last executing test programs: 15m48.742307838s ago: executing program 0 (id=712): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 15m47.550184426s ago: executing program 0 (id=713): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r6, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r7], 0xe4}}, 0x0) 15m45.170945734s ago: executing program 1 (id=721): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, 0x0, 0x0) 15m45.054116976s ago: executing program 1 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 15m44.045674261s ago: executing program 0 (id=726): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 15m42.646955613s ago: executing program 0 (id=729): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x558}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 15m42.414880546s ago: executing program 1 (id=730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x1000, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0400d0}, 0x0) 15m42.310809758s ago: executing program 1 (id=732): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 15m42.296860048s ago: executing program 0 (id=733): r0 = socket(0x15, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080), &(0x7f0000000140)=0x4) getsockopt$sock_buf(r0, 0x1, 0x4c, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r5, 0x1000000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r6, 0x200000002, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) semop(0x0, &(0x7f0000000200), 0x53) 15m40.856758031s ago: executing program 1 (id=734): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 15m40.351221808s ago: executing program 0 (id=735): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) keyctl$revoke(0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c8940, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 15m40.350898598s ago: executing program 1 (id=736): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r6, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r7], 0xe4}}, 0x0) 15m24.457227075s ago: executing program 32 (id=735): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) keyctl$revoke(0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c8940, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 15m24.400897736s ago: executing program 33 (id=736): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r6, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r7], 0xe4}}, 0x0) 4m48.624419755s ago: executing program 5 (id=2307): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 4m46.560347448s ago: executing program 5 (id=2313): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002fc0)) 4m46.072829885s ago: executing program 5 (id=2316): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x9) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f00000081c0)={0x2020}, 0x2020) 4m45.023338142s ago: executing program 5 (id=2322): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/178, 0xb2}, 0x23) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xea000, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000007c0)) r7 = fcntl$dupfd(r6, 0x406, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 4m43.905170949s ago: executing program 5 (id=2324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m41.564761045s ago: executing program 5 (id=2335): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) 4m25.661027752s ago: executing program 34 (id=2335): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) 2m56.860887211s ago: executing program 4 (id=2623): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000180)={0x2, 0xffffffff, 0x6, 0x2, 0x0, 0x4}) 2m53.264147546s ago: executing program 4 (id=2642): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendfile(r0, r0, 0x0, 0x40008) 2m52.798805823s ago: executing program 4 (id=2647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x7, 0xffffffffffffffca, 0x100, 0x0, 0x5700000000000000, 0x402, 0x6, 0xfffffffffffffff7, 0x0, 0xa, 0x100000000, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x2000000005], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m51.024202721s ago: executing program 4 (id=2657): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = open(&(0x7f00000001c0)='.\x00', 0x20000, 0x8) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0xc0049364, 0x0) 2m50.628226827s ago: executing program 4 (id=2660): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x80020001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m49.999565337s ago: executing program 4 (id=2666): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r1, 0x8925, 0x40000020001100) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r2, 0x10000, 0x9, 0x0, 0x3, [0x0], [0x800000, 0x0, 0x0, 0x1], [0x0, 0x1001000], [0x0, 0x5, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000003c0)={0x0, 0x8, 0x9, 0x2, 0x0, [0x0, 0x0, r3], [0xc, 0x4, 0x1000, 0x8a5], [0x2f4, 0x4, 0x0, 0xffffffff], [0xffffffff, 0x2, 0x6e4]}) socket$inet6(0xa, 0x5, 0xfffffffe) openat$ttynull(0xffffffffffffff9c, 0x0, 0x18b800, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 2m49.544831854s ago: executing program 35 (id=2666): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r1, 0x8925, 0x40000020001100) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r2, 0x10000, 0x9, 0x0, 0x3, [0x0], [0x800000, 0x0, 0x0, 0x1], [0x0, 0x1001000], [0x0, 0x5, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000003c0)={0x0, 0x8, 0x9, 0x2, 0x0, [0x0, 0x0, r3], [0xc, 0x4, 0x1000, 0x8a5], [0x2f4, 0x4, 0x0, 0xffffffff], [0xffffffff, 0x2, 0x6e4]}) socket$inet6(0xa, 0x5, 0xfffffffe) openat$ttynull(0xffffffffffffff9c, 0x0, 0x18b800, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 2m10.300763512s ago: executing program 2 (id=2866): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)}], 0x1}, 0x3) 2m10.040415005s ago: executing program 2 (id=2867): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wlan0\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x80, &(0x7f0000000680)={0xa, 0x4e21, 0x401, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x65}, 0x1c) 2m9.840033488s ago: executing program 2 (id=2869): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m9.253301217s ago: executing program 2 (id=2876): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1d, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m8.928325702s ago: executing program 2 (id=2880): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m8.688616114s ago: executing program 2 (id=2884): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x420005e, 0x0, 0x9, 0x0, 0x200000}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000440)={@hyper}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e}) 1m53.471375577s ago: executing program 36 (id=2884): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x420005e, 0x0, 0x9, 0x0, 0x200000}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000440)={@hyper}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e}) 4.968654696s ago: executing program 6 (id=3781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x80000008, 0xfffffffe, 0x1, 0xffffffff, 0x2, 0x5, 0x398a}]}) 4.7145531s ago: executing program 6 (id=3784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.473624623s ago: executing program 6 (id=3787): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 2.65893667s ago: executing program 7 (id=3797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x80000008, 0xfffffffe, 0x1, 0xffffffff, 0x2, 0x5, 0x398a}]}) 2.569360012s ago: executing program 8 (id=3798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x34, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR=']']}]}}]}]}]}}]}, 0x78}}, 0x200400d4) 2.385085854s ago: executing program 9 (id=3799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.384731984s ago: executing program 3 (id=3800): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="59f1e4552e75986be30344c577df27f4b4a41646039fbf9beda7bf5a572121f6414ca8bd405e18b655af5c5e013e0c7388225a727cc1eb4eb7c7cd47b2c3d353dec75184436dfd9933bd374d8dfd322d0a5b705731fba628d06c11ab04e155f747b67108a4e376b5711565b653281ada57116b0dbf782e6f343532ef258b42d65df4a96f83b00ce9c66eb1a1ab23f2039927adfe99a3872de7a80ec34aa05b8be26021e61d2e1509d903f77783525e515ae5051541be24502d5123d1a08e06d959aae764ee7bed31361802c486a3f9fbb3824a21fc1b73f95d88167f7659cd90bbb4b7eb78c21e01a9da912544402618285e461cc1c9a1ada2f273d3799feb3d90e373c4f0132554fc3ebe0b8557d521e89f66531514ca337bb1149f86158e7ac94d88fc583a59b7ead0fc249ae26a4ef2ff5bab62209000575441363025553f5012b8eea50bb087202114f8b48ab602fe3fd952bf9886dcc41a9d6c22bfd543f7dec92f32758b99cd239cb69a2fe1c4560426e101666b862aec3e235fd308a6e7560aa2207cc185acabd03b20d4091ff7936120b450b1db200228cd435c434c2626f641cdd8180946982d665352ee755358afa123e7fd9a202e912c528929067ce785f3ba1877968a047f56dfb7cef747d59feeabcff03e73aa3dd3dafb367f32758de4d98dfe15737ba1cb7400ee5bdf4220d6e667c651757d4f8bf536771309d6dfa928e59c9171fa7a710a6d308e757775ce029e0724971c8d7782e29b8ca82de04e883ba042f92e6f7c6b2e627e1242e1f2033ca5bcc81797ba39359e320139cfcf6335086cd646b842e13ab0f90d2fa92ae3cdbeac38deebfc485b2f10f4e29507c858046ae009df144c4ab38ae70e25cccff11078408d7ef4d7bb262310fec1663f1a1dc035864a40616b4690c841c986630ccb784d7af382fef327e7e64817a48db2eae499584fb6cb758a4da7967d283c7400e87657443148a94a352bc46154849a9d6eaf85e4e5556c648017e7f5456be988abcbbcf4a5e2228d2cebf144229fb8b8b6ad244be8f6ccfecfa6df74278761bae6be823eeb6cd08bd0bc01283d04fb719f546cf4d2de5388d1f90eec21674d35c9e295cb1bff104689395cdb6349efcf3d3d99e0141b7bdd4f0ef24fdd6afc35fdca10ade6d539bf1e32ca2e5ab5223e4e975a3cdbfa604dc7904755919905e3ab5e4a1932e2cd7741dd80f4993d0822bbeaf7ea70541e7d18af5a36aa1b928b801bf5a8652adac57dd76f0b7d0629a9fa493db118d6420a18236ca92487cf1b751477bd7b66b6ab97a280306f921493eb9a6172a70cb4f62526c09bd73d148faefe36c47275a0b8822b71c6b09dc80dce0b130ede61296ea03951a563bbf020c75aeea843b95d134bd7228915c22c6e34579bf71479eb4185bf4d11f9735093d9b9d5f18f443a1925f59d2041ff9f6a017eebe9923e5b46de296ba24c25019591cde699475c075904b97f01a639dee3bfce62ecabd2ce078e5fd84b8733392e42e77a6dbb0f51fb0fc59cd7286b6912a8796cdb22e6c3949f6052a014c17b73b3cce6e531127173569d70f07d76359755a6d8bb239f135becb8524ff638452db9d7786e6c52efaa254590a9bfe6bcd485ae8b7114948d58d8c0b9620eb9ace67211e0f7eb4e75740b51f23c0d59903cf2bbcdba9fb516afb8c64cab133c51c0ccca855eba033cc4eb08bbc7632f427f6fb8de4a11bc292aa090503e96a2ae414d5c8907e599874c7e9ffbb8e57ed9b1564ea52f09afffeddb8da0a9ed228da5bbae4a1ef608a0d327cdd7f19fac5d342c31088bbd05cf87c1bb73c55db60087e058c21d313c899071a38ac027e7c2704516b2cbeeb3c18771ecaec46d90c18aaf7cc207cecd60faf27fa4fbea3fecf0dc67336263870e21a1ef39c35e89254fd02bb75848f3729450a08990a410331ac720c1b9c3859a436d65899158caacff7aea71f3bb34e69d954994b698e608836a52b88d8ae8303fb918956e13bc1bb99f955c72474d53ab8ba2ee131730f7fb7dcc4ebcf14b9c3c0553a783d6123c3b9a3cd5ff9c6c2d588c38bae6e81b5f0dabc3b4f6b2d9805474453f66e3f6bbc29b64604374ec82a602109cce44bf4ca88a8b0ea2dd27a49f70eb481f3fb59a4ec5cd0b2196c05a96905cbd0f3b01b579401d20f12aabffc6f9e869af2fb43b0c3362f67a015dbe51b33281236326c3cf93f466a07f5baa29cac348ee7c17088aca34bff6844cc60c5f9376c4869afef5e14b74d780ba0fe5ba3f919d6e3ad2c5a9b259c3a79da133173f107bc2fdf426cdbc144a96a33951bdbc43d5b5a6a5c4e8aeb90816cbde9ffcec6630ca37ae6ccddcd61dc6893b75fc6d951be9d2144b6ae4bf739ddce3400456f0bed97dcec4330b717f590ae2f30cde4203d592a4abc864b27fce63bff3da754425fa0caa91e173f8f99fb0c81910df88b01e2e4918e424322149a283a69a04effe4da0cb417126d674d802455a67bb72aa88f1a6beba6a82f9f0529caff162285679cff18c0a9387abd6ac70135ddd07d04c8cc18143c57bdbf5676feacfb5afcdde7233abc411ad08372a885ee2047017c51167112b1dfb4c3a06a829c8c57c2e6d55c85ed97063c9a5843aa299ff3c63e61440baa42b696adf218d37b39231314acc6ffff7b23d16c8762562ef8a056e31c385d57f8fda45862034abf4487d6abd7816ebda9a7aa8bcd753508babb0d4c08cc25ee88fe3a5eb26842ef5a0687f5bd5c3f0b29e4723fbacfd852f3e194e47ffcc9fefea63b972cb9f3293956ee71308ad6ccb891d760469a62c5864069cefa60b247c5366b32d864d5d63a495209627b1b36b9db1bc0979e13dbf2f7203ba69596ad6cd991dc22cadd0fc55ce89db7fed238b082674458c8fa10398e6fe69b50b8cc8df9324180305fc4c17c3f0ecab996c44f8bb2eb575bbe4300e1c93c39a34ce0f255522f4bad18b6f7ed2b5d712baf19c39bfd974dea6181511e4bce407a38e2ce591f989001bcbff570f78649b8d80d7c51d9415dfe8871f1c4161e685d9a361ee2c3f7386c7d89570ae6894f59219c9e53059a13149fe6f3d37f982c503e11f9a90fff483e3b2e4016f376fbf81a3a95d666460fa0c3f6e873ed7ba2e9b6da20b62eec19de014c540b9dc4c3c25995c0435fa5dac1d5cefd66b248db8cc951a84913341e308a318bf94d1d49e12d80053712d3d68fb4acbf8c07ff3ab721c982b114f98edb9e693afed4c80892d8d75484cf228a41fb9af3e59a31c802bb5883d88f5d804806a1747bee00a1347edffc1d832d5e01d15dcd4c7e21f35c47e90761904d0381b56e8200d69338edba5f5e5992d2439143846e1295aa77dd0745c1f33b02b108e987a3d675d8bd593ad22b49068a6f91478a807275b05261dd14553a112fc85cab73dceea1fd31a319db40ff6646afce5a9dc0588747afc06bd36c4326a5f495a12c4eb6ca44e4b23dc52836336832e267db22165554caf7925cf13c84685ee31bfd19fb988a42a2d931fe0212a64e6ffcf9fcaaeeb9fd211a529364abb1a915811a46c41289da4a3a730942d4e0b9534944ec993555d96fcfb68e4f85c53c297f1ea34781b55b69b25bbdf4f0cfc9572e924adfd354b4c291d77d802bfbdc7d7b24f1d266cabc9ecf63ea5b48d5e7f30d8ce1ee4ad861537c441667405b8223e81ba71f55e09d0e92f1c4233227eb276db865b23c8d28df9b2738f025b59d10a118e156b04da94a15b7d8393783dbbb29131603bd11397625c8cb5d8a86cabf660906bf714079f9261c901815688b76afbc65962aeba08e940c20931ea1e3b875427afbb608634eda3f7f69da64906616f24a8a750abf2da50c1e47cec369ffa25d4c199caf1da2f51ebeca7de266e7550dc12019f0e7dcd8f814c2095b12cbf94404e3343e032ebdb8b598febec6390c84fdb65c3eda086c341c09321d1ee471896be010214de39a658cf48585660010578290b3349f0233e301dce10a9dcaa372ade8a4a7170e68522add35f6cdb23c688ba42b425775f077bd0d9f6706722499763efb84c98ee3717b293b26eb46d097a7af1e8097cec825a2d92cb1038980a8a73a7a351001a6efabf812b00788bb950e8b88784054a299906786b7dbd25c9d8ef4146e45b84611d65e7ad898ac1d234574d174acb1d23d8e206518fa40e521bd3c3953c95aedf265c3755243374ce36500a62dd57a94ac22aa6c9b6d79edbad8c0633263f9ffc04524d23e64a18a22cfc1d9ff00eab75a48cffa364f025b31fc632d4ba3f1a829e78b08a9297d59b9ac9c2ae3fe7ef21a0bdc4ee34477654b4bb80b30e117dd846a4f71750f76cf93afb134eb28e0409b92016ce47871fd2a531b2b05d7684421f524833f7a9ac4a02d8c92a1c83150fbb6c68edf0c4ecc833c9e2e058c91f8f9ba81ee48ba5fb71132bb84c4e4993561b0f0ee77405a5573df396469fa5a1a761a9398e618221bdb888a9f2f07a1e9247fc7e3ff2d72bdad77654645171fc89cf4e93d6eaae95f4e7bd9dc75c1b1fc5c7926aa0d0c70b7b442ab657e734fb39660b058403057f94ae3e9b96233647216e29b891272e4403e3a155e4f77fb227cd56a3e3856969cf3ce85d1aca889c2cb1ddfab9cfdcaba80e2411243e8370757725e2875bceebec0d8174ecdda380dd8bcf63cfc619ebfd4b562949e32c8ae7173d630df595b79afc5b0c2ba6e9613ebdc3912db74a1c41bbd4c50428e1dfeff661fe3c3cbcd8fbe4a6d1c02d2b06068e3fe7fa5fb63eed98361baa5c075ea1694a575551818d3ca4988dd080df8c604f2fcaf0d3d3bd922f142ecd2b88efec2563686447750a1e814926e037c2e4d2c530bae36a0cba4b9b42d21b63d6ff403f1a5bea1a169eb494192a7adcb0787759a944043d0df72d57d775e9604a5236775b44d9553dd186f63512bfd3d4b65667f8d715bc9c100a0855e2ed963da442e0ef54b809b2e794eb9b29daea42a84c2d45c220a1ab3242bf7e2f41754feaba92998b834391aee0005c3b5bf05ca648577d77712c6a2107c0d017b1828b82a63ac32587023ae8214e55b907a08c774d12be071ae593716426038f326b45e565900ae67778cfed493dd873b613d457837bf505622d6270f7c2177b8b0048ada47e3fc97a913552d9b65be45a914c29fe5e2e398c9dc7d541f8244c9ce1fdb8d20547471ae840cdf88e4362e05b3091a80c3b32afec6747b05033f98456bb0503240d63b18d1756bd24656def9f79e6bbaca8084caf07dfd17d77f98343fb3f141f788ed0a9397f0a591023c332f4a16e468643b8dffb950f798d7cb165757b18ffa1863898de59c892b148