last executing test programs: 1m1.437400867s ago: executing program 0 (id=1146): bind$xdp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x80, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_ACT={0x3c, 0x7, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x14, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) gettid() 1m0.163976439s ago: executing program 0 (id=1150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xd3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800e2ff2e0f010020bdf000f8db0000000a000004000e802182c1721549a7f6bdbda2ba79e88c3c4d1be9dcfa141ba61b032c56a77f85e05e507220dfbfb7bcbe72d576fc37d69048d2649bbfdb4f2c1fb2b1a0f0c3f5a668840d614f741514ad64ccdd74da2304"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013906c08e90f59db"], 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.325142053s ago: executing program 0 (id=1156): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x10f4, 0x1a, 0x12, r5, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffff2, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r9, 0x0, 0x0, 0x2}) 57.579364968s ago: executing program 0 (id=1157): syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000080)) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000"], 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000004c0)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='auto_da_alloc', 0x0, 0x0) 56.504994419s ago: executing program 0 (id=1158): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000019300), 0x7, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000192c0)='coredump_filter\x00') syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) 49.509744292s ago: executing program 4 (id=1171): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x80, 0xffffffff, 0x44000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40010000, 0x1}) r3 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749d, 0x4, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 49.196840774s ago: executing program 0 (id=1172): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) 46.291396496s ago: executing program 4 (id=1176): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x7f, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x3}, {0x18, 0x1}], 0x2, 0x7, 0x2, 0x2, 0x6}}) r3 = openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) 43.910324421s ago: executing program 1 (id=1181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xd3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800e2ff2e0f010020bdf000f8db0000000a000004000e802182c1721549a7f6bdbda2ba79e88c3c4d1be9dcfa141ba61b032c56a77f85e05e507220dfbfb7bcbe72d576fc37d69048d2649bbfdb4f2c1fb2b1a0f0c3f5a668840d614f741514ad64ccdd74da2304"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013906c08e90f59db"], 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) 42.870985019s ago: executing program 2 (id=1182): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/time_for_children\x00') fchown(r4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c010}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x80, "11010000001413ff0300", 0x47425247}) r6 = socket(0x1d, 0x2, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r7, &(0x7f0000004380)={0x2020}, 0x2020) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000200)=0xe8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r11 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r11, @ANYBLOB=',gro', @ANYRESDEC=r11], 0xfc, 0x0, 0x0) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x100800, &(0x7f00000003c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'batadv\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/video#\x00'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@appraise}, {@appraise}]}}) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af24, &(0x7f0000000000)={0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) 42.177259476s ago: executing program 1 (id=1184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6, 0x800}}, 0x1c}}, 0x200e4840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 42.14603106s ago: executing program 3 (id=1185): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) open(0x0, 0x141080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x3c, r5, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) 40.384676358s ago: executing program 3 (id=1186): r0 = socket(0x0, 0x2, 0x1ff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0x80042000000fffe, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 40.300797712s ago: executing program 1 (id=1187): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000400)={[0x2, 0xffffffffffff8000, 0xb, 0x1c, 0xd802, 0x5, 0xff, 0x4, 0xffffffffd3d32f95, 0xd, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x5, 0x97], 0xc000, 0x82}) r3 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280)) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x30000, 0x1000, 0xc, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x1000, 0x3, 0x9, 0x8, 0xb, 0x9, 0xa, 0x5, 0x0, 0x3, 0xc4}, {0xd000, 0x98ddb7fb0f345f3, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0xb000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x2, 0x3, 0x3}, {0x2, 0x26000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x5, 0x5, 0x46, 0xe, 0x4b}, {0x1000, 0xd000, 0x0, 0x0, 0x6, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x21, 0x3}, {0x6000, 0xeeef0000, 0x8, 0x9d, 0xd, 0xfe, 0x0, 0xf, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0xd000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0x4000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x5]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000120fcff0700040000000100000804004880100001800c0010800400088004002a800c0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 40.263072767s ago: executing program 4 (id=1188): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x167) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) pipe2(0x0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x3ff, 0x0, {0x0, 0x1, 0xf9, 0x3, 0x2}, 0x8}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getpid() sendmsg$nl_route(r0, 0x0, 0x400c815) 39.497113011s ago: executing program 4 (id=1189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xc615, 0x101, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000025000115f9f5e16fd047dab200000000"], 0x18}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x342080, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x200844, 0x0) fsopen(&(0x7f0000000380)='gfs2meta\x00', 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 39.224938777s ago: executing program 3 (id=1190): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) getpeername$inet6(r2, 0x0, &(0x7f0000000240)) close_range(r0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@canfd={0xd, {{0x1, 0x1}, 0x32, 0x2, 0x0, 0x0, "ecce6ee1d5407ca06897fd6530ffe08e2696b72ccc124b4c7849387b32f7116925b47f3ad1c90bcfc2cf7316589e4ebc2450d1c66495a7f17b35f97a3391d412"}}}}, 0x0) 38.494394635s ago: executing program 4 (id=1191): msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x28, '\x00', @buffer={"67156e93446a62b429dbc528411c5c2e13dcf1eed699475586a0f96baf9718c4", 0x20}, 0x802}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x60, 0x40000, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(0xffffffffffffffff, 0x6f3e, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/188, 0xbc}, {0x0}], 0x4, 0x2, 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r5 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRESDEC, @ANYBLOB="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"], 0x44}}, 0x0) 38.349008389s ago: executing program 2 (id=1192): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140), 0x0, 0xffffffffffffffff) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x10f4, 0x1a, 0x12, r5, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffff2, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r9, 0x0, 0x0, 0x2}) 37.437020932s ago: executing program 3 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca"], 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 37.297009884s ago: executing program 2 (id=1194): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xd3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800e2ff2e0f010020bdf000f8db0000000a000004000e802182c1721549a7f6bdbda2ba79e88c3c4d1be9dcfa141ba61b032c56a77f85e05e507220dfbfb7bcbe72d576fc37d69048d2649bbfdb4f2c1fb2b1a0f0c3f5a668840d614f741514ad64ccdd74da2304"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013906c08e90f59db"], 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) 37.173819026s ago: executing program 1 (id=1195): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) getpeername$inet6(r2, 0x0, &(0x7f0000000240)) close_range(r0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@canfd={0xd, {{0x1, 0x1}, 0x32, 0x2, 0x0, 0x0, "ecce6ee1d5407ca06897fd6530ffe08e2696b72ccc124b4c7849387b32f7116925b47f3ad1c90bcfc2cf7316589e4ebc2450d1c66495a7f17b35f97a3391d412"}}}}, 0x0) 37.135372353s ago: executing program 4 (id=1196): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000100)=0x9) r4 = syz_io_uring_setup(0x41a, &(0x7f0000000200)={0x0, 0x10079af, 0x1000, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0xfdef) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=[r0, r3, r0, r1, r0]}, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) 36.56504552s ago: executing program 1 (id=1199): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) unshare(0x62040200) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x1000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x2000, 0xb, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xc7}, {0xd000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0x8000000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x6, 0x3}, {0x0, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x1}, {0x6000, 0x1000, 0x10, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0x8000000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x6]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000300)={"597aebb3200720801b0e6ba1c3c9395fa6939c9dfe61db731224a32e0e42a97ae54fa5934b3561c8b03878ea755360e1f5398d1ba0cabf6cf8281c713f1e24f6703e7b2139576f37f3343e77d5a7cc22391cd2cdcb81ce51eebfc55762fb866b1c78576c01006aa946b4bc5c06fd6e52e796c7e52630b4abf83a601b07f7178f50c4c9c50a210675d61beb4e28c375f45f347b81fc61fc31b0d3b2bca1ddda53e9f1999cc99ba57f5f6f0674748cc787ecf4cc36db31b276f802c8fab94774fc2370e62ff40f62ba4d27133b1529efbfaea33f7e3c24b64c38b64c2002349c8a1e2dee73e24eb570aeeeba66d4d5f2ffe4b52bc0e341fd3772ac3e465da234d70e806555d345ac3b45dc1c229c8e127e1fe544b70bbad8f3b79e5c0562b10958531e17656b1ab6ef9c7352b709c2a19b3bdd33613c9ef2eeacafb51d090a45032a89ad46bd2859bce48ae4f90f977d83d39db160f6c075af0c77130e5429f8b5e31569d78aa49f670474a4430357acfe713640fdeed88971b78b69b1652bd6e1d6ef4c3d9eb2e32871efaa26bae28839c51799f881fbebd0dda92b58bff3429d89641d35c0d4818137038f7463ba658e8cfa8c504e9c0833d41ae483f2d64aa6ec60199e2eb121c90a8a4956b4121504a1913c2052b33500fc610ca396fd549de3462c2e6a7164c931fd7900707f8ab4498bbad75109d28f421fb7a1d276e15a497a385c23189b33d4e02efb94670e07a03a4908b990a925542154c86694d84c65bac5a0e9e2f2e36b95aac26d64447ffd828f831380bc6eece3db2c18693d29b59760ed2ebabd7b9bf874126a7f08205c81a0df5ff169b236cf3d05002f1798913f3f75292f1f1c42a9151170309d0bda87447719341e85b7aa07f07965205c37ea21b5504eb97eab44a70a7b2597ce0af2608c5cc2a85366ec11e47e2a197c6e038f6f9f4d1d25edb077f6d98d44305c4ebc803047409dfa8e6f93d9ce63ab434957924dbdefefc99bff0bb4a68142e04c7c20954541728ed4505377ba88ec208ce064e3c8a7943577e20804932e0571a902cf0c45c54dbacb9968ed15fee9234fff2f631990bf840f5693d285ecd94688c63a251dd2e2a7d0049ee2c45c1e695b87711cf5a6d31414d0f708e5d0fc03b2f37becf1e3267ff6b4d740c2b5d905ecf572d2c9f06b5da649af020b6931dfe057442e2cf12f28d93fd1b49f5716a0c2d773250c2caf8f52f2da9412ae377ed6f74a2f0123d6bb9fae78c37a88f029f1ecaf91d023bbf90a6110b21a015b3a6a4b5e54433c662e6162b114c128c158b8391eb5b57f8cdd4be5207bfbaded1a2063852f15fd2a9d00becc20d2432846c6254625d0af44119fd273ea85ccd4e18e47456bd72ea67a334d65368a8858322d8a1bd2786eb36138fa0b3600f44d03ba84615fcf998500"}) close_range(r0, 0xffffffffffffffff, 0x0) 36.480446611s ago: executing program 2 (id=1200): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b67", 0x3c}, {&(0x7f0000001100)}, {0x0}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x48}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 32.660965074s ago: executing program 2 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xc615, 0x101, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000025000115f9f5e16fd047dab200000000"], 0x18}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x342080, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x200844, 0x0) fsopen(&(0x7f0000000380)='gfs2meta\x00', 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 30.740605478s ago: executing program 32 (id=1172): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) 29.873648801s ago: executing program 3 (id=1203): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, 0x0) 23.073241773s ago: executing program 2 (id=1204): openat$vcsu(0xffffff9c, &(0x7f0000000040), 0xc02, 0x0) r0 = eventfd2(0x92c, 0x80002) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x3, r0, 0x0, 0x0, 0x2, 0x0, 0x1, r0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 14.979548977s ago: executing program 33 (id=1196): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) unshare(0x62040200) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x1000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x2000, 0xb, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xc7}, {0xd000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0x8000000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x6, 0x3}, {0x0, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x1}, {0x6000, 0x1000, 0x10, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0x8000000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x6]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000300)={"597aebb3200720801b0e6ba1c3c9395fa6939c9dfe61db731224a32e0e42a97ae54fa5934b3561c8b03878ea755360e1f5398d1ba0cabf6cf8281c713f1e24f6703e7b2139576f37f3343e77d5a7cc22391cd2cdcb81ce51eebfc55762fb866b1c78576c01006aa946b4bc5c06fd6e52e796c7e52630b4abf83a601b07f7178f50c4c9c50a210675d61beb4e28c375f45f347b81fc61fc31b0d3b2bca1ddda53e9f1999cc99ba57f5f6f0674748cc787ecf4cc36db31b276f802c8fab94774fc2370e62ff40f62ba4d27133b1529efbfaea33f7e3c24b64c38b64c2002349c8a1e2dee73e24eb570aeeeba66d4d5f2ffe4b52bc0e341fd3772ac3e465da234d70e806555d345ac3b45dc1c229c8e127e1fe544b70bbad8f3b79e5c0562b10958531e17656b1ab6ef9c7352b709c2a19b3bdd33613c9ef2eeacafb51d090a45032a89ad46bd2859bce48ae4f90f977d83d39db160f6c075af0c77130e5429f8b5e31569d78aa49f670474a4430357acfe713640fdeed88971b78b69b1652bd6e1d6ef4c3d9eb2e32871efaa26bae28839c51799f881fbebd0dda92b58bff3429d89641d35c0d4818137038f7463ba658e8cfa8c504e9c0833d41ae483f2d64aa6ec60199e2eb121c90a8a4956b4121504a1913c2052b33500fc610ca396fd549de3462c2e6a7164c931fd7900707f8ab4498bbad75109d28f421fb7a1d276e15a497a385c23189b33d4e02efb94670e07a03a4908b990a925542154c86694d84c65bac5a0e9e2f2e36b95aac26d64447ffd828f831380bc6eece3db2c18693d29b59760ed2ebabd7b9bf874126a7f08205c81a0df5ff169b236cf3d05002f1798913f3f75292f1f1c42a9151170309d0bda87447719341e85b7aa07f07965205c37ea21b5504eb97eab44a70a7b2597ce0af2608c5cc2a85366ec11e47e2a197c6e038f6f9f4d1d25edb077f6d98d44305c4ebc803047409dfa8e6f93d9ce63ab434957924dbdefefc99bff0bb4a68142e04c7c20954541728ed4505377ba88ec208ce064e3c8a7943577e20804932e0571a902cf0c45c54dbacb9968ed15fee9234fff2f631990bf840f5693d285ecd94688c63a251dd2e2a7d0049ee2c45c1e695b87711cf5a6d31414d0f708e5d0fc03b2f37becf1e3267ff6b4d740c2b5d905ecf572d2c9f06b5da649af020b6931dfe057442e2cf12f28d93fd1b49f5716a0c2d773250c2caf8f52f2da9412ae377ed6f74a2f0123d6bb9fae78c37a88f029f1ecaf91d023bbf90a6110b21a015b3a6a4b5e54433c662e6162b114c128c158b8391eb5b57f8cdd4be5207bfbaded1a2063852f15fd2a9d00becc20d2432846c6254625d0af44119fd273ea85ccd4e18e47456bd72ea67a334d65368a8858322d8a1bd2786eb36138fa0b3600f44d03ba84615fcf998500"}) close_range(r0, 