last executing test programs: 20m32.137377205s ago: executing program 32 (id=127): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 17m46.325772973s ago: executing program 33 (id=1573): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0xa, 0x1000}) 17m5.423226843s ago: executing program 34 (id=1803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000500)={{0x43000, 0x41000, 0x8, 0x9, 0x9, 0x40, 0x40, 0x9, 0x0, 0x2e, 0x10}, {0x2000, 0x100000, 0xf, 0xc, 0x2, 0x4, 0x7d, 0x7, 0x58, 0x1}, {0x50000, 0xeeee8000, 0x9, 0x5, 0x1, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x7, 0x81}, {0xffff1000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x26, 0x7, 0xf5, 0xff}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7b, 0x7, 0x83, 0xf5, 0xc3}, {0x1000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x6, 0xf, 0x1, 0xff}, {0x2000, 0x2, 0x0, 0x9, 0x7, 0x2, 0x5, 0x2, 0x1, 0x82, 0xff}, {0xe000, 0x84efa2808ad4a1f5, 0xa, 0x5, 0xf, 0x3, 0x4, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x4000, 0x86}, 0x80040035, 0x0, 0x8000000, 0x42004, 0xb, 0x800, 0x3000, [0xd, 0x1ff, 0x5e, 0x102]}) 16m53.019585357s ago: executing program 35 (id=1894): r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r1, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 16m47.340664412s ago: executing program 36 (id=1916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) chmod(&(0x7f0000000180)='./sys/module/virtio_mmio/parameters/device\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/virtio_mmio/parameters/device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0x1000@0x100000000:10:25\x00', 0x19) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x14, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000280)={0x0, "3b012ed3849dd562f3853cb8fa33db1ddb471139dd18a81b8db442ae59de389046f141f865b734402028cb709a37d004d6c555a0ba92acc6d7e34a1fbfcca584", {0x9, 0xa3d5}}) 16m10.302142934s ago: executing program 37 (id=2082): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) read(r0, &(0x7f0000002080)=""/86, 0x56) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 14m53.253302243s ago: executing program 38 (id=2828): openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi0\x00', 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$l2tp6(0xa, 0x2, 0x73) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 13m51.377393874s ago: executing program 39 (id=3161): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, 0x0, 0x90) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) 13m16.579569192s ago: executing program 1 (id=3535): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x9b, 0xf, 0x0, 0x5, 0x8, 0x82, 0x46, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x900001, 0xfffffffd, 0x0, 0x3, 0xa, 0x8, '\x00', 0x1, 0x93}) write$eventfd(r3, &(0x7f00000001c0)=0x3, 0xfdef) 13m16.221747353s ago: executing program 1 (id=3541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 13m16.052691013s ago: executing program 1 (id=3542): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 13m15.757204642s ago: executing program 1 (id=3544): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 13m15.490009404s ago: executing program 1 (id=3547): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 13m15.240778544s ago: executing program 1 (id=3551): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5, 0x4, 0x3}, {0x10001, 0x4, 0x9, 0x0, 0x0, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x20000000000000}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3e8, 0x4, 0x1000000000000002, 0x101fffffffffffe, 0x7fffffffffffffff, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x7f4], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m0.183587589s ago: executing program 40 (id=3551): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5, 0x4, 0x3}, {0x10001, 0x4, 0x9, 0x0, 0x0, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x20000000000000}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3e8, 0x4, 0x1000000000000002, 0x101fffffffffffe, 0x7fffffffffffffff, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x7f4], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m24.73362697s ago: executing program 0 (id=3923): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x14704, 0x20, 0x1000000, 0x19a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10e5, 0x200, 0x0, 0x196, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x80, 0x0, 0xfffffffd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca14, 0x40, 0x2, 0x11f}}], 0x1, 0x0, 0x0) 12m24.581107989s ago: executing program 0 (id=3925): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@uuid_off}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) umount2(&(0x7f00000000c0)='./mnt\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@uuid_off}]}) 12m24.415816767s ago: executing program 0 (id=3926): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183842, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000340)="00000080fe534d424000000000000000000001000100000000000000000000000000000000000000000000000000009e00000000000000000000000000000000000000004100010000030000000000000000000000000041310000000000000000000000100000001000000010000000000000860000000000000000000080000000000000001d", 0x87) 12m23.463679446s ago: executing program 0 (id=3934): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2000000000000) 12m23.232158331s ago: executing program 0 (id=3937): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a000000000400000200000002000000000000000100"/54) ioctl(r1, 0x932, &(0x7f0000000400)="0000000001000000000000000000000006000000") 12m21.212739836s ago: executing program 0 (id=3949): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000200)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x1137, 0x4, 0x8, 0x504}, 0xfffdff46, 0xcef}}, 0x8002) 12m20.766063891s ago: executing program 41 (id=3949): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000200)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x1137, 0x4, 0x8, 0x504}, 0xfffdff46, 0xcef}}, 0x8002) 9m10.117057165s ago: executing program 4 (id=5265): userfaultfd(0x80001) inotify_init1(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m9.815390642s ago: executing program 4 (id=5267): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r0, &(0x7f00000002c0)=""/153, 0x99) r1 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r1, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000004c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) 9m6.505637104s ago: executing program 4 (id=5297): syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') mount$afs(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./mnt\x00', 0x0, 0x302c2c, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x4, 0x14, 0x0, 0x4}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x94, 0x82, 0xff, 0x40, 0x586, 0x1000, 0xaa5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x62, 0x40, 0x0, "", [{{0x9, 0x4, 0x56, 0x4, 0x1, 0x45, 0x43, 0xda, 0xb9, [], [{{0x9, 0x5, 0xc, 0x2, 0x20, 0x31, 0x9, 0x16}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, 0x0) syz_emit_vhci(0x0, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0xd}, {0x3, [{0xc9, 0x8}, {0xc8, 0x9}, {0xc9, 0xcc15}]}}}, 0x10) 9m5.047063488s ago: executing program 4 (id=5306): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x143142, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 9m4.110142622s ago: executing program 4 (id=5308): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r0) r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 9m3.005351171s ago: executing program 4 (id=5316): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 8m47.703425829s ago: executing program 42 (id=5316): pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 8m28.061043929s ago: executing program 3 (id=5472): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x83d3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc02d, 0x800, 0x1000002, 0x95}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c88, 0x4, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f73, 0x40002, 0x40040002, 0x336, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x4001, 0xffffffff}}], 0x1, 0x0, 0x0) 8m27.844433552s ago: executing program 3 (id=5473): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 8m27.464467664s ago: executing program 3 (id=5476): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0xf) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0xb) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0xa) landlock_restrict_self(r0, 0xe) landlock_restrict_self(r0, 0xa) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 8m27.217239862s ago: executing program 3 (id=5478): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8m26.961236552s ago: executing program 3 (id=5482): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, 0x0, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x2, 0x5002) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000", @ANYBLOB, @ANYRES16, @ANYRES16], 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000100)='./tracefs/instances/foo\x00', &(0x7f00000002c0), 0x880, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB]) 8m23.748370469s ago: executing program 3 (id=5497): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 8m8.669893826s ago: executing program 43 (id=5497): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 5m43.932515895s ago: executing program 6 (id=7038): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r0, &(0x7f00000059c0)={0x2020}, 0x2020) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 5m43.849231674s ago: executing program 6 (id=7041): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 5m43.753898553s ago: executing program 6 (id=7042): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x1000002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x2, 0x12) write(r0, &(0x7f0000000240)='1', 0x1) 5m43.506617981s ago: executing program 6 (id=7045): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x100) 5m43.342837326s ago: executing program 6 (id=7048): r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x161400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m42.960665114s ago: executing program 6 (id=7051): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 5m42.738005306s ago: executing program 44 (id=7051): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 2m48.198845364s ago: executing program 8 (id=8479): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0x4a, 0x2b, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2m47.244491876s ago: executing program 8 (id=8488): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="000601"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m44.64567844s ago: executing program 8 (id=8512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m44.263784921s ago: executing program 8 (id=8514): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 2m43.980561644s ago: executing program 8 (id=8515): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000540)={0x1, 0x3, 0xe65, 0x400000005, 0x6, 0x5, 0x8, 0xcc3, 0x0, 0x100000a, 0x100400, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000140)) 2m43.433750836s ago: executing program 8 (id=8519): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x8, &(0x7f0000000280)=@string={0x8, 0x3, "6a37df7d66ee"}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) 2m42.907566308s ago: executing program 45 (id=8519): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x8, &(0x7f0000000280)=@string={0x8, 0x3, "6a37df7d66ee"}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) 7.652348492s ago: executing program 5 (id=9780): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18) 6.394410935s ago: executing program 5 (id=9789): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 3.320829755s ago: executing program 5 (id=9811): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000880)="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", 0x2000, &(0x7f0000005580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.209174008s ago: executing program 5 (id=9814): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') 3.036467688s ago: executing program 5 (id=9817): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ef) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) 2.790399944s ago: executing program 5 (id=9824): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 2.603766101s ago: executing program 7 (id=9829): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000002c40)) 2.519190209s ago: executing program 7 (id=9831): syz_usb_connect(0x3, 0xb6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0421081000000000010902a40002010080fa080b00020e03000009040000000e0100000d24011001330080baec000101122402010102000000000000000003ffffff0b24050201000002ffff0009240303010100020009040100010e0200000e240101470081000300000001001b240401015955593200001000800000aa00389b711001040300001e240501008002e0010000ca080000ca080060090015160500011516050007058102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)) 2.198940278s ago: executing program 9 (id=9837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x40, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000) 2.104992026s ago: executing program 9 (id=9838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x30, 0x1}, {0xc, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}]]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 2.097845809s ago: executing program 9 (id=9839): openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000"], 0x80}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4624, @remote}, 0x10) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) 2.042548834s ago: executing program 9 (id=9840): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff0000000705870240"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.739046569s ago: executing program 2 (id=9844): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x13, 0x81, 0x0, 0x2, 0x0, 0x70bd2d, 0x25dfdbfb}, 0x10}}, 0x14) 909.196076ms ago: executing program 7 (id=9845): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 908.824882ms ago: executing program 2 (id=9846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x30, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 882.446711ms ago: executing program 2 (id=9847): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10080406, {0x4, 0x9, 0x2ca5, 0x9}}}, @NL80211_ATTR_SSID={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc10) 780.823668ms ago: executing program 7 (id=9848): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d24090201"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 779.663369ms ago: executing program 2 (id=9849): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xd, 0x4, "6c57ef8b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="300804"], 0x0, 0x0, 0x0, 0x0, 0x0}) 157.024781ms ago: executing program 7 (id=9850): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ef) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) 120.940604ms ago: executing program 9 (id=9851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r1, 0x105, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 68.658518ms ago: executing program 2 (id=9852): ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000103, 0x0, 0x2}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x4f}) 632.167µs ago: executing program 9 (id=9853): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e000000100"/31, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000011) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 394.028µs ago: executing program 2 (id=9854): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000900)=@filename='mtd1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000a00)='jffs2\x00', 0x0, 0x0) 0s ago: executing program 7 (id=9855): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1088.991621][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1088.991739][ T5698] usb 6-1: Manufacturer: syz [ 1088.991789][ T5698] usb 6-1: SerialNumber: syz [ 1089.012823][ T5698] usb 6-1: config 0 descriptor?? [ 1089.117496][ T5763] usb 9-1-port1: cannot reset (err = -71) [ 1089.118875][ T990] usb 9-1: USB disconnect, device