d268b4d0ec3e5f2e4790358cbe0a40007a4be6cb789ac11badcf369f1aff5c458b5c9514b24cfc395b4b4f0df30ab6b3228feb960d545d027a76abfecf455b673be7caadf0d0f2544cb5473ecbc3a339b08652b444a3b5a28d834e63ae4d831d5abb077297428bc3b6542477fb6d4ffdb1398349cea95e7d6131184e7d793603582e81253974e10f8f947d339d2fdfa4c8871b33403cc23b2e225462d29d0450f285433c75959774fe65058188cc54488bc23a20880a0b786e6cc4622c5621f427af5dc294420c07c268cb04eef4400fcaf6fd1a500504fe59cd3c44836a0b477a62d05c8f43e96962a367cbae1f88dd4f4c22e0c7d2afea8a2de91917599f6db37449474048ba84f144532af50b65cdaba868f50f079a4a495d2ee921d835badc2ac45e2521dfc559bbc664f6f27446a6d5afcc8c0d90d68f991dd503291d7687f64641fd052c73be1786b507252749fd788c0c8edf25ab5efe9ddb2a67ec7e24f22f9fe28966d64338b691222c7cc493a9a5c10430ce0f074703047757a9abed0ee0cca14c20cfa9cb521f0e4e91e886e4b1285ffc996912ca7c9f81f2e8e64454fe6846ff44dd21c294b888d52c37bc386ba8cd7f7c0fedcd524ebf603f0a5b5f19be9c7e0f6da5d0ddbc2543d1adf46f5d0140d40c8798f8baa4ba49d99aa0171ffc797e3f919b21a37d3ca8b7a729781aa262d68a0451a2705f59f18268387fdecaed03045fd6f1759a694a5224c46f7a4c6c4eab6b11089b114e5a78546c258f23a2b80fe7f9503d006799d2b8fed769d87e9dafaf6f923ad1be071538789b771d13125049b58a2f2c4f91a5cedbfd725e419e8b640b9d704f48b96efab1b249784bed0e6c3c938b5ce66b6766ca0bbea73aa3a514a57ad7d1907f72072128be570e016a2a5b5754f60e2b0bcc3bd9a4ed21fe4e9b4655ca22656ab6cccf5091a1f85251e51f59094762252c996d9609430cfba1d160702643060cf386f3c3ab02eb5943326312444ebc0e5df143dfa8e868fafb719fbe1f5b355c472adc7694967522e39c1b162b57d49aeda122bc4a60393bba6db3f083751a41f9aa2d6cb59038f94b896a5623f82bad390d2b729f66d5f87b72cc9b54a2f08b3e7ad321310e8f79556ed4dd0c8a058e6a434b6a3fdf28a6b669b53694c16a72e14c1bce34f81c67071152d75ee8f146e465849a7b3eefc2fddb779fa34685effe59432444b3a6fc237da95fc7655aad861aa319a75880e53858ca6a7dad341b2643918e69e3c81969fecf6cdecec304c519ddd0f54b659ed7f9c3782c58202ba393c3811aa1f34d710db2cd0bd1478db3b3445c5d20811dfeb0e4bc3434ae4fa3518c9c36ebcc73d2e40a1701496f82d186309885af32b9694a7a6616bba665b94bff24ab493488c9a53cf1de2eaac644cd0f8d9ef4930f8bf56797b5ac4abc8132f62125905f7e18db3048a90c4a4779b5e29815830fb4093956bda4e2596bb8956c45313ce4e4662143a95779e5c23933e9312372e29c00ee668e82c7d4de290a5a6a66b85e6738528a58b4d169221a0ac5367196cea76c58b4c236b7da73ae1ce463656941f322d4cdec390d91d813c2c9bd70b10151673585457016c0d302f23f323c4a118fcc32a8076be44606d3241bfa66e78178c8d991093d9dd5d93d3eb455ed085eb5e88d83f3a47ce9c5fa7f9035df5c407eb27daa231c538ab58765668ed5a80e8f8a3a4470181b9f15b56d5c4a43708e7287775ee1e991c8e28af2afefef93b19ce3c4a1cf5d25e9b232f424a312cd4883230ffb071343986092141ea12e9647e5f5ab4e70de17d17756eec8ff64328c0050794c568baf183dce6c798e9b01dc53e76c4b9a0b61f1b65cfb74152d9936e05505df63048cd62cec15a97ec79995c5381b0491e65661c2804cc7a5cba0f418d5ec420ecdcf1363cc48777ac6a9901a30d6aed7bb62651480da8f84c93a61bd66ee6f218f2999d052e7e3fbcb002b57bf3c1292cf75a52a164d5c7f1265f1c7f881683dc8d6572853eef350f3834f888a1ab0eff22ee3b93ec2d82f93ddcb5b915f2c273a296be81f3ea3d5e9855863fb5cdc7289770111d02a7e0ee6558e46e754a5c11e4d36c55946fbc62d0c89f87156e33db0ac968dfb67c3a43a55328996a73cce287d518d45f5753f45051bba90d6dd06d95bd14c13d7707bc1afb44595da6783a48d6675c8e28affea30a55ee55a904d9ffb31e9c4fe04fe3dcdbb459d62d36156b2c6aa015b20205f6222008692f6be91ae531afafba348725ba820bb9fb2b93d3013e3f4766dec362a1e0cf40534eb1a18168c18afe08dfdd65e9953869353ba14cd1daaed1fc0c0ae1fc8deaa98c79b74ebd2043b18076dae9c2b4625ca9459a354ce3571b8c33870cc291983da1c0f32f87133192564e6c22abce03fdde7a7cca192d623253e99d5d1ee2f5e4c6535cb027eaae8fb1486ebd7c09881a14c88494a03030f5dba58f7e45a78905b10a5645409ea754162aeae8551d1026021da8685d4cbafbcb0ad980a1a16199be14b11434b0cd62a559b8584cd373bf9f959641059b17a654523cf3f3e7fd94a809e44a21ce2242cce6f79a32dd5443b79df68ddbbdc73eef492ef6a9f093f3131874064f89f26ff32eda7e6451081990a022a0fe52f189cd1deba409dcc090f91d10fa769d1bd75d11ec22b6e85405cbf9b3256e4f8913d7b8eda2945069e219fb4abca2a191e024d5af78e75cdbe0d9d5471a1d8e8aeb9e0a00274d4474ab6b0ebbb66d41bfc1683642c88a1155c91a7eb2295c4b9aa93eb0e77dc5a928e1698490de1226c65a7ef79fa9237dc9f7fdb8fcf9b54658ee3c714b14297fcaa1371c22e746151608f6f1f49bfdddce0ce24e6fc8da8f8dec534e5fe36106c81f25250be3fc496a4df508e79f49c7a4341d50bb6f96289afab14dbf4e8802a14ae82705a75e18330884c9bb1152792249a68ced40afc63deeb59daf9711484b982ec2675f5d9239f182849c4780046460e59aed8cdaaee156544370962771ced877365d37723bd9f935e8192ffd677348db41e3884704b5cbc6002c32111c9168dfcbbcc1c1ae3fd907b494a1fc7a8da0077517b55cc86393f61b07cf71408c47c9f4ca78c9cd48bf62c3b48232f74fa04f4e1fe9e5a4b88e94cae83397ca74948acc002afad739a3891c16c102fe026e2d1ac172a8b0f8c26689d99c371e275671b4f7ba1a08f7e955175b0dd88bdc63f6c1416fdaad20924c7dfec72d961b7fdde56de6ec0c11d43abf60fba174f4a689a1ff15016e7bbe378255f6724fac6a877a00d34a44b85c332ffb3b48101cb6137ccbb5e79f0e0ebe144800c8eb8ee3540cd23def571a4419908604a4217e4da5c72ac49c188e050c6c154df8f1ae2275a6bf123da80196a01cabbd699b215e6e1d7762c299d22e5b72dc1d17fafc2b42bf8c1546694772a2bd9a5f1f75504906c649988f88dd1f1236ab3e92907da0b87b7b674f5f3856c2d0996c20795a2cf7eca5b8dbbb4715dd4e67ce6ef38848bd50389686f17c059070fd9f1bfbd0409e3df16e7a73fb115c66cebb217cd01c5967c774143aa11d9815f2b0f9030f012bb8df1548a4e495e3553ea8524d374772a287beb18a7e88c88f4678e8835f35ee901eba3276b55095122d36a4da666e3b2a70114bc7c8faa5c73b89744c47aa138463c619a322e4dd8e4414ab12b143d2465401cafd97f500b2b035ee96f87131b3c5acbd7d336d926973e70b7c409372a1bb270e0666831de3fb5f059d25cb733106554ad892b2d46f5b33b00ae6198573c4c57b059266f806943e864a34a2b830003bdb7447fd105244bb975b0d7f1b6e25a72ac98a6fa3be7e3b430701633b95f8560620a58caa3366b0ddef41d153452417e4a5b48cfde67e6525d23c538a90d87f9b3cbd4205ccb30ebbbd54a00c4b0fb30cba4d02c5f108cb25af1cd791711d244c87de9738afd56401755ad8f5e62198d28164475997d7719f91ed7685829c6d536a090353b0b2de436d27e9f1fecb09917c1a3e7cbbe33024a74883790c9d18c2349a3f748f6362a79b92b95f1b3e8ddf118c87fc389c1ca08786b81513b62ebefb9fe472ff79eddbfa06d6569faaa1b8df516e2d0365256bf012da3571c6bc8589c49e0573da6d9ea1f7ad35840450a9f334d5d2cf9aa343dcc0f9864129bc548914507b30075d1a153d98af8a6def82e5c8619d9656f8ed0598b3463632c1cfa8ce86cbb90c772cf1298709fab835fe07b755a955f0d05c0f4dbffecaa7f6b1b6d40fffda03965021fd8f1316b62ee8e2bf6fffa01bc2740c066b7655d39f4be9d96f39713fab5ba34fc5431cd86c7384ee9177c20bf5ed5b9242b5abaefd4429a73195c166366527daaad6ce29136edf7fa974415fdeca13adb617e35d357d9c8d76953b6704bd04c391eb3070b1536342224577305c75b69cbe622e308722b3b76fdd3ad0ee69e7cef96a9cd267a92d846863b97862613b2ff5667559ed286e2fe6805a3a09ffc25e4df4b58302844e747a65310d4eb9d64c1b31995a2df3dce8026426e445b60520933fea52f4a9fc8e15033b75e5f412866f4c75371b6cb6436acb118d62752da91b64f15d40c8263bdc6ab718020442bc9cb8005ff30e90ca8bb4f489b0eb4218d323b39022fc542dcc16841899d094d4a5bf134281a330efdfb2445bb31d818b11d9abfd0e58c6497d2db7ac72a26d068b6b4b62de8d291188d4de82d9e53f3cf597e9c383a308a6a52814269c18a18b654bbf4db4502c11856637400b8c2ec3aa0127a659efcaaf5377adf69cb3d9ec65130864cd49320a8ac21aeb31c1c08f92a483c70318870b0107b4ac6070575e548bf70a25d1b220d8192697bbcf891521e4217efb59429c9ca2638a6eb13845d74a91ce45471e8df8f9d8a3a4ea4c8fab267017294f8054e43af04394dd3cbd35b6e60911f049d0f1048d1941effae8ed0ef726efeabe24607e3036e95297f7ee8d3bade2ca8cc431504524b6b40bfff220cc60f9f64376ad5b5fa7cd8dbc3baf145d6ff4ac00a4a8fc2de132af0e2d84302d02c5677b927d76094d38c8b644c1480c6dbcb7274d15362a3ec973cbe40086137160e6447ebaeec5aeeee932ef2bb03fd0754a7708968f2bba76ce16209e7bf1de26971f8c112581f9c417828a4a0fe4b6f243b939e8c4a7595230039f3f81fb64d84227c3725cde10c89d6413354e53811b2cbfc8a0d27dfb11884af23522a51a68f5415ba529690561df7d3f3d053166fc97e6c931d80968477384da3107cb5321b88940c3602a25195b870af1d956f749ecf6f0321f0bdead7cac3627d2895db23f74a244ba8cef7a7d1ff04f5258d45f5e1aa4a4baa83a36abb0e5fc94104e32314ef739725d83de8d0027218b7aea54c6de45dac43f955dd2ae4f7b89774219f12a25a7d47213d545357d7a0977486f8bbad66d8ef36bc26671c1a9c2a54d35e2e303b7cc4e3c431c2068ac10e6168ff1a0c023bf68868a20f20612ef5062ccc978332f2a97b58b0b92cbefa1ce73815776ef3e658145074592a463e5fce30fb89d3657906129fbbf369f0a7af4d9f1f153b0a840dfb80607da59ab2f01e72413d364f0c4f90a13b313b03df460696a8506c6c1dc6964918093274054bb9b46b7373a30efdea62c115fe9fd396c989c53c31402ee4b6bf6d9db19bf75906a0fd0e807f7e6cb7c5ef4daf0b21edcbf2f64605ccb7b5238bef39231d470d1542da1eab747084516fb6ef188308e62658540bf37e10215f26e2b1cab4d91a2a429e51bc270cb07c4628a8fe4066192893253d22b3a24edb3f3d02e227c613067231da02b449dc5ecce6a6e605ee5708817b2b72453fcf0f4e04f0c22996871d01cc3684e2b73573604366ca12a604f450edd6e113f4d1bda649939270c0ca493eafce9f46547b2ca1dcd8a63ec6053b99a2705a26c71df3a9dc7a347152dfc55b036701e9f7dffbe9138e6f619daff7721ab2c79e41c7f7fc829e3a22c2fc286f08a0117fc53d63d7c241aed27350badef0ff11ffee83920d62fb09f6be8ae44eab4273560e0ff14096afd10580306ab96cf9998da75e1dd04a9f70023673935a470c015762480b4182c32cf4715d7cdec146b1c8f50709c8a704922900bd1941e1e8172981b373f5de5260e84a498ec8110d55de18c99a5310ec0a7c69fcf54c8b70", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0xb0, 0x0, 0x0, [{{0x1, 0x0, 0x0, 0x0, 0x0, 0x73d4, {0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x9}}, {0x0, 0x0, 0x4, 0x0, '..^\''}}]}, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/192, 0xc0) 2.237709016s ago: executing program 8 (id=3801): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f0000000300)="8156d4", 0xfffffefc) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x8012, r0, 0x0) close(r0) 2.237040966s ago: executing program 7 (id=3811): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), 0x0, &(0x7f0000000340)}) 2.149367218s ago: executing program 9 (id=3802): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x1d) r3 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/178, 0xb2}, 0x23) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xea000, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000007c0)) r8 = fcntl$dupfd(r7, 0x406, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.092410809s ago: executing program 3 (id=3803): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.04430869s ago: executing program 7 (id=3804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c0000f5000000000000000056fffc00000064"], 0x78) 1.016808985s ago: executing program 9 (id=3805): write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbbbc", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 984.108185ms ago: executing program 6 (id=3806): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5b81, 0xfffffffffffffffe, 0x7, 0x7, 0x9, 0x0, 0x0, 0xde}) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x180) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) 983.553385ms ago: executing program 8 (id=3807): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) 940.325276ms ago: executing program 7 (id=3808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) 802.503628ms ago: executing program 8 (id=3809): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000001000007010000f8ffffffb702000007000000bd"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x41, 0x3, 0x3, '\x00', 0x8}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) 784.168498ms ago: executing program 3 (id=3810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='b:::\x00\xf9L\xa4\xf8G\xd4\xcc\xcc\x19\x0f\xc6\xaf\xb5n~\xb4\x0f\xa9\b\xa4\x1d\v\xdd\xc9\xc7\xef\x86s\xbc\xfcI\x89\xd1\xe8\xfa\x82_\xd1\xe4_\xac\xaf\xb9\xb2\xca\xae\xcf\x1dc\xa7o\x9dC\x87\xfd\xf8\x8a\x84\xf1\x1dY\xb3,~', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 624.30149ms ago: executing program 6 (id=3812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x34, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR=']']}]}}]}]}]}}]}, 0x78}}, 0x200400d4) 599.760411ms ago: executing program 9 (id=3813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 482.894653ms ago: executing program 3 (id=3814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x80000008, 0xfffffffe, 0x1, 0xffffffff, 0x2, 0x5, 0x398a}]}) 482.066293ms ago: executing program 7 (id=3824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) 382.379164ms ago: executing program 8 (id=3815): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), 0x0, &(0x7f0000000340)}) 322.144125ms ago: executing program 6 (id=3816): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="59f1e4552e75986be30344c577df27f4b4a41646039fbf9beda7bf5a572121f6414ca8bd405e18b655af5c5e013e0c7388225a727cc1eb4eb7c7cd47b2c3d353dec75184436dfd9933bd374d8dfd322d0a5b705731fba628d06c11ab04e155f747b67108a4e376b5711565b653281ada57116b0dbf782e6f343532ef258b42d65df4a96f83b00ce9c66eb1a1ab23f2039927adfe99a3872de7a80ec34aa05b8be26021e61d2e1509d903f77783525e515ae5051541be24502d5123d1a08e06d959aae764ee7bed31361802c486a3f9fbb3824a21fc1b73f95d88167f7659cd90bbb4b7eb78c21e01a9da912544402618285e461cc1c9a1ada2f273d3799feb3d90e373c4f0132554fc3ebe0b8557d521e89f66531514ca337bb1149f86158e7ac94d88fc583a59b7ead0fc249ae26a4ef2ff5bab62209000575441363025553f5012b8eea50bb087202114f8b48ab602fe3fd952bf9886dcc41a9d6c22bfd543f7dec92f32758b99cd239cb69a2fe1c4560426e101666b862aec3e235fd308a6e7560aa2207cc185acabd03b20d4091ff7936120b450b1db200228cd435c434c2626f641cdd8180946982d665352ee755358afa123e7fd9a202e912c528929067ce785f3ba1877968a047f56dfb7cef747d59feeabcff03e73aa3dd3dafb367f32758de4d98dfe15737ba1cb7400ee5bdf4220d6e667c651757d4f8bf536771309d6dfa928e59c9171fa7a710a6d308e757775ce029e0724971c8d7782e29b8ca82de04e883ba042f92e6f7c6b2e627e1242e1f2033ca5bcc81797ba39359e320139cfcf6335086cd646b842e13ab0f90d2fa92ae3cdbeac38deebfc485b2f10f4e29507c858046ae009df144c4ab38ae70e25cccff11078408d7ef4d7bb262310fec1663f1a1dc035864a40616b4690c841c986630ccb784d7af382fef327e7e64817a48db2eae499584fb6cb758a4da7967d283c7400e87657443148a94a352bc46154849a9d6eaf85e4e5556c648017e7f5456be988abcbbcf4a5e2228d2cebf144229fb8b8b6ad244be8f6ccfecfa6df74278761bae6be823eeb6cd08bd0bc01283d04fb719f546cf4d2de5388d1f90eec21674d35c9e295cb1bff104689395cdb6349efcf3d3d99e0141b7bdd4f0ef24fdd6afc35fdca10ade6d539bf1e32ca2e5ab5223e4e975a3cdbfa604dc7904755919905e3ab5e4a1932e2cd7741dd80f4993d0822bbeaf7ea70541e7d18af5a36aa1b928b801bf5a8652adac57dd76f0b7d0629a9fa493db118d6420a18236ca92487cf1b751477bd7b66b6ab97a280306f921493eb9a6172a70cb4f62526c09bd73d148faefe36c47275a0b8822b71c6b09dc80dce0b130ede61296ea03951a563bbf020c75aeea843b95d134bd7228915c22c6e34579bf71479eb4185bf4d11f9735093d9b9d5f18f443a1925f59d2041ff9f6a017eebe9923e5b46de296ba24c25019591cde699475c075904b97f01a639dee3bfce62ecabd2ce078e5fd84b8733392e42e77a6dbb0f51fb0fc59cd7286b6912a8796cdb22e6c3949f6052a014c17b73b3cce6e531127173569d70f07d76359755a6d8bb239f135becb8524ff638452db9d7786e6c52efaa254590a9bfe6bcd485ae8b7114948d58d8c0b9620eb9ace67211e0f7eb4e75740b51f23c0d59903cf2bbcdba9fb516afb8c64cab133c51c0ccca855eba033cc4eb08bbc7632f427f6fb8de4a11bc292aa090503e96a2ae414d5c8907e599874c7e9ffbb8e57ed9b1564ea52f09afffeddb8da0a9ed228da5bbae4a1ef608a0d327cdd7f19fac5d342c31088bbd05cf87c1bb73c55db60087e058c21d313c899071a38ac027e7c2704516b2cbeeb3c18771ecaec46d90c18aaf7cc207cecd60faf27fa4fbea3fecf0dc67336263870e21a1ef39c35e89254fd02bb75848f3729450a08990a410331ac720c1b9c3859a436d65899158caacff7aea71f3bb34e69d954994b698e608836a52b88d8ae8303fb918956e13bc1bb99f955c72474d53ab8ba2ee131730f7fb7dcc4ebcf14b9c3c0553a783d6123c3b9a3cd5ff9c6c2d588c38bae6e81b5f0dabc3b4f6b2d9805474453f66e3f6bbc29b64604374ec82a602109cce44bf4ca88a8b0ea2dd27a49f70eb481f3fb59a4ec5cd0b2196c05a96905cbd0f3b01b579401d20f12aabffc6f9e869af2fb43b0c3362f67a015dbe51b33281236326c3cf93f466a07f5baa29cac348ee7c17088aca34bff6844cc60c5f9376c4869afef5e14b74d780ba0fe5ba3f919d6e3ad2c5a9b259c3a79da133173f107bc2fdf426cdbc144a96a33951bdbc43d5b5a6a5c4e8aeb90816cbde9ffcec6630ca37