0xffffffffffffffff, 0x0) 1.085230912s ago: executing program 35 (id=1203): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, 0x0) 0s ago: executing program 36 (id=1204): openat$vcsu(0xffffff9c, &(0x7f0000000040), 0xc02, 0x0) r0 = eventfd2(0x92c, 0x80002) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x3, r0, 0x0, 0x0, 0x2, 0x0, 0x1, r0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) kernel console output (not intermixed with test programs): batadv0: Interface activated: batadv_slave_1 [ 95.373681][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.383296][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.413636][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.446845][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.460993][ T5828] veth1_vlan: entered promiscuous mode [ 95.532391][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.547863][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.560757][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.614906][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.704268][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.712892][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.737451][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.747035][ T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.776010][ T82] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.786108][ T82] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.822871][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.841764][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.858682][ T5829] veth0_vlan: entered promiscuous mode [ 95.879611][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.939513][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.956721][ T5828] veth0_macvtap: entered promiscuous mode [ 95.959093][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.033743][ T5828] veth1_macvtap: entered promiscuous mode [ 96.076621][ T5829] veth1_vlan: entered promiscuous mode [ 96.134533][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.153038][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.223870][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.253476][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.296888][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.307090][ T5835] Bluetooth: hci0: command tx timeout [ 96.313576][ T5835] Bluetooth: hci3: command tx timeout [ 96.320130][ T5835] Bluetooth: hci2: command tx timeout [ 96.326648][ T5835] Bluetooth: hci1: command tx timeout [ 96.332418][ T5847] Bluetooth: hci4: command tx timeout [ 96.364480][ T3474] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.470157][ T5955] : Can't lookup blockdev [ 97.098603][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.128534][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.226912][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.277589][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.299967][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.396594][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.418586][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.467595][ T5829] veth0_macvtap: entered promiscuous mode [ 97.582453][ T5829] veth1_macvtap: entered promiscuous mode [ 97.631359][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.668623][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.751132][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.831922][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.951262][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.981297][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.009021][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.064217][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.289710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.544972][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.592259][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.771527][ T5853] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.783746][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.804910][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.030126][ T5853] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 99.057331][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.126583][ T5853] usb 2-1: Product: syz [ 99.151510][ T5853] usb 2-1: Manufacturer: syz [ 99.185658][ T5853] usb 2-1: SerialNumber: syz [ 99.440286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.529293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.589308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.719417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.728549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.809314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.822468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.831560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.834106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.329538][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 100.395920][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 101.069450][ T5996] : Can't lookup blockdev [ 102.127370][ T6007] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14'. [ 102.226828][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 102.276673][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 102.340050][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 102.402049][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 103.174263][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 103.204364][ T6021] loop3: detected capacity change from 0 to 4096 [ 103.239141][ T6021] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 103.402659][ T6021] ntfs3(loop3): ino=4, mi_enum_attr [ 103.410333][ T6021] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 103.428132][ T6021] ntfs3(loop3): Failed to read $AttrDef (-5). [ 103.443968][ T6016] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.490912][ T5853] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 103.750933][ T5853] usb 2-1: USB disconnect, device number 2 [ 103.915436][ T6026] capability: warning: `syz.3.20' uses 32-bit capabilities (legacy support in use) [ 103.935371][ T6026] program syz.3.20 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.939787][ T6060] netlink: 64 bytes leftover after parsing attributes in process `syz.2.28'. [ 109.514627][ T6067] loop2: detected capacity change from 0 to 4096 [ 109.574640][ T6067] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 109.626384][ T6067] ntfs3(loop2): ino=4, mi_enum_attr [ 109.632397][ T6067] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 109.642417][ T6067] ntfs3(loop2): Failed to read $AttrDef (-5). [ 110.101390][ T6072] program syz.1.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.879394][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.813408][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 111.839373][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.911954][ T9] usb 3-1: Product: syz [ 111.935414][ T9] usb 3-1: Manufacturer: syz [ 111.968915][ T9] usb 3-1: SerialNumber: syz [ 112.915481][ T6099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.211445][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 113.254860][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 113.299543][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 113.497938][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 114.736627][ T6109] netlink: 64 bytes leftover after parsing attributes in process `syz.3.39'. [ 114.781259][ T9] usb 3-1: USB disconnect, device number 2 [ 115.097628][ T6118] loop2: detected capacity change from 0 to 4096 [ 115.115679][ T6118] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 115.136083][ T6118] ntfs3(loop2): ino=4, mi_enum_attr [ 115.141737][ T6118] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 115.150730][ T6118] ntfs3(loop2): Failed to read $AttrDef (-5). [ 115.486440][ T6122] loop3: detected capacity change from 0 to 512 [ 115.603776][ T6122] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.778780][ T6122] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #3: comm syz.3.43: corrupted inode contents [ 115.790094][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 116.014947][ T6122] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.019794][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 116.036252][ C1] EXT4-fs (loop3): initial error at time 1773368714: ext4_do_update_inode:5572: inode 3 [ 116.046041][ C1] EXT4-fs (loop3): last error at time 1773368714: ext4_do_update_inode:5572: inode 3 [ 116.254552][ T6122] EXT4-fs error (device loop3): ext4_dirty_inode:6453: inode #3: comm syz.3.43: mark_inode_dirty error [ 116.771921][ T6122] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.889776][ T6122] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #3: comm syz.3.43: corrupted inode contents [ 116.979373][ T6122] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 117.013028][ T6122] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.43: mark_inode_dirty error [ 117.202938][ T6122] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 117.209087][ T6122] Quota error (device loop3): write_blk: dquota write failed [ 117.244987][ T6122] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 117.319355][ T804] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.372620][ T6122] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.43: Failed to acquire dquot type 0 [ 117.418949][ T6122] loop3: lost filesystem error report for type 5 error -117 [ 117.453544][ T6122] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #16: comm syz.3.43: corrupted inode contents [ 117.637219][ T6122] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 117.642687][ T6122] EXT4-fs error (device loop3): ext4_dirty_inode:6453: inode #16: comm syz.3.43: mark_inode_dirty error [ 117.650138][ T804] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 117.673921][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.367887][ T804] usb 5-1: Product: syz [ 118.372463][ T804] usb 5-1: Manufacturer: syz [ 118.378481][ T804] usb 5-1: SerialNumber: syz [ 118.391343][ T6122] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 118.392266][ T6122] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #16: comm syz.3.43: corrupted inode contents [ 118.517363][ T6122] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 118.524954][ T6122] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.43: mark_inode_dirty error [ 118.602533][ T6122] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 118.603525][ T6122] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #16: comm syz.3.43: corrupted inode contents [ 118.632363][ T6122] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 118.647247][ T6122] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 118.680255][ T6122] loop3: lost filesystem error report for type 5 error -117 [ 118.680727][ T6122] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #16: comm syz.3.43: corrupted inode contents [ 118.709684][ T6122] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 118.719465][ T6122] EXT4-fs error (device loop3): ext4_truncate:4590: inode #16: comm syz.3.43: mark_inode_dirty error [ 118.741044][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.763891][ T6122] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 118.774547][ T6122] loop3: lost filesystem error report for type 5 error -117 [ 118.779693][ T6122] EXT4-fs (loop3): 1 truncate cleaned up [ 118.781587][ T6156] netlink: 64 bytes leftover after parsing attributes in process `syz.1.53'. [ 118.796617][ T6122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.817249][ T6122] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.857103][ T6122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.882747][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 118.921875][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.936122][ T29] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.954848][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 118.962295][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.046573][ T29] usb 1-1: config 0 descriptor?? [ 120.268655][ T5950] usb 1-1: USB disconnect, device number 2 [ 120.492508][ T6163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.945752][ T6167] loop1: detected capacity change from 0 to 4096 [ 121.981598][ T6167] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 122.018753][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 122.073204][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 122.082879][ T6167] ntfs3(loop1): ino=4, mi_enum_attr [ 122.088416][ T6167] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 122.099543][ T6167] ntfs3(loop1): Failed to read $AttrDef (-5). [ 122.107094][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 122.161778][ T804] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 122.282173][ T804] usb 5-1: USB disconnect, device number 2 [ 122.400153][ T6171] syzkaller0: entered promiscuous mode [ 122.426776][ T6171] syzkaller0: entered allmulticast mode [ 125.288536][ T6191] sctp: [Deprecated]: syz.0.61 (pid 6191) Use of int in maxseg socket option. [ 125.288536][ T6191] Use struct sctp_assoc_value instead [ 126.461153][ T6206] loop0: detected capacity change from 0 to 128 [ 126.585409][ T6209] netlink: 64 bytes leftover after parsing attributes in process `syz.1.65'. [ 126.819998][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.070292][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 127.280982][ T29] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 127.415231][ T29] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 127.448279][ T6206] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.463005][ T6206] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.537822][ T29] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.564878][ T5832] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.589313][ T29] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 127.661185][ T29] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 127.680543][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.706863][ T29] usb 5-1: Product: syz [ 127.719640][ T29] usb 5-1: Manufacturer: syz [ 127.741816][ T29] usb 5-1: SerialNumber: syz [ 127.759077][ T6218] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.779712][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 127.788731][ T6218] bridge_slave_1: left allmulticast mode [ 127.795514][ T6218] bridge_slave_1: left promiscuous mode [ 127.806045][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.896473][ T6218] bridge_slave_0: left allmulticast mode [ 127.909480][ T6218] bridge_slave_0: left promiscuous mode [ 127.921904][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.019374][ T6164] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.216067][ T6164] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.238331][ T6219] loop0: detected capacity change from 0 to 4096 [ 128.247948][ T6219] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 128.259023][ T6164] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.304420][ T6219] ntfs3(loop0): ino=4, mi_enum_attr [ 128.304524][ T6164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.309892][ T6219] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 128.328677][ T6219] ntfs3(loop0): Failed to read $AttrDef (-5). [ 128.340782][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 128.450207][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input5 [ 128.456611][ T6164] usb 3-1: config 0 descriptor?? [ 128.540196][ T29] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 128.555410][ T29] (id 0x00) [ 129.122803][ T6231] ufs: You didn't specify the type of your ufs filesystem [ 129.122803][ T6231] [ 129.122803][ T6231] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 129.122803][ T6231] [ 129.122803][ T6231] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 129.154692][ T6231] ufs: ufstype=old is supported read-only [ 129.544259][ T29] rc_core: IR keymap rc-imon-pad not found [ 129.986904][ T24] usb 3-1: USB disconnect, device number 3 [ 130.204948][ T6232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.498985][ T29] Registered IR keymap rc-empty [ 131.307250][ T29] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 131.469965][ T29] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 132.292836][ T29] imon:send_packet: packet tx failed (-71) [ 132.330380][ T29] imon 5-1:155.0: remote input dev register failed [ 132.364893][ T29] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 132.402997][ T6243] syzkaller0: entered promiscuous mode [ 132.410873][ T6243] syzkaller0: entered allmulticast mode [ 132.746836][ T6256] netlink: 64 bytes leftover after parsing attributes in process `syz.1.80'. [ 132.886047][ T29] imon 5-1:155.0: unable to initialize intf0, err 0 [ 133.001191][ T29] imon:imon_probe: failed to initialize context! [ 133.115019][ T29] imon 5-1:155.0: unable to register, err -19 [ 133.176936][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.81'. [ 133.366450][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.385690][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.577255][ T29] usb 5-1: USB disconnect, device number 3 [ 133.787906][ T6262] loop4: detected capacity change from 0 to 256 [ 133.849690][ T6262] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 134.209136][ T6264] loop0: detected capacity change from 0 to 4096 [ 134.242174][ T6264] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 134.278238][ T6264] ntfs3(loop0): ino=4, mi_enum_attr [ 134.283653][ T6264] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 134.291108][ T6264] ntfs3(loop0): Failed to read $AttrDef (-5). [ 134.441865][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.639327][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 134.670778][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 134.705190][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.770215][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.828353][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.857717][ T10] usb 4-1: Product: syz [ 134.868743][ T10] usb 4-1: Manufacturer: syz [ 134.886339][ T10] usb 4-1: SerialNumber: syz [ 134.908313][ T10] usb 4-1: config 0 descriptor?? [ 134.941000][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 134.986841][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 135.000607][ T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.162450][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.183896][ T29] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 135.193302][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.245980][ T29] usb 1-1: config 0 descriptor?? [ 135.597425][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (223) [ 135.911396][ T10] em28xx 4-1:0.0: Config register raw data: 0xb6 [ 135.991797][ T10] em28xx 4-1:0.0: I2S Audio (5 sample rate(s)) [ 136.045844][ T10] em28xx 4-1:0.0: No AC97 audio processor [ 136.874466][ T5950] usb 1-1: USB disconnect, device number 3 [ 136.912755][ T6284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.224370][ T6289] Cannot find add_set index 0 as target [ 137.338473][ T10] usb 4-1: USB disconnect, device number 2 [ 139.058065][ T6294] syzkaller0: entered promiscuous mode [ 139.083759][ T6294] syzkaller0: entered allmulticast mode [ 139.180922][ T5847] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 139.190347][ T5847] Bluetooth: hci1: Injecting HCI hardware error event [ 139.198417][ T5847] Bluetooth: hci1: hardware error 0x00 [ 139.804338][ T6304] syzkaller0: entered promiscuous mode [ 139.810854][ T6304] syzkaller0: entered allmulticast mode [ 140.241544][ T6305] loop1: detected capacity change from 0 to 4096 [ 140.287041][ T6305] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 141.340140][ T5847] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 141.557155][ T6305] ntfs3(loop1): ino=4, mi_enum_attr [ 141.566194][ T6305] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 142.778533][ T6326] loop3: detected capacity change from 0 to 512 [ 142.786245][ T6326] EXT4-fs: inline encryption not supported [ 142.792253][ T6326] EXT4-fs: Ignoring removed i_version option [ 142.798328][ T6326] ext4: Unknown parameter 'appraise_type' [ 143.480837][ T6328] hfs: can't find a HFS filesystem on dev nullb0 [ 143.584565][ T6305] ntfs3(loop1): Failed to read $AttrDef (-5). [ 144.410798][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.549324][ T6337] syzkaller0: entered promiscuous mode [ 144.611785][ T6337] syzkaller0: entered allmulticast mode [ 144.631701][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.556582][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.576961][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.607920][ T10] usb 1-1: config 0 descriptor?? [ 147.994674][ T29] usb 1-1: USB disconnect, device number 4 [ 148.929669][ T29] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.325150][ T6371] hfs: can't find a HFS filesystem on dev nullb0 [ 149.658513][ T6373] loop3: detected capacity change from 0 to 2048 [ 149.873274][ T6373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.277990][ T6389] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 150.285001][ T6389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.293595][ T6389] vhci_hcd vhci_hcd.0: Device attached [ 150.595483][ T29] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 150.665304][ T6390] vhci_hcd: connection reset by peer [ 150.681558][ T163] vhci_hcd vhci_hcd.0: stop threads [ 150.694108][ T163] vhci_hcd vhci_hcd.0: release socket [ 150.716995][ T163] vhci_hcd vhci_hcd.0: disconnect device [ 150.873430][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 151.079324][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 151.237658][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.271786][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 151.314999][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.325707][ T6404] loop4: detected capacity change from 0 to 4096 [ 151.346095][ T10] usb 1-1: config 0 descriptor?? [ 151.355617][ T6404] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 151.484527][ T6404] ntfs3(loop4): ino=4, mi_enum_attr [ 151.514365][ T6404] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 151.559176][ T6404] ntfs3(loop4): Failed to read $AttrDef (-5). [ 151.856034][ T6408] ufs: You didn't specify the type of your ufs filesystem [ 151.856034][ T6408] [ 151.856034][ T6408] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 151.856034][ T6408] [ 151.856034][ T6408] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 151.887109][ T6408] ufs: ufstype=old is supported read-only [ 153.156772][ T10] usb 1-1: USB disconnect, device number 6 [ 154.285431][ T6414] hfs: can't find a HFS filesystem on dev nullb0 [ 155.729414][ T29] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 155.837899][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 156.041185][ T5853] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 156.326041][ T5853] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 156.365043][ T5853] usb 2-1: config 0 has no interface number 0 [ 156.390126][ T5853] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 156.399538][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.408483][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.419060][ T5853] usb 2-1: Product: syz [ 156.441907][ T5853] usb 2-1: Manufacturer: syz [ 156.458544][ T5853] usb 2-1: SerialNumber: syz [ 156.472367][ T5853] usb 2-1: config 0 descriptor?? [ 156.582087][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.606935][ T6446] hfs: can't find a HFS filesystem on dev nullb0 [ 156.614484][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.662492][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.680337][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.702742][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.714024][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.734500][ T10] usb 3-1: Product: syz [ 156.744882][ T10] usb 3-1: Manufacturer: syz [ 156.797066][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 156.807593][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 156.821723][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 156.930192][ T5853] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 156.977336][ T5853] usb 2-1: Firmware version (0.0) predates our first public release. [ 157.177222][ T5853] usb 2-1: Please update to version 0.2 or newer [ 157.311293][ T29] usb 3-1: USB disconnect, device number 4 [ 157.423251][ T5853] usb 2-1: USB disconnect, device number 3 [ 157.951721][ T6467] loop3: detected capacity change from 0 to 4096 [ 158.018911][ T6467] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 158.184451][ T6463] syzkaller0: entered promiscuous mode [ 158.208395][ T6467] ntfs3(loop3): ino=4, mi_enum_attr [ 158.218437][ T6463] syzkaller0: entered allmulticast mode [ 158.253858][ T6467] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 158.293025][ T6467] ntfs3(loop3): Failed to read $AttrDef (-5). [ 158.841710][ T6480] Zero length message leads to an empty skb [ 158.852089][ T5853] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.052238][ T5853] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.072968][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.090802][ T5853] usb 2-1: Product: syz [ 159.103618][ T5853] usb 2-1: Manufacturer: syz [ 159.126572][ T5853] usb 2-1: SerialNumber: syz [ 159.179396][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 159.518195][ T10] usb 5-1: no configurations [ 159.524249][ T10] usb 5-1: can't read configurations, error -22 [ 160.310684][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 160.322632][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 160.349365][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 160.523715][ T10] usb 5-1: no configurations [ 160.553788][ T10] usb 5-1: can't read configurations, error -22 [ 160.568627][ T10] usb usb5-port1: attempt power cycle [ 161.721730][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 161.752960][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 161.783117][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 161.791727][ T5853] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 161.821889][ T10] usb 5-1: no configurations [ 161.834676][ T5853] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -110 [ 161.843840][ T10] usb 5-1: can't read configurations, error -22 [ 161.980617][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 162.210910][ T10] usb 5-1: device not accepting address 7, error -71 [ 163.173656][ T10] usb usb5-port1: unable to enumerate USB device [ 163.792254][ T5919] usb 2-1: USB disconnect, device number 4 [ 163.933504][ T6499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.219535][ T5919] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.323645][ T6499] syzkaller0: entered promiscuous mode [ 164.342184][ T6499] syzkaller0: entered allmulticast mode [ 164.423605][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.466895][ T5919] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 164.512684][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.074278][ T5919] usb 1-1: config 0 descriptor?? [ 165.092151][ T5919] ttusbir 1-1:0.0: cannot find expected altsetting [ 165.301549][ T5919] usb 1-1: USB disconnect, device number 8 [ 165.715279][ T6521] ======================================================= [ 165.715279][ T6521] WARNING: The mand mount option has been deprecated and [ 165.715279][ T6521] and is ignored by this kernel. Remove the mand [ 165.715279][ T6521] option from the mount to silence this warning. [ 165.715279][ T6521] ======================================================= [ 165.750649][ T6521] tmpfs: Bad value for 'nr_inodes' [ 166.226587][ T6539] loop4: detected capacity change from 0 to 1024 [ 167.237560][ T6539] hfsplus: b-tree write err: -5, ino 2 [ 168.906688][ T48] hfsplus: b-tree write err: -5, ino 25 [ 168.951389][ T48] hfsplus: b-tree write err: -5, ino 4 [ 168.972592][ T48] hfsplus: b-tree write err: -5, ino 2 [ 168.991651][ T48] hfsplus: b-tree write err: -5, ino 26 [ 169.252358][ T6559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.169'. [ 175.304688][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 177.970911][ T5950] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 178.129369][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 178.148864][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 178.169585][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.200992][ T5950] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.210354][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.240110][ T5950] usb 5-1: Product: syz [ 178.250667][ T5950] usb 5-1: Manufacturer: syz [ 178.263096][ T5950] usb 5-1: SerialNumber: syz [ 178.276991][ T5950] usb 5-1: config 0 descriptor?? [ 178.301619][ T5950] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 178.311166][ T5950] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 178.420655][ T6605] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 178.935626][ T5950] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 180.333139][ T5950] em28xx 5-1:0.0: Config register raw data: 0xbf [ 180.359161][ T5950] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 181.062324][ T5950] em28xx 5-1:0.0: No AC97 audio processor [ 181.328608][ T5950] usb 5-1: USB disconnect, device number 8 [ 181.959787][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.279778][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 182.816912][ T29] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.840351][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.938883][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.022651][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.102952][ T29] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.133115][ T29] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.161620][ T29] usb 3-1: Product: syz [ 183.184942][ T29] usb 3-1: Manufacturer: syz [ 183.233726][ T29] cdc_wdm 3-1:1.0: skipping garbage [ 183.245492][ T29] cdc_wdm 3-1:1.0: skipping garbage [ 183.261375][ T29] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 183.319483][ T5853] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 183.416569][ T6651] syzkaller0: entered promiscuous mode [ 183.437777][ T6651] syzkaller0: entered allmulticast mode [ 183.490978][ T5853] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 183.526543][ T5853] usb 5-1: config 0 has no interface number 0 [ 183.560188][ T5853] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 183.579673][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.598841][ T5853] usb 5-1: Product: syz [ 183.626930][ T5853] usb 5-1: Manufacturer: syz [ 183.645471][ T5853] usb 5-1: SerialNumber: syz [ 183.683194][ T5853] usb 5-1: config 0 descriptor?? [ 184.317010][ T5853] usb 5-1: Firmware version (0.0) predates our first public release. [ 184.350363][ T5853] usb 5-1: Please update to version 0.2 or newer [ 184.990964][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 185.009658][ T6663] netlink: 64 bytes leftover after parsing attributes in process `syz.0.196'. [ 185.052268][ T5917] usb 3-1: USB disconnect, device number 5 [ 185.376147][ T5847] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 185.387624][ T5847] Bluetooth: hci3: Injecting HCI hardware error event [ 185.406234][ T5835] Bluetooth: hci3: hardware error 0x00 [ 186.737605][ T6679] dns_resolver: Unsupported content type (152) [ 187.298352][ T6679] uprobe: syz.0.201:6679 failed to unregister, leaking uprobe [ 187.659664][ T5835] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 188.345666][ T6675] loop4: detected capacity change from 0 to 32768 [ 188.376246][ T6675] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.200 (6675) [ 188.571058][ T6675] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.586388][ T6675] BTRFS info (device loop4): using sha256 checksum algorithm [ 188.848549][ T6675] BTRFS info (device loop4): rebuilding free space tree [ 188.892866][ T6668] loop2: detected capacity change from 0 to 131072 [ 189.201860][ T6706] Cannot find set identified by id 0 to match [ 190.311684][ T6675] BTRFS info (device loop4): enabling ssd optimizations [ 190.333024][ T6675] BTRFS info (device loop4): using spread ssd allocation scheme [ 190.351852][ T6675] BTRFS info (device loop4): turning on async discard [ 190.380587][ T6675] BTRFS info (device loop4): enabling free space tree [ 190.399779][ T6675] BTRFS info (device loop4): force clearing of disk cache [ 190.566291][ T5829] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.570940][ T5917] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 192.632319][ T5853] usb 5-1: USB disconnect, device number 9 [ 192.862463][ T5917] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.898799][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.948624][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.142963][ T5917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.186575][ T6728] loop0: detected capacity change from 0 to 32768 [ 193.197102][ T6728] btrfs: Unknown parameter 'audit' [ 193.280067][ T5917] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.292370][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.300656][ T5917] usb 3-1: Product: syz [ 193.305589][ T5917] usb 3-1: Manufacturer: syz [ 193.553805][ T5917] cdc_wdm 3-1:1.0: skipping garbage [ 193.583260][ T5917] cdc_wdm 3-1:1.0: skipping garbage [ 193.989543][ T5917] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 194.036660][ T6725] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 194.193961][ T5917] usb 3-1: USB disconnect, device number 6 [ 194.785051][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.791663][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.501320][ T6754] loop4: detected capacity change from 0 to 128 [ 195.592038][ T6754] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.673840][ T6754] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.876049][ T5829] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.701876][ T6768] syzkaller0: entered promiscuous mode [ 196.707661][ T6768] syzkaller0: entered allmulticast mode [ 196.891356][ T5919] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 197.052249][ T5919] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 197.071952][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.094392][ T5919] usb 5-1: config 0 descriptor?? [ 197.257474][ T6773] loop0: detected capacity change from 0 to 32768 [ 197.265031][ T6773] btrfs: Unknown parameter 'audit' [ 197.358636][ T5919] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 198.029543][ T6775] ufs: You didn't specify the type of your ufs filesystem [ 198.029543][ T6775] [ 198.029543][ T6775] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 198.029543][ T6775] [ 198.029543][ T6775] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 198.060793][ T6775] ufs: ufstype=old is supported read-only [ 198.194548][ T5919] gp8psk: usb in 137 operation failed. [ 198.218887][ T5919] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 198.264874][ T5919] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 198.317482][ T5919] usb 5-1: USB disconnect, device number 10 [ 198.956495][ T6796] loop2: detected capacity change from 0 to 128 [ 199.906520][ T6796] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.996494][ T6796] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.335581][ T5830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.162093][ T5919] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 203.448771][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 203.779232][ T6827] loop2: detected capacity change from 0 to 32768 [ 203.786769][ T6827] btrfs: Unknown parameter 'audit' [ 203.802997][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 204.060101][ T5919] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 204.358241][ T5919] usb 4-1: config 0 has no interface number 0 [ 205.085379][ T5919] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.132369][ T5919] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 205.165652][ T5919] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.189283][ T5919] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.236377][ T5919] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 205.275563][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.325215][ T5919] usb 4-1: config 0 descriptor?? [ 205.521961][ T5919] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 205.778306][ T5919] usb 4-1: USB disconnect, device number 3 [ 205.791420][ T6837] overlayfs: missing 'lowerdir' [ 206.067578][ T5919] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 206.069541][ T6847] tipc: Started in network mode [ 206.109377][ T6847] tipc: Node identity decf15ea0492, cluster identity 4711 [ 206.139910][ T6847] tipc: Enabled bearer , priority 0 [ 207.062352][ T6845] syzkaller0: entered promiscuous mode [ 207.077280][ T6845] syzkaller0: entered allmulticast mode [ 207.096900][ T6845] tipc: Resetting bearer [ 207.127809][ T6844] tipc: Resetting bearer [ 207.390593][ T6865] loop1: detected capacity change from 0 to 512 [ 207.507038][ T6865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.593962][ T6865] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.774185][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.048797][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 208.131600][ T6878] ufs: You didn't specify the type of your ufs filesystem [ 208.131600][ T6878] [ 208.131600][ T6878] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 208.131600][ T6878] [ 208.131600][ T6878] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 208.163804][ T6878] ufs: ufstype=old is supported read-only [ 209.113525][ T6888] overlayfs: missing 'lowerdir' [ 209.724399][ T6893] program syz.0.256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.486230][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 211.950529][ T24] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 212.131311][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.149316][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.180202][ T24] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 212.199539][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.209747][ T24] usb 4-1: Product: syz [ 212.214035][ T24] usb 4-1: Manufacturer: syz [ 212.218664][ T24] usb 4-1: SerialNumber: syz [ 212.238288][ T24] usb 4-1: config 0 descriptor?? [ 212.302973][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 212.309550][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 212.315896][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 213.258794][ T804] usb 4-1: USB disconnect, device number 4 [ 213.944799][ T6909] loop3: detected capacity change from 0 to 512 [ 214.000267][ T6909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.069341][ T6909] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.216477][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.798539][ T6923] loop0: detected capacity change from 0 to 40427 [ 216.838965][ T6923] F2FS-fs (loop0): invalid crc value [ 217.092652][ T6923] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 217.110619][ T6844] tipc: Disabling bearer [ 217.125862][ T6923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 217.134822][ T5919] tipc: Node number set to 3663533546 [ 217.208507][ T6923] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0 [ 217.232428][ T6896] : entered promiscuous mode [ 217.241836][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.0.264 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.241872][ T6923] Tainted: [L]=SOFTLOCKUP [ 217.241880][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 217.241902][ T6923] Call Trace: [ 217.241915][ T6923] [ 217.241924][ T6923] dump_stack_lvl+0xe8/0x150 [ 217.241966][ T6923] __f2fs_is_valid_blkaddr+0xd84/0x14f0 [ 217.242008][ T6923] f2fs_get_read_data_folio+0x699/0xb70 [ 217.242057][ T6923] ? __pfx_f2fs_get_read_data_folio+0x10/0x10 [ 217.242093][ T6923] ? __filemap_get_folio_mpol+0x9b0/0xb00 [ 217.242126][ T6923] ? __pfx_stack_trace_save+0x10/0x10 [ 217.242158][ T6923] ? f2fs_readdir+0x4ec/0xaf0 [ 217.242188][ T6923] f2fs_find_data_folio+0x3a6/0x6a0 [ 217.242226][ T6923] f2fs_readdir+0x4ec/0xaf0 [ 217.242277][ T6923] ? __pfx_f2fs_readdir+0x10/0x10 [ 217.242321][ T6923] ? iterate_dir+0x292/0x570 [ 217.242344][ T6923] ? down_read_killable+0x1bb/0x340 [ 217.242379][ T6923] iterate_dir+0x399/0x570 [ 217.242409][ T6923] __se_sys_getdents64+0xf1/0x280 [ 217.242443][ T6923] ? __pfx___se_sys_getdents64+0x10/0x10 [ 217.242468][ T6923] ? __pfx_filldir64+0x10/0x10 [ 217.242495][ T6923] ? rcu_is_watching+0x15/0xb0 [ 217.242532][ T6923] do_syscall_64+0x14d/0xf80 [ 217.242556][ T6923] ? trace_irq_disable+0x3b/0x150 [ 217.242583][ T6923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.242606][ T6923] ? clear_bhb_loop+0x40/0x90 [ 217.242633][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.242655][ T6923] RIP: 0033:0x7f6c63d9c799 [ 217.242682][ T6923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.242701][ T6923] RSP: 002b:00007f6c64cae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 217.242725][ T6923] RAX: ffffffffffffffda RBX: 00007f6c64015fa0 RCX: 00007f6c63d9c799 [ 217.242742][ T6923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 217.242755][ T6923] RBP: 00007f6c63e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 217.242769][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.242782][ T6923] R13: 00007f6c64016038 R14: 00007f6c64015fa0 R15: 00007ffcce52de08 [ 217.242818][ T6923] [ 217.942516][ T6940] program syz.4.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.559987][ T6933] overlayfs: missing 'lowerdir' [ 221.518249][ T6963] loop1: detected capacity change from 0 to 512 [ 222.677868][ T6963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.037052][ T6963] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.101519][ T6977] syzkaller0: entered promiscuous mode [ 223.133108][ T6977] syzkaller0: entered allmulticast mode [ 223.350415][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.958409][ T6993] tipc: Started in network mode [ 224.021596][ T6993] tipc: Node identity cad85e112192, cluster identity 4711 [ 224.060237][ T6993] tipc: Enabled bearer , priority 0 [ 224.727205][ T7000] program syz.0.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.328744][ T6994] syzkaller0: entered promiscuous mode [ 226.334398][ T6994] syzkaller0: entered allmulticast mode [ 226.461625][ T6994] tipc: Resetting bearer [ 226.578713][ T6987] tipc: Resetting bearer [ 227.043687][ T7021] loop0: detected capacity change from 0 to 2048 [ 227.104087][ T7021] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 227.160663][ T7021] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 227.191155][ T7021] UDF-fs: Scanning with blocksize 512 failed [ 227.280916][ T7021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.192569][ T7051] program syz.2.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.927529][ T7054] overlayfs: missing 'lowerdir' [ 231.026061][ T7062] loop2: detected capacity change from 0 to 1024 [ 231.132379][ T7062] hfsplus: b-tree write err: -5, ino 2 [ 231.191913][ T163] hfsplus: b-tree write err: -5, ino 25 [ 231.197696][ T163] hfsplus: b-tree write err: -5, ino 4 [ 231.216558][ T163] hfsplus: b-tree write err: -5, ino 2 [ 231.232183][ T163] hfsplus: b-tree write err: -5, ino 26 [ 233.971025][ T7073] loop2: detected capacity change from 0 to 32768 [ 234.003008][ T7073] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.301 (7073) [ 234.083456][ T7073] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.093937][ T7073] BTRFS info (device loop2): using crc32c checksum algorithm [ 234.106971][ T7073] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 234.304851][ T7073] BTRFS info (device loop2): rebuilding free space tree [ 234.340742][ T7073] BTRFS info (device loop2): disabling free space tree [ 234.347807][ T7073] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 234.359723][ T7073] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 234.391425][ T7073] BTRFS info (device loop2): enabling ssd optimizations [ 234.398519][ T7073] BTRFS info (device loop2): turning off barriers [ 234.408555][ T7073] BTRFS info (device loop2): enabling disk space caching [ 234.416258][ T7073] BTRFS info (device loop2): force clearing of disk cache [ 234.426485][ T7073] BTRFS info (device loop2): force lzo compression, level 1 [ 234.434245][ T7073] BTRFS info (device loop2): max_inline set to 0 [ 234.790068][ T6987] tipc: Disabling bearer [ 234.807641][ T5950] tipc: Node number set to 3947519505 [ 234.825501][ T5830] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.179957][ T7097] overlayfs: failed to resolve './file1': -2 [ 237.672799][ T7115] ufs: You didn't specify the type of your ufs filesystem [ 237.672799][ T7115] [ 237.672799][ T7115] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 237.672799][ T7115] [ 237.672799][ T7115] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 237.704008][ T7115] ufs: ufstype=old is supported read-only [ 239.093613][ T7129] tipc: Started in network mode [ 239.099113][ T7129] tipc: Node identity e2012714bf1e, cluster identity 4711 [ 239.107600][ T7129] tipc: Enabled bearer , priority 0 [ 239.116949][ T7123] syzkaller0: entered promiscuous mode [ 239.125717][ T7123] syzkaller0: entered allmulticast mode [ 240.290681][ T7129] syzkaller0: entered promiscuous mode [ 240.318293][ T7129] syzkaller0: entered allmulticast mode [ 240.343775][ T7129] tipc: Resetting bearer [ 240.411718][ T7128] tipc: Resetting bearer [ 240.627242][ T7144] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 243.745985][ T5891] IPVS: starting estimator thread 0... [ 243.840244][ T7173] IPVS: using max 25 ests per chain, 60000 per kthread [ 245.724762][ T7186] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 249.952009][ T7128] tipc: Disabling bearer [ 249.968452][ T29] tipc: Node number set to 1562322708 [ 250.764922][ T7165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.788153][ T7167] tipc: Enabled bearer , priority 10 [ 251.340558][ T7226] loop0: detected capacity change from 0 to 8 [ 252.225312][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 253.201343][ T29] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 253.340977][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.399633][ T29] usb 5-1: config 0 has no interface number 0 [ 253.462708][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 253.486492][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.537640][ T29] usb 5-1: Product: syz [ 253.559840][ T29] usb 5-1: Manufacturer: syz [ 253.569599][ T29] usb 5-1: SerialNumber: syz [ 253.866638][ T29] usb 5-1: config 0 descriptor?? [ 253.875874][ T29] yurex 5-1:0.50: Could not find endpoints [ 254.025508][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 254.106974][ T29] usb 5-1: USB disconnect, device number 11 [ 254.739320][ T5950] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 255.081690][ T5950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.515180][ T5950] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.541668][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.592301][ T5950] usb 1-1: config 0 descriptor?? [ 