number 41 [ 1089.130399][ T5763] usb 9-1-port1: cannot reset (err = -71) [ 1089.130773][ T5763] usb 9-1-port1: Cannot enable. Maybe the USB cable is bad? [ 1089.131309][ T5763] usb 9-1-port1: attempt power cycle [ 1089.646543][ T5698] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input83 [ 1089.845075][ T5763] usb 6-1: USB disconnect, device number 61 [ 1089.935885][T29689] overlayfs: failed to clone upperpath [ 1089.946129][T29689] overlayfs: failed to clone upperpath [ 1090.010530][ T990] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1090.170181][ T990] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1090.174723][ T990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.193193][ T990] usb 9-1: config 0 descriptor?? [ 1090.919601][ T5763] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1091.083066][ T5763] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1091.102381][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.102449][ T5763] usb 6-1: Product: syz [ 1091.102538][ T5763] usb 6-1: Manufacturer: syz [ 1091.102561][ T5763] usb 6-1: SerialNumber: syz [ 1091.131212][T29712] fuse: fd is not a fuse device [ 1091.139837][ T5763] usb 6-1: config 0 descriptor?? [ 1091.360575][ T5763] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1091.429377][ T990] usb 9-1: Cannot set autoneg [ 1091.430006][ T990] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1091.462578][ T990] usb 9-1: USB disconnect, device number 46 [ 1092.379126][ T5763] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1093.208836][ T990] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1093.358910][ T990] usb 9-1: Using ep0 maxpacket: 16 [ 1093.370404][ T990] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1093.378506][ T990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.378745][ T990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.393188][ T990] usb 9-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1093.393267][ T990] usb 9-1: Manufacturer: syz [ 1093.419189][ T990] usb 9-1: config 0 descriptor?? [ 1093.742482][ T5805] usb 6-1: USB disconnect, device number 62 [ 1093.864817][ T990] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:041E:3100.0041/input/input84 [ 1093.946100][ T990] creative-sb0540 0003:041E:3100.0041: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1094.079584][ T990] usb 9-1: USB disconnect, device number 47 [ 1094.218936][ T5805] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1094.379933][ T5805] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1094.382591][ T5805] usb 6-1: config 0 has no interfaces? [ 1094.396120][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1094.396180][ T5805] usb 6-1: Product: syz [ 1094.397026][ T5805] usb 6-1: Manufacturer: syz [ 1094.409912][ T5805] usb 6-1: config 0 descriptor?? [ 1094.625901][T22870] usb 6-1: USB disconnect, device number 63 [ 1094.703303][ T32] audit: type=1326 audit(1787674806.702:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29772 comm="syz.8.7871" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7fd223b5c0f3 code=0x0 [ 1094.960189][T29778] overlayfs: failed to clone upperpath [ 1096.120876][ T5763] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1096.148637][T22870] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1096.269927][ T5763] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1096.281010][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.289520][ T5763] usb 6-1: Product: syz [ 1096.289542][ T5763] usb 6-1: Manufacturer: syz [ 1096.289558][ T5763] usb 6-1: SerialNumber: syz [ 1096.304426][T22870] usb 9-1: Using ep0 maxpacket: 8 [ 1096.307609][T22870] usb 9-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1096.314470][T22870] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1096.314573][T22870] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1096.314681][T22870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.337424][ T5763] usb 6-1: config 0 descriptor?? [ 1096.379190][T22870] kobil_sct 9-1:1.0: KOBIL USB smart card terminal converter detected [ 1096.399732][T22870] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1097.177766][ T5698] usb 9-1: USB disconnect, device number 48 [ 1097.206182][ T5698] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1097.217310][ T5698] kobil_sct 9-1:1.0: device disconnected [ 1097.394976][ T5763] usb 6-1: unexpected transceiver, part 0x00 version 0x48 [ 1097.447233][T29813] overlayfs: failed to clone upperpath [ 1097.596576][ T5763] usb 6-1: Firmware version (0.0) predates our first public release. [ 1097.596647][ T5763] usb 6-1: Please update to version 0.2 or newer [ 1097.599981][ T5763] usb 6-1: atusb_probe: initialization failed, error = -19 [ 1097.639867][ T5763] usb 6-1: USB disconnect, device number 64 [ 1098.268908][ T5698] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 1098.429335][ T5698] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1098.443648][ T5698] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1098.463736][ T5698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.472288][ T5698] usb 9-1: Product: syz [ 1098.476796][ T5698] usb 9-1: Manufacturer: syz [ 1098.481643][ T5698] usb 9-1: SerialNumber: syz [ 1098.491812][ T5698] usb 9-1: config 0 descriptor?? [ 1098.766014][ T5698] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1098.919379][T29855] overlayfs: failed to clone upperpath [ 1098.931188][ T5698] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1098.943560][ T5698] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 1098.943609][ T5698] usb 6-1: config 1 has no interface number 0 [ 1098.966195][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.966245][ T5698] usb 6-1: Product: syz [ 1098.966281][ T5698] usb 6-1: Manufacturer: syz [ 1098.966302][ T5698] usb 6-1: SerialNumber: syz [ 1099.006158][ T5698] usb 6-1: 3:1 : does not exist [ 1099.011506][ T5698] usb 6-1: 3:2 : does not exist [ 1099.305062][ T5698] usb 6-1: USB disconnect, device number 65 [ 1100.268297][ T5698] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1100.429284][ T5698] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1100.433293][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1100.433446][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.441131][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1100.441269][ T5698] usb 6-1: Product: syz [ 1100.460778][ T5698] usb 6-1: config 0 descriptor?? [ 1100.485932][ T5698] hub 6-1:0.0: USB hub found [ 1100.684612][ T5698] hub 6-1:0.0: 1 port detected [ 1101.126578][ T5698] usb 9-1: USB disconnect, device number 49 [ 1101.325186][ T5805] hub 6-1:0.0: activate --> -90 [ 1101.743547][ T990] usb 6-1: USB disconnect, device number 66 [ 1101.744039][ T5698] usb 6-1-port1: cannot reset (err = -71) [ 1101.745258][ T5698] usb 6-1-port1: attempt power cycle [ 1102.017362][T29903] overlayfs: failed to clone upperpath [ 1103.298131][ T5698] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1103.464246][ T5698] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1103.482180][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1103.482314][ T5698] usb 6-1: Product: syz [ 1103.482343][ T5698] usb 6-1: SerialNumber: syz [ 1103.512424][ T5698] usb 6-1: config 0 descriptor?? [ 1103.753155][ T5698] hso 6-1:0.0: Can't find BULK endpoints [ 1103.961506][ T5698] usb 6-1: USB disconnect, device number 71 [ 1104.655298][T29957] jffs2: notice: (29957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1104.877995][ T191] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1105.039620][ T191] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1105.055629][ T191] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.068056][ T191] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1105.068118][ T191] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1105.068166][ T191] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1105.068219][ T191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.112610][ T5763] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1105.269836][ T5763] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1105.284252][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.284303][ T5763] usb 6-1: Product: syz [ 1105.284477][ T5763] usb 6-1: Manufacturer: syz [ 1105.284527][ T5763] usb 6-1: SerialNumber: syz [ 1105.728794][ T5763] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1105.729053][ T5763] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1105.957469][ T191] gud 9-1:1.0: Failed to get connectors (error=-32) [ 1105.960833][ T191] gud 9-1:1.0: probe with driver gud failed with error -32 [ 1106.053372][ T191] usb 9-1: USB disconnect, device number 50 [ 1106.346815][ T5763] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1106.346902][ T5763] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1106.347861][ T5763] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1106.391247][ T5763] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1106.421079][ T5763] usb 6-1: USB disconnect, device number 72 [ 1106.922501][T30011] input: syz1 as /devices/virtual/input/input85 [ 1107.690697][T30038] input: syz1 as /devices/virtual/input/input86 [ 1108.578268][T30069] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1108.662282][T30069] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1108.662423][T30069] overlayfs: failed to look up (tracing) for ino (-66) [ 1109.005338][T30086] jffs2: notice: (30086) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1109.543524][ T990] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1109.728534][ T990] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1109.744206][ T990] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1109.754671][ T990] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1109.755798][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.997055][ T990] ims_pcu 6-1:1.0: Failed to set line coding, error: -71 [ 1110.006421][ T990] ims_pcu 6-1:1.0: probe with driver ims_pcu failed with error -71 [ 1110.020982][T22870] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 1110.034097][ T990] usb 6-1: USB disconnect, device number 73 [ 1110.177750][T22870] usb 9-1: device descriptor read/64, error -71 [ 1110.421292][T22870] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 1110.547438][T22870] usb 9-1: device descriptor read/64, error -71 [ 1110.658055][T22870] usb usb9-port1: attempt power cycle [ 1111.001849][T22870] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 1111.023756][T22870] usb 9-1: device descriptor read/8, error -71 [ 1111.257777][T22870] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1111.279553][T22870] usb 9-1: device descriptor read/8, error -71 [ 1111.391123][T22870] usb usb9-port1: unable to enumerate USB device [ 1112.816022][T30153] overlayfs: failed to clone upperpath [ 1112.869037][T30155] fuse: fd is not a fuse device [ 1112.908471][T30160] overlayfs: failed to clone lowerpath [ 1112.937891][T30157] syzkaller1: entered promiscuous mode [ 1112.937941][T30157] syzkaller1: entered allmulticast mode [ 1112.953167][T30160] overlayfs: failed to clone lowerpath [ 1113.397609][ T990] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1113.434195][T30182] overlayfs: failed to clone lowerpath [ 1113.486920][T30185] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1113.569083][ T990] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1113.575976][ T990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.588775][ T990] usb 9-1: config 0 descriptor?? [ 1113.816751][ T990] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1113.852966][ T990] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 1113.853025][ T990] [drm] Initialized udl on minor 1 [ 1114.002197][T30193] mmap: syz.7.8032 (30193) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1114.028483][ T990] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1114.065456][ T990] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1114.235596][T14376] usb 9-1: USB disconnect, device number 55 [ 1115.903389][T30237] overlayfs: failed to clone upperpath [ 1115.963006][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.963112][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.626993][T14375] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1116.776964][T14375] usb 9-1: Using ep0 maxpacket: 8 [ 1116.784154][T14375] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1116.800022][T14375] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.800100][T14375] usb 9-1: Product: syz [ 1116.800135][T14375] usb 9-1: Manufacturer: syz [ 1116.800216][T14375] usb 9-1: SerialNumber: syz [ 1116.819894][T14375] usb 9-1: config 0 descriptor?? [ 1117.074964][T30251] syzkaller1: entered promiscuous mode [ 1117.078669][T14375] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1117.091226][T30251] syzkaller1: entered allmulticast mode [ 1117.796489][T30268] jffs2: notice: (30268) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1118.005868][T30272] gadgetfs: bound to dummy_udc driver [ 1118.300099][T30278] netlink: 84 bytes leftover after parsing attributes in process `syz.7.8065'. [ 1118.318523][T14375] usb write operation failed. (-71) [ 1118.327140][T14375] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1118.341066][T14375] dvbdev: DVB: registering new adapter (Terratec H7) [ 1118.341562][T14375] usb 9-1: media controller created [ 1118.343283][T14375] usb read operation failed. (-71) [ 1118.425119][T14375] usb write operation failed. (-71) [ 1118.457887][T14375] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1118.478756][T14375] usb 9-1: USB disconnect, device number 56 [ 1118.676102][T30287] device-mapper: ioctl: device name cannot contain '/' [ 1118.999639][T30297] fuse: fd is not a fuse device [ 1119.469130][T30309] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1119.725343][T30317] syzkaller1: entered promiscuous mode [ 1119.732383][T30317] syzkaller1: entered allmulticast mode [ 1119.746724][ T25] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 1119.898153][ T25] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1119.909493][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.909553][ T25] usb 9-1: Product: syz [ 1119.910363][ T25] usb 9-1: Manufacturer: syz [ 1119.910417][ T25] usb 9-1: SerialNumber: syz [ 1119.926838][ T25] usb 9-1: config 0 descriptor?? [ 1120.079778][T30321] fuse: fd is not a fuse device [ 1120.149945][ T25] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1121.136923][ T990] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1121.165224][ T25] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1121.178747][ T25] usb 9-1: USB disconnect, device number 57 [ 1121.289037][ T990] usb 6-1: Using ep0 maxpacket: 8 [ 1121.291530][ T990] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1121.295758][ T990] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1121.295927][ T990] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1121.296009][ T990] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1121.296078][ T990] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1121.296148][ T990] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1121.296213][ T990] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1121.299817][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.560027][ T990] usb 6-1: GET_CAPABILITIES returned 0 [ 1121.560133][ T990] usbtmc 6-1:16.0: can't read capabilities [ 1121.782747][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1121.805907][T30346] usbtmc 6-1:16.0: Unable to send data, error -71 [ 1121.815775][T14375] usb 6-1: USB disconnect, device number 74 [ 1123.069424][ T25] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1123.219091][ T25] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1123.223997][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1123.224090][ T25] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1123.224163][ T25] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1123.272632][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1123.272685][ T25] usb 9-1: Product: syz [ 1123.272722][ T25] usb 9-1: Manufacturer: syz [ 1123.272743][ T25] usb 9-1: SerialNumber: syz [ 1123.571511][ T25] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1123.759022][T14375] usb 9-1: USB disconnect, device number 58 [ 1123.778912][T14375] usblp0: removed [ 1124.121782][T30429] fuse: fd is not a fuse device [ 1124.306539][T14375] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1124.411162][T30444] overlayfs: failed to clone upperpath [ 1124.456331][T14375] usb 6-1: Using ep0 maxpacket: 8 [ 1124.463168][T14375] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1124.477032][T14375] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1124.477105][T14375] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1124.477150][T14375] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1124.477181][T14375] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1124.477212][T14375] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1124.477262][T14375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.785392][T14375] usb 6-1: usb_control_msg returned -32 [ 1124.785479][T14375] usbtmc 6-1:16.0: can't read capabilities [ 1125.518819][T30468] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1125.586400][T30474] jffs2: notice: (30474) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1125.671639][T30478] overlayfs: failed to clone upperpath [ 1125.722188][ T25] usb 6-1: USB disconnect, device number 75 [ 1126.379010][T30504] kAFS: bad VL server IP address [ 1126.582797][T30511] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 1126.582797][T30511] program syz.5.8155 not setting count and/or reply_len properly [ 1127.036268][T14375] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1127.197445][T14375] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1127.209731][T14375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.209785][T14375] usb 6-1: Product: syz [ 1127.209820][T14375] usb 6-1: Manufacturer: syz [ 1127.209850][T14375] usb 6-1: SerialNumber: syz [ 1127.251959][T22870] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1127.252023][T22870] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1127.320108][T22870] usb 6-1: loading /lib/firmware/updates/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1127.320451][T22870] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1127.320544][T22870] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1127.321773][T22870] usb 6-1: loading /lib/firmware/updates/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1127.322075][T22870] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1127.322158][T22870] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1127.340066][T22870] usb 6-1: loading /lib/firmware/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1127.340469][T22870] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1127.340563][T22870] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1127.363879][T22870] usb 6-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1127.364009][T22870] usb 6-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1127.364078][T22870] usb 6-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 1127.445966][ T25] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1127.627014][ T25] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 1127.630816][ T25] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1127.630914][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1127.630973][ T25] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1127.631082][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.658724][T30526] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1127.686290][ T25] cyberjack 9-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 1127.711842][ T25] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1127.933050][T14376] usb 9-1: USB disconnect, device number 59 [ 1127.947857][T14376] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1127.962103][T14376] cyberjack 9-1:1.0: device disconnected [ 1128.766176][T14376] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1128.919646][T14376] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1128.933196][T14376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.933328][T14376] usb 9-1: Product: syz [ 1128.933384][T14376] usb 9-1: Manufacturer: syz [ 1128.933436][T14376] usb 9-1: SerialNumber: syz [ 1128.955283][T14376] usb 9-1: config 0 descriptor?? [ 1128.967338][T14376] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1129.239118][T30542] overlayfs: failed to clone upperpath [ 1129.850035][T14375] usb 6-1: USB disconnect, device number 76 [ 1130.190887][T14376] gspca_sunplus: reg_w_riv err -71 [ 1130.193460][T14376] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 1130.221254][T14376] usb 9-1: USB disconnect, device number 60 [ 1130.346523][T30561] fuse: fd is not a fuse device [ 1130.916250][T30572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1131.899785][T30604] raw_sendmsg: syz.2.8193 forgot to set AF_INET. Fix it! [ 1132.909928][T30638] fuse: fd is not a fuse device [ 1136.505390][ T5763] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1136.657082][ T5763] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 1136.661295][ T5763] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1136.661393][ T5763] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1136.661460][ T5763] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1136.661593][ T5763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.707264][T30742] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1136.720760][ T5763] cyberjack 9-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 1136.745858][ T5763] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1136.920802][T30745] lo speed is unknown, defaulting to 1000 [ 1136.949790][T30742] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 1136.975652][T14376] usb 9-1: USB disconnect, device number 61 [ 1136.997906][T14376] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1137.008667][T14376] cyberjack 9-1:1.0: device disconnected [ 1139.885115][T14376] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1140.040128][T14376] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1140.040224][T14376] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1140.042453][T14376] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.042527][T14376] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1140.042648][T14376] usb 9-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1140.042751][T14376] usb 9-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1140.042857][T14376] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1140.042941][T14376] usb 9-1: config 1 interface 1 has no altsetting 0 [ 1140.078037][T14376] usb 9-1: string descriptor 0 read error: -22 [ 1140.078525][T14376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.280826][T30819] fuse: fd is not a fuse device [ 1141.341699][T14376] usb 9-1: 2:0: failed to get current value for ch 1 (-71) [ 1141.359784][T30821] fuse: fd is not a fuse device [ 1141.503463][T14376] usb 9-1: USB disconnect, device number 62 [ 1141.969768][T30831] overlayfs: failed to clone lowerpath [ 1142.102861][T30837] fuse: fd is not a fuse device [ 1142.391438][T30851] overlayfs: failed to clone upperpath [ 1142.542584][T30855] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1143.085018][ T5698] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1143.244955][ T5698] usb 9-1: Using ep0 maxpacket: 32 [ 1143.251158][ T5698] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1143.261994][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.285070][ T5698] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1144.723565][ T5698] usb 9-1: USB disconnect, device number 63 [ 1144.760049][T30880] syzkaller0: entered promiscuous mode [ 1144.765881][T30880] syzkaller0: entered allmulticast mode [ 1151.092571][T31019] overlayfs: failed to clone lowerpath [ 1151.101205][T31019] overlayfs: failed to clone lowerpath [ 1151.605610][T31040] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1152.134074][T14376] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1152.285121][T14376] usb 9-1: Using ep0 maxpacket: 16 [ 1152.295969][T14376] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1152.296073][T14376] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1152.316798][T14376] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.316947][T14376] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1152.317095][T14376] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1152.351531][T14376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.351598][T14376] usb 9-1: Product: syz [ 1152.351653][T14376] usb 9-1: Manufacturer: syz [ 1152.351710][T14376] usb 9-1: SerialNumber: syz [ 1152.595000][T14376] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1152.595676][T14376] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1152.670471][T31061] lo speed is unknown, defaulting to 1000 [ 1152.994741][T14376] usb 9-1: 2:1 : bogus bTerminalLink 6 [ 1153.312946][T14376] usb 9-1: USB disconnect, device number 64 [ 1154.074234][ T25] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 1154.225108][ T25] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1154.236230][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.236282][ T25] usb 9-1: Product: syz [ 1154.236300][ T25] usb 9-1: Manufacturer: syz [ 1154.236327][ T25] usb 9-1: SerialNumber: syz [ 1154.249859][ T25] usb 9-1: config 0 descriptor?? [ 1154.460631][ T25] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1155.184900][T31102] fuse: fd is not a fuse device [ 1155.274545][T31105] fuse: fd is not a fuse device [ 1155.282964][T31105] overlayfs: failed to clone upperpath [ 1155.688311][ T25] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1156.895014][T14376] usb 9-1: USB disconnect, device number 65 [ 1157.263304][T31152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.573746][ T25] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1157.737414][ T25] usb 9-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice= 0.00 [ 1157.759189][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.759243][ T25] usb 9-1: Product: syz [ 1157.759273][ T25] usb 9-1: Manufacturer: syz [ 1157.759312][ T25] usb 9-1: SerialNumber: syz [ 1157.791693][ T25] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 1158.062178][ T25] pwc: Failed to set LED on/off time (-71) [ 1158.065102][ T25] pwc: send_video_command error -71 [ 1158.065154][ T25] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1158.065514][ T25] Philips webcam 9-1:1.0: probe with driver Philips webcam failed with error -71 [ 1158.066630][ T25] uvcvideo 9-1:1.0: Found UVC 0.00 device syz (046d:08b2) [ 1158.066769][ T25] uvcvideo 9-1:1.0: No valid video chain found. [ 1158.109806][ T25] usb 9-1: USB disconnect, device number 66 [ 1158.133912][T14376] kernel read not supported for file [fscontext] (pid: 14376 comm: kworker/0:9) [ 1159.402808][T31200] kvm: MONITOR instruction emulated as NOP! [ 1159.572447][T31205] netlink: 'syz.8.8413': attribute type 4 has an invalid length. [ 1160.063521][T14376] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1160.214733][T14376] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1160.218539][T14376] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1160.218621][T14376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1160.218702][T14376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1160.218766][T14376] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1160.218881][T14376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.233674][T14376] usb 9-1: config 0 descriptor?? [ 1160.668715][T14376] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1161.478193][ T990] usb 9-1: USB disconnect, device number 67 [ 1162.131255][T31259] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3715677006 (29725416048 ns) > initial count (7153722568 ns). Using initial count to start timer. [ 1162.651310][T31277] jffs2: notice: (31277) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1162.703356][T14376] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1162.855680][T14376] usb 9-1: Using ep0 maxpacket: 16 [ 1162.865472][T14376] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1162.865569][T14376] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 1162.887734][T14376] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.902810][T14376] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.918116][T14376] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.938741][T14376] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.952774][T14376] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.974780][T14376] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.002483][T14376] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.018680][T14376] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.037540][T14376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1163.037620][T14376] usb 9-1: SerialNumber: syz [ 1163.057049][T14376] usb 9-1: config 0 descriptor?? [ 1163.100654][T14376] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input88 [ 1163.127692][T31289] fuse: fd is not a fuse device [ 1163.288608][T31273] input: syz1 as /devices/virtual/input/input89 [ 1163.682304][ T4970] bcm5974 9-1:0.0: could not read from device [ 1163.711782][ T4970] bcm5974 9-1:0.0: could not read from device [ 1163.736556][T14376] usb 9-1: USB disconnect, device number 68 [ 1163.760802][ T4970] bcm5974 9-1:0.0: could not read from device [ 1163.809063][ T4970] bcm5974 9-1:0.0: could not read from device [ 1163.833841][T31308] overlayfs: failed to clone upperpath [ 1164.718468][T31338] overlayfs: failed to clone upperpath [ 1165.446904][T31370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8474'. [ 1165.448137][T31370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8474'. [ 1165.594388][T31371] kvm: pic: single mode not supported [ 1165.594522][T31371] picdev_read: 1 callbacks suppressed [ 1165.597920][T31371] kvm: pic: non byte read [ 1165.598791][T31371] kvm: pic: non byte read [ 1165.601214][T31371] kvm: pic: non byte read [ 1165.601781][T31371] kvm: pic: single mode not supported [ 1165.601935][T31371] kvm: pic: non byte read [ 1165.616433][T31371] kvm: pic: non byte read [ 1165.616848][T31371] kvm: pic: single mode not supported [ 1165.616868][T31371] kvm: pic: level sensitive irq not supported [ 1165.616963][T31371] kvm: pic: non byte read [ 1165.622401][T31371] kvm: pic: non byte read [ 1165.634343][T31371] kvm: pic: non byte read [ 1165.635543][T31371] kvm: pic: level sensitive irq not supported [ 1165.635697][T31371] kvm: pic: non byte read [ 1167.246987][T31432] overlayfs: failed to clone upperpath [ 1167.317725][ T5763] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1167.433052][T31441] fuse: fd is not a fuse device [ 1167.485024][ T5763] usb 9-1: Using ep0 maxpacket: 16 [ 1167.487637][ T5763] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1167.496807][ T5763] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 1167.496901][ T5763] usb 9-1: config 0 has no interface number 0 [ 1167.497028][ T5763] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1167.497103][ T5763] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1167.526663][ T5763] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.526701][ T5763] usb 9-1: Product: syz [ 1167.526732][ T5763] usb 9-1: Manufacturer: syz [ 1167.526747][ T5763] usb 9-1: SerialNumber: syz [ 1167.561377][ T5763] usb 9-1: config 0 descriptor?? [ 1167.565315][T31422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1167.565992][T31422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1167.779554][T31422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1167.781488][T31422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1167.918166][T31450] fuse: fd is not a fuse device [ 1167.988565][ T5763] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1169.003054][ T5763] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1169.003146][ T5763] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1169.003661][ T5763] asix 9-1:0.34: probe with driver asix failed with error -71 [ 1169.047336][ T5763] usb 9-1: USB disconnect, device number 69 [ 1171.429218][T31499] fuse: fd is not a fuse device [ 