300089][ T27] vt_ioctl+0x155b/0x1ca0 [ 450.300173][ T27] ? __vt_event_wait+0x260/0x260 [ 450.300195][ T27] ? tty_jobctrl_ioctl+0x164/0xae0 [ 450.300210][ T27] tty_ioctl+0x848/0xc30 [ 450.300235][ T27] ? security_file_ioctl+0x7c/0xa0 [ 450.300250][ T27] ? tty_get_icount+0xa0/0xa0 [ 450.300262][ T27] __se_sys_ioctl+0xfa/0x170 [ 450.300276][ T27] do_syscall_64+0x4c/0xa0 [ 450.300286][ T27] ? clear_bhb_loop+0x30/0x80 [ 450.300298][ T27] ? clear_bhb_loop+0x30/0x80 [ 450.300310][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.300323][ T27] RIP: 0033:0x7fdf23218159 [ 450.300335][ T27] RSP: 002b:00007fdf2144f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.300351][ T27] RAX: ffffffffffffffda RBX: 00007fdf234a0090 RCX: 00007fdf23218159 [ 450.300360][ T27] RDX: 0000000000000009 RSI: 0000000000005606 RDI: 0000000000000004 [ 450.300368][ T27] RBP: 00007fdf232af06b R08: 0000000000000000 R09: 0000000000000000 [ 450.300376][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.300383][ T27] R13: 00007fdf234a0128 R14: 00007fdf234a0090 R15: 00007ffc27274cc8 [ 450.300400][ T27] [ 450.300407][ T27] INFO: task syz.4.791:7151 blocked for more than 144 seconds. [ 450.300416][ T27] Not tainted syzkaller #0 [ 450.300422][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.300427][ T27] task:syz.4.791 state:D stack:29072 pid: 7151 ppid: 4191 flags:0x00004004 [ 450.300452][ T27] Call Trace: [ 450.300456][ T27] [ 450.300463][ T27] __schedule+0x11c3/0x4350 [ 450.300487][ T27] ? verify_lock_unused+0x140/0x140 [ 450.300502][ T27] ? release_firmware_map_entry+0x190/0x190 [ 450.300530][ T27] schedule+0x11b/0x1e0 [ 450.300543][ T27] schedule_timeout+0xbd/0x2d0 [ 450.300561][ T27] ? console_conditional_schedule+0x40/0x40 [ 450.300578][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 450.300591][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 450.300609][ T27] ? lock_chain_count+0x20/0x20 [ 450.300622][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 450.300634][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 450.300645][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 450.300659][ T27] __down_common+0x289/0x3b0 [ 450.300671][ T27] ? __up+0x150/0x150 [ 450.300681][ T27] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 450.300694][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 450.302382][ T27] down+0x7e/0xd0 [ 450.302399][ T27] console_lock+0x29/0x70 [ 450.302410][ T27] tioclinux+0x12a/0x3e0 [ 450.302452][ T27] vt_ioctl+0x441/0x1ca0 [ 450.302468][ T27] ? __vt_event_wait+0x260/0x260 [ 450.302491][ T27] ? tty_jobctrl_ioctl+0x164/0xae0 [ 450.302505][ T27] tty_ioctl+0x848/0xc30 [ 450.302517][ T27] ? security_file_ioctl+0x7c/0xa0 [ 450.302530][ T27] ? tty_get_icount+0xa0/0xa0 [ 450.302542][ T27] __se_sys_ioctl+0xfa/0x170 [ 450.302555][ T27] do_syscall_64+0x4c/0xa0 [ 450.302566][ T27] ? clear_bhb_loop+0x30/0x80 [ 450.302577][ T27] ? clear_bhb_loop+0x30/0x80 [ 450.302589][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.302601][ T27] RIP: 0033:0x7fdf23218159 [ 450.302612][ T27] RSP: 002b:00007fdf2142e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.302626][ T27] RAX: ffffffffffffffda RBX: 00007fdf234a0180 RCX: 00007fdf23218159 [ 450.302635][ T27] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000004 [ 450.302643][ T27] RBP: 00007fdf232af06b R08: 0000000000000000 R09: 0000000000000000 [ 450.302650][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.302658][ T27] R13: 00007fdf234a0218 R14: 00007fdf234a0180 R15: 00007ffc27274cc8 [ 450.302675][ T27] [ 450.302718][ T27] [ 450.302718][ T27] Showing all locks held in the system: [ 450.302726][ T27] 3 locks held by kworker/0:0/7: [ 450.302734][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 450.303905][ T27] #1: ffffc90000cc7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 450.303948][ T27] #2: ffffffff8c3239e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 450.304011][ T27] 1 lock held by khungtaskd/27: [ 450.304019][ T27] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 450.304075][ T27] 4 locks held by kworker/u4:5/3045: [ 450.304085][ T27] 2 locks held by getty/3944: [ 450.304092][ T27] #0: ffff88814d12d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 450.304123][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 450.304161][ T27] 6 locks held by kworker/0:4/4227: [ 450.304167][ T27] #0: ffff888141df7138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 450.304199][ T27] #1: ffffc90002f0fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 450.304230][ T27] #2: ffff88802454e220 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5260 [ 450.304277][ T27] #3: ffff8880245515c8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x20a7/0x5260 [ 450.304311][ T27] #4: ffff8880242a6c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x20d1/0x5260 [ 450.304344][ T27] #5: ffffffff8cdb0270 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x151/0x1870 [ 450.304395][ T27] 2 locks held by kworker/0:7/4232: [ 450.304404][ T27] 2 locks held by kworker/u4:10/4313: [ 450.304411][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 450.304445][ T27] #1: ffffc9000327fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 450.304479][ T27] 2 locks held by kworker/u4:11/4317: [ 450.304486][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 450.304520][ T27] #1: ffffc9000329fd00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 450.304554][ T27] 2 locks held by kworker/u4:13/4655: [ 450.304562][ T27] 2 locks held by kworker/0:8/4912: [ 450.304570][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 450.304603][ T27] #1: ffffc900033c7d00 (console_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 450.304639][ T27] 5 locks held by syz.0.779/7078: [ 450.304650][ T27] 2 locks held by syz.7.1072/8342: [ 450.304658][ T27] #0: ffff88807e3fc098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 450.304691][ T27] #1: ffff88807e3fc2e8 (&tty->termios_rwsem){++++}-{3:3}, at: tty_set_termios+0x146/0x1770 [ 450.304728][ T27] 2 locks held by sed/9869: [ 450.304738][ T27] [ 450.304742][ T27] ============================================= [ 450.304742][ T27] [ 450.304747][ T27] NMI backtrace for cpu 0 [ 450.304754][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 450.304765][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.304771][ T27] Call Trace: [ 450.304776][ T27] [ 450.304780][ T27] dump_stack_lvl+0x188/0x250 [ 450.304801][ T27] ? show_regs_print_info+0x20/0x20 [ 450.304812][ T27] ? load_image+0x410/0x410 [ 450.304822][ T27] ? rcu_read_unlock_special+0xf0/0x4a0 [ 450.304834][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 450.304870][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 450.304882][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 450.304893][ T27] ? _printk+0xda/0x130 [ 450.304902][ T27] ? load_image+0x410/0x410 [ 450.304913][ T27] ? load_image+0x410/0x410 [ 450.304924][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 450.304938][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 450.304950][ T27] watchdog+0xe1b/0xe60 [ 450.304968][ T27] kthread+0x42e/0x520 [ 450.304978][ T27] ? hungtask_pm_notify+0x40/0x40 [ 450.304988][ T27] ? kthread_blkcg+0xd0/0xd0 [ 450.304999][ T27] ret_from_fork+0x1f/0x30 [ 450.305017][ T27] [ 450.308178][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 450.308187][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 450.308199][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.308205][ T27] Call Trace: [ 450.308209][ T27] [ 450.308214][ T27] dump_stack_lvl+0x188/0x250 [ 450.308229][ T27] ? show_regs_print_info+0x20/0x20 [ 450.308240][ T27] ? load_image+0x410/0x410 [ 450.308255][ T27] panic+0x2f8/0x850 [ 450.308331][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 450.308345][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 450.308357][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 450.308409][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 450.308424][ T27] watchdog+0xe5a/0xe60 [ 450.308440][ T27] kthread+0x42e/0x520 [ 450.308451][ T27] ? hungtask_pm_notify+0x40/0x40 [ 450.308461][ T27] ? kthread_blkcg+0xd0/0xd0 [ 450.308471][ T27] ret_from_fork+0x1f/0x30 [ 450.308489][ T27] [ 450.308546][ T27] Kernel Offset: disabled