255.793053][ T7266] syzkaller0: entered promiscuous mode [ 255.817963][ T7266] syzkaller0: entered allmulticast mode [ 255.940043][ T29] usb 1-1: USB disconnect, device number 9 [ 256.226672][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.238059][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.814627][ T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 257.243865][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 257.354800][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.506977][ T29] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice= 0.40 [ 257.684153][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.701853][ T29] usb 1-1: config 0 descriptor?? [ 257.794188][ T29] usb 1-1: can't set config #0, error -71 [ 257.836364][ T29] usb 1-1: USB disconnect, device number 10 [ 259.119971][ T7284] loop4: detected capacity change from 0 to 512 [ 259.188836][ T7284] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #3: comm syz.4.358: corrupted inode contents [ 259.211065][ T7284] fserror_report: 1 callbacks suppressed [ 259.211085][ T7284] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 259.219230][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 259.222246][ T7284] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #3: comm syz.4.358: mark_inode_dirty error [ 259.228477][ C1] EXT4-fs (loop4): initial error at time 1773368857: ext4_do_update_inode:5572: inode 3 [ 259.256057][ C1] EXT4-fs (loop4): last error at time 1773368857: ext4_do_update_inode:5572: inode 3 [ 259.325788][ T7284] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 259.687862][ T7284] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #3: comm syz.4.358: corrupted inode contents [ 259.795094][ T7284] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 259.796499][ T7284] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.358: mark_inode_dirty error [ 259.896406][ T7284] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 259.898519][ T7284] Quota error (device loop4): write_blk: dquota write failed [ 259.950150][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 259.966644][ T7284] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 260.258271][ T7284] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.358: Failed to acquire dquot type 0 [ 260.329431][ T7284] loop4: lost filesystem error report for type 5 error -117 [ 260.330586][ T7284] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.358: corrupted inode contents [ 260.374240][ T7284] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 260.374717][ T7284] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #16: comm syz.4.358: mark_inode_dirty error [ 260.415144][ T7284] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 260.415612][ T7284] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.358: corrupted inode contents [ 260.509346][ T7284] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 260.533802][ T7284] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.358: mark_inode_dirty error [ 260.639333][ T7284] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 260.779543][ T7284] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.358: corrupted inode contents [ 261.119713][ T7284] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 261.124108][ T7284] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 261.142779][ T7284] loop4: lost filesystem error report for type 5 error -117 [ 261.850826][ T7284] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.358: corrupted inode contents [ 261.895560][ T7284] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 261.902030][ T7284] EXT4-fs error (device loop4): ext4_truncate:4590: inode #16: comm syz.4.358: mark_inode_dirty error [ 262.071972][ T7284] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 262.226829][ T7284] loop4: lost filesystem error report for type 5 error -117 [ 262.272924][ T7284] EXT4-fs (loop4): 1 truncate cleaned up [ 263.003428][ T7284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.021775][ T7284] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.059986][ T7284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.218625][ T7325] loop2: detected capacity change from 0 to 512 [ 263.277367][ T7325] EXT4-fs: test_dummy_encryption requires encrypt feature [ 265.756030][ T7329] syzkaller0: entered promiscuous mode [ 265.777576][ T7329] syzkaller0: entered allmulticast mode [ 266.159281][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 266.319959][ T24] usb 2-1: device descriptor read/64, error -71 [ 266.602924][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 266.779295][ T24] usb 2-1: device descriptor read/64, error -71 [ 266.901030][ T24] usb usb2-port1: attempt power cycle [ 267.279311][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 267.320160][ T24] usb 2-1: device descriptor read/8, error -71 [ 267.560480][ T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 267.602916][ T24] usb 2-1: device descriptor read/8, error -71 [ 267.721796][ T24] usb usb2-port1: unable to enumerate USB device [ 269.974291][ T7373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.295370][ T7378] overlayfs: failed to resolve './file0': -2 [ 271.228013][ T7394] ufs: You didn't specify the type of your ufs filesystem [ 271.228013][ T7394] [ 271.228013][ T7394] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 271.228013][ T7394] [ 271.228013][ T7394] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 271.259680][ T7394] ufs: ufstype=old is supported read-only [ 271.492382][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 272.022269][ T7404] process 'syz.2.383' launched './file0' with NULL argv: empty string added [ 272.288827][ T7402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.509291][ T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 272.690217][ T24] usb 1-1: device descriptor read/64, error -71 [ 272.799373][ T7418] Illegal XDP return value 4294965632 on prog (id 24) dev syz_tun, expect packet loss! [ 273.074086][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 273.330357][ T24] usb 1-1: device descriptor read/64, error -71 [ 273.992204][ T24] usb usb1-port1: attempt power cycle [ 274.109850][ T7426] syzkaller0: entered promiscuous mode [ 274.131407][ T7426] syzkaller0: entered allmulticast mode [ 274.369395][ T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 274.411508][ T24] usb 1-1: device descriptor read/8, error -71 [ 274.705121][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 274.751116][ T24] usb 1-1: device descriptor read/8, error -71 [ 274.876799][ T24] usb usb1-port1: unable to enumerate USB device [ 275.504823][ T7429] syzkaller0: entered promiscuous mode [ 275.519628][ T7429] syzkaller0: entered allmulticast mode [ 276.215536][ T7441] netlink: 64 bytes leftover after parsing attributes in process `syz.4.394'. [ 277.038680][ T7444] overlayfs: failed to resolve './file0': -2 [ 277.752582][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 279.489332][ T5919] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 279.626076][ T7484] syzkaller0: entered promiscuous mode [ 279.650895][ T5919] usb 1-1: device descriptor read/64, error -71 [ 279.675741][ T7484] syzkaller0: entered allmulticast mode [ 280.049400][ T5919] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 280.073960][ T7488] overlayfs: failed to resolve './file0': -2 [ 280.209780][ T5919] usb 1-1: device descriptor read/64, error -71 [ 280.340288][ T5919] usb usb1-port1: attempt power cycle [ 280.740509][ T5919] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 281.392140][ T5919] usb 1-1: device descriptor read/8, error -71 [ 281.769385][ T5919] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 281.804826][ T5919] usb 1-1: device descriptor read/8, error -71 [ 281.971333][ T5919] usb usb1-port1: unable to enumerate USB device [ 283.160853][ T7518] loop1: detected capacity change from 0 to 512 [ 283.327286][ T7518] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #3: comm syz.1.415: corrupted inode contents [ 283.519403][ T7518] fserror_report: 1 callbacks suppressed [ 283.519425][ T7518] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 283.546860][ T7518] EXT4-fs error (device loop1): ext4_dirty_inode:6453: inode #3: comm syz.1.415: mark_inode_dirty error [ 283.556427][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 283.556462][ C1] EXT4-fs (loop1): initial error at time 1773368881: ext4_do_update_inode:5572: inode 3 [ 283.556507][ C1] EXT4-fs (loop1): last error at time 1773368881: ext4_do_update_inode:5572: inode 3 [ 283.763012][ T7518] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 283.780580][ T7518] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #3: comm syz.1.415: corrupted inode contents [ 283.903965][ T7518] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 283.908467][ T7518] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.415: mark_inode_dirty error [ 284.133733][ T7518] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 284.146751][ T7518] Quota error (device loop1): write_blk: dquota write failed [ 284.252358][ T7518] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 284.301420][ T7518] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.415: Failed to acquire dquot type 0 [ 284.394869][ T7518] loop1: lost filesystem error report for type 5 error -117 [ 284.398402][ T7518] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #16: comm syz.1.415: corrupted inode contents [ 284.531692][ T7518] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 284.532170][ T7518] EXT4-fs error (device loop1): ext4_dirty_inode:6453: inode #16: comm syz.1.415: mark_inode_dirty error [ 284.621365][ T7518] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 284.621826][ T7518] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #16: comm syz.1.415: corrupted inode contents [ 284.674011][ T7534] syzkaller0: entered promiscuous mode [ 284.687324][ T7534] syzkaller0: entered allmulticast mode [ 284.701819][ T7518] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 284.703158][ T7518] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.415: mark_inode_dirty error [ 284.768591][ T7518] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 284.769095][ T7518] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #16: comm syz.1.415: corrupted inode contents [ 284.842444][ T7518] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 284.842936][ T7518] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 284.911441][ T7518] loop1: lost filesystem error report for type 5 error -117 [ 284.927141][ T7518] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #16: comm syz.1.415: corrupted inode contents [ 285.007516][ T7518] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 285.007942][ T7518] EXT4-fs error (device loop1): ext4_truncate:4590: inode #16: comm syz.1.415: mark_inode_dirty error [ 285.105451][ T7518] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 285.177405][ T7518] loop1: lost filesystem error report for type 5 error -117 [ 285.192805][ T7518] EXT4-fs (loop1): 1 truncate cleaned up [ 285.327897][ T7518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.409449][ T7518] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.470481][ T7518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.939575][ T5919] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 287.219295][ T5919] usb 3-1: device descriptor read/64, error -71 [ 287.499701][ T5919] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 287.510170][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 287.729535][ T5919] usb 3-1: device descriptor read/64, error -71 [ 287.853025][ T5919] usb usb3-port1: attempt power cycle [ 288.341695][ T5919] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 288.393023][ T5919] usb 3-1: device descriptor read/8, error -71 [ 288.650128][ T5919] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 288.701852][ T5919] usb 3-1: device descriptor read/8, error -71 [ 288.782354][ T7572] syzkaller0: entered promiscuous mode [ 288.803229][ T7572] syzkaller0: entered allmulticast mode [ 288.830067][ T5919] usb usb3-port1: unable to enumerate USB device [ 289.974469][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 291.480169][ T7588] loop1: detected capacity change from 0 to 512 [ 291.558052][ T7588] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #3: comm syz.1.436: corrupted inode contents [ 291.581508][ T7588] fserror_report: 1 callbacks suppressed [ 291.581531][ T7588] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 291.614469][ T7588] EXT4-fs error (device loop1): ext4_dirty_inode:6453: inode #3: comm syz.1.436: mark_inode_dirty error [ 291.623791][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 291.623818][ C0] EXT4-fs (loop1): initial error at time 1773368889: ext4_do_update_inode:5572: inode 3 [ 291.623855][ C0] EXT4-fs (loop1): last error at time 1773368889: ext4_do_update_inode:5572: inode 3 [ 291.737093][ T7588] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 291.738374][ T7588] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #3: comm syz.1.436: corrupted inode contents [ 291.779327][ T7588] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 291.863589][ T7588] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.436: mark_inode_dirty error [ 291.899346][ T7588] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 291.900273][ T7588] Quota error (device loop1): write_blk: dquota write failed [ 291.939380][ T7588] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 291.964082][ T7588] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.436: Failed to acquire dquot type 0 [ 291.986759][ T7588] loop1: lost filesystem error report for type 5 error -117 [ 291.990537][ T7588] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #16: comm syz.1.436: corrupted inode contents [ 292.042616][ T7588] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 292.055235][ T7588] EXT4-fs error (device loop1): ext4_dirty_inode:6453: inode #16: comm syz.1.436: mark_inode_dirty error [ 292.108878][ T7588] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 292.110055][ T7588] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #16: comm syz.1.436: corrupted inode contents [ 292.156666][ T7588] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 292.158448][ T7588] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.436: mark_inode_dirty error [ 292.205970][ T7588] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 292.206480][ T7588] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #16: comm syz.1.436: corrupted inode contents [ 292.254687][ T7588] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 292.255131][ T7588] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 292.292850][ T7588] loop1: lost filesystem error report for type 5 error -117 [ 292.293297][ T7588] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #16: comm syz.1.436: corrupted inode contents [ 292.341624][ T7588] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 292.342052][ T7588] EXT4-fs error (device loop1): ext4_truncate:4590: inode #16: comm syz.1.436: mark_inode_dirty error [ 292.386499][ T7588] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 292.414059][ T7588] loop1: lost filesystem error report for type 5 error -117 [ 292.416917][ T7588] EXT4-fs (loop1): 1 truncate cleaned up [ 292.444534][ T7588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.475959][ T7588] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.515168][ T7588] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.206680][ T5853] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 293.371898][ T5853] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 293.380585][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.400948][ T5853] usb 2-1: config 0 has no interface number 0 [ 293.419746][ T5853] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 