1171.705059][T26613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1171.719688][T26613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1171.737724][T26613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1171.749485][T26613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1171.765553][T26613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1171.888328][ T4935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1171.905191][ T4935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1171.906603][ T4935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1171.927127][ T4935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1171.932949][ T4935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1172.559830][T31535] lo speed is unknown, defaulting to 1000 [ 1172.600045][T31536] fuse: fd is not a fuse device [ 1172.610774][T31536] overlayfs: failed to clone upperpath [ 1172.970344][T31509] lo speed is unknown, defaulting to 1000 [ 1173.378134][T31551] fuse: fd is not a fuse device [ 1173.954978][T26613] Bluetooth: hci2: command tx timeout [ 1174.071915][T31509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.073335][T31509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.073821][T31509] bridge_slave_0: entered allmulticast mode [ 1174.078891][T31509] bridge_slave_0: entered promiscuous mode [ 1174.087426][T31509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.087880][T31509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.088280][T31509] bridge_slave_1: entered allmulticast mode [ 1174.095258][T31509] bridge_slave_1: entered promiscuous mode [ 1174.150225][T31509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.164868][T31509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.215595][T31509] team0: Port device team_slave_0 added [ 1174.225171][T31509] team0: Port device team_slave_1 added [ 1174.265966][T31509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.273766][T31509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.301098][T31509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.322625][T31509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.329735][T31509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.329773][T31509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.413557][T31509] hsr_slave_0: entered promiscuous mode [ 1174.416341][T31509] hsr_slave_1: entered promiscuous mode [ 1174.418243][T31509] debugfs: 'hsr0' already exists in 'hsr' [ 1174.418295][T31509] Cannot create hsr debugfs directory [ 1175.867556][T31509] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1175.882798][T31509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.891477][T31509] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1175.904287][T31509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1175.913045][T31509] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1175.928270][T31509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1175.941132][T31509] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1175.957041][T31509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1176.033212][T26613] Bluetooth: hci2: command tx timeout [ 1176.250806][T31509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.300747][T31509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.378765][T22302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.379104][T22302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.427141][T22302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.427421][T22302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.228757][T31667] fuse: fd is not a fuse device [ 1177.394835][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.394929][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.786985][T31688] FAULT_INJECTION: forcing a failure. [ 1177.786985][T31688] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1177.787052][T31688] CPU: 1 UID: 0 PID: 31688 Comm: syz.5.8568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1177.787089][T31688] Tainted: [L]=SOFTLOCKUP [ 1177.787100][T31688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.787118][T31688] Call Trace: [ 1177.787130][T31688] [ 1177.787142][T31688] dump_stack_lvl+0xe8/0x150 [ 1177.787188][T31688] should_fail_ex+0x3eb/0x540 [ 1177.787234][T31688] get_futex_key+0x1b4/0x1580 [ 1177.787292][T31688] ? __pfx_get_futex_key+0x10/0x10 [ 1177.787349][T31688] futex_wake+0x119/0x5f0 [ 1177.787392][T31688] ? __pfx_futex_wake+0x10/0x10 [ 1177.787445][T31688] do_futex+0x458/0x4e0 [ 1177.787472][T31688] ? __might_fault+0xaf/0x130 [ 1177.787511][T31688] ? __pfx_do_futex+0x10/0x10 [ 1177.787541][T31688] ? put_timespec64+0xd8/0x130 [ 1177.787575][T31688] __se_sys_futex+0x3a8/0x450 [ 1177.787610][T31688] ? __x64_sys_clock_gettime+0x238/0x290 [ 1177.787643][T31688] ? __pfx___se_sys_futex+0x10/0x10 [ 1177.787682][T31688] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1177.787723][T31688] ? __x64_sys_futex+0x21/0xf0 [ 1177.787763][T31688] do_syscall_64+0x166/0x520 [ 1177.787794][T31688] ? trace_irq_disable+0x3b/0x140 [ 1177.787833][T31688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.787862][T31688] ? clear_bhb_loop+0x70/0xc0 [ 1177.787895][T31688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.787923][T31688] RIP: 0033:0x7f124bd9e0d9 [ 1177.787949][T31688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.787974][T31688] RSP: 002b:00007f124ccf80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1177.788004][T31688] RAX: ffffffffffffffda RBX: 00007f124c025fa8 RCX: 00007f124bd9e0d9 [ 1177.788026][T31688] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f124c025fac [ 1177.788045][T31688] RBP: 00007f124c025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1177.788070][T31688] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1177.788088][T31688] R13: 00007f124c026038 R14: 00007ffed1964130 R15: 00007ffed1964218 [ 1177.788147][T31688] [ 1178.112716][T26613] Bluetooth: hci2: command tx timeout [ 1178.398297][T31702] overlayfs: failed to clone upperpath [ 1178.406635][T31509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.983722][T31509] veth0_vlan: entered promiscuous mode [ 1179.006689][T31509] veth1_vlan: entered promiscuous mode [ 1179.058620][T31509] veth0_macvtap: entered promiscuous mode [ 1179.073866][T31509] veth1_macvtap: entered promiscuous mode [ 1179.098844][T31509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.121379][T31509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.249768][ T7310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.253001][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.253342][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.253446][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.253541][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.309144][ T7310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.450713][ T2339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.450768][ T2339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.978954][T31749] syzkaller1: entered promiscuous mode [ 1179.979007][T31749] syzkaller1: entered allmulticast mode [ 1180.194306][T26613] Bluetooth: hci2: command tx timeout [ 1180.412260][ T191] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1180.581942][ T191] usb 10-1: Using ep0 maxpacket: 8 [ 1180.586896][ T191] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1180.616148][ T191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.616206][ T191] usb 10-1: Product: syz [ 1180.616250][ T191] usb 10-1: Manufacturer: syz [ 1180.616289][ T191] usb 10-1: SerialNumber: syz [ 1180.645070][T31768] overlayfs: failed to clone upperpath [ 1180.654011][ T191] usb 10-1: config 0 descriptor?? [ 1180.670498][ T191] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1181.039076][T31777] tipc: Enabling of bearer rejected, already enabled [ 1181.927661][ T191] gspca_sonixj: reg_w1 err -71 [ 1181.973053][ T191] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 1181.996493][ T191] usb 10-1: USB disconnect, device number 20 [ 1182.068781][T31800] syzkaller1: entered promiscuous mode [ 1182.068853][T31800] syzkaller1: entered allmulticast mode [ 1182.500629][T31815] fuse: fd is not a fuse device [ 1182.977488][T31833] kvm: pic: level sensitive irq not supported [ 1183.079238][T31835] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1183.079272][T31835] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1183.106968][T31835] vhci_hcd vhci_hcd.0: Device attached [ 1183.325833][T31851] type: 56 invalid [ 1183.341701][ T5763] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1183.349551][T31842] vhci_hcd: sendmsg failed!, ret=-107 for 48 [ 1183.357793][T31838] vhci_hcd: xmit failed -4 [ 1183.392592][ T7319] vhci_hcd vhci_hcd.0: stop threads [ 1183.413335][ T7319] vhci_hcd vhci_hcd.0: release socket [ 1183.419016][T31853] loop8: detected capacity change from 0 to 524288000 [ 1183.443111][ T7319] vhci_hcd vhci_hcd.0: disconnect device [ 1184.486312][T14376] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1184.641944][T14376] usb 10-1: Using ep0 maxpacket: 32 [ 1184.644043][T14376] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1184.648696][T14376] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.648788][T14376] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.648895][T14376] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.702518][T14376] usb 10-1: config 0 descriptor?? [ 1184.720433][T14376] hub 10-1:0.0: USB hub found [ 1184.944712][T14376] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1185.366869][T14376] hid-generic 0003:046D:C31C.0043: unknown main item tag 0x0 [ 1185.409592][T14376] hid-generic 0003:046D:C31C.0043: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0 [ 1185.469288][T31910] fuse: fd is not a fuse device [ 1186.230923][T31879] usb 10-1: reset high-speed USB device number 21 using dummy_hcd [ 1186.648832][T31879] usbhid 10-1:0.0: reset_resume error -71 [ 1186.655101][ T25] usb 10-1: USB disconnect, device number 21 [ 1186.962116][T31966] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1187.159124][T31973] fuse: fd is not a fuse device [ 1187.405139][T31986] fuse: fd is not a fuse device [ 1187.643026][T14376] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 1187.643083][T14376] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:9: checksumming directory block 0 [ 1187.643303][T14376] usb 6-1: loading /lib/firmware/updates/syzkaller/htc_9271.fw failed with error -74 [ 1187.643591][T14376] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 1187.643653][T14376] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:9: checksumming directory block 0 [ 1187.644143][T14376] usb 6-1: loading /lib/firmware/updates/htc_9271.fw failed with error -74 [ 1187.773457][T14376] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 1187.773530][T14376] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:9: checksumming directory block 0 [ 1187.863443][T14376] usb 6-1: loading /lib/firmware/syzkaller/htc_9271.fw failed with error -74 [ 1187.895215][T14376] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 1187.895302][T14376] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:9: checksumming directory block 0 [ 1187.896040][T14376] usb 6-1: loading /lib/firmware/htc_9271.fw failed with error -74 [ 1187.896122][T14376] usb 6-1: Direct firmware load for htc_9271.fw failed with error -74 [ 1187.896176][T14376] usb 6-1: Falling back to sysfs fallback for: htc_9271.fw [ 1188.501282][ T5763] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1189.021194][ T25] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1189.162882][ T32] audit: type=1800 audit(1787674901.161:67): pid=32017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8637" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 1189.189277][ T25] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1189.210673][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.210752][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.239537][ T25] usb 10-1: config 0 descriptor?? [ 1189.508109][ T25] usbhid 10-1:0.0: can't add hid device: -71 [ 1189.508355][ T25] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1189.535842][ T25] usb 10-1: USB disconnect, device number 22 [ 1190.012338][ T25] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1190.178393][ T25] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1190.189658][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.189732][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.225177][ T25] usb 10-1: config 0 descriptor?? [ 1190.828962][T32064] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8651'. [ 1191.023633][T32071] fuse: fd is not a fuse device [ 1191.062862][ T25] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 1191.076255][ T25] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input90 [ 1191.194889][T32075] fuse: fd is not a fuse device [ 1191.451701][ T2229] usb 10-1: USB disconnect, device number 23 [ 1191.451757][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1192.391322][ T5763] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1192.552697][ T5763] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1192.567620][ T5763] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.567676][ T5763] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1192.567707][ T5763] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1192.567821][ T5763] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.618646][ T5763] usb 10-1: config 0 descriptor?? [ 1193.068818][ T5763] hid-multitouch 0003:0EEF:72C4.0044: item 0 1 0 9 parsing failed [ 1193.077955][ T5763] hid-multitouch 0003:0EEF:72C4.0044: probe with driver hid-multitouch failed with error -22 [ 1193.271610][ T5698] usb 10-1: USB disconnect, device number 24 [ 1193.377389][T32117] overlayfs: failed to clone upperpath [ 1193.633426][T32128] overlayfs: failed to clone upperpath [ 1193.644078][T32128] overlayfs: failed to clone upperpath [ 1194.150889][T32144] null_blk: disk nullb1 created [ 1195.610334][T32168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1195.743538][T32175] fuse: fd is not a fuse device [ 1195.758846][ T7319] nci: nci_rx_work: unknown MT 0x7 [ 1196.089774][T32188] overlayfs: failed to clone upperpath [ 1196.837077][T32213] overlayfs: failed to clone upperpath [ 1196.849594][T32213] overlayfs: failed to clone upperpath [ 1197.656098][T32232] CIFS: Attempting to mount //127.0.0.1/share [ 1197.665739][T32232] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1197.665801][T32232] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1198.549588][T32235] fuse: fd is not a fuse device [ 1198.616725][T32170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1198.792002][T32243] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1199.871005][T32277] fuse: fd is not a fuse device [ 1200.230236][ T2229] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1200.359089][T32293] jffs2: notice: (32293) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1200.391261][ T2229] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1200.452400][ T2229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.452450][ T2229] usb 10-1: Product: syz [ 1200.452486][ T2229] usb 10-1: Manufacturer: syz [ 1200.452507][ T2229] usb 10-1: SerialNumber: syz [ 1200.484350][ T2229] usb 10-1: config 0 descriptor?? [ 1200.652068][T32300] fuse: fd is not a fuse device [ 1200.709205][ T2229] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1201.952312][ T2229] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1203.032290][ T990] usb 10-1: USB disconnect, device number 25 [ 1203.156778][T32349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1203.305744][T32356] block nbd9: NBD_DISCONNECT [ 1203.315465][T32356] block nbd9: Disconnected due to user request. [ 1203.324958][T32356] block nbd9: shutting down sockets [ 1204.030214][ T5763] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1204.194031][ T5763] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1204.211667][ T5763] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1204.211715][ T5763] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.211742][ T5763] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1204.211795][ T5763] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.254452][ T5763] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1204.254486][ T5763] usb 10-1: Product: syz [ 1204.254505][ T5763] usb 10-1: Manufacturer: syz [ 1204.284112][ T5763] cdc_wdm 10-1:1.0: skipping garbage [ 1204.294502][ T5763] cdc_wdm 10-1:1.0: skipping garbage [ 1204.314172][ T5763] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1204.321137][ T5763] cdc_wdm 10-1:1.0: Unknown control protocol [ 1204.494078][ T990] usb 10-1: USB disconnect, device number 26 [ 1204.969939][ T990] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1205.140759][ T990] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1205.147355][ T990] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1205.147685][ T990] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.147747][ T990] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1205.147896][ T990] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.155189][ T990] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1205.155263][ T990] usb 10-1: Product: syz [ 1205.155307][ T990] usb 10-1: Manufacturer: syz [ 1205.218961][ T990] cdc_wdm 10-1:1.0: skipping garbage [ 1205.219046][ T990] cdc_wdm 10-1:1.0: skipping garbage [ 1205.245668][ T990] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1205.245743][ T990] cdc_wdm 10-1:1.0: Unknown control protocol [ 1205.500136][T32401] kvm: apic: phys broadcast and lowest prio [ 1206.030498][T26613] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1206.114443][T32429] fuse: fd is not a fuse device [ 1206.161325][T32431] fuse: fd is not a fuse device [ 1206.330009][ C1] wdm_int_callback: 364 callbacks suppressed [ 1206.330103][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1206.330130][ C1] wdm_int_callback: 364 callbacks suppressed [ 1206.330155][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1206.332646][ T5763] usb 10-1: USB disconnect, device number 27 [ 1206.336405][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1206.336431][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1206.336450][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1206.662269][T32435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1207.042091][T32437] fuse: fd is not a fuse device [ 1207.533687][T32457] fuse: fd is not a fuse device [ 1207.592240][T32459] fuse: fd is not a fuse device [ 1207.789737][T26613] Bluetooth: hci2: command tx timeout [ 1208.153933][T32466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.210610][T32469] fuse: fd is not a fuse device [ 1208.798587][T32497] tipc: Started in network mode [ 1208.803748][T32497] tipc: Node identity ea06e8f7eb01, cluster identity 4711 [ 1208.814381][T32497] tipc: Enabled bearer , priority 0 [ 1208.828769][T32496] tipc: Disabling bearer [ 1209.511697][T32516] netlink: 132 bytes leftover after parsing attributes in process `syz.9.8834'. [ 1209.713529][T32518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.888079][T32543] fuse: fd is not a fuse device [ 1211.448728][T32530] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [65] [ 1211.933025][T32575] overlayfs: failed to resolve './cgroup': -2 [ 1212.691162][T32590] fuse: fd is not a fuse device [ 1212.707526][T32588] block2mtd: error: cannot open device /dev/loop0 [ 1213.008346][T32599] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1213.031792][T32599] block device autoloading is deprecated and will be removed. [ 1213.048690][T32605] fuse: fd is not a fuse device [ 1213.575940][T32626] fuse: fd is not a fuse device [ 1213.777948][T32636] fuse: fd is not a fuse device [ 1216.399644][T32699] fuse: fd is not a fuse device [ 1218.083758][T32753] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1218.083814][T32753] overlayfs: failed to set xattr on upper [ 1218.084617][T32753] overlayfs: ...falling back to redirect_dir=nofollow. [ 1218.084650][T32753] overlayfs: ...falling back to index=off. [ 1218.084680][T32753] overlayfs: ...falling back to uuid=null. [ 1218.097514][T32753] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 1218.097563][T32753] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1218.110534][T32753] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 1218.825796][T32759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.894420][T32759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.952087][T32759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1220.062221][ T321] fuse: fd is not a fuse device [ 1220.395579][ T328] fuse: fd is not a fuse device [ 1220.692760][ T332] picdev_write: 393 callbacks suppressed [ 1220.700831][ T332] kvm: pic: non byte write [ 1221.444849][ T348] fuse: fd is not a fuse device [ 1221.909474][ T5698] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1222.079505][ T5698] usb 10-1: Using ep0 maxpacket: 32 [ 1222.092572][ T5698] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1222.103104][ T5698] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1222.123230][ T5698] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1222.123281][ T5698] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1222.123385][ T5698] usb 10-1: config 14 has no interface number 0 [ 1222.123410][ T5698] usb 10-1: config 14 has no interface number 1 [ 1222.123508][ T5698] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1222.123541][ T5698] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1222.123640][ T5698] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1222.123681][ T5698] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1222.123733][ T5698] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1222.123765][ T5698] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1222.123796][ T5698] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1222.123828][ T5698] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1222.239580][ T5698] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.239613][ T5698] usb 10-1: Product: syz [ 1222.239630][ T5698] usb 10-1: Manufacturer: syz [ 1222.239647][ T5698] usb 10-1: SerialNumber: syz [ 1222.405164][ T367] fuse: fd is not a fuse device [ 1222.740012][ T5698] legousbtower 10-1:14.57: interrupt endpoints not found [ 1223.144707][ T5698] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1223.161766][ T5698] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1223.662766][ T411] netlink: 'syz.2.8972': attribute type 4 has an invalid length. [ 1223.958027][T22870] usb 10-1: USB disconnect, device number 28 [ 1223.983215][T22870] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 1225.508362][ T5698] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1225.659421][ T5698] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1225.674674][ T5698] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.674730][ T5698] usb 10-1: Product: syz [ 1225.674766][ T5698] usb 10-1: Manufacturer: syz [ 1225.674837][ T5698] usb 10-1: SerialNumber: syz [ 1225.700274][ T5698] usb 10-1: config 0 descriptor?? [ 1225.801844][ T448] netlink: 'syz.5.8987': attribute type 4 has an invalid length. [ 1225.815179][ T448] netlink: 'syz.5.8987': attribute type 4 has an invalid length. [ 1225.944739][ T5698] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1226.042261][ T450] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 1226.052849][ T450] kvm: requested 98895 ns i8254 timer period limited to 200000 ns [ 1226.059263][ T450] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 1226.071656][ T450] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 1226.096836][ T450] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 1226.115234][ T450] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 1226.131880][ T450] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 1226.136934][ T450] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 1226.170542][ T450] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 1226.181179][ T450] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 1226.527146][ T458] process '/newroot/3123/file1' started with executable stack [ 1227.991124][ T5698] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1229.029375][ T990] usb 10-1: USB disconnect, device number 29 [ 1231.136752][ T527] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (16672 ns). Using initial count to start timer. [ 1231.482149][ T543] overlayfs: failed to resolve './cgroup': -2 [ 1231.558945][ T545] fuse: fd is not a fuse device [ 1231.675784][ T549] overlayfs: failed to clone upperpath [ 1231.886834][ T559] fuse: fd is not a fuse device [ 1232.235291][ T571] fuse: fd is not a fuse device [ 1232.586296][ T587] overlayfs: failed to clone upperpath [ 1232.908288][ T990] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1232.928558][ T604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9048'. [ 1233.071334][ T990] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1233.076611][ T990] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.076707][ T990] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 1233.076789][ T990] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1233.076900][ T990] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.089768][ T990] usb 10-1: config 0 descriptor?? [ 1233.093108][ T591] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1233.570277][ T990] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1234.861144][ C1] plantronics 0003:047F:FFFF.0045: usb_submit_urb(ctrl) failed: -1 [ 1235.045656][ T640] fuse: fd is not a fuse device [ 1235.699351][T22870] usb 10-1: USB disconnect, device number 30 [ 1236.327415][T22870] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1236.478303][T22870] usb 10-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1236.484355][T22870] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1236.484507][T22870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.514088][T22870] usb 10-1: config 0 descriptor?? [ 1236.761777][T22870] usbhid 10-1:0.0: can't add hid device: -71 [ 1236.762073][T22870] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1236.785783][T22870] usb 10-1: USB disconnect, device number 31 [ 1236.919391][ T32] audit: type=1326 audit(1787674948.941:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=682 comm="syz.2.9082" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7f3d8d20c0f3 code=0x0 [ 1237.613594][ T696] binder: 695:696 unknown command 0 [ 1237.613646][ T696] binder: 695:696 ioctl c0306201 2000000001c0 returned -22 [ 1237.620193][ T696] binder: 695:696 ioctl c0306201 200000004a40 returned -22 [ 1238.385177][ T716] fuse: fd is not a fuse device [ 1238.653438][ T727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9097'. [ 1238.716808][ T724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9097'. [ 1238.830665][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.830780][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.872505][ T735] jffs2: notice: (735) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1239.077838][ T741] fuse: fd is not a fuse device [ 1239.218410][T22870] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 1239.253931][T22870] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1240.777033][ T990] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1240.930443][ T990] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1240.950495][ T990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.950548][ T990] usb 10-1: Product: syz [ 1240.950869][ T990] usb 10-1: Manufacturer: syz [ 1240.950903][ T990] usb 10-1: SerialNumber: syz [ 1241.390262][ T990] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1241.390379][ T990] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1241.800047][ T801] fuse: fd is not a fuse device [ 1242.070067][ T810] netlink: 'syz.7.9127': attribute type 4 has an invalid length. [ 1243.118091][ T990] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 1243.118212][ T990] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1243.197761][ T990] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1243.211776][ T990] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1243.236133][ T990] usb 10-1: USB disconnect, device number 32 [ 1243.405992][ T828] create_pit_timer: 48 callbacks suppressed [ 1243.407084][ T828] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1243.425886][ T828] kvm: pic: non byte read [ 1243.431533][ T828] kvm: pic: level sensitive irq not supported [ 1243.435131][ T828] kvm: pic: non byte read [ 1243.447100][ T828] kvm: pic: level sensitive irq not supported [ 1243.447654][ T828] kvm: pic: non byte read [ 1243.459302][ T828] kvm: pic: level sensitive irq not supported [ 1243.459504][ T828] kvm: pic: non byte read [ 1243.460144][ T828] kvm: pic: level sensitive irq not supported [ 1243.460414][ T828] kvm: pic: non byte read [ 1243.474109][ T828] kvm: pic: level sensitive irq not supported [ 1243.474548][ T828] kvm: pic: non byte read [ 1243.475087][ T828] kvm: pic: level sensitive irq not supported [ 1243.475269][ T828] kvm: pic: non byte read [ 1243.475910][ T828] kvm: pic: level sensitive irq not supported [ 1243.505832][ T828] kvm: pic: non byte read [ 1243.682580][ T834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9135'. [ 1243.742745][ T838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9135'. [ 1244.015200][ T849] fuse: fd is not a fuse device [ 1244.072072][ T5763] usb 1-1: USB disconnect, device number 30 [ 1244.174201][ T852] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 1244.174252][ T852] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 1244.477162][ T5763] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1244.576925][ T2229] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1244.637942][ T5763] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1244.644580][ T5763] usb 1-1: Dual-Role OTG device on HNP port [ 1244.650472][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.689698][ T5763] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1244.691039][ T5763] gspca_spca501: reg write: error -32 [ 1244.691086][ T5763] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1244.691350][ T5763] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 1244.758746][ T2229] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1244.768044][ T2229] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.768203][ T2229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.794527][ T2229] usb 10-1: config 0 descriptor?? [ 1244.820833][ T2229] pwc: Askey VC010 type 2 USB webcam detected. [ 1245.229271][ T2229] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1245.237162][ T2229] pwc: recv_control_msg error -32 req 02 val 2700 [ 1245.242475][ T2229] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1245.252120][ T2229] pwc: recv_control_msg error -32 req 04 val 1000 [ 1245.261265][ T2229] pwc: recv_control_msg error -32 req 04 val 1300 [ 1245.269391][ T2229] pwc: recv_control_msg error -32 req 04 val 1400 [ 1245.281550][ T2229] pwc: recv_control_msg error -32 req 02 val 2000 [ 1245.292690][ T2229] pwc: recv_control_msg error -32 req 02 val 2100 [ 1245.509022][ T872] lo speed is unknown, defaulting to 1000 [ 1245.521338][ T2229] pwc: recv_control_msg error -71 req 02 val 2500 [ 1245.527682][ T2229] pwc: recv_control_msg error -71 req 02 val 2400 [ 1245.529503][ T2229] pwc: recv_control_msg error -71 req 02 val 2600 [ 1245.553708][ T2229] pwc: recv_control_msg error -71 req 02 val 2900 [ 1245.562498][ T2229] pwc: recv_control_msg error -71 req 02 val 2800 [ 1245.564059][ T2229] pwc: recv_control_msg error -71 req 04 val 1100 [ 1245.583203][ T2229] pwc: recv_control_msg error -71 req 04 val 1200 [ 1245.613868][ T2229] pwc: Registered as video103. [ 1245.719112][ T2229] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input91 [ 1245.756070][ T2229] usb 10-1: USB disconnect, device number 33 [ 1246.025139][ T990] usb 1-1: USB disconnect, device number 31 [ 1246.360249][ T886] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 1246.378068][ T886] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 1246.646706][ T2229] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1246.828198][ T2229] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1246.839559][ T2229] usb 1-1: Dual-Role OTG device on HNP port [ 