ae6ccddcd61dc6893b75fc6d951be9d2144b6ae4bf739ddce3400456f0bed97dcec4330b717f590ae2f30cde4203d592a4abc864b27fce63bff3da754425fa0caa91e173f8f99fb0c81910df88b01e2e4918e424322149a283a69a04effe4da0cb417126d674d802455a67bb72aa88f1a6beba6a82f9f0529caff162285679cff18c0a9387abd6ac70135ddd07d04c8cc18143c57bdbf5676feacfb5afcdde7233abc411ad08372a885ee2047017c51167112b1dfb4c3a06a829c8c57c2e6d55c85ed97063c9a5843aa299ff3c63e61440baa42b696adf218d37b39231314acc6ffff7b23d16c8762562ef8a056e31c385d57f8fda45862034abf4487d6abd7816ebda9a7aa8bcd753508babb0d4c08cc25ee88fe3a5eb26842ef5a0687f5bd5c3f0b29e4723fbacfd852f3e194e47ffcc9fefea63b972cb9f3293956ee71308ad6ccb891d760469a62c5864069cefa60b247c5366b32d864d5d63a495209627b1b36b9db1bc0979e13dbf2f7203ba69596ad6cd991dc22cadd0fc55ce89db7fed238b082674458c8fa10398e6fe69b50b8cc8df9324180305fc4c17c3f0ecab996c44f8bb2eb575bbe4300e1c93c39a34ce0f255522f4bad18b6f7ed2b5d712baf19c39bfd974dea6181511e4bce407a38e2ce591f989001bcbff570f78649b8d80d7c51d9415dfe8871f1c4161e685d9a361ee2c3f7386c7d89570ae6894f59219c9e53059a13149fe6f3d37f982c503e11f9a90fff483e3b2e4016f376fbf81a3a95d666460fa0c3f6e873ed7ba2e9b6da20b62eec19de014c540b9dc4c3c25995c0435fa5dac1d5cefd66b248db8cc951a84913341e308a318bf94d1d49e12d80053712d3d68fb4acbf8c07ff3ab721c982b114f98edb9e693afed4c80892d8d75484cf228a41fb9af3e59a31c802bb5883d88f5d804806a1747bee00a1347edffc1d832d5e01d15dcd4c7e21f35c47e90761904d0381b56e8200d69338edba5f5e5992d2439143846e1295aa77dd0745c1f33b02b108e987a3d675d8bd593ad22b49068a6f91478a807275b05261dd14553a112fc85cab73dceea1fd31a319db40ff6646afce5a9dc0588747afc06bd36c4326a5f495a12c4eb6ca44e4b23dc52836336832e267db22165554caf7925cf13c84685ee31bfd19fb988a42a2d931fe0212a64e6ffcf9fcaaeeb9fd211a529364abb1a915811a46c41289da4a3a730942d4e0b9534944ec993555d96fcfb68e4f85c53c297f1ea34781b55b69b25bbdf4f0cfc9572e924adfd354b4c291d77d802bfbdc7d7b24f1d266cabc9ecf63ea5b48d5e7f30d8ce1ee4ad861537c441667405b8223e81ba71f55e09d0e92f1c4233227eb276db865b23c8d28df9b2738f025b59d10a118e156b04da94a15b7d8393783dbbb29131603bd11397625c8cb5d8a86cabf660906bf714079f9261c901815688b76afbc65962aeba08e940c20931ea1e3b875427afbb608634eda3f7f69da64906616f24a8a750abf2da50c1e47cec369ffa25d4c199caf1da2f51ebeca7de266e7550dc12019f0e7dcd8f814c2095b12cbf94404e3343e032ebdb8b598febec6390c84fdb65c3eda086c341c09321d1ee471896be010214de39a658cf48585660010578290b3349f0233e301dce10a9dcaa372ade8a4a7170e68522add35f6cdb23c688ba42b425775f077bd0d9f6706722499763efb84c98ee3717b293b26eb46d097a7af1e8097cec825a2d92cb1038980a8a73a7a351001a6efabf812b00788bb950e8b88784054a299906786b7dbd25c9d8ef4146e45b84611d65e7ad898ac1d234574d174acb1d23d8e206518fa40e521bd3c3953c95aedf265c3755243374ce36500a62dd57a94ac22aa6c9b6d79edbad8c0633263f9ffc04524d23e64a18a22cfc1d9ff00eab75a48cffa364f025b31fc632d4ba3f1a829e78b08a9297d59b9ac9c2ae3fe7ef21a0bdc4ee34477654b4bb80b30e117dd846a4f71750f76cf93afb134eb28e0409b92016ce47871fd2a531b2b05d7684421f524833f7a9ac4a02d8c92a1c83150fbb6c68edf0c4ecc833c9e2e058c91f8f9ba81ee48ba5fb71132bb84c4e4993561b0f0ee77405a5573df396469fa5a1a761a9398e618221bdb888a9f2f07a1e9247fc7e3ff2d72bdad77654645171fc89cf4e93d6eaae95f4e7bd9dc75c1b1fc5c7926aa0d0c70b7b442ab657e734fb39660b058403057f94ae3e9b96233647216e29b891272e4403e3a155e4f77fb227cd56a3e3856969cf3ce85d1aca889c2cb1ddfab9cfdcaba80e2411243e8370757725e2875bceebec0d8174ecdda380dd8bcf63cfc619ebfd4b562949e32c8ae7173d630df595b79afc5b0c2ba6e9613ebdc3912db74a1c41bbd4c50428e1dfeff661fe3c3cbcd8fbe4a6d1c02d2b06068e3fe7fa5fb63eed98361baa5c075ea1694a575551818d3ca4988dd080df8c604f2fcaf0d3d3bd922f142ecd2b88efec2563686447750a1e814926e037c2e4d2c530bae36a0cba4b9b42d21b63d6ff403f1a5bea1a169eb494192a7adcb0787759a944043d0df72d57d775e9604a5236775b44d9553dd186f63512bfd3d4b65667f8d715bc9c100a0855e2ed963da442e0ef54b809b2e794eb9b29daea42a84c2d45c220a1ab3242bf7e2f41754feaba92998b834391aee0005c3b5bf05ca648577d77712c6a2107c0d017b1828b82a63ac32587023ae8214e55b907a08c774d12be071ae593716426038f326b45e565900ae67778cfed493dd873b613d457837bf505622d6270f7c2177b8b0048ada47e3fc97a913552d9b65be45a914c29fe5e2e398c9dc7d541f8244c9ce1fdb8d20547471ae840cdf88e4362e05b3091a80c3b32afec6747b05033f98456bb0503240d63b18d1756bd24656def9f79e6bbaca8084caf07dfd17d77f98343fb3f141f788ed0a9397f0a591023c332f4a16e468643b8dffb950f798d7cb165757b18ffa1863898de59c892b148d268b4d0ec3e5f2e4790358cbe0a40007a4be6cb789ac11badcf369f1aff5c458b5c9514b24cfc395b4b4f0df30ab6b3228feb960d545d027a76abfecf455b673be7caadf0d0f2544cb5473ecbc3a339b08652b444a3b5a28d834e63ae4d831d5abb077297428bc3b6542477fb6d4ffdb1398349cea95e7d6131184e7d793603582e81253974e10f8f947d339d2fdfa4c8871b33403cc23b2e225462d29d0450f285433c75959774fe65058188cc54488bc23a20880a0b786e6cc4622c5621f427af5dc294420c07c268cb04eef4400fcaf6fd1a500504fe59cd3c44836a0b477a62d05c8f43e96962a367cbae1f88dd4f4c22e0c7d2afea8a2de91917599f6db37449474048ba84f144532af50b65cdaba868f50f079a4a495d2ee921d835badc2ac45e2521dfc559bbc664f6f27446a6d5afcc8c0d90d68f991dd503291d7687f64641fd052c73be1786b507252749fd788c0c8edf25ab5efe9ddb2a67ec7e24f22f9fe28966d64338b691222c7cc493a9a5c10430ce0f074703047757a9abed0ee0cca14c20cfa9cb521f0e4e91e886e4b1285ffc996912ca7c9f81f2e8e64454fe6846ff44dd21c294b888d52c37bc386ba8cd7f7c0fedcd524ebf603f0a5b5f19be9c7e0f6da5d0ddbc2543d1adf46f5d0140d40c8798f8baa4ba49d99aa0171ffc797e3f919b21a37d3ca8b7a729781aa262d68a0451a2705f59f18268387fdecaed03045fd6f1759a694a5224c46f7a4c6c4eab6b11089b114e5a78546c258f23a2b80fe7f9503d006799d2b8fed769d87e9dafaf6f923ad1be071538789b771d13125049b58a2f2c4f91a5cedbfd725e419e8b640b9d704f48b96efab1b249784bed0e6c3c938b5ce66b6766ca0bbea73aa3a514a57ad7d1907f72072128be570e016a2a5b5754f60e2b0bcc3bd9a4ed21fe4e9b4655ca22656ab6cccf5091a1f85251e51f59094762252c996d9609430cfba1d160702643060cf386f3c3ab02eb5943326312444ebc0e5df143dfa8e868fafb719fbe1f5b355c472adc7694967522e39c1b162b57d49aeda122bc4a60393bba6db3f083751a41f9aa2d6cb59038f94b896a5623f82bad390d2b729f66d5f87b72cc9b54a2f08b3e7ad321310e8f79556ed4dd0c8a058e6a434b6a3fdf28a6b669b53694c16a72e14c1bce34f81c67071152d75ee8f146e465849a7b3eefc2fddb779fa34685effe59432444b3a6fc237da95fc7655aad861aa319a75880e53858ca6a7dad341b2643918e69e3c81969fecf6cdecec304c519ddd0f54b659ed7f9c3782c58202ba393c3811aa1f34d710db2cd0bd1478db3b3445c5d20811dfeb0e4bc3434ae4fa3518c9c36ebcc73d2e40a1701496f82d186309885af32b9694a7a6616bba665b94bff24ab493488c9a53cf1de2eaac644cd0f8d9ef4930f8bf56797b5ac4abc8132f62125905f7e18db3048a90c4a4779b5e29815830fb4093956bda4e2596bb8956c45313ce4e4662143a95779e5c23933e9312372e29c00ee668e82c7d4de290a5a6a66b85e6738528a58b4d169221a0ac5367196cea76c58b4c236b7da73ae1ce463656941f322d4cdec390d91d813c2c9bd70b10151673585457016c0d302f23f323c4a118fcc32a8076be44606d3241bfa66e78178c8d991093d9dd5d93d3eb455ed085eb5e88d83f3a47ce9c5fa7f9035df5c407eb27daa231c538ab58765668ed5a80e8f8a3a4470181b9f15b56d5c4a43708e7287775ee1e991c8e28af2afefef93b19ce3c4a1cf5d25e9b232f424a312cd4883230ffb071343986092141ea12e9647e5f5ab4e70de17d17756eec8ff64328c0050794c568baf183dce6c798e9b01dc53e76c4b9a0b61f1b65cfb74152d9936e05505df63048cd62cec15a97ec79995c5381b0491e65661c2804cc7a5cba0f418d5ec420ecdcf1363cc48777ac6a9901a30d6aed7bb62651480da8f84c93a61bd66ee6f218f2999d052e7e3fbcb002b57bf3c1292cf75a52a164d5c7f1265f1c7f881683dc8d6572853eef350f3834f888a1ab0eff22ee3b93ec2d82f93ddcb5b915f2c273a296be81f3ea3d5e9855863fb5cdc7289770111d02a7e0ee6558e46e754a5c11e4d36c55946fbc62d0c89f87156e33db0ac968dfb67c3a43a55328996a73cce287d518d45f5753f45051bba90d6dd06d95bd14c13d7707bc1afb44595da6783a48d6675c8e28affea30a55ee55a904d9ffb31e9c4fe04fe3dcdbb459d62d36156b2c6aa015b20205f6222008692f6be91ae531afafba348725ba820bb9fb2b93d3013e3f4766dec362a1e0cf40534eb1a18168c18afe08dfdd65e9953869353ba14cd1daaed1fc0c0ae1fc8deaa98c79b74ebd2043b18076dae9c2b4625ca9459a354ce3571b8c33870cc291983da1c0f32f87133192564e6c22abce03fdde7a7cca192d623253e99d5d1ee2f5e4c6535cb027eaae8fb1486ebd7c09881a14c88494a03030f5dba58f7e45a78905b10a5645409ea754162aeae8551d1026021da8685d4cbafbcb0ad980a1a16199be14b11434b0cd62a559b8584cd373bf9f959641059b17a654523cf3f3e7fd94a809e44a21ce2242cce6f79a32dd5443b79df68ddbbdc73eef492ef6a9f093f3131874064f89f26ff32eda7e6451081990a022a0fe52f189cd1deba409dcc090f91d10fa769d1bd75d11ec22b6e85405cbf9b3256e4f8913d7b8eda2945069e219fb4abca2a191e024d5af78e75cdbe0d9d5471a1d8e8aeb9e0a00274d4474ab6b0ebbb66d41bfc1683642c88a1155c91a7eb2295c4b9aa93eb0e77dc5a928e1698490de1226c65a7ef79fa9237dc9f7fdb8fcf9b54658ee3c714b14297fcaa1371c22e746151608f6f1f49bfdddce0ce24e6fc8da8f8dec534e5fe36106c81f25250be3fc496a4df508e79f49c7a4341d50bb6f96289afab14dbf4e8802a14ae82705a75e18330884c9bb1152792249a68ced40afc63deeb59daf9711484b982ec2675f5d9239f182849c4780046460e59aed8cdaaee156544370962771ced877365d37723bd9f935e8192ffd677348db41e3884704b5cbc6002c32111c9168dfcbbcc1c1ae3fd907b494a1fc7a8da0077517b55cc86393f61b07cf71408c47c9f4ca78c9cd48bf62c3b48232f74fa04f4e1fe9e5a4b88e94cae83397ca74948acc002afad739a3891c16c102fe026e2d1ac172a8b0f8c26689d99c371e275671b4f7ba1a08f7e955175b0dd88bdc63f6c1416fdaad20924c7dfec72d961b7fdde56de6ec0c11d43abf60fba174f4a689a1ff15016e7bbe378255f6724fac6a877a00d34a44b85c332ffb3b48101cb6137ccbb5e79f0e0ebe144800c8eb8ee3540cd23def571a4419908604a4217e4da5c72ac49c188e050c6c154df8f1ae2275a6bf123da80196a01cabbd699b215e6e1d7762c299d22e5b72dc1d17fafc2b42bf8c1546694772a2bd9a5f1f75504906c649988f88dd1f1236ab3e92907da0b87b7b674f5f3856c2d0996c20795a2cf7eca5b8dbbb4715dd4e67ce6ef38848bd50389686f17c059070fd9f1bfbd0409e3df16e7a73fb115c66cebb217cd01c5967c774143aa11d9815f2b0f9030f012bb8df1548a4e495e3553ea8524d374772a287beb18a7e88c88f4678e8835f35ee901eba3276b55095122d36a4da666e3b2a70114bc7c8faa5c73b89744c47aa138463c619a322e4dd8e4414ab12b143d2465401cafd97f500b2b035ee96f87131b3c5acbd7d336d926973e70b7c409372a1bb270e0666831de3fb5f059d25cb733106554ad892b2d46f5b33b00ae6198573c4c57b059266f806943e864a34a2b830003bdb7447fd105244bb975b0d7f1b6e25a72ac98a6fa3be7e3b430701633b95f8560620a58caa3366b0ddef41d153452417e4a5b48cfde67e6525d23c538a90d87f9b3cbd4205ccb30ebbbd54a00c4b0fb30cba4d02c5f108cb25af1cd791711d244c87de9738afd56401755ad8f5e62198d28164475997d7719f91ed7685829c6d536a090353b0b2de436d27e9f1fecb09917c1a3e7cbbe33024a74883790c9d18c2349a3f748f6362a79b92b95f1b3e8ddf118c87fc389c1ca08786b81513b62ebefb9fe472ff79eddbfa06d6569faaa1b8df516e2d0365256bf012da3571c6bc8589c49e0573da6d9ea1f7ad35840450a9f334d5d2cf9aa343dcc0f9864129bc548914507b30075d1a153d98af8a6def82e5c8619d9656f8ed0598b3463632c1cfa8ce86cbb90c772cf1298709fab835fe07b755a955f0d05c0f4dbffecaa7f6b1b6d40fffda03965021fd8f1316b62ee8e2bf6fffa01bc2740c066b7655d39f4be9d96f39713fab5ba34fc5431cd86c7384ee9177c20bf5ed5b9242b5abaefd4429a73195c166366527daaad6ce29136edf7fa974415fdeca13adb617e35d357d9c8d76953b6704bd04c391eb3070b1536342224577305c75b69cbe622e308722b3b76fdd3ad0ee69e7cef96a9cd267a92d846863b97862613b2ff5667559ed286e2fe6805a3a09ffc25e4df4b58302844e747a65310d4eb9d64c1b31995a2df3dce8026426e445b60520933fea52f4a9fc8e15033b75e5f412866f4c75371b6cb6436acb118d62752da91b64f15d40c8263bdc6ab718020442bc9cb8005ff30e90ca8bb4f489b0eb4218d323b39022fc542dcc16841899d094d4a5bf134281a330efdfb2445bb31d818b11d9abfd0e58c6497d2db7ac72a26d068b6b4b62de8d291188d4de82d9e53f3cf597e9c383a308a6a52814269c18a18b654bbf4db4502c11856637400b8c2ec3aa0127a659efcaaf5377adf69cb3d9ec65130864cd49320a8ac21aeb31c1c08f92a483c70318870b0107b4ac6070575e548bf70a25d1b220d8192697bbcf891521e4217efb59429c9ca2638a6eb13845d74a91ce45471e8df8f9d8a3a4ea4c8fab267017294f8054e43af04394dd3cbd35b6e60911f049d0f1048d1941effae8ed0ef726efeabe24607e3036e95297f7ee8d3bade2ca8cc431504524b6b40bfff220cc60f9f64376ad5b5fa7cd8dbc3baf145d6ff4ac00a4a8fc2de132af0e2d84302d02c5677b927d76094d38c8b644c1480c6dbcb7274d15362a3ec973cbe40086137160e6447ebaeec5aeeee932ef2bb03fd0754a7708968f2bba76ce16209e7bf1de26971f8c112581f9c417828a4a0fe4b6f243b939e8c4a7595230039f3f81fb64d84227c3725cde10c89d6413354e53811b2cbfc8a0d27dfb11884af23522a51a68f5415ba529690561df7d3f3d053166fc97e6c931d80968477384da3107cb5321b88940c3602a25195b870af1d956f749ecf6f0321f0bdead7cac3627d2895db23f74a244ba8cef7a7d1ff04f5258d45f5e1aa4a4baa83a36abb0e5fc94104e32314ef739725d83de8d0027218b7aea54c6de45dac43f955dd2ae4f7b89774219f12a25a7d47213d545357d7a0977486f8bbad66d8ef36bc26671c1a9c2a54d35e2e303b7cc4e3c431c2068ac10e6168ff1a0c023bf68868a20f20612ef5062ccc978332f2a97b58b0b92cbefa1ce73815776ef3e658145074592a463e5fce30fb89d3657906129fbbf369f0a7af4d9f1f153b0a840dfb80607da59ab2f01e72413d364f0c4f90a13b313b03df460696a8506c6c1dc6964918093274054bb9b46b7373a30efdea62c115fe9fd396c989c53c31402ee4b6bf6d9db19bf75906a0fd0e807f7e6cb7c5ef4daf0b21edcbf2f64605ccb7b5238bef39231d470d1542da1eab747084516fb6ef188308e62658540bf37e10215f26e2b1cab4d91a2a429e51bc270cb07c4628a8fe4066192893253d22b3a24edb3f3d02e227c613067231da02b449dc5ecce6a6e605ee5708817b2b72453fcf0f4e04f0c22996871d01cc3684e2b73573604366ca12a604f450edd6e113f4d1bda649939270c0ca493eafce9f46547b2ca1dcd8a63ec6053b99a2705a26c71df3a9dc7a347152dfc55b036701e9f7dffbe9138e6f619daff7721ab2c79e41c7f7fc829e3a22c2fc286f08a0117fc53d63d7c241aed27350badef0ff11ffee83920d62fb09f6be8ae44eab4273560e0ff14096afd10580306ab96cf9998da75e1dd04a9f70023673935a470c015762480b4182c32cf4715d7cdec146b1c8f50709c8a704922900bd1941e1e8172981b373f5de5260e84a498ec8110d55de18c99a5310ec0a7c69fcf54c8b70", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0xb0, 0x0, 0x0, [{{0x1, 0x0, 0x0, 0x0, 0x0, 0x73d4, {0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x9}}, {0x0, 0x0, 0x4, 0x0, '..