293.429254][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.448354][ T5853] usb 2-1: Product: syz [ 293.453003][ T5853] usb 2-1: Manufacturer: syz [ 293.468784][ T5853] usb 2-1: SerialNumber: syz [ 293.496923][ T5853] usb 2-1: config 0 descriptor?? [ 293.521006][ T5853] yurex 2-1:0.50: Could not find endpoints [ 293.727155][ T5853] usb 2-1: USB disconnect, device number 9 [ 296.995637][ T7616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.631846][ T7631] loop4: detected capacity change from 0 to 1024 [ 297.746713][ T7631] hfsplus: b-tree write err: -5, ino 2 [ 298.537074][ T82] hfsplus: b-tree write err: -5, ino 25 [ 298.950698][ T82] hfsplus: b-tree write err: -5, ino 4 [ 298.979076][ T82] hfsplus: b-tree write err: -5, ino 2 [ 298.996035][ T82] hfsplus: b-tree write err: -5, ino 26 [ 299.069268][ T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 299.243142][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.277189][ T10] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 299.309258][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.360050][ T10] usb 1-1: Product: syz [ 299.373792][ T10] usb 1-1: Manufacturer: syz [ 299.405829][ T10] usb 1-1: SerialNumber: syz [ 299.429284][ T5853] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 299.517044][ T10] usb 1-1: config 0 descriptor?? [ 299.575254][ T10] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 299.601193][ T10] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 299.627856][ T5853] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 299.647309][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.668150][ T5853] usb 5-1: config 0 has no interface number 0 [ 299.678246][ T5853] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 299.735152][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.080725][ T5853] usb 5-1: Product: syz [ 300.085202][ T5853] usb 5-1: Manufacturer: syz [ 300.090031][ T5853] usb 5-1: SerialNumber: syz [ 300.212005][ T7658] ufs: You didn't specify the type of your ufs filesystem [ 300.212005][ T7658] [ 300.212005][ T7658] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 300.212005][ T7658] [ 300.212005][ T7658] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 300.243776][ T7658] ufs: ufstype=old is supported read-only [ 300.565908][ T5853] usb 5-1: config 0 descriptor?? [ 301.000532][ T5853] yurex 5-1:0.50: Could not find endpoints [ 301.290762][ T7663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'. [ 301.959628][ T10] usb 5-1: USB disconnect, device number 12 [ 305.075536][ T5917] usb 1-1: USB disconnect, device number 19 [ 305.301781][ T7710] syzkaller0: entered promiscuous mode [ 305.314987][ T7710] syzkaller0: entered allmulticast mode [ 305.619459][ T5917] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 306.191159][ T5917] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 306.216514][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.258011][ T5917] usb 2-1: config 0 has no interface number 0 [ 306.273236][ T5917] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 306.295001][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.320101][ T5917] usb 2-1: Product: syz [ 306.331629][ T5917] usb 2-1: Manufacturer: syz [ 306.346413][ T5917] usb 2-1: SerialNumber: syz [ 306.376273][ T5917] usb 2-1: config 0 descriptor?? [ 306.406635][ T5917] yurex 2-1:0.50: Could not find endpoints [ 306.439270][ T5853] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 306.633972][ T7733] program syz.2.480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.845055][ T5917] usb 2-1: USB disconnect, device number 10 [ 306.860061][ T5853] usb 5-1: no configurations [ 307.466304][ T5853] usb 5-1: can't read configurations, error -22 [ 307.609498][ T5853] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 307.859997][ T5853] usb 5-1: no configurations [ 307.869006][ T5853] usb 5-1: can't read configurations, error -22 [ 308.514636][ T5853] usb usb5-port1: attempt power cycle [ 308.800819][ T7752] netlink: 164 bytes leftover after parsing attributes in process `syz.2.485'. [ 308.879338][ T5853] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 309.648148][ T5853] usb 5-1: device descriptor read/8, error -71 [ 309.786228][ T7754] syzkaller0: entered promiscuous mode [ 309.995966][ T7754] syzkaller0: entered allmulticast mode [ 310.241581][ T7762] ufs: You didn't specify the type of your ufs filesystem [ 310.241581][ T7762] [ 310.241581][ T7762] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 310.241581][ T7762] [ 310.241581][ T7762] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 310.435699][ T7762] ufs: ufstype=old is supported read-only [ 310.666994][ T7766] SET target dimension over the limit! [ 311.442693][ T7772] loop4: detected capacity change from 0 to 512 [ 311.510202][ T7772] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #3: comm syz.4.491: corrupted inode contents [ 311.539373][ T7772] fserror_report: 1 callbacks suppressed [ 311.539394][ T7772] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 311.599634][ T7772] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #3: comm syz.4.491: mark_inode_dirty error [ 311.620269][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 311.620296][ C0] EXT4-fs (loop4): initial error at time 1773368909: ext4_do_update_inode:5572: inode 3 [ 311.620330][ C0] EXT4-fs (loop4): last error at time 1773368909: ext4_do_update_inode:5572: inode 3 [ 312.147358][ T7772] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.152473][ T7772] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #3: comm syz.4.491: corrupted inode contents [ 312.210734][ T7772] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.211225][ T7772] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.491: mark_inode_dirty error [ 312.289068][ T7772] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.302961][ T7772] Quota error (device loop4): write_blk: dquota write failed [ 312.376109][ T7772] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 312.415776][ T7772] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.491: Failed to acquire dquot type 0 [ 312.468209][ T7772] loop4: lost filesystem error report for type 5 error -117 [ 312.477266][ T7772] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.491: corrupted inode contents [ 312.526866][ T7772] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 312.527719][ T7772] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #16: comm syz.4.491: mark_inode_dirty error [ 312.586089][ T7772] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 312.586453][ T7772] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.491: corrupted inode contents [ 312.673834][ T7772] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 312.674328][ T7772] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.491: mark_inode_dirty error [ 312.730022][ T7772] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 312.731124][ T7772] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.491: corrupted inode contents [ 312.783724][ T7772] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 312.785405][ T7772] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 312.789577][ T29] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 312.811850][ T7772] loop4: lost filesystem error report for type 5 error -117 [ 312.812335][ T7772] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.491: corrupted inode contents [ 312.883929][ T7772] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 312.885368][ T7772] EXT4-fs error (device loop4): ext4_truncate:4590: inode #16: comm syz.4.491: mark_inode_dirty error [ 313.077301][ T7772] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 313.096606][ T7772] loop4: lost filesystem error report for type 5 error -117 [ 313.100961][ T7772] EXT4-fs (loop4): 1 truncate cleaned up [ 314.107001][ T29] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 314.695601][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.707007][ T29] usb 1-1: config 0 has no interface number 0 [ 314.715963][ T29] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 314.725341][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.733444][ T29] usb 1-1: Product: syz [ 314.737672][ T29] usb 1-1: Manufacturer: syz [ 314.746771][ T29] usb 1-1: SerialNumber: syz [ 314.752611][ T7772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.782567][ T29] usb 1-1: config 0 descriptor?? [ 314.806169][ T29] yurex 1-1:0.50: Could not find endpoints [ 314.815144][ T7772] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.922920][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.027527][ T24] usb 1-1: USB disconnect, device number 20 [ 315.050698][ T29] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 315.222425][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.251239][ T29] usb 2-1: config 0 has no interfaces? [ 315.267261][ T29] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 315.280589][ T7798] syzkaller0: entered promiscuous mode [ 315.299401][ T7798] syzkaller0: entered allmulticast mode [ 315.316861][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.351154][ T29] usb 2-1: config 0 descriptor?? [ 317.787688][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.802630][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.083792][ T5950] usb 2-1: USB disconnect, device number 11 [ 322.901638][ T7868] tipc: Enabling of bearer rejected, failed to enable media [ 327.237223][ T7899] program syz.2.523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.277004][ T7897] uprobe: syz.3.525:7897 failed to unregister, leaking uprobe [ 327.404988][ T7891] syzkaller0: entered promiscuous mode [ 327.452374][ T7891] syzkaller0: entered allmulticast mode [ 332.124983][ T7939] program syz.0.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.513226][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 337.988145][ T7974] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 338.108628][ T7974] team0: Port device batadv1 added [ 338.464930][ T7990] program syz.2.551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.970646][ T5950] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 339.460277][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 339.484929][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.532266][ T5950] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 339.562251][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.589308][ T5950] usb 2-1: Product: syz [ 339.609316][ T5950] usb 2-1: Manufacturer: syz [ 339.625891][ T5950] usb 2-1: SerialNumber: syz [ 339.659879][ T5950] usb 2-1: config 0 descriptor?? [ 341.467200][ T29] usb 2-1: USB disconnect, device number 12 [ 342.067770][ T8011] loop0: detected capacity change from 0 to 4096 [ 342.147030][ T8021] tipc: Started in network mode [ 342.152135][ T8011] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 342.185510][ T8021] tipc: Node identity d607f357ccfb, cluster identity 4711 [ 342.231865][ T8021] tipc: Enabled bearer , priority 0 [ 342.339250][ T8011] ntfs3(loop0): ino=4, mi_enum_attr [ 342.367538][ T8011] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 342.413901][ T8011] ntfs3(loop0): Failed to read $AttrDef (-5). [ 342.597744][ T8024] syzkaller0: entered promiscuous mode [ 342.621117][ T8024] syzkaller0: entered allmulticast mode [ 342.647956][ T8024] tipc: Resetting bearer [ 342.706629][ T8020] tipc: Resetting bearer [ 345.560357][ T8042] netlink: 'syz.1.565': attribute type 3 has an invalid length. [ 346.029680][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 349.010152][ T8020] tipc: Disabling bearer [ 349.022604][ T5950] tipc: Node number set to 452784983 [ 349.359492][ T8062] loop1: detected capacity change from 0 to 16 [ 349.997423][ T8062] erofs (device loop1): mounted with root inode @ nid 36. [ 351.236052][ T8066] syzkaller0: entered promiscuous mode [ 351.260491][ T8066] syzkaller0: entered allmulticast mode [ 352.165356][ T8086] loop2: detected capacity change from 0 to 256 [ 352.278626][ T8086] FAT-fs (loop2): Directory bread(block 64) failed [ 352.316742][ T8086] FAT-fs (loop2): Directory bread(block 65) failed [ 352.348102][ T8090] SET target dimension over the limit! [ 352.357163][ T8086] FAT-fs (loop2): Directory bread(block 66) failed [ 352.439314][ T8086] FAT-fs (loop2): Directory bread(block 67) failed [ 352.457238][ T8086] FAT-fs (loop2): Directory bread(block 68) failed [ 352.486041][ T8086] FAT-fs (loop2): Directory bread(block 69) failed [ 352.516287][ T8086] FAT-fs (loop2): Directory bread(block 70) failed [ 352.549279][ T8086] FAT-fs (loop2): Directory bread(block 71) failed [ 352.577341][ T8086] FAT-fs (loop2): Directory bread(block 72) failed [ 352.605685][ T8086] FAT-fs (loop2): Directory bread(block 73) failed [ 352.727765][ T8096] tipc: Enabled bearer , priority 0 [ 353.813795][ T8096] syzkaller0: entered promiscuous mode [ 353.820431][ T8096] syzkaller0: entered allmulticast mode [ 353.827410][ T8096] tipc: Resetting bearer [ 354.246535][ T48] tipc: Resetting bearer [ 354.273306][ T8095] tipc: Resetting bearer [ 357.425630][ T8114] kAFS: No cell specified [ 358.865385][ T8125] xt_hashlimit: size too large, truncated to 1048576 [ 360.849750][ T8095] tipc: Disabling bearer [ 360.874799][ T8111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.892214][ T8112] tipc: Enabled bearer , priority 10 [ 361.036774][ T8133] syzkaller0: entered promiscuous mode [ 361.066344][ T8133] syzkaller0: entered allmulticast mode [ 361.288866][ T8156] kAFS: No cell specified [ 361.370454][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 361.504188][ T5904] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 361.778233][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.802261][ T5904] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.919848][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.537721][ T5904] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 362.696167][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.740008][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 362.801744][ T5904] usb 1-1: config 0 descriptor?? [ 362.808875][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.819515][ T10] usb 3-1: Product: syz [ 362.826631][ T10] usb 3-1: Manufacturer: syz [ 362.833601][ T10] usb 3-1: SerialNumber: syz [ 362.936372][ T10] usb 3-1: config 0 descriptor?? [ 363.117946][ T8168] loop4: detected capacity change from 0 to 4096 [ 363.147483][ T8168] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 363.182017][ T8168] ntfs3(loop4): ino=4, mi_enum_attr [ 363.187343][ T8168] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 363.197171][ T8168] ntfs3(loop4): Failed to read $AttrDef (-5). [ 364.323884][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 364.388444][ T5950] usb 1-1: USB disconnect, device number 21 [ 364.577113][ T5919] usb 3-1: USB disconnect, device number 11 [ 365.375262][ T8188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.392679][ T8189] tipc: Enabled bearer , priority 10 [ 365.902925][ T8200] syzkaller0: entered promiscuous mode [ 365.928254][ T8200] syzkaller0: entered allmulticast mode [ 367.628291][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 368.205409][ T10] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 368.242777][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.295628][ T10] usb 3-1: config 0 has no interfaces? [ 368.466667][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 368.526132][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.569451][ T10] usb 3-1: config 0 descriptor?? [ 368.749427][ T5917] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 368.912149][ T5917] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.932551][ T5917] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 368.951515][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.977645][ T5917] usb 1-1: config 0 