1246.842567][ T2229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.895331][ T2229] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1246.898867][ T2229] gspca_spca501: reg write: error -32 [ 1246.898917][ T2229] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1246.899149][ T2229] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 1247.329669][ T906] kvm: pic: single mode not supported [ 1247.335532][ T906] kvm: pic: single mode not supported [ 1247.352233][ T906] kvm: pic: single mode not supported [ 1247.352273][ T906] kvm: pic: level sensitive irq not supported [ 1247.370863][ T906] kvm: pic: level sensitive irq not supported [ 1247.381672][ T906] kvm: pic: non byte write [ 1247.398735][ T906] kvm: pic: non byte write [ 1247.398898][ T906] kvm: pic: non byte write [ 1247.398979][ T906] kvm: pic: non byte write [ 1247.399058][ T906] kvm: pic: non byte write [ 1247.399144][ T906] kvm: pic: non byte write [ 1247.399282][ T906] kvm: pic: non byte write [ 1247.399360][ T906] kvm: pic: non byte write [ 1247.399437][ T906] kvm: pic: non byte write [ 1247.399516][ T906] kvm: pic: non byte write [ 1247.445988][ T906] kvm: pic: single mode not supported [ 1247.446020][ T906] kvm: pic: level sensitive irq not supported [ 1248.314027][ T923] netlink: 'syz.7.9166': attribute type 4 has an invalid length. [ 1248.342297][ T923] netlink: 'syz.7.9166': attribute type 4 has an invalid length. [ 1248.962633][ T938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1249.068794][T14376] usb 6-1: no suitable firmware found! [ 1249.068837][T14376] usb 6-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 1249.084775][T14375] usb 6-1: ath9k_htc: USB layer deinitialized [ 1249.476678][T14375] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1249.626345][T14375] usb 6-1: Using ep0 maxpacket: 16 [ 1249.632660][T14375] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1249.644527][T14375] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1249.644640][T14375] usb 6-1: config 0 has no interface number 0 [ 1249.644721][T14375] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1249.644814][T14375] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1249.677183][ T990] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1249.689790][T14375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.689868][T14375] usb 6-1: Product: syz [ 1249.689952][T14375] usb 6-1: Manufacturer: syz [ 1249.690012][T14375] usb 6-1: SerialNumber: syz [ 1249.699175][T14375] usb 6-1: config 0 descriptor?? [ 1249.719941][ T955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1249.727897][ T955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1249.826341][ T990] usb 10-1: Using ep0 maxpacket: 32 [ 1249.828914][ T990] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1249.833314][ T990] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1249.833388][ T990] usb 10-1: config 0 has no interface number 0 [ 1249.846033][ T990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.847051][ T990] usb 10-1: Product: syz [ 1249.847103][ T990] usb 10-1: Manufacturer: syz [ 1249.847147][ T990] usb 10-1: SerialNumber: syz [ 1249.887840][ T990] usb 10-1: config 0 descriptor?? [ 1249.953685][ T955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1249.954415][ T955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1250.175753][T14375] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1250.342800][ T990] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1250.342858][ T990] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1251.156761][ T992] fuse: fd is not a fuse device [ 1251.910816][ T1007] fuse: fd is not a fuse device [ 1252.220503][ T990] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 1252.221122][ T990] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1252.249462][ T990] usb 10-1: USB disconnect, device number 34 [ 1252.256382][T14375] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1252.257076][T14375] asix 6-1:0.34: probe with driver asix failed with error -71 [ 1252.340203][T14375] usb 6-1: USB disconnect, device number 77 [ 1252.407748][ T1013] fuse: fd is not a fuse device [ 1252.522641][ T1016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9197'. [ 1253.198488][T14376] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1253.261033][ T32] audit: type=1326 audit(1787674965.280:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1034 comm="syz.9.9202" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7f602d31c0f3 code=0x0 [ 1253.366093][T14376] usb 6-1: Using ep0 maxpacket: 8 [ 1253.372379][T14376] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1253.389574][T14376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.389668][T14376] usb 6-1: Product: syz [ 1253.389722][T14376] usb 6-1: Manufacturer: syz [ 1253.389762][T14376] usb 6-1: SerialNumber: syz [ 1253.417974][T14376] usb 6-1: config 0 descriptor?? [ 1253.432629][T14376] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1254.270094][ T1054] fuse: fd is not a fuse device [ 1255.904287][T14376] gspca_sonixj: reg_w1 err -71 [ 1255.936020][T14376] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1255.952294][T14376] usb 6-1: USB disconnect, device number 78 [ 1256.036923][ T25] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1256.189778][ T25] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1256.201171][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.201240][ T25] usb 10-1: Product: syz [ 1256.202041][ T25] usb 10-1: Manufacturer: syz [ 1256.202093][ T25] usb 10-1: SerialNumber: syz [ 1256.642163][ T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1256.642291][ T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1257.388953][ T1119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.876764][ T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1257.878964][ T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1258.300334][ T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1258.300445][ T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1258.301216][ T25] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1258.364034][ T25] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1258.400444][ T25] usb 10-1: USB disconnect, device number 35 [ 1264.921375][ T1162] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 1265.967707][ T1196] syz.5.9257 (1196): drop_caches: 2 [ 1266.385152][T14375] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1266.545031][T14375] usb 6-1: Using ep0 maxpacket: 16 [ 1266.551177][T14375] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1266.558693][T14375] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1266.558770][T14375] usb 6-1: config 0 has no interface number 0 [ 1266.558887][T14375] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1266.558960][T14375] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1266.571189][T14375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.571264][T14375] usb 6-1: Product: syz [ 1266.571316][T14375] usb 6-1: Manufacturer: syz [ 1266.571371][T14375] usb 6-1: SerialNumber: syz [ 1266.600160][ T5763] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1266.624014][T14375] usb 6-1: config 0 descriptor?? [ 1266.634506][ T1202] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1266.635042][ T1202] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1266.785490][ T5763] usb 10-1: Using ep0 maxpacket: 16 [ 1266.791402][ T5763] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1266.803855][ T5763] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 1266.803928][ T5763] usb 10-1: config 0 has no interface number 0 [ 1266.804180][ T5763] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1266.810749][ T5763] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1266.855107][ T1202] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1266.855543][ T1202] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1266.858224][ T5763] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.858323][ T5763] usb 10-1: Product: syz [ 1266.858368][ T5763] usb 10-1: Manufacturer: syz [ 1266.858411][ T5763] usb 10-1: SerialNumber: syz [ 1266.910637][ T5763] usb 10-1: config 0 descriptor?? [ 1266.916717][ T1212] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1266.926974][ T1212] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1267.059428][T14375] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1267.139818][ T1212] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1267.142055][ T1212] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1267.349443][ T5763] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1268.582603][ T1234] fuse: fd is not a fuse device [ 1269.403774][ T5763] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1269.405722][ T5763] asix 10-1:0.34: probe with driver asix failed with error -71 [ 1269.451090][ T5763] usb 10-1: USB disconnect, device number 36 [ 1269.693807][T14375] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1269.693869][T14375] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1269.695080][T14375] asix 6-1:0.34: probe with driver asix failed with error -71 [ 1269.738040][T14375] usb 6-1: USB disconnect, device number 79 [ 1270.373180][ T1276] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9275'. [ 1271.347092][ T32] audit: type=1326 audit(1787674983.370:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1301 comm="syz.2.9283" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7f3d8d20c0f3 code=0x0 [ 1272.166528][ T1322] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 1273.975437][T14375] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1274.211089][T14375] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1274.211187][T14375] usb 6-1: New USB device found, idVendor=093a, idProduct=2474, bcdDevice=ef.f5 [ 1274.232760][T14375] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1274.232846][T14375] usb 6-1: can't read configurations, error -71 [ 1275.367915][ T32] audit: type=1800 audit(1787674987.390:71): pid=1383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9310" name="addr_trtype" dev="configfs" ino=147330 res=0 errno=0 [ 1275.421596][ T32] audit: type=1800 audit(1787674987.440:72): pid=1383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9310" name="addr_trsvcid" dev="configfs" ino=147331 res=0 errno=0 [ 1275.447700][ T32] audit: type=1800 audit(1787674987.470:73): pid=1383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9310" name="addr_adrfam" dev="configfs" ino=147333 res=0 errno=0 [ 1275.608604][ T1383] nvmet_tcp: malformed ip/port passed: : [ 1276.544137][T14376] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1276.696278][T14376] usb 10-1: Using ep0 maxpacket: 32 [ 1276.710784][T14376] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1276.729618][T14376] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1276.729665][T14376] usb 10-1: config 0 has no interface number 0 [ 1276.755828][T14376] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.755895][T14376] usb 10-1: Product: syz [ 1276.755931][T14376] usb 10-1: Manufacturer: syz [ 1276.755996][T14376] usb 10-1: SerialNumber: syz [ 1276.780354][T14376] usb 10-1: config 0 descriptor?? [ 1277.222799][T14376] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1277.222868][T14376] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1279.699432][T14376] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1279.699761][T14376] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1279.750099][T14376] usb 10-1: USB disconnect, device number 37 [ 1280.333977][ T25] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1280.485441][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 1280.491733][ T25] usb 6-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 1280.505144][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.505189][ T25] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1280.531253][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.531301][ T25] usb 6-1: Product: syz [ 1280.531338][ T25] usb 6-1: Manufacturer: syz [ 1280.531360][ T25] usb 6-1: SerialNumber: syz [ 1280.561569][ T25] usb 6-1: config 0 descriptor?? [ 1280.623899][ T5805] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1280.780887][ C1] Unknown status report in ack skb [ 1280.796118][ T25] usb 6-1: USB disconnect, device number 82 [ 1280.813831][ T5805] usb 10-1: Using ep0 maxpacket: 32 [ 1280.821214][ T5805] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1280.836370][ T5805] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1280.836423][ T5805] usb 10-1: config 0 has no interface number 0 [ 1280.836505][ T5805] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1280.866461][ T5805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.875978][ T5805] usb 10-1: Product: syz [ 1280.876033][ T5805] usb 10-1: Manufacturer: syz [ 1280.876065][ T5805] usb 10-1: SerialNumber: syz [ 1280.906624][ T5805] usb 10-1: config 0 descriptor?? [ 1281.562315][ T5805] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1281.562376][ T5805] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1282.779117][ T1507] PKCS7: Unknown OID: [4] 0.0 [ 1282.779171][ T1507] PKCS7: Only support pkcs7_signedData type [ 1283.702367][ T5805] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 1283.702424][ T5805] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 1283.702486][ T5805] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1283.702521][ T5805] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1283.702883][ T5805] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 1283.707111][ T5805] usb 10-1: USB disconnect, device number 38 [ 1284.941223][ T1526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1287.852256][ T1554] dummy_hcd dummy_hcd.0: remove, state 1 [ 1287.915697][ T1554] usb usb1: USB disconnect, device number 1 [ 1287.945600][ T1554] usb 1-1: USB disconnect, device number 32 [ 1288.854125][ T1554] dummy_hcd dummy_hcd.0: stopped [ 1288.854373][ T1554] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1289.362541][ T32] audit: type=1326 audit(1787675001.380:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1569 comm="syz.2.9366" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7f3d8d20c0f3 code=0x0 [ 1289.876505][ T1573] nvmet: adding nsid 1 to subsystem testsubsys [ 1290.803471][ T1581] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 1290.803524][ T1581] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 1290.829925][ T1581] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 1290.830331][ T1581] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 1290.853056][ T1582] i2c i2c-0: delete_device: Extra parameters [ 1292.062915][ T25] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1292.202951][ T2229] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1292.215633][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 1292.235817][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.245146][ T25] usb 6-1: Product: syz [ 1292.249652][ T25] usb 6-1: Manufacturer: syz [ 1292.254664][ T25] usb 6-1: SerialNumber: syz [ 1292.355339][ T2229] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1292.380751][ T2229] usb 10-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1292.380809][ T2229] usb 10-1: Product: syz [ 1292.380853][ T2229] usb 10-1: Manufacturer: syz [ 1292.380895][ T2229] usb 10-1: SerialNumber: syz [ 1292.439323][ T2229] usb 10-1: config 0 descriptor?? [ 1292.453915][ T2229] ch341 10-1:0.0: ch341-uart converter detected [ 1292.582868][ T25] usb 6-1: reset high-speed USB device number 83 using dummy_hcd [ 1292.655861][ T2229] usb 10-1: failed to receive control message: -71 [ 1292.655985][ T2229] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1292.682192][ T2229] usb 10-1: USB disconnect, device number 39 [ 1292.695997][ T2229] ch341 10-1:0.0: device disconnected [ 1292.793640][ T990] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1292.811852][ T990] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:2: checksumming directory block 0 [ 1292.828661][ T990] usb 6-1: loading /lib/firmware/updates/syzkaller/carl9170-1.fw failed with error -74 [ 1292.838650][ T990] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1292.854500][ T990] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:2: checksumming directory block 0 [ 1292.867285][ T990] usb 6-1: loading /lib/firmware/updates/carl9170-1.fw failed with error -74 [ 1292.876491][ T990] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1292.892361][ T990] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:2: checksumming directory block 0 [ 1292.909506][ T990] usb 6-1: loading /lib/firmware/syzkaller/carl9170-1.fw failed with error -74 [ 1292.918984][ T990] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1292.934805][ T990] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/1:2: checksumming directory block 0 [ 1292.947740][ T990] usb 6-1: loading /lib/firmware/carl9170-1.fw failed with error -74 [ 1292.956148][ T990] usb 6-1: Direct firmware load for carl9170-1.fw failed with error -74 [ 1292.964778][ T990] usb 6-1: Falling back to sysfs fallback for: carl9170-1.fw [ 1293.110197][ T1635] netlink: 1476 bytes leftover after parsing attributes in process `syz.7.9393'. [ 1293.972926][T14376] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1294.124534][T14376] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 0.00 [ 1294.141112][T14376] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.141176][T14376] usb 10-1: Product: syz [ 1294.141220][T14376] usb 10-1: Manufacturer: syz [ 1294.141280][T14376] usb 10-1: SerialNumber: syz [ 1294.181520][T14376] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1294.181649][T14376] usb 10-1: setting power ON [ 1294.583152][ C0] Unknown status report in ack skb [ 1294.882232][ T25] usb 6-1: USB disconnect, device number 83 [ 1295.143211][ C0] Unknown status report in ack skb [ 1295.316676][ T1694] netlink: Conntrack attr has 12 unknown bytes [ 1295.323725][ T1694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1295.381623][T14376] dvb-usb: bulk message failed: -71 (2/0) [ 1295.398444][T14376] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1295.412386][T14376] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1295.418615][T14376] usb 10-1: media controller created [ 1295.457090][T14376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1295.511818][T14376] usb 10-1: selecting invalid altsetting 6 [ 1295.511877][T14376] usb 10-1: digital interface selection failed (-22) [ 1295.542801][T26613] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1295.542933][T26613] Bluetooth: hci2: Injecting HCI hardware error event [ 1295.544923][T14376] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1295.564803][T26613] Bluetooth: hci2: hardware error 0x00 [ 1295.577101][T14376] usb 10-1: setting power OFF [ 1295.651866][T14376] dvb-usb: bulk message failed: -71 (2/0) [ 1295.654084][T14376] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1295.655555][T14376] usb 10-1: setting power ON [ 1295.677049][T14376] dvb-usb: bulk message failed: -71 (2/0) [ 1295.695034][T14376] usb 10-1: analog interface selection failed (-71) [ 1295.776572][T14376] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1295.776876][T14376] dvb_usb_cxusb 10-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 1295.797597][T14376] usb 10-1: USB disconnect, device number 40 [ 1296.373176][ T5805] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1296.535619][ T5805] usb 10-1: Using ep0 maxpacket: 32 [ 1296.544895][ T5805] usb 10-1: unable to get BOS descriptor set [ 1296.553643][ T5805] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1296.566113][ T5805] usb 10-1: config 0 has no interfaces? [ 1296.580277][ T5805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.580326][ T5805] usb 10-1: Product: syz [ 1296.580361][ T5805] usb 10-1: Manufacturer: syz [ 1296.580382][ T5805] usb 10-1: SerialNumber: syz [ 1296.608710][ T5805] usb 10-1: config 0 descriptor?? [ 1296.845063][ T5768] usb 10-1: USB disconnect, device number 41 [ 1297.429220][ T1748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9447'. [ 1297.703002][T26613] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1297.803899][ T1754] kernel profiling enabled (shift: 63) [ 1297.803956][ T1754] profiling shift: 63 too large [ 1298.862658][ T1790] comedi comedi1: 8255: I/O base address not correctly aligned [ 1299.148899][T22302] nvmet: Created discovery controller 1 for subsystem nqn.2014-08.org.nvmexpress.discovery for NQN nqn.2014-08.org.nvmexpress:uuid:e155be05-35d1-4fa9-b022-e4fc7c433c37. [ 1299.235460][ T1792] nvme nvme0: new ctrl: "nqn.2014-08.org.nvmexpress.discovery" [ 1299.428996][ T1805] dvmrp0: entered allmulticast mode [ 1299.862490][ T1475] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1299.934270][T22130] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.019523][ T1828] netlink: 'syz.2.9484': attribute type 4 has an invalid length. [ 1300.019572][ T1828] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9484'. [ 1300.042322][ T1475] usb 10-1: Using ep0 maxpacket: 16 [ 1300.049208][ T1475] usb 10-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1300.061517][ T1475] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 1300.061605][ T1475] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.085601][ T1475] usb 10-1: config 0 descriptor?? [ 1300.267597][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.277731][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.309218][ T1813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.321610][ T1813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.548730][ T1475] apple 0003:05AC:027D.0047: unknown main item tag 0x0 [ 1300.557922][ T1475] apple 0003:05AC:027D.0047: unknown main item tag 0x0 [ 1300.565348][ T1475] apple 0003:05AC:027D.0047: unknown main item tag 0x0 [ 1300.572860][ T1475] apple 0003:05AC:027D.0047: unknown main item tag 0x0 [ 1300.580921][ T1475] apple 0003:05AC:027D.0047: unknown main item tag 0x0 [ 1300.588409][ T1475] apple 0003:05AC:027D.0047: unknown main item tag 0x0 [ 1300.588473][ T1475] apple 0003:05AC:027D.0047: unknown main item tag 0x0 [ 1300.588506][ T1475] apple 0003:05AC:027D.0047: unknown main item tag 0x0 [ 1300.588538][ T1475] apple 0003:05AC:027D.0047: unknown main item tag 0x0 [ 1300.588578][ T1475] apple 0003:05AC:027D.0047: unknown main item tag 0x0 [ 1300.589321][ T1475] apple 0003:05AC:027D.0047: collection stack underflow [ 1300.589356][ T1475] apple 0003:05AC:027D.0047: item 0 1 0 12 parsing failed [ 1300.642889][ T1475] apple 0003:05AC:027D.0047: parse failed [ 1300.649066][ T1475] apple 0003:05AC:027D.0047: probe with driver apple failed with error -22 [ 1300.757078][ T32] audit: type=1800 audit(1787675012.780:75): pid=1813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9477" name="features" dev="configfs" ino=150842 res=0 errno=0 [ 1300.765140][T14376] usb 10-1: USB disconnect, device number 42 [ 1301.902526][ T2229] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1302.055423][ T2229] usb 10-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1302.066207][ T2229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1302.066240][ T2229] usb 10-1: Product: syz [ 1302.066257][ T2229] usb 10-1: Manufacturer: syz [ 1302.306829][ T2229] scsi host1: uas [ 1304.501782][ C1] usb 10-1: stat urb: status -71 [ 1304.502308][ C1] usb 10-1: cmd cmplt err -71 [ 1304.516968][ T5768] usb 10-1: USB disconnect, device number 43 [ 1304.529904][ T5768] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 1304.529976][ T5768] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 1305.321937][T14376] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1305.472142][T14376] usb 10-1: Using ep0 maxpacket: 16 [ 1305.475621][T14376] usb 10-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 1305.482570][T14376] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1305.482652][T14376] usb 10-1: config 0 has no interface number 0 [ 1305.482762][T14376] usb 10-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.482845][T14376] usb 10-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.482911][T14376] usb 10-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1305.482986][T14376] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1305.483069][T14376] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.501125][T14376] usb 10-1: config 0 descriptor?? [ 1305.933191][T14376] hid_parser_main: 52 callbacks suppressed [ 1305.934373][T14376] chicony 0003:04F2:1123.0048: unknown main item tag 0x0 [ 1305.934485][T14376] chicony 0003:04F2:1123.0048: unknown main item tag 0x0 [ 1305.934559][T14376] chicony 0003:04F2:1123.0048: unknown main item tag 0x0 [ 1305.934633][T14376] chicony 0003:04F2:1123.0048: unknown main item tag 0x0 [ 1305.934712][T14376] chicony 0003:04F2:1123.0048: unknown main item tag 0x0 [ 1305.934792][T14376] chicony 0003:04F2:1123.0048: unknown main item tag 0x0 [ 1305.934875][T14376] chicony 0003:04F2:1123.0048: unknown main item tag 0x0 [ 1305.934944][T14376] chicony 0003:04F2:1123.0048: unknown main item tag 0x0 [ 1305.935024][T14376] chicony 0003:04F2:1123.0048: unknown main item tag 0x0 [ 1305.935097][T14376] chicony 0003:04F2:1123.0048: unknown main item tag 0x0 [ 1305.960671][T14376] chicony 0003:04F2:1123.0048: hidraw0: USB HID v0.00 Device [HID 04f2:1123] on usb-dummy_hcd.9-1/input1 [ 1306.135018][ T5763] usb 10-1: USB disconnect, device number 44 [ 1306.741194][ T1956] tipc: Enabled bearer , priority 2 [ 1307.033716][T14376] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1307.181681][T14376] usb 10-1: Using ep0 maxpacket: 16 [ 1307.188315][T14376] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1307.188456][T14376] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1307.205833][T14376] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.205866][T14376] usb 10-1: Product: syz [ 1307.205885][T14376] usb 10-1: Manufacturer: syz [ 1307.205901][T14376] usb 10-1: SerialNumber: syz [ 1307.476992][ T1970] fuse: fd is not a fuse device [ 1307.851724][ T2229] tipc: Node number set to 17295607 [ 1308.081698][T14376] usb 10-1: reset high-speed USB device number 45 using dummy_hcd [ 1308.248798][T14376] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1308.487993][ T1475] usb 10-1: USB disconnect, device number 45 [ 1309.237730][ T2008] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.9570: No space for directory leaf checksum. Please run e2fsck -D. [ 1309.237809][ T2008] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.9570: checksumming directory block 0 [ 1309.239447][ T2008] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1309.240417][ T2008] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.9570: No space for directory leaf checksum. Please run e2fsck -D. [ 1309.240494][ T2008] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.9570: checksumming directory block 0 [ 1309.256543][ T2008] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1309.257055][ T2008] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.9570: No space for directory leaf checksum. Please run e2fsck -D. [ 1309.257145][ T2008] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.9570: checksumming directory block 0 [ 1309.258293][ T2008] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1309.258671][ T2008] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.9570: No space for directory leaf checksum. Please run e2fsck -D. [ 1309.258753][ T2008] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.9570: checksumming directory block 0 [ 1309.259591][ T2008] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1309.259699][ T2008] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1309.259768][ T2008] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1309.509565][ T32] audit: type=1800 audit(1787675021.530:76): pid=2012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9572" name="use" dev="configfs" ino=151101 res=0 errno=0 [ 1309.911775][ T5763] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1310.075327][ T5763] usb 10-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= 1.00 [ 1310.090290][ T5763] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1310.103984][ T5763] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1310.104069][ T5763] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1310.104113][ T5763] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1310.150929][ T5763] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.150978][ T5763] usb 10-1: Product: syz [ 1310.151015][ T5763] usb 10-1: Manufacturer: syz [ 1310.151036][ T5763] usb 10-1: SerialNumber: syz [ 1310.183497][ T2018] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1310.184483][ T2018] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1310.185120][ T2018] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1310.185447][ T2018] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1310.231989][ T5763] peak_usb 10-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -71 [ 1310.239746][ T5763] peak_usb 10-1:1.0: unable to read PCAN-USB serial number (err -71) [ 1310.293423][ T5763] peak_usb 10-1:1.0: probe with driver peak_usb failed with error -71 [ 1310.915388][ T1475] usb 10-1: USB disconnect, device number 46 [ 1311.085154][ T2066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9598'. [ 1311.656189][ T2079] jffs2: notice: (2079) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1311.860599][ T2090] /dev/loop0: Can't open blockdev [ 1312.151553][ T5698] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1312.301379][ T5698] usb 10-1: Using ep0 maxpacket: 32 [ 1312.307766][ T5698] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1312.319042][ T5698] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.339663][ T5698] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1312.949295][ T5805] usb 10-1: USB disconnect, device number 47 [ 1313.903992][ T2132] fuse: fd is not a fuse device [ 1313.921608][ T5698] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1314.081143][ T5698] usb 10-1: Using ep0 maxpacket: 8 [ 1314.083382][ T5698] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1314.087332][ T5698] usb 10-1: config 0 has an invalid descriptor of length 241, skipping remainder of the config [ 1314.087465][ T5698] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1314.087546][ T5698] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 45, changing to 9 [ 1314.087620][ T5698] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 33019, setting to 1024 [ 1314.087700][ T5698] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1314.100781][ T5698] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1314.100862][ T5698] usb 10-1: Product: syz [ 1314.100906][ T5698] usb 10-1: Manufacturer: syz [ 1314.102114][ T5698] usb 10-1: SerialNumber: syz [ 1314.113542][ T5698] usb 10-1: config 0 descriptor?? [ 1314.354523][ T5698] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1314.354581][ T5698] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1314.555694][ T5698] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 1314.555772][ T5698] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1314.556528][ T5698] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1314.756690][ T5698] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1314.758011][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.758505][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.758961][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.759408][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.760177][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.761369][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.761773][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.762207][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.762694][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.763210][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.763720][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.763990][ T5698] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1314.764259][ C1] radio-si470x 10-1:0.0: non-zero urb status (-71) [ 1314.765919][ T5698] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 1314.805891][ T5698] usb 10-1: USB disconnect, device number 48 [ 1315.163429][ T2144] fuse: fd is not a fuse device [ 1315.168939][ T2144] fuse: fd is not a fuse device [ 1315.681008][T14376] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1315.831069][T14376] usb 10-1: Using ep0 maxpacket: 8 [ 1315.837484][T14376] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1315.846800][T14376] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1315.865311][T14376] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.865383][T14376] usb 10-1: Product: syz [ 1315.865439][T14376] usb 10-1: Manufacturer: syz [ 1315.865457][T14376] usb 10-1: SerialNumber: syz [ 1315.891788][T14376] usb 10-1: config 0 descriptor?? [ 1315.911523][T14376] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1315.911610][T14376] usb 10-1: setting power ON [ 1315.911680][T14376] dvb-usb: bulk message failed: -22 (2/0) [ 1315.939174][T14376] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1315.944201][T14376] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1315.944358][T14376] usb 10-1: media controller created [ 1316.003146][T14376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1316.032557][T14376] usb 10-1: selecting invalid altsetting 6 [ 1316.032610][T14376] usb 10-1: digital interface selection failed (-22) [ 1316.032635][T14376] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1316.034710][T14376] usb 10-1: setting power OFF [ 1316.034758][T14376] dvb-usb: bulk message failed: -22 (2/0) [ 1316.034808][T14376] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1316.034842][T14376] (NULL device *): no alternate interface [ 1316.110282][T14376] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1316.145580][T14376] usb 10-1: USB disconnect, device number 49 [ 1317.071460][ T2229] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1317.221351][ T2229] usb 10-1: Using ep0 maxpacket: 8 [ 1317.227971][ T2229] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1317.233369][ T2229] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1317.233519][ T2229] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1317.233598][ T2229] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1317.233695][ T2229] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1317.233775][ T2229] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1317.233927][ T2229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.459936][ T2229] usb 10-1: GET_CAPABILITIES returned 0 [ 1317.460012][ T2229] usbtmc 10-1:16.0: can't read capabilities [ 1317.668850][ T2229] usb 10-1: USB disconnect, device number 50 [ 1317.795217][ T2201] genirq: Flags mismatch irq 7. 00200000 (das16m1) vs. 00200080 (ttyS3) [ 1318.720784][ T5805] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1318.877796][ T5805] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1318.894401][ T5805] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.894477][ T5805] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1318.894547][ T5805] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1318.894586][ T5805] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1318.894618][ T5805] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1318.954854][ T5805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.965337][ T5805] usb 10-1: Product: syz [ 1318.965404][ T5805] usb 10-1: Manufacturer: syz [ 1318.965442][ T5805] usb 10-1: SerialNumber: syz [ 1319.000525][ T2226] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1319.011528][ T5805] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1319.019556][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 87 [ 1319.029542][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 7 [ 1319.041108][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1319.053000][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1319.053126][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 85 [ 1319.053220][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 5 [ 1319.079301][ T5805] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1319.091510][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 83 [ 1319.101535][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1319.109571][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 3 [ 1319.117578][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 4 [ 1319.125699][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 86 [ 1319.133837][ T5805] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1319.147427][ T5805] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1319.480013][T14376] usb 10-1: USB disconnect, device number 51 [ 1319.516196][T14376] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1319.577126][T14376] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1319.589150][T14376] keyspan 10-1:1.0: device disconnected [ 1320.460704][ T1475] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 1320.612735][ T1475] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1320.616569][ T1475] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 1320.616654][ T1475] usb 10-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1320.616718][ T1475] usb 10-1: config 150 has no interface number 0 [ 1320.616828][ T1475] usb 10-1: config 150 interface 204 has no altsetting 0 [ 1320.624444][ T1475] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.624526][ T1475] usb 10-1: Product: syz [ 1320.624563][ T1475] usb 10-1: Manufacturer: syz [ 1320.624594][ T1475] usb 10-1: SerialNumber: syz [ 1320.856132][ T1475] xr_serial 10-1:150.204: skipping garbage [ 1320.856230][ T1475] xr_serial 10-1:150.204: xr_serial converter detected [ 1321.463014][ T1475] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1321.463157][ T1475] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1321.491608][ T1475] usb 10-1: USB disconnect, device number 52 [ 1321.501818][ T1475] xr_serial 10-1:150.204: device disconnected [ 1323.160413][ T5805] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1323.310416][ T5805] usb 10-1: Using ep0 maxpacket: 32 [ 1323.317489][ T5805] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1323.322719][ T5805] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1323.322796][ T5805] usb 10-1: config 0 has no interface number 0 [ 1323.329236][ T5805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.329323][ T5805] usb 10-1: Product: syz [ 1323.329374][ T5805] usb 10-1: Manufacturer: syz [ 1323.329416][ T5805] usb 10-1: SerialNumber: syz [ 1323.339696][ T5805] usb 10-1: config 0 descriptor?? [ 1323.753730][ T5805] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1323.753787][ T5805] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1324.971239][ T5805] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1324.971909][ T5805] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -32 [ 1326.029721][ T5805] usb 10-1: USB disconnect, device number 53 [ 1326.484307][ T5805] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1326.641197][ T5805] usb 10-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1326.645728][ T5805] usb 10-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1326.645836][ T5805] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1326.645931][ T5805] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.659711][ T5805] usb 10-1: config 0 descriptor?? [ 1327.071958][ T2463] jffs2: notice: (2463) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1327.108782][ T5805] hid_parser_main: 14 callbacks suppressed [ 1327.108868][ T5805] nti 0003:0757:0A00.0049: unknown main item tag 0x0 [ 1327.108918][ T5805] nti 0003:0757:0A00.0049: unknown main item tag 0x1 [ 1327.109161][ T5805] nti 0003:0757:0A00.0049: invalid report_count 1591645534 [ 1327.109220][ T5805] nti 0003:0757:0A00.0049: item 0 4 1 9 parsing failed [ 1327.118743][ T5805] nti 0003:0757:0A00.0049: probe with driver nti failed with error -22 [ 1327.326507][ T2229] usb 10-1: USB disconnect, device number 54 [ 1328.270138][T14376] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1328.430045][T14376] usb 10-1: Using ep0 maxpacket: 32 [ 1328.433075][T14376] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1328.438666][T14376] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1328.438757][T14376] usb 10-1: config 0 has no interface number 0 [ 1328.455507][T14376] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.455594][T14376] usb 10-1: Product: syz [ 1328.455647][T14376] usb 10-1: Manufacturer: syz [ 1328.455696][T14376] usb 10-1: SerialNumber: syz [ 1328.484052][T14376] usb 10-1: config 0 descriptor?? [ 1328.923425][T14376] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1328.923482][T14376] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1330.153848][T14376] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1330.165244][T14376] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -32 [ 1331.046435][ T2554] fuse: fd is not a fuse device [ 1331.205441][T14376] usb 10-1: USB disconnect, device number 55 [ 1331.342145][ T2569] jffs2: notice: (2569) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1331.769222][ T2601] jffs2: notice: (2601) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1331.845625][ T32] audit: type=1800 audit(1787675043.869:77): pid=2605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9833" name="addr_trsvcid" dev="configfs" ino=153825 res=0 errno=0 [ 1331.874610][ T2605] nvmet: Invalid value 's`|F*KM9.i' for trsvcid [ 1332.280747][ T2627] jffs2: notice: (2627) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1332.479756][T14376] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1332.641771][T14376] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1332.652301][T14376] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.652708][T14376] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1332.652785][T14376] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1332.663833][T14376] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.663862][T14376] usb 10-1: Product: syz [ 1332.663879][T14376] usb 10-1: Manufacturer: syz [ 1332.663896][T14376] usb 10-1: SerialNumber: syz [ 1333.096917][ T2622] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1333.513061][T14376] ATM dev 0: failed to start ADSL synchronisation: -71 [ 1333.514567][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807a380c00 failed (-71)! [ 1333.514827][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880287a9200 failed (-71)! [ 1333.515253][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880287a9d00 failed (-71)! [ 1333.515392][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803418f400 failed (-71)! [ 1333.556529][T14376] usb 10-1: USB disconnect, device number 56 [ 1334.158762][ T2653] jffs2: notice: (2653) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1334.280850][ T2662] Flash size not aligned to erasesize, reducing to 2043KiB [ 1334.294515][ T2662] jffs2: Eep. ofs 0x00000041 not word-aligned! [ 1334.301996][ T2662] ------------[ cut here ]------------ [ 1334.302041][ T2662] kernel BUG at fs/jffs2/nodelist.c:614! [ 1334.313781][ T2662] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1334.320214][ T2662] CPU: 1 UID: 0 PID: 2662 Comm: syz.2.9854 Tainted: G L syzkaller #0 PREEMPT(full) [ 1334.331107][ T2662] Tainted: [L]=SOFTLOCKUP [ 1334.335475][ T2662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1334.345576][ T2662] RIP: 0010:jffs2_link_node_ref+0x743/0x750 [ 1334.351625][ T2662] Code: 74 24 08 48 c7 c2 5b 7f 75 8e 4c 89 f1 41 89 d8 44 8b 4c 24 14 41 54 50 e8 7a 1f e8 fd 48 83 c4 10 90 0f 0b e8 5e 39 88 fe 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 1334.371369][ T2662] RSP: 0018:ffffc9000465f5b8 EFLAGS: 00010283 [ 1334.377479][ T2662] RAX: ffffffff833fa342 RBX: 0000000000000040 RCX: 0000000000080000 [ 1334.385493][ T2662] RDX: ffffc90006249000 RSI: 000000000000d333 RDI: 000000000000d334 [ 1334.393515][ T2662] RBP: 1ffff1100f9efb0b R08: ffff888035c2be80 R09: 0000000000000002 [ 1334.401551][ T2662] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000041 [ 1334.409554][ T2662] R13: ffff88807cf7d858 R14: ffff88807cf7d850 R15: dffffc0000000000 [ 1334.417564][ T2662] FS: 00007f3d8d2046c0(0000) GS:ffff888124988000(0000) knlGS:0000000000000000 [ 1334.426613][ T2662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1334.433239][ T2662] CR2: 000000110c264162 CR3: 000000007d1b2000 CR4: 00000000003526f0 [ 1334.441247][ T2662] Call Trace: [ 1334.444549][ T2662] [ 1334.447504][ T2662] jffs2_scan_dirty_space+0x1bb/0x300 [ 1334.452907][ T2662] jffs2_scan_medium+0x1a38/0x70c0 [ 1334.458653][ T2662] ? kasan_save_track+0x4f/0x80 [ 1334.463546][ T2662] ? __pfx_jffs2_scan_medium+0x10/0x10 [ 1334.469052][ T2662] ? rcu_is_watching+0x16/0xb0 [ 1334.473842][ T2662] ? trace_kmalloc+0x2a/0xf0 [ 1334.478462][ T2662] ? __kmalloc_noprof+0x38c/0x720 [ 1334.483528][ T2662] ? jffs2_sum_init+0xb7/0x220 [ 1334.488401][ T2662] ? jffs2_sum_init+0xb7/0x220 [ 1334.493204][ T2662] ? jffs2_sum_init+0x112/0x220 [ 1334.498084][ T2662] jffs2_do_mount_fs+0x775/0x22c0 [ 1334.503140][ T2662] ? trace_kmalloc+0x2a/0xf0 [ 1334.507771][ T2662] ? __raw_spin_lock_init+0x45/0x100 [ 1334.513115][ T2662] jffs2_do_fill_super+0x555/0xc50 [ 1334.518275][ T2662] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1334.523671][ T2662] mtd_get_sb+0x18a/0x410 [ 1334.528111][ T2662] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1334.533508][ T2662] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1334.538910][ T2662] get_tree_mtd+0x597/0x7d0 [ 1334.543472][ T2662] ? __pfx_jffs2_fill_super+0x10/0x10 [ 1334.548881][ T2662] ? __pfx_get_tree_mtd+0x10/0x10 [ 1334.553945][ T2662] vfs_get_tree+0x92/0x2a0 [ 1334.558422][ T2662] do_new_mount+0x319/0xdc0 [ 1334.562988][ T2662] ? __pfx_do_new_mount+0x10/0x10 [ 1334.568047][ T2662] ? ns_capable+0x89/0xe0 [ 1334.572405][ T2662] ? path_mount+0x647/0x1050 [ 1334.577027][ T2662] ? user_path_at+0xd4/0x160 [ 1334.581644][ T2662] __se_sys_mount+0x31d/0x420 [ 1334.586357][ T2662] ? __pfx___se_sys_mount+0x10/0x10 [ 1334.591587][ T2662] ? __x64_sys_mount+0x20/0xc0 [ 1334.596393][ T2662] do_syscall_64+0x166/0x520 [ 1334.601026][ T2662] ? trace_irq_disable+0x3b/0x140 [ 1334.606116][ T2662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.612253][ T2662] ? clear_bhb_loop+0x70/0xc0 [ 1334.616973][ T2662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.622913][ T2662] RIP: 0033:0x7f3d8c39e0d9 [ 1334.627400][ T2662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.647034][ T2662] RSP: 002b:00007f3d8d204028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1334.655519][ T2662] RAX: ffffffffffffffda RBX: 00007f3d8c625fa0 RCX: 00007f3d8c39e0d9 [ 1334.663521][ T2662] RDX: 0000200000000a00 RSI: 0000200000000800 RDI: 0000200000000900 [ 1334.671525][ T2662] RBP: 00007f3d8c435024 R08: 0000000000000000 R09: 0000000000000000 [ 1334.679520][ T2662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1334.687517][ T2662] R13: 00007f3d8c626038 R14: 00007f3d8c625fa0 R15: 00007ffdc2044f38 [ 1334.695520][ T2662] [ 1334.698574][ T2662] Modules linked in: [ 1334.704158][ T2662] ---[ end trace 0000000000000000 ]--- [ 1334.722844][ T2662] RIP: 0010:jffs2_link_node_ref+0x743/0x750 [ 1334.729161][ T2662] Code: 74 24 08 48 c7 c2 5b 7f 75 8e 4c 89 f1 41 89 d8 44 8b 4c 24 14 41 54 50 e8 7a 1f e8 fd 48 83 c4 10 90 0f 0b e8 5e 39 88 fe 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 1334.750195][ T2662] RSP: 0018:ffffc9000465f5b8 EFLAGS: 00010283 [ 1334.756538][ T2662] RAX: ffffffff833fa342 RBX: 0000000000000040 RCX: 0000000000080000 [ 1334.764816][ T2662] RDX: ffffc90006249000 RSI: 000000000000d333 RDI: 000000000000d334 [ 1334.765955][ T2667] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9855'. [ 1334.782570][ T2662] RBP: 1ffff1100f9efb0b R08: ffff888035c2be80 R09: 0000000000000002 [ 1334.790830][ T2662] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000041 [ 1334.799652][ T2662] R13: ffff88807cf7d858 R14: ffff88807cf7d850 R15: dffffc0000000000 [ 1334.807776][ T2662] FS: 00007f3d8d2046c0(0000) GS:ffff888124888000(0000) knlGS:0000000000000000 [ 1334.818710][ T2662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1334.846164][ T2662] CR2: 00007f3d8c3eb7c0 CR3: 000000007d1b2000 CR4: 00000000003526f0 [ 1334.846485][ T2662] Kernel panic - not syncing: Fatal exception [ 1334.861238][ T2662] Kernel Offset: disabled [ 1334.865591][ T2662] Rebooting in 86400 seconds..