^\''}}]}, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/192, 0xc0) 252.771046ms ago: executing program 8 (id=3817): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 188.648587ms ago: executing program 9 (id=3818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x301, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}}, 0x0) 188.113597ms ago: executing program 3 (id=3819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c0000f5000000000000000056fffc00000064"], 0x78) 378.81µs ago: executing program 3 (id=3820): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f0000000300)="8156d4", 0xfffffefc) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x8012, r0, 0x0) close(r0) 118.299µs ago: executing program 7 (id=3821): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 9 (id=3822): getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4903) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): 7F:FFFF.001A: unknown main item tag 0x0 [ 858.387932][ T26] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 858.407576][ T26] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 858.428097][ T26] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 858.450595][ T26] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 858.486486][ T26] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 858.505718][ T26] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 858.626622][ T14] usb 3-1: USB disconnect, device number 44 [ 859.511905][ T4370] hub 7-1:4.0: hub_ext_port_status failed (err = -71) [ 859.512853][ T7] usb 7-1: USB disconnect, device number 43 [ 863.884874][ T14] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 864.100856][ T14] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 864.119348][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 864.158244][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 864.213895][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 864.228169][ T14] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 864.238260][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.249473][ T14] usb 4-1: config 0 descriptor?? [ 864.255445][T12105] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 864.678737][ T14] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 864.686486][ T14] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 864.698487][ T14] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 864.706354][ T14] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 864.713913][ T14] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 864.723445][ T14] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 864.731584][ T14] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 864.744436][ T14] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 864.985104][ T26] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 865.194878][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 865.215121][ T26] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.227223][ T26] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.249286][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 865.277767][ T26] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 865.295774][ T26] usb 5-1: Product: syz [ 865.300546][ T26] usb 5-1: Manufacturer: syz [ 865.342836][ T6210] usb 4-1: USB disconnect, device number 30 [ 865.423677][ T26] hub 5-1:4.0: USB hub found [ 865.654316][ T26] hub 5-1:4.0: 2 ports detected [ 867.329083][ T4294] usb 5-1: USB disconnect, device number 43 [ 867.688711][ T4370] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 868.114100][T12146] mkiss: ax0: crc mode is auto. [ 870.095480][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.104902][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.434776][ T4370] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 871.658010][ T4370] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 871.674134][ T4370] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 871.695207][ T4370] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 871.726831][ T4370] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 871.748538][ T4370] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 871.757917][ T4370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.767761][ T4370] usb 7-1: config 0 descriptor?? [ 871.773650][T12165] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 872.105285][ T3638] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 872.281408][ T4370] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 872.289286][ T4370] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 872.297786][ T4370] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 872.315913][ T4370] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 872.356604][ T4370] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 872.369963][ T3638] usb 5-1: Using ep0 maxpacket: 32 [ 872.393550][ T3638] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.426659][ T3638] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.450620][ T3638] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 872.460746][ T3638] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 872.469250][ T3638] usb 5-1: Product: syz [ 872.474353][ T3638] usb 5-1: Manufacturer: syz [ 872.518981][ T3638] hub 5-1:4.0: USB hub found [ 872.623468][ T4294] usb 7-1: USB disconnect, device number 44 [ 872.714332][ T3638] hub 5-1:4.0: 2 ports detected [ 873.028724][T12195] mkiss: ax0: crc mode is auto. [ 874.003269][ T3638] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 874.004262][ T4294] usb 5-1: USB disconnect, device number 44 [ 876.985939][T12235] mkiss: ax0: crc mode is auto. [ 877.204933][ T4294] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 877.396599][ T4294] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 877.411635][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 877.452187][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 877.478825][T12238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 877.490994][T12238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 877.501430][T12238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 877.510819][T12238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 877.518844][T12238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 877.526616][T12238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 877.570530][ T4294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 877.616286][ T4294] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 877.641145][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.704404][ T4294] usb 4-1: config 0 descriptor?? [ 877.725754][T12234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 877.971367][T12237] chnl_net:caif_netlink_parms(): no params data found [ 878.043535][T12237] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.050856][T12237] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.061419][T12237] device bridge_slave_0 entered promiscuous mode [ 878.070830][T12237] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.078251][T12237] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.086788][T12237] device bridge_slave_1 entered promiscuous mode [ 878.117309][T12237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.129818][T12237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.168506][T12237] team0: Port device team_slave_0 added [ 878.171009][ T4294] plantronics 0003:047F:FFFF.001D: unknown main item tag 0xd [ 878.178674][T12237] team0: Port device team_slave_1 added [ 878.189358][ T4294] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 878.197857][ T4294] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 878.210368][ T4294] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 878.221928][ T4294] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 878.264255][T12237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.272978][T12237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.299168][T12237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.314249][T12237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.321401][T12237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.347586][T12237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.406107][T12237] device hsr_slave_0 entered promiscuous mode [ 878.413207][T12237] device hsr_slave_1 entered promiscuous mode [ 878.423159][T12237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 878.439906][T12237] Cannot create hsr debugfs directory [ 878.585246][ T4294] usb 4-1: USB disconnect, device number 31 [ 878.796484][T12237] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 878.806960][T12237] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 878.816712][T12237] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 878.828603][T12237] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 878.859999][T12237] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.867186][T12237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.874552][T12237] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.881807][T12237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.945771][T12237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.965692][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.982059][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.995408][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 879.039385][ T6466] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.072386][T12237] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.081160][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 879.091312][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 879.111211][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 879.123529][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 879.132900][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.140084][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.166826][ T6466] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.181741][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 879.197142][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 879.208595][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.215767][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.252088][ T6466] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.266406][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 879.275478][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 879.284612][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 879.297672][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 879.322323][ T6466] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.336061][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 879.350882][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 879.360903][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 879.378534][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 879.387201][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 879.410102][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 879.423136][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 879.435757][T12237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 879.565308][T12238] Bluetooth: hci1: command 0x0409 tx timeout [ 879.807969][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 879.822467][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 879.836218][T12237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.216705][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 880.232922][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 880.315894][ T6924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 880.336328][ T6924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 880.702063][T12237] device veth0_vlan entered promiscuous mode [ 880.725529][ T6924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 880.733792][ T6924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 880.791559][T12237] device veth1_vlan entered promiscuous mode [ 881.029266][T12237] device veth0_macvtap entered promiscuous mode [ 881.054201][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 881.067349][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 881.075684][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 881.084250][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 881.093263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 881.128684][ T6466] device hsr_slave_0 left promiscuous mode [ 881.135264][ T6466] device hsr_slave_1 left promiscuous mode [ 881.142954][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.151348][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.159467][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.167375][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.175703][ T6466] device bridge_slave_1 left promiscuous mode [ 881.183399][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.193277][ T6466] device bridge_slave_0 left promiscuous mode [ 881.199594][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.225838][ T6466] device veth0_macvtap left promiscuous mode [ 881.232116][ T6466] device veth1_vlan left promiscuous mode [ 881.238721][ T6466] device veth0_vlan left promiscuous mode [ 881.647063][T12238] Bluetooth: hci1: command 0x041b tx timeout [ 881.688879][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 881.733143][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 881.775837][ T6466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.822018][ T6466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.268122][ T6466] bond0 (unregistering): Released all slaves [ 882.339604][T12237] device veth1_macvtap entered promiscuous mode [ 882.374991][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.393350][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.403298][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.419171][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.429729][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.440355][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.450359][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.460870][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.472488][T12237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.482866][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.494388][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.504545][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.515594][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.525856][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.536718][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.546939][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.557746][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.571645][T12237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.581238][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 882.596932][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 882.613288][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 882.624158][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 882.645542][T12237] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.654299][T12237] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.673074][T12237] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.682221][T12237] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.850200][ T4406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.875510][ T4406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.912928][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 882.963223][ T4406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.984344][ T4406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.003208][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 883.271933][T12304] mkiss: ax0: crc mode is auto. [ 883.424971][ T26] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 883.724833][T12238] Bluetooth: hci1: command 0x040f tx timeout [ 884.267498][ T26] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 884.371631][T12314] overlayfs: missing 'lowerdir' [ 884.545867][T12314] loop3: detected capacity change from 0 to 256 [ 884.566372][T12314] FAT-fs (loop3): bogus sectors per cluster 30 [ 884.572750][T12314] FAT-fs (loop3): Can't find a valid FAT filesystem [ 885.275333][ T7] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 885.804945][T12238] Bluetooth: hci1: command 0x0419 tx timeout [ 886.095871][ T7] usb 4-1: device descriptor read/64, error -71 [ 886.370135][ T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 886.454938][ T7] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 886.655032][ T7] usb 4-1: device descriptor read/64, error -71 [ 886.795436][ T7] usb usb4-port1: attempt power cycle [ 887.215325][ T7] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 887.414384][ T7] usb 4-1: device descriptor read/8, error -71 [ 887.758839][ T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 887.770534][ T26] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 887.783821][ T26] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.793331][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.802897][ T26] usb 7-1: config 0 descriptor?? [ 887.815944][ T26] usb 7-1: can't set config #0, error -71 [ 887.824930][ T26] usb 7-1: USB disconnect, device number 45 [ 887.895798][ T7] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 888.085541][ T7] usb 4-1: device descriptor read/8, error -71 [ 888.286045][ T7] usb usb4-port1: unable to enumerate USB device [ 888.870030][ T6210] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 889.074739][ T6210] usb 3-1: Using ep0 maxpacket: 32 [ 889.081888][ T6210] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.206080][ T6210] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.921221][ T6210] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 890.025103][ T6210] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 890.033654][ T6210] usb 3-1: Product: syz [ 890.042199][ T6210] usb 3-1: Manufacturer: syz [ 890.084240][ T6210] hub 3-1:4.0: USB hub found [ 890.290307][ T6210] hub 3-1:4.0: 2 ports detected [ 890.502021][T12362] mkiss: ax0: crc mode is auto. [ 891.951834][ T6210] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 891.952201][ T4417] usb 3-1: USB disconnect, device number 45 [ 894.563068][ T4294] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 894.866556][ T4294] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 894.894836][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 894.928532][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 894.982755][ T4294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 895.039938][ T4294] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 895.087109][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.154950][ T4294] usb 4-1: config 0 descriptor?? [ 895.185009][T12374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 895.518036][T12397] overlayfs: missing 'lowerdir' [ 895.559736][T12397] loop6: detected capacity change from 0 to 256 [ 895.572527][T12397] FAT-fs (loop6): bogus sectors per cluster 30 [ 895.579904][T12397] FAT-fs (loop6): Can't find a valid FAT filesystem [ 895.607670][ T4294] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 895.692618][ T4294] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 895.921222][ T4294] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 897.367673][ T4294] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 897.888585][ T4294] usb 4-1: USB disconnect, device number 36 [ 898.195509][ T4417] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 898.414904][ T4417] usb 7-1: device descriptor read/64, error -71 [ 898.793610][ T4417] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 900.003587][T12424] mkiss: ax0: crc mode is auto. [ 901.084835][ T4296] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 901.994894][ T4296] usb 3-1: Using ep0 maxpacket: 32 [ 902.001837][ T4296] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.044907][ T4296] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.158810][ T4296] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 902.199179][ T4296] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 902.240388][ T4296] usb 3-1: Product: syz [ 902.251226][ T4296] usb 3-1: Manufacturer: syz [ 902.281978][ T4296] hub 3-1:4.0: USB hub found [ 902.484948][ T3638] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 902.489378][ T4296] hub 3-1:4.0: 2 ports detected [ 902.676550][ T3638] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 902.689064][ T3638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 902.700949][ T3638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 902.712513][ T3638] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 902.725995][ T3638] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 902.736966][ T3638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.748161][ T3638] usb 4-1: config 0 descriptor?? [ 902.753792][T12442] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 903.170830][ T3638] plantronics 0003:047F:FFFF.001F: unknown main item tag 0xd [ 903.180628][ T3638] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 903.193847][ T3638] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 903.212119][ T3638] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 903.439717][ T4296] usb 4-1: USB disconnect, device number 37 [ 903.718458][ T14] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 903.721740][ T6210] usb 3-1: USB disconnect, device number 46 [ 906.728373][T12515] mkiss: ax0: crc mode is auto. [ 907.071083][ T6210] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 909.250793][ T6210] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 909.374139][ T6210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 909.628652][ T6210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 909.814929][ T6210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 909.899287][ T6210] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.969213][ T6210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.023142][ T6210] usb 3-1: config 0 descriptor?? [ 910.268441][ T6210] usb 3-1: can't set config #0, error -71 [ 910.489164][ T6210] usb 3-1: USB disconnect, device number 47 [ 911.174802][ T3638] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 912.132996][ T3638] usb 5-1: Using ep0 maxpacket: 32 [ 912.141306][ T3638] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.153086][ T3638] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.166784][ T3638] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 912.177007][ T3638] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 912.185776][ T3638] usb 5-1: Product: syz [ 912.189991][ T3638] usb 5-1: Manufacturer: syz [ 912.294424][T12569] mkiss: ax0: crc mode is auto. [ 912.307927][ T3638] hub 5-1:4.0: USB hub found [ 912.539563][ T3638] hub 5-1:4.0: 2 ports detected [ 914.134777][ T4370] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 914.144556][ T26] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 914.151256][ T4296] usb 5-1: USB disconnect, device number 45 [ 914.346543][ T4370] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 914.375825][ T4370] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 914.421965][ T4370] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 914.454053][ T4370] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 914.494769][ T4370] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 914.503877][ T4370] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.548842][ T4370] usb 8-1: config 0 descriptor?? [ 914.554496][T12597] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 915.585732][ T4370] plantronics 0003:047F:FFFF.0020: unknown main item tag 0xd [ 915.597257][ T4370] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 915.607561][ T4370] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 915.820043][ T4417] usb 8-1: USB disconnect, device number 2 [ 917.641670][T12636] mkiss: ax0: crc mode is auto. [ 919.176063][ T26] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 921.297220][ T26] usb 8-1: Using ep0 maxpacket: 32 [ 921.307651][ T26] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.390216][ T26] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.435090][ T26] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 921.469463][ T26] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 921.493741][ T26] usb 8-1: Product: syz [ 921.520415][ T26] usb 8-1: Manufacturer: syz [ 921.561688][ T26] hub 8-1:4.0: USB hub found [ 921.800463][ T26] hub 8-1:4.0: config failed, can't read hub descriptor (err -22) [ 921.918723][ T26] usb 8-1: USB disconnect, device number 3 [ 923.544819][ T4370] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 923.728315][T12703] mkiss: ax0: crc mode is auto. [ 925.111238][ T4370] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 925.130252][ T4370] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 925.178761][ T4370] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 925.415315][ T4370] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 925.795295][ T4370] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 925.804406][ T4370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.025562][ T4370] usb 7-1: config 0 descriptor?? [ 926.039724][ T4370] usb 7-1: can't set config #0, error -71 [ 926.074356][ T4370] usb 7-1: USB disconnect, device number 48 [ 926.422691][ T4417] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 927.144779][ T4417] usb 3-1: Using ep0 maxpacket: 32 [ 927.157427][ T4417] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.168389][ T4417] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.206831][ T4417] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 927.231669][ T4417] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 927.365958][ T4417] usb 3-1: Product: syz [ 927.375363][ T4417] usb 3-1: Manufacturer: syz [ 927.583614][ T4417] hub 3-1:4.0: USB hub found [ 927.884238][ T4417] hub 3-1:4.0: 2 ports detected [ 929.853555][ T26] usb 3-1: USB disconnect, device number 48 [ 929.936696][ T4417] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 930.469372][ T6210] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 930.801570][ T6210] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 931.331741][T12782] mkiss: ax0: crc mode is auto. [ 931.397769][ T6210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 931.487327][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.493876][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.501345][ T6210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 931.627760][ T6210] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 931.773971][ T6210] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 931.889959][ T6210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.048622][ T6210] usb 5-1: config 0 descriptor?? [ 932.109469][T12775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 933.109954][ T6210] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 933.157978][ T6210] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 933.241666][ T6210] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 933.317477][ T6210] usb 5-1: USB disconnect, device number 46 [ 937.249492][T12844] mkiss: ax0: crc mode is auto. [ 937.948587][T12851] device syzkaller1 entered promiscuous mode [ 938.084724][ T14] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 938.556628][ T14] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 938.583197][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 938.624795][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 938.680467][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 938.737057][ T14] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 938.772639][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.818041][ T14] usb 5-1: config 0 descriptor?? [ 938.823659][T12858] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 939.463222][ T14] plantronics 0003:047F:FFFF.0022: unknown main item tag 0xd [ 941.009743][ T14] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 941.021610][ T14] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 941.036619][ T14] usb 5-1: USB disconnect, device number 47 [ 941.213210][T12900] device wlan0 entered promiscuous mode [ 941.289736][T12900] device wlan0 left promiscuous mode [ 941.815301][T12905] mkiss: ax0: crc mode is auto. [ 945.054039][ T4295] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 945.287510][T12964] input: syz0 as /devices/virtual/input/input23 [ 945.440572][ T4295] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 945.471420][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 945.823308][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 946.088713][ T4295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 946.151284][ T4295] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 946.352596][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.363557][ T4295] usb 3-1: config 0 descriptor?? [ 946.375011][T12946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 946.890436][ T4295] plantronics 0003:047F:FFFF.0023: unknown main item tag 0xd [ 946.928446][ T4295] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 947.105225][ T4295] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 948.073972][ T4412] usb 3-1: USB disconnect, device number 49 [ 950.733545][T13027] mkiss: ax0: crc mode is auto. [ 952.803010][T13048] loop6: detected capacity change from 0 to 524287999 [ 952.984256][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 952.993670][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.030961][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 953.040354][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.150609][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 953.159892][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.168523][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 953.177853][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.186159][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 953.195366][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.204562][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 953.213832][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.362727][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 953.371946][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.417909][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 953.427175][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.435469][T13048] ldm_validate_partition_table(): Disk read failed. [ 953.482772][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 953.492121][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.503898][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 953.513179][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 953.529078][T13048] Dev loop6: unable to read RDB block 0 [ 953.539384][T13048] loop6: unable to read partition table [ 953.570444][T13048] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 953.603710][ T3622] ldm_validate_partition_table(): Disk read failed. [ 953.635781][ T3622] Dev loop6: unable to read RDB block 0 [ 953.804155][ T3622] loop6: unable to read partition table [ 953.824826][ T6210] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 954.517161][ T6210] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 954.528411][ T6210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 954.542150][ T6210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 954.563915][ T6210] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 954.593667][ T6210] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 954.624683][ T6210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.642008][ T6210] usb 5-1: config 0 descriptor?? [ 954.649623][T13057] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 954.946313][ T26] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 955.117538][ T6210] plantronics 0003:047F:FFFF.0024: unknown main item tag 0xd [ 955.152308][ T6210] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 955.164972][ T26] usb 7-1: Using ep0 maxpacket: 8 [ 955.177347][ T26] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 955.231004][ T26] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 955.245509][ T6210] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 956.052886][ T26] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 956.066660][ T6210] usb 5-1: USB disconnect, device number 48 [ 956.072731][ T26] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 956.083960][ T26] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 956.096154][ T26] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.111819][ T26] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 956.122125][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.155454][ T26] usbtmc: probe of 7-1:16.0 failed with error -22 [ 956.374151][ T6210] usb 7-1: USB disconnect, device number 49 [ 956.659102][T13111] mkiss: ax0: crc mode is auto. [ 957.022693][T13123] loop6: detected capacity change from 0 to 524287999 [ 957.626903][T13123] ldm_validate_partition_table(): Disk