descriptor?? [ 371.218397][ T8237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.234333][ T8238] tipc: Started in network mode [ 371.239753][ T8238] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 371.247170][ T8238] tipc: Enabled bearer , priority 10 [ 372.406653][ T6164] tipc: Node number set to 10005162 [ 372.424782][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 372.450757][ T29] usb 1-1: USB disconnect, device number 22 [ 372.871525][ T8255] syzkaller0: entered promiscuous mode [ 372.893704][ T8255] syzkaller0: entered allmulticast mode [ 373.026901][ T6164] usb 3-1: USB disconnect, device number 12 [ 376.573949][ T8286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.590845][ T8287] tipc: Enabled bearer , priority 10 [ 378.534694][ T8306] loop0: detected capacity change from 0 to 4096 [ 378.842880][ T8310] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.110670][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.117365][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.564009][ T30] audit: type=1800 audit(1773368977.587:2): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.638" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 380.318823][ T8329] tipc: Enabling of bearer rejected, already enabled [ 381.259503][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 381.440553][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 381.457502][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.481902][ T10] usb 2-1: config 0 has no interface number 0 [ 381.507593][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.546054][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.583597][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 381.614690][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.646701][ T10] usb 2-1: config 0 descriptor?? [ 382.131129][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 382.140436][ T10] usbhid 2-1:0.1: can't add hid device: -71 [ 382.146996][ T10] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 382.183951][ T10] usb 2-1: USB disconnect, device number 13 [ 382.313669][ T8341] loop0: detected capacity change from 0 to 32768 [ 382.334352][ T8341] btrfs: Deprecated parameter 'usebackuproot' [ 382.355821][ T8341] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 382.385471][ T8341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.648 (8341) [ 382.469094][ T8341] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 382.496954][ T8341] BTRFS info (device loop0): using crc32c checksum algorithm [ 382.615333][ T8341] BTRFS info (device loop0): rebuilding free space tree [ 382.655818][ T8341] BTRFS info (device loop0): enabling ssd optimizations [ 382.692721][ T8341] BTRFS info (device loop0): using spread ssd allocation scheme [ 382.724192][ T8341] BTRFS info (device loop0): turning on flush-on-commit [ 382.764135][ T8341] BTRFS info (device loop0): enabling free space tree [ 382.811108][ T8341] BTRFS info (device loop0): force clearing of disk cache [ 382.844625][ T8341] BTRFS info (device loop0): trying to use backup root at mount time [ 382.875853][ T8341] BTRFS info (device loop0): force zlib compression, level 3 [ 383.916076][ T30] audit: type=1800 audit(1773368981.937:3): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.648" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 384.113394][ T5832] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 384.191559][ T8373] hfs: can't find a HFS filesystem on dev nullb0 [ 385.575699][ T8394] netlink: 64 bytes leftover after parsing attributes in process `syz.3.656'. [ 385.813550][ T8401] netlink: 164 bytes leftover after parsing attributes in process `syz.0.655'. [ 385.827407][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'. [ 390.709279][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 390.757084][ T8439] netlink: 164 bytes leftover after parsing attributes in process `syz.0.668'. [ 392.870962][ T8457] netlink: 64 bytes leftover after parsing attributes in process `syz.0.670'. [ 394.092612][ T8469] vivid-000: disconnect [ 394.153398][ T8464] vivid-000: reconnect [ 394.230559][ T5853] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 394.399222][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 394.410968][ T5853] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.431830][ T5853] usb 1-1: config 0 has no interface number 0 [ 394.451494][ T5853] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.506571][ T5853] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.578107][ T5853] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 395.339437][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.358862][ T5853] usb 1-1: config 0 descriptor?? [ 395.550050][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 396.533514][ T5853] usbhid 1-1:0.1: can't add hid device: -71 [ 396.549350][ T5853] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 396.631438][ T5853] usb 1-1: USB disconnect, device number 23 [ 396.950862][ T5919] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 397.141586][ T5919] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 397.193699][ T5919] usb 2-1: config 0 has no interface number 0 [ 397.225381][ T5919] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 397.261645][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.299240][ T5919] usb 2-1: Product: syz [ 397.314900][ T5919] usb 2-1: Manufacturer: syz [ 397.331624][ T5919] usb 2-1: SerialNumber: syz [ 397.501476][ T5919] usb 2-1: config 0 descriptor?? [ 398.679891][ T8498] loop0: detected capacity change from 0 to 2048 [ 399.232278][ T8500] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 399.954066][ T5853] usb 2-1: USB disconnect, device number 14 [ 400.205150][ T8512] binder: BINDER_SET_CONTEXT_MGR already set [ 400.218695][ T8512] binder: 8511:8512 ioctl 4018620d 200000000040 returned -16 [ 400.354515][ T8516] netlink: 64 bytes leftover after parsing attributes in process `syz.1.685'. [ 405.401469][ T8551] loop1: detected capacity change from 0 to 8 [ 405.542060][ T6164] Process accounting resumed [ 411.301559][ T8609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.469255][ T8611] tipc: Enabling of bearer rejected, already enabled [ 414.258732][ T8638] bridge0: port 3(syz_tun) entered blocking state [ 414.375649][ T8638] bridge0: port 3(syz_tun) entered disabled state [ 414.488450][ T8638] syz_tun: entered allmulticast mode [ 414.556337][ T8638] syz_tun: entered promiscuous mode [ 414.607111][ T8638] bridge0: port 3(syz_tun) entered blocking state [ 414.615600][ T8638] bridge0: port 3(syz_tun) entered forwarding state [ 414.629621][ T8646] netlink: 'syz.1.723': attribute type 10 has an invalid length. [ 414.640908][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 415.061383][ T8646] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 415.563376][ T8654] syzkaller0: entered promiscuous mode [ 416.298256][ T8654] syzkaller0: entered allmulticast mode [ 417.625194][ T8671] ufs: You didn't specify the type of your ufs filesystem [ 417.625194][ T8671] [ 417.625194][ T8671] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 417.625194][ T8671] [ 417.625194][ T8671] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 417.656160][ T8671] ufs: ufstype=old is supported read-only [ 418.234282][ T30] audit: type=1800 audit(1773369016.257:4): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.731" name="nullb0" dev="tmpfs" ino=791 res=0 errno=0 [ 422.099610][ T8712] ufs: You didn't specify the type of your ufs filesystem [ 422.099610][ T8712] [ 422.099610][ T8712] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 422.099610][ T8712] [ 422.099610][ T8712] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 422.130707][ T8712] ufs: ufstype=old is supported read-only [ 425.402102][ T8743] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 425.929265][ T6164] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 426.856999][ T6164] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 426.872254][ T6164] usb 1-1: config 0 has no interface number 0 [ 426.910889][ T6164] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 426.943701][ T6164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.987799][ T6164] usb 1-1: Product: syz [ 427.009015][ T6164] usb 1-1: Manufacturer: syz [ 427.035231][ T6164] usb 1-1: SerialNumber: syz [ 427.063771][ T6164] usb 1-1: config 0 descriptor?? [ 427.545179][ T6164] usb 1-1: Firmware version (0.0) predates our first public release. [ 427.592644][ T6164] usb 1-1: Please update to version 0.2 or newer [ 427.709414][ T6164] usb 1-1: USB disconnect, device number 24 [ 429.529435][ T8784] vivid-001: disconnect [ 429.747310][ T8783] vivid-001: reconnect [ 431.298121][ T5919] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 431.743460][ T5919] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 431.761326][ T5919] usb 1-1: config 0 has no interface number 0 [ 431.777386][ T5919] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 431.795830][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.828108][ T5919] usb 1-1: Product: syz [ 431.847669][ T5919] usb 1-1: Manufacturer: syz [ 431.872177][ T5919] usb 1-1: SerialNumber: syz [ 431.908216][ T5919] usb 1-1: config 0 descriptor?? [ 431.938594][ T8816] netlink: 64 bytes leftover after parsing attributes in process `syz.3.772'. [ 432.102811][ T8826] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 432.406499][ T5919] usb 1-1: Firmware version (0.0) predates our first public release. [ 432.436784][ T5919] usb 1-1: Please update to version 0.2 or newer [ 432.494294][ T5919] usb 1-1: USB disconnect, device number 25 [ 433.496940][ T8850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'. [ 434.156200][ T8843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.499898][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 434.664086][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 434.687357][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.715178][ T24] usb 1-1: Product: syz [ 434.729537][ T24] usb 1-1: Manufacturer: syz [ 434.745827][ T24] usb 1-1: SerialNumber: syz [ 434.987649][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 435.020728][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 435.057993][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 435.092844][ T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 437.379729][ T5853] usb 1-1: USB disconnect, device number 26 [ 438.592412][ T8905] bridge0: port 3(syz_tun) entered blocking state [ 438.620881][ T8905] bridge0: port 3(syz_tun) entered disabled state [ 438.656858][ T8905] syz_tun: entered allmulticast mode [ 438.714520][ T8905] syz_tun: entered promiscuous mode [ 438.733817][ T8905] bridge0: port 3(syz_tun) entered blocking state [ 438.740501][ T8905] bridge0: port 3(syz_tun) entered forwarding state [ 439.145093][ T8923] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 440.555315][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.566763][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.003475][ T8966] overlayfs: failed to clone upperpath [ 444.485208][ T8981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.809'. [ 448.254883][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 448.462965][ T9026] overlayfs: failed to clone upperpath [ 449.507968][ T9029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'. [ 451.614730][ T9041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.821'. [ 452.524501][ T9052] syzkaller0: entered promiscuous mode [ 452.553337][ T9052] syzkaller0: entered allmulticast mode [ 452.567171][ T9063] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 454.401740][ T9078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.425505][ T9083] tipc: Enabling of bearer rejected, already enabled [ 455.010547][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.829'. [ 455.822079][ T9093] loop0: detected capacity change from 0 to 2048 [ 455.844907][ T9096] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 456.125942][ T9100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.833'. [ 457.019005][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 459.996299][ T9135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.842'. [ 461.797210][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 461.918152][ T9162] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 464.836303][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 468.128335][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 469.550997][ T9234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.867'. [ 474.747884][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 475.338432][ T9331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.376009][ T9332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.421838][ T9356] overlayfs: failed to clone upperpath [ 478.513837][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 481.139176][ T9392] SET target dimension over the limit! [ 483.001401][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 483.347694][ T9412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.363524][ T9414] tipc: Enabling of bearer rejected, already enabled [ 487.327172][ T9455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.343322][ T9460] tipc: Enabling of bearer rejected, already enabled [ 487.508095][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 491.210104][ T9497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.249811][ T9501] tipc: Enabling of bearer rejected, already enabled [ 491.556071][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 492.174565][ T9513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.825023][ T5151] Bluetooth: hci4: Malformed LE Event: 0x0d [ 494.992800][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.029634][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.173391][ T9542] tipc: Resetting bearer [ 495.716776][ T8714] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.745538][ T8714] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.765172][ T8714] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.922091][ T8714] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.819816][ T9551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.836863][ T9556] tipc: Enabling of bearer rejected, already enabled [ 499.282553][ T9578] SET target dimension over the limit! [ 500.929258][ T9592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.953680][ T9592] tipc: Enabling of bearer rejected, already enabled [ 501.986378][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.992922][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.472006][ T9611] overlayfs: failed to clone upperpath [ 505.164769][ T9635] overlayfs: failed to clone upperpath [ 505.695977][ T9642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.720778][ T9642] tipc: Enabling of bearer rejected, already enabled [ 506.144973][ T9646] SET target dimension over the limit! [ 506.468178][ T9649] overlayfs: failed to clone upperpath [ 506.665467][ T9652] netlink: 'syz.1.995': attribute type 2 has an invalid length. [ 506.967843][ T9657] syz.1.995 uses obsolete (PF_INET,SOCK_PACKET) [ 512.809394][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 512.848630][ T9716] netlink: 'syz.3.1010': attribute type 2 has an invalid length. [ 515.435016][ T9733] bridge0: port 3(syz_tun) entered blocking state [ 515.450948][ T9733] bridge0: port 3(syz_tun) entered disabled state [ 515.468451][ T9733] syz_tun: entered allmulticast mode [ 515.519007][ T9733] syz_tun: entered promiscuous mode [ 515.680449][ T9733] bridge0: port 3(syz_tun) entered blocking state [ 515.687533][ T9733] bridge0: port 3(syz_tun) entered forwarding state [ 520.161739][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 521.876116][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 521.975201][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1037'. [ 524.958677][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'. [ 525.302435][ T9835] bridge0: port 3(syz_tun) entered blocking state [ 525.343174][ T9835] bridge0: port 3(syz_tun) entered disabled state [ 525.365883][ T9835] syz_tun: entered allmulticast mode [ 525.449485][ T9835] syz_tun: entered promiscuous mode [ 525.472801][ T9835] bridge0: port 3(syz_tun) entered blocking state [ 525.479490][ T9835] bridge0: port 3(syz_tun) entered forwarding state [ 525.541679][ T9837] lo speed is unknown, defaulting to 1000 [ 525.632024][ T9837] lo speed is unknown, defaulting to 1000 [ 525.773539][ T9837] lo speed is unknown, defaulting to 1000 [ 528.475108][ T24] lo speed is unknown, defaulting to 1000 [ 528.484706][ T9837] infiniband sz1: set down [ 528.503850][ T9837] infiniband sz1: added lo [ 528.620598][ T9837] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 528.669506][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 528.699296][ T9837] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 528.718913][ T9837] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 529.002896][ T9837] RDS/IB: sz1: added [ 529.028202][ T9837] smc: adding ib device sz1 with port count 1 [ 529.069656][ T9837] smc: ib device sz1 port 1 has no pnetid [ 529.104072][ T24] lo speed is unknown, defaulting to 1000 [ 529.377343][ T9837] lo speed is unknown, defaulting to 1000 [ 530.631885][ T9837] lo speed is unknown, defaulting to 1000 [ 531.264817][ T9837] lo speed is unknown, defaulting to 1000 [ 531.418018][ T9900] syz_tun: left allmulticast mode [ 531.514886][ T9900] syz_tun: left promiscuous mode [ 531.536054][ T9900] bridge0: port 3(syz_tun) entered disabled state [ 531.618458][ T9900] bridge_slave_0: left allmulticast mode [ 531.644757][ T9900] bridge_slave_0: left promiscuous mode [ 532.422880][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.537541][ T9900] bridge_slave_1: left allmulticast mode [ 532.613521][ T9900] bridge_slave_1: left promiscuous mode [ 532.621625][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.647344][ T9900] bond0: (slave bond_slave_0): Releasing backup interface [ 532.677576][ T9900] bond0: (slave bond_slave_1): Releasing backup interface [ 532.717110][ T9900] team0: Port device team_slave_0 removed [ 532.746031][ T9900] team0: Port device team_slave_1 removed [ 532.765300][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.784557][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.805800][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.813941][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.832886][ T9900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 532.874980][ T9904] team0: Mode changed to "loadbalance" [ 532.881601][ T9907] ip6gre0: entered promiscuous mode [ 532.943369][ T9907] team0: Port device ip6gre0 added [ 533.020582][ T9837] lo speed is unknown, defaulting to 1000 [ 533.176345][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 533.968212][ T9837] lo speed is unknown, defaulting to 1000 [ 535.014783][ T9943] lo speed is unknown, defaulting to 1000 [ 535.050337][ T9943] lo speed is unknown, defaulting to 1000 [ 535.095137][ T9943] lo speed is unknown, defaulting to 1000 [ 535.132227][ T9943] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 535.182509][ T9943] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 535.240678][ T9943] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 535.308279][ T9943] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 535.388125][ T9943] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 535.585624][ T9943] lo speed is unknown, defaulting to 1000 [ 535.757004][ T9943] lo speed is unknown, defaulting to 1000 [ 536.592758][ T9943] lo speed is unknown, defaulting to 1000 [ 536.650249][ T9943] lo speed is unknown, defaulting to 1000 [ 536.748909][ T9943] lo speed is unknown, defaulting to 1000 [ 541.672081][T10016] tipc: Enabling of bearer rejected, failed to enable media [ 544.373294][T10041] unsupported nlmsg_type 40 [ 549.772302][T10107] dummy0: entered allmulticast mode [ 551.673043][T10130] overlayfs: failed to clone upperpath [ 552.553879][T10139] netlink: 'syz.1.1143': attribute type 4 has an invalid length. [ 552.730281][T10144] netlink: 'syz.1.1143': attribute type 4 has an invalid length. [ 553.547068][T10148] uprobe: syz.0.1145:10148 failed to unregister, leaking uprobe [ 554.544354][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1148'. [ 555.753153][T10174] overlayfs: failed to clone upperpath [ 556.993753][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1155'. [ 559.182507][T10208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'. [ 562.995559][T10232] overlayfs: failed to clone upperpath [ 563.540400][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.550237][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.279585][T10238] uprobe: syz.1.1167:10238 failed to unregister, leaking uprobe [ 565.479522][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 565.548538][T10243] dummy0: entered promiscuous mode [ 565.571148][T10243] macvlan2: entered promiscuous mode [ 565.604475][T10243] dummy0: left promiscuous mode [ 569.601259][T10280] overlayfs: failed to resolve './bus': -2 [ 570.294815][T10263] lo speed is unknown, defaulting to 1000 [ 572.298088][T10302] uprobe: syz.2.1180:10302 failed to unregister, leaking uprobe [ 572.889271][T10308] fuse: Bad value for 'fd' [ 575.150361][T10331] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 575.581480][T10263] lo speed is unknown, defaulting to 1000 [ 576.121922][T10339] overlayfs: failed to resolve './bus': -2 [ 576.968865][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 577.846979][T10352] uprobe: syz.2.1192:10352 failed to unregister, leaking uprobe [ 578.361467][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'. [ 579.484195][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 582.588381][T10372] lo speed is unknown, defaulting to 1000 [ 585.849664][T10387] overlayfs: failed to resolve './bus': -2 [ 591.757377][ C0] sched: DL replenish lagged too much [ 620.754642][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.911173][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 620.991116][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 621.005308][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 621.019651][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 621.029492][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 621.042000][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 621.050913][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 621.065022][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 621.073196][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 622.569941][ T5151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 622.587631][ T5151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 622.601140][ T5151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 622.625844][ T5151] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 622.637956][ T5151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 623.235552][T10398] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 623.248799][T10398] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 623.260944][T10398] Bluetooth: hci6: command tx timeout [ 623.279438][T10398] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 623.339229][T10398] Bluetooth: hci5: command tx timeout [ 623.617266][T10406] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 623.625176][T10406] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 624.699333][ T5151] Bluetooth: hci7: command tx timeout [ 624.873800][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.884107][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.053598][T10406] Bluetooth: hci5: command tx timeout [ 626.059499][T10406] Bluetooth: hci8: command tx timeout [ 626.071281][ T5151] Bluetooth: hci6: command tx timeout [ 626.779236][ T5151] Bluetooth: hci7: command tx timeout [ 627.151758][T10398] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 627.168569][T10398] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 627.183096][T10398] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 627.195036][T10398] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 627.204255][T10398] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 628.139410][ T5151] Bluetooth: hci6: command tx timeout [ 628.144978][T10406] Bluetooth: hci5: command tx timeout [ 628.150866][ T5835] Bluetooth: hci8: command tx timeout [ 629.067531][ T5835] Bluetooth: hci7: command tx timeout [ 630.219425][T10406] Bluetooth: hci5: command tx timeout [ 630.224964][ T5151] Bluetooth: hci6: command tx timeout [ 630.230513][ T5835] Bluetooth: hci8: command tx timeout [ 631.099160][ T5835] Bluetooth: hci7: command tx timeout [ 632.299359][ T5835] Bluetooth: hci8: command tx timeout [ 632.539566][T10398] Bluetooth: hci9: command tx timeout [ 633.323725][ T5831] bridge0: port 3(syz_tun) entered disabled state [ 634.624740][ T5831] syz_tun (unregistering): left allmulticast mode [ 634.633143][T10398] Bluetooth: hci9: command tx timeout [ 634.722759][ T5831] syz_tun (unregistering): left promiscuous mode [ 634.759189][ T5831] bridge0: port 3(syz_tun) entered disabled state [ 636.699660][T10398] Bluetooth: hci9: command tx timeout [ 638.779635][T10398] Bluetooth: hci9: command tx timeout [ 639.965686][T10372] lo speed is unknown, defaulting to 1000 [ 639.975911][T10399] lo speed is unknown, defaulting to 1000 [ 668.256725][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 668.273792][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 668.287910][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 668.304218][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 668.314238][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 670.379659][ T5835] Bluetooth: hci0: command tx timeout [ 672.459538][ T5835] Bluetooth: hci0: command tx timeout [ 674.539892][ T5835] Bluetooth: hci0: command tx timeout [ 676.625079][ T5835] Bluetooth: hci0: command tx timeout [ 679.493911][T10398] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 679.513698][T10398] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 679.524186][T10398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 679.547487][T10398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 679.562922][T10398] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 681.659250][ T5835] Bluetooth: hci2: command tx timeout [ 684.309257][ T5835] Bluetooth: hci2: command tx timeout [ 686.307152][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.313712][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.379485][ T5835] Bluetooth: hci2: command tx timeout [ 688.939177][ T5835] Bluetooth: hci2: command tx timeout [ 710.544868][ T3484] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.710063][T10398] Bluetooth: hci6: command 0x0406 tx timeout [ 744.719468][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 745.120797][ T5830] bridge0: port 3(syz_tun) entered disabled state [ 747.782018][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.825657][T10406] Bluetooth: hci8: command 0x0406 tx timeout [ 749.831842][T10398] Bluetooth: hci7: command 0x0406 tx timeout [ 758.045793][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.139188][T10406] Bluetooth: hci9: command 0x0406 tx timeout [ 776.573152][ T5830] syz_tun (unregistering): left allmulticast mode [ 776.729404][ T5830] syz_tun (unregistering): left promiscuous mode [ 776.756405][ T5830] bridge0: port 3(syz_tun) entered disabled state [ 778.286533][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 778.308604][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 778.324797][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 778.491376][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 778.547691][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 780.619423][T10398] Bluetooth: hci1: command tx timeout [ 780.706749][T10398] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 780.789427][T10398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 780.801257][T10398] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 780.814695][T10398] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 780.825462][T10398] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 782.156248][T10399] lo speed is unknown, defaulting to 1000 [ 782.246057][T10397] lo speed is unknown, defaulting to 1000 [ 782.299871][ T31] INFO: task syz-executor:10405 blocked for more than 143 seconds. [ 782.699783][T10398] Bluetooth: hci1: command tx timeout [ 782.764601][ T31] Tainted: G L syzkaller #0 [ 782.939286][T10398] Bluetooth: hci3: command tx timeout [ 784.464809][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 784.779724][T10398] Bluetooth: hci1: command tx timeout [ 785.019216][T10398] Bluetooth: hci3: command tx timeout [ 785.895995][ T31] task:syz-executor state:D stack:21360 pid:10405 tgid:10405 ppid:1 task_flags:0x400140 flags:0x00080002 [ 786.223695][ T31] Call Trace: [ 786.236698][ T31] [ 786.245356][ T31] __schedule+0x1665/0x5590 [ 786.259075][ T31] ? kasan_save_track+0x4f/0x80 [ 786.265627][ T31] ? kasan_save_track+0x3e/0x80 [ 786.279539][ T31] ? __pfx___schedule+0x10/0x10 [ 786.286040][ T31] ? schedule+0x90/0x360 [ 786.299217][ T31] schedule+0x164/0x360 [ 786.306959][ T31] schedule_preempt_disabled+0x13/0x30 [ 786.319028][ T31] __mutex_lock+0x7fe/0x1300 [ 786.328658][ T31] ? __mutex_lock+0x5ac/0x1300 [ 786.860281][T10398] Bluetooth: hci1: command tx timeout [ 787.099179][T10398] Bluetooth: hci3: command tx timeout [ 787.479107][ T31] ? add_one_compat_dev+0xf0/0x650 [ 787.567427][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 787.696883][ T31] add_one_compat_dev+0xf0/0x650 [ 788.464170][ T31] ? down_read+0x272/0x2e0 [ 789.179099][T10398] Bluetooth: hci3: command tx timeout [ 790.409149][ T31] rdma_dev_init_net+0x243/0x2f0 [ 790.783545][T10398] Bluetooth: hci0: command 0x0406 tx timeout [ 790.816531][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 790.858223][ T31] ? __kmalloc_noprof+0x37d/0x760 [ 791.111701][ T31] ops_init+0x35c/0x5c0 [ 791.212032][ T31] setup_net+0x118/0x340 [ 791.481903][ T31] ? __pfx_setup_net+0x10/0x10 [ 791.499215][ T31] ? preinit_net+0x47d/0x780 [ 791.536651][ T31] copy_net_ns+0x50e/0x730 [ 791.550239][ T31] create_new_namespaces+0x3e7/0x6a0 [ 791.564781][ T31] ? security_capable+0x7e/0x2c0 [ 791.591567][ T31] unshare_nsproxy_namespaces+0x11a/0x160 [ 791.675481][ T5151] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 791.695882][ T5151] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 791.726242][ T31] ksys_unshare+0x521/0x980 [ 791.731118][ T31] ? fput_close_sync+0x11f/0x240 [ 791.736214][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 791.741685][ T31] __x64_sys_unshare+0x38/0x50 [ 791.746763][ T31] do_syscall_64+0x14d/0xf80 [ 791.751719][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.757913][ T31] ? clear_bhb_loop+0x40/0x90 [ 791.762864][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.768834][ T31] RIP: 0033:0x7f543119da67 [ 791.773598][ T31] RSP: 002b:00007ffe64f2cc68 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 791.782271][ T31] RAX: ffffffffffffffda RBX: 00007f5431415f40 RCX: 00007f543119da67 [ 791.993190][ T5151] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 792.016390][T10406] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 792.024590][T10406] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 792.107899][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 792.117248][T10406] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 792.126525][T10406] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 792.129032][T10406] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 792.137034][T10406] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 792.166182][T10406] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2