read failed. [ 957.780659][T13123] Dev loop6: unable to read RDB block 0 [ 957.927023][T13123] loop6: unable to read partition table [ 957.932861][T13123] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 957.989485][ C1] blk_print_req_error: 41 callbacks suppressed [ 957.989506][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 958.004922][ C1] buffer_io_error: 41 callbacks suppressed [ 958.004957][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.019901][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 958.029127][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.085022][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 958.094230][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.141484][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 958.150752][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.185148][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 958.194365][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.215682][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 958.224946][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.259323][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 958.268639][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.362558][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 958.371858][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.384462][ T3622] ldm_validate_partition_table(): Disk read failed. [ 958.426273][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 958.435553][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.487851][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 958.497154][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 958.564149][ T3622] Dev loop6: unable to read RDB block 0 [ 958.628926][ T3622] loop6: unable to read partition table [ 960.169723][ T4370] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 961.035517][ T4370] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 961.057700][ T4370] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 961.075995][ T4370] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 961.114237][ T4370] usb 8-1: config 0 interface 0 has no altsetting 0 [ 961.147319][ T4370] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 961.169677][ T4370] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 961.189534][ T4370] usb 8-1: config 0 interface 0 has no altsetting 0 [ 961.217584][ T4370] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 961.226682][ T4370] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 961.238111][ T4370] usb 8-1: config 0 interface 0 has no altsetting 0 [ 961.266705][ T4370] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 961.295497][ T4370] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 961.323231][T13196] loop6: detected capacity change from 0 to 524287999 [ 961.324902][ T4370] usb 8-1: config 0 interface 0 has no altsetting 0 [ 961.342920][ T4370] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 961.355602][ T4370] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 961.370263][ T4370] usb 8-1: config 0 interface 0 has no altsetting 0 [ 961.380224][ T4370] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 961.390026][ T4370] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 961.415147][ T4370] usb 8-1: config 0 interface 0 has no altsetting 0 [ 961.423542][T13196] ldm_validate_partition_table(): Disk read failed. [ 961.431800][ T4370] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 961.451243][ T4370] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 961.457723][T13196] Dev loop6: unable to read RDB block 0 [ 961.472767][ T4370] usb 8-1: config 0 interface 0 has no altsetting 0 [ 961.488880][ T4370] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 961.506782][T13196] loop6: unable to read partition table [ 961.513914][T13196] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 961.527236][ T4370] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 961.551139][ T4370] usb 8-1: config 0 interface 0 has no altsetting 0 [ 961.552686][ T3622] ldm_validate_partition_table(): Disk read failed. [ 961.570330][ T4370] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 961.580318][ T4370] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 961.590144][ T4370] usb 8-1: Product: syz [ 961.594466][ T4370] usb 8-1: Manufacturer: syz [ 961.595370][ T3622] Dev loop6: unable to read RDB block 0 [ 961.600398][ T4370] usb 8-1: SerialNumber: syz [ 961.611753][ T4370] usb 8-1: config 0 descriptor?? [ 961.632819][ T3622] loop6: unable to read partition table [ 961.642057][ T4370] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 961.930219][ T4370] usb 8-1: USB disconnect, device number 4 [ 961.964971][ T4370] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 962.056041][T13214] tmpfs: Unknown parameter 'usrquota' [ 962.536816][T13222] mkiss: ax0: crc mode is auto. [ 964.256023][T13258] loop6: detected capacity change from 0 to 524287999 [ 964.289652][ C0] blk_print_req_error: 41 callbacks suppressed [ 964.289673][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 964.305177][ C0] buffer_io_error: 41 callbacks suppressed [ 964.305191][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.320655][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 964.329929][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.363136][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 964.372458][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.401953][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 964.411237][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.419712][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 964.428975][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.440086][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 964.449347][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.481688][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 964.490988][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.515297][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 964.524574][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.532716][T13258] ldm_validate_partition_table(): Disk read failed. [ 964.542756][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 964.551988][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.560268][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 964.569462][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.593615][T13258] Dev loop6: unable to read RDB block 0 [ 964.602281][T13258] loop6: unable to read partition table [ 964.621778][T13258] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 964.642133][ T3622] ldm_validate_partition_table(): Disk read failed. [ 964.663963][ T3622] Dev loop6: unable to read RDB block 0 [ 964.670481][ T3622] loop6: unable to read partition table [ 965.756989][T13280] mkiss: ax0: crc mode is auto. [ 965.945212][T13285] program syz.3.2626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 965.984977][ T14] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 966.035377][T13285] kvm [13282]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3 [ 966.081191][T13285] kvm [13282]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3 [ 966.104917][T13285] kvm [13282]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x3 [ 966.126954][T13285] kvm [13282]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 966.176870][ T14] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 966.194824][ T14] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 966.236282][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 966.275091][ T14] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 966.293266][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.315371][ T14] usb 5-1: config 0 descriptor?? [ 966.322093][T13278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 966.347175][ T14] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 966.823377][T13306] loop6: detected capacity change from 0 to 524287999 [ 966.832270][T13306] ldm_validate_partition_table(): Disk read failed. [ 966.855364][T13306] Dev loop6: unable to read RDB block 0 [ 966.876269][T13306] loop6: unable to read partition table [ 966.893014][T13306] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 966.941128][ T3622] ldm_validate_partition_table(): Disk read failed. [ 966.951727][ T3622] Dev loop6: unable to read RDB block 0 [ 966.958929][ T3622] loop6: unable to read partition table [ 968.281619][T13325] mkiss: ax0: crc mode is auto. [ 968.351867][ T4296] usb 5-1: USB disconnect, device number 49 [ 968.913370][T12238] Bluetooth: min 6 > max 0 [ 968.960802][T13350] program syz.4.2647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 969.058445][T13350] kvm [13349]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3 [ 969.100674][T13350] kvm [13349]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3 [ 969.144875][T13350] kvm [13349]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x3 [ 969.219912][T13350] kvm [13349]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 970.321883][T13371] mkiss: ax0: crc mode is auto. [ 971.004820][T12238] Bluetooth: hci5: command 0x2021 tx timeout [ 971.711359][ T4410] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.751551][ T4410] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.012145][T12238] Bluetooth: min 6 > max 0 [ 973.056811][ T4410] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.190065][ T4410] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.876485][T12238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 973.887290][T12238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 973.929878][T12238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 973.949886][T12238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 973.959801][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 973.979889][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 975.084793][ T4251] Bluetooth: hci1: command 0x2021 tx timeout [ 975.838080][T13440] chnl_net:caif_netlink_parms(): no params data found [ 976.045745][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 976.646933][ T4265] Bluetooth: min 6 > max 0 [ 976.734899][T13440] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.775158][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.809563][T13440] device bridge_slave_0 entered promiscuous mode [ 976.814561][T13499] 9pnet_virtio: no channels available for device syz [ 976.913431][ T4410] device hsr_slave_0 left promiscuous mode [ 976.948349][ T4410] device hsr_slave_1 left promiscuous mode [ 976.966524][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.993287][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.019554][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.129708][ T4410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.664309][ T4410] device bridge_slave_1 left promiscuous mode [ 977.875213][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.883913][ T4410] device bridge_slave_0 left promiscuous mode [ 977.930313][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.001574][ T4410] device veth1_macvtap left promiscuous mode [ 978.009163][ T4410] device veth0_macvtap left promiscuous mode [ 978.024789][ T4410] device veth1_vlan left promiscuous mode [ 978.030662][ T4410] device veth0_vlan left promiscuous mode [ 978.141422][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 978.684889][ T4265] Bluetooth: hci4: command 0x2021 tx timeout [ 979.003707][ T4410] team0 (unregistering): Port device team_slave_1 removed [ 979.065747][ T4410] team0 (unregistering): Port device team_slave_0 removed [ 979.146856][ T4410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.218406][ T4410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.693875][ T4410] bond0 (unregistering): Released all slaves [ 979.768061][T13440] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.775320][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.783152][T13440] device bridge_slave_1 entered promiscuous mode [ 979.875354][T13440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.982314][T13440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.141021][T13440] team0: Port device team_slave_0 added [ 980.172257][T13440] team0: Port device team_slave_1 added [ 980.205488][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 980.314876][T13440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.363640][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.465138][T13440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.541213][T13440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.579324][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.743324][T13440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.014897][T13440] device hsr_slave_0 entered promiscuous mode [ 981.033522][T13440] device hsr_slave_1 entered promiscuous mode [ 981.056429][T13440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.085503][T13440] Cannot create hsr debugfs directory [ 981.186163][ T4265] Bluetooth: min 6 > max 0 [ 981.783415][T13440] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 981.843444][T13440] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 982.045726][T13440] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 982.056787][T13440] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 982.296130][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 983.244957][ T4265] Bluetooth: hci0: command 0x2021 tx timeout [ 983.352771][T13440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.368206][T12389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 983.390698][T12389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 983.438995][T13440] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.460869][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 983.470946][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 983.495678][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.502833][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.514325][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 983.540110][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 983.553505][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 983.575906][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.583045][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.597404][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 983.619846][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 983.637068][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 983.657681][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 983.673787][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 983.691073][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 983.715387][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 983.723545][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 983.738476][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 983.747712][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 983.756717][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 983.766476][T13440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 984.011038][T12389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 984.022591][T12389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 984.039536][T13440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.344334][T12389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 984.353840][T12389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 984.379797][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 984.389930][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 984.401696][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 984.414782][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 984.424881][T13440] device veth0_vlan entered promiscuous mode [ 984.448286][T13440] device veth1_vlan entered promiscuous mode [ 984.497133][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 984.507414][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 984.516539][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 984.525627][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 984.538908][T13440] device veth0_macvtap entered promiscuous mode [ 984.560542][T13440] device veth1_macvtap entered promiscuous mode [ 984.585723][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.602289][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.614169][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.630394][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.641074][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.656990][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.672978][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.695774][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.707311][T13440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.724837][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 984.733229][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 984.743395][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 984.752358][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 984.765989][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.780056][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.794248][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.810651][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.820623][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.831221][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.841190][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.852218][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.863696][T13440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.875649][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 984.890770][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 984.905710][T13440] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.914447][T13440] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.930798][T13440] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.941186][T13440] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.049434][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.074220][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.109614][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 985.129355][ T5099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.144204][ T5099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.163821][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 985.419139][T13666] program syz.8.2668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 985.499799][T13666] kvm [13665]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3 [ 985.530497][T13666] kvm [13665]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3 [ 985.541057][T13666] kvm [13665]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x3 [ 985.558347][T13666] kvm [13665]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 987.758622][ T4265] Bluetooth: min 6 > max 0 [ 988.299542][T13731] program syz.2.2736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 988.377588][T13731] kvm [13729]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3 [ 988.438675][T13731] kvm [13729]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3 [ 988.486370][T13731] kvm [13729]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x3 [ 988.543471][T13731] kvm [13729]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 989.804894][ T4265] Bluetooth: hci2: command 0x2021 tx timeout [ 990.735430][ T4265] Bluetooth: min 6 > max 0 [ 990.878648][T13789] input: syz0 as /devices/virtual/input/input26 [ 992.612928][T13838] block device autoloading is deprecated and will be removed. [ 992.927367][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.933711][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.578856][T13915] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 995.762022][T13915] syz.8.2787 (13915) used greatest stack depth: 19488 bytes left [ 995.857200][ T4278] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.927190][ T4251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 995.944112][ T4278] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.954190][T12238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 995.972566][T12238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 995.984970][T12238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 995.992815][T12238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 996.000755][T12238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 996.027302][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 996.037098][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 996.044463][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 996.053988][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 996.062644][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 996.070771][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 996.079040][ T4278] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.316322][ T4278] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.394743][ T14] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 996.607149][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.793291][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.803971][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 996.817656][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 996.827054][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.837427][ T14] usb 3-1: config 0 descriptor?? [ 996.920841][T13923] chnl_net:caif_netlink_parms(): no params data found [ 997.250256][T13923] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.264775][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.303959][T13923] device bridge_slave_0 entered promiscuous mode [ 997.395451][T13923] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.425041][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.457847][T13923] device bridge_slave_1 entered promiscuous mode [ 997.831188][T13923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.019330][T13923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.124951][T12238] Bluetooth: hci3: command 0x0409 tx timeout [ 998.291156][T13923] team0: Port device team_slave_0 added [ 998.320543][T13923] team0: Port device team_slave_1 added [ 998.598498][T13923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.624075][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.742691][T13923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.996771][T13923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.003824][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.029760][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.114032][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 999.123059][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 999.160817][T13923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.170208][ T14] usb 3-1: USB disconnect, device number 50 [ 999.556260][T13923] device hsr_slave_0 entered promiscuous mode [ 999.578963][T13923] device hsr_slave_1 entered promiscuous mode [ 999.605728][T13923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.613401][T13923] Cannot create hsr debugfs directory [ 999.662148][ T4278] device hsr_slave_0 left promiscuous mode [ 999.723343][ T4278] device hsr_slave_1 left promiscuous mode [ 999.735565][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.743068][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.776040][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.783522][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.967341][ T4278] device veth0_macvtap left promiscuous mode [ 999.973513][ T4278] device veth1_vlan left promiscuous mode [ 999.980852][ T4278] device veth0_vlan left promiscuous mode [ 1000.204925][T12238] Bluetooth: hci3: command 0x041b tx timeout [ 1000.838270][ T4278] team0 (unregistering): Port device team_slave_1 removed [ 1000.882015][ T4278] team0 (unregistering): Port device team_slave_0 removed [ 1000.927743][ T4278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.973004][ T4278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.442412][ T4278] bond0 (unregistering): Released all slaves [ 1002.203197][T13923] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1002.221034][T13923] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1002.233026][T13923] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1002.249189][T13923] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1002.290442][T12238] Bluetooth: hci3: command 0x040f tx timeout [ 1002.378414][T13923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.395003][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1002.410324][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1002.428036][T13923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.442953][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1002.460478][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1002.470856][T10516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.478028][T10516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.511887][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1002.522004][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1002.531495][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1002.542628][T10516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.550045][T10516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.566648][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1002.576244][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1002.585567][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1002.596582][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1002.617631][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1002.626471][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1002.638205][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1002.648833][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1002.658467][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1002.667323][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1002.676000][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1002.687057][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1002.903598][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1002.918519][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1002.939261][T13923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.973769][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1002.995935][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1003.025862][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1003.035631][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1003.047419][T13923] device veth0_vlan entered promiscuous mode [ 1003.060484][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1003.069670][T10516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1003.078745][T13923] device veth1_vlan entered promiscuous mode [ 1003.104234][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1003.116444][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1003.135074][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1003.148345][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1003.159647][T13923] device veth0_macvtap entered promiscuous mode [ 1003.196634][T13923] device veth1_macvtap entered promiscuous mode [ 1003.221863][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.237809][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.250753][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.262306][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.272486][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.285154][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.296051][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.325459][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.346288][T13923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1003.366076][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1003.374247][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1003.405484][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1003.425700][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1003.437249][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.450449][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.475537][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.510345][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.524700][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.535485][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.545608][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.557334][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.570254][T13923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.582125][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1003.592332][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1003.606368][T13923] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.616148][T13923] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.626311][T13923] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.635405][T13923] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.762323][T10516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.788356][T10516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.826057][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1003.848855][T10516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.871547][T10516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.892531][T12389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1004.364887][T12238] Bluetooth: hci3: command 0x0419 tx timeout [ 1006.811575][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 1014.157472][T14380] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1014.861549][T14409] 9pnet_virtio: no channels available for device syz [ 1014.971627][T12238] Bluetooth: min 6 > max 0 [ 1017.004831][T12238] Bluetooth: hci3: command 0x2021 tx timeout [ 1017.380013][ T3638] hid-generic 0362:07FF:7FFFFFFF.0025: item fetching failed at offset 0/2 [ 1017.401075][ T3638] hid-generic: probe of 0362:07FF:7FFFFFFF.0025 failed with error -22 [ 1019.893384][ T4265] Bluetooth: hci4: sending frame failed (-49) [ 1019.901151][T12238] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 1020.045788][T14554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1020.052108][T14554] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1020.146614][T14554] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1022.045096][T12238] Bluetooth: hci3: command 0x0c1a tx timeout [ 1023.894728][ T4294] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1024.106567][ T4294] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1024.124839][ T4294] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1024.125254][T12238] Bluetooth: hci3: command 0x0406 tx timeout [ 1024.175624][ T4294] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1024.206030][ T4294] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.430799][ T4294] usb 8-1: usb_control_msg returned -32 [ 1024.436843][ T4294] usbtmc 8-1:16.0: can't read capabilities [ 1024.996334][ T3638] usb 8-1: USB disconnect, device number 5 [ 1025.373384][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059cec800: rx timeout, send abort [ 1025.384472][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059cec800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1025.558441][T14681] overlayfs: failed to clone upperpath [ 1027.074425][T14727] 9pnet_virtio: no channels available for device syz [ 1028.015899][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031c63400: rx timeout, send abort [ 1028.024400][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031c63400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1029.207708][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1029.218561][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1029.230229][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1029.238531][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1029.247425][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1029.272583][ T4251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1029.479274][ T4407] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.569092][T14765] netlink: 'syz.3.3012': attribute type 2 has an invalid length. [ 1029.667821][ T4407] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.748763][ T4407] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.799503][ T4407] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.857096][T14753] chnl_net:caif_netlink_parms(): no params data found [ 1029.895134][T11086] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1029.926824][T14753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.935629][T14753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.943932][T14753] device bridge_slave_0 entered promiscuous mode [ 1029.953547][T14753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.960976][T14753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.969383][T14753] device bridge_slave_1 entered promiscuous mode [ 1030.039593][T14753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.067664][T14753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.266438][T11086] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.276556][T11086] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.279761][T14753] team0: Port device team_slave_0 added [ 1030.290706][T11086] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1030.304191][T14780] overlayfs: failed to clone upperpath [ 1030.305413][T11086] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.327290][T14753] team0: Port device team_slave_1 added [ 1030.459372][T14753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.469146][T14753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.496238][T14753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.535356][T14753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.545254][T14753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.579753][T11086] usb 9-1: usb_control_msg returned -32 [ 1030.586004][T11086] usbtmc 9-1:16.0: can't read capabilities [ 1030.643478][T14753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.760508][T14753] device hsr_slave_0 entered promiscuous mode [ 1030.767839][T14753] device hsr_slave_1 entered promiscuous mode [ 1030.774523][T14753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1030.783441][T14753] Cannot create hsr debugfs directory [ 1031.064931][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a19800: rx timeout, send abort [ 1031.073414][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a19800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1031.214174][T11086] usb 9-1: USB disconnect, device number 2 [ 1031.328443][T12238] Bluetooth: hci0: command 0x0409 tx timeout [ 1031.647873][T14753] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1031.792955][T14753] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1031.835999][T14753] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1032.105262][T14753] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1032.523086][T14753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.595838][ T4407] device hsr_slave_0 left promiscuous mode [ 1032.615367][ T4407] device hsr_slave_1 left promiscuous mode [ 1032.628882][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.654047][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.673973][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.694081][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.823351][ T4407] device veth0_macvtap left promiscuous mode [ 1032.863505][ T4407] device veth1_vlan left promiscuous mode [ 1032.873597][ T4407] device veth0_vlan left promiscuous mode [ 1033.405850][T12238] Bluetooth: hci0: command 0x041b tx timeout [ 1033.499239][T14872] block nbd8: shutting down sockets [ 1033.588067][ T3638] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1033.787001][ T3638] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1033.807879][ T3638] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.869533][ T3638] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1033.904706][ T3638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.163642][ T3638] usb 7-1: usb_control_msg returned -32 [ 1034.169593][ T3638] usbtmc 7-1:16.0: can't read capabilities [ 1034.438725][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 1034.538960][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 1034.621912][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.684090][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.802423][ T4294] usb 7-1: USB disconnect, device number 50 [ 1035.487963][T12238] Bluetooth: hci0: command 0x040f tx timeout [ 1035.525152][ T4407] bond0 (unregistering): Released all slaves [ 1035.603616][T14860] device gtp0 entered promiscuous mode [ 1035.638119][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1035.683984][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1035.710047][T14753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.748945][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1035.758637][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1035.775745][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.782939][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.866519][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1035.880605][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1035.903237][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1035.927017][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.934213][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.957511][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1036.030446][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1036.076887][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1036.106377][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1036.145231][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1036.171612][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1036.245683][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1036.270445][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1036.295585][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1036.316511][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1036.367732][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1036.410757][T14753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1036.994510][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1037.002598][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1037.019291][T14753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.368217][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1037.378363][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1037.402108][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1037.425561][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1037.434113][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1037.454929][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1037.465435][T14753] device veth0_vlan entered promiscuous mode [ 1037.489773][T14753] device veth1_vlan entered promiscuous mode [ 1037.517684][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1037.526950][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1037.537886][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1037.546755][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1037.559858][T14753] device veth0_macvtap entered promiscuous mode [ 1037.566808][T12238] Bluetooth: hci0: command 0x0419 tx timeout [ 1037.581896][T14753] device veth1_macvtap entered promiscuous mode [ 1037.603711][T14753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.619963][T14753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.630796][T14753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.644808][T14753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.655008][T14753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.665765][T14753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.676031][T14753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.686751][T14753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.698770][T14753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.707116][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1037.716442][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1037.725981][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1037.738389][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1037.751501][T14753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.762981][T14753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.773760][T14753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.791030][T14753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.801269][T14753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.823572][T14753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.840025][T14753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.850928][T14753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.868012][T14753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.884276][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1037.898028][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1037.912978][T14753] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.926143][T14753] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.935968][T14753] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.944956][T14753] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.043364][ T4406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.066310][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.074456][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.082647][ T4406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.100688][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1038.135924][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1039.054867][ T3638] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1039.417960][ T3638] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1039.428238][ T3638] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.442018][ T3638] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1039.451881][ T3638] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.669321][ T3638] usb 10-1: usb_control_msg returned -32 [ 1039.700696][ T3638] usbtmc 10-1:16.0: can't read capabilities [ 1040.293686][ T4412] usb 10-1: USB disconnect, device number 2 [ 1044.145921][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3113'. [ 1045.048435][T15188] overlayfs: failed to clone upperpath [ 1045.421313][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3122'. [ 1045.454528][T15204] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3122'. [ 1045.470877][T15204] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3122'. [ 1046.081921][T15225] netlink: 'syz.6.3127': attribute type 10 has an invalid length. [ 1046.152452][T15225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.204930][T12238] Bluetooth: hci0: command 0x0405 tx timeout [ 1046.230490][T15225] bond0: (slave team0): Enslaving as an active interface with an up link [ 1049.146568][T15330] overlayfs: failed to clone upperpath [ 1049.714810][ T3638] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1049.921523][ T3638] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1049.946572][ T3638] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1049.984321][ T3638] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1050.009923][ T3638] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.278241][ T3638] usb 8-1: usb_control_msg returned -32 [ 1050.283956][ T3638] usbtmc 8-1:16.0: can't read capabilities [ 1050.856375][ T14] usb 8-1: USB disconnect, device number 6 [ 1051.052707][T15393] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3183'. [ 1051.171284][T15389] overlayfs: failed to clone upperpath [ 1052.318191][T15427] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3198'. [ 1052.795674][ T4294] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1053.126571][ T4294] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1053.154698][ T4294] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1053.174059][ T4294] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1053.196138][ T4294] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.442144][ T4294] usb 8-1: usb_control_msg returned -32 [ 1053.447862][ T4294] usbtmc 8-1:16.0: can't read capabilities [ 1053.575865][T15463] 9pnet_virtio: no channels available for device syz [ 1054.014056][ T1190] usb 8-1: USB disconnect, device number 7 [ 1054.453947][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.460384][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.606239][ T4294] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1054.815970][ T4294] usb 7-1: Using ep0 maxpacket: 32 [ 1054.824189][ T4294] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1054.896422][ T4294] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1054.969703][ T4294] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1055.031446][ T4294] usb 7-1: Product: syz [ 1055.031487][ T4294] usb 7-1: Manufacturer: syz [ 1055.031500][ T4294] usb 7-1: SerialNumber: syz [ 1055.049049][ T4294] usb 7-1: config 0 descriptor?? [ 1055.049746][T15487] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1055.278132][ T4294] usb 7-1: USB disconnect, device number 51 [ 1055.338582][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3222'. [ 1057.478565][T15571] overlayfs: failed to clone upperpath [ 1057.565107][ T4370] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1057.756694][ T4370] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1057.785499][ T4370] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1057.813594][ T4370] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1057.823215][ T4370] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.036185][ T4370] usb 10-1: usb_control_msg returned -32 [ 1058.042017][ T4370] usbtmc 10-1:16.0: can't read capabilities [ 1059.182410][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880572a8000: rx timeout, send abort [ 1059.191325][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880572a8000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1059.518198][T15606] bridge0: port 3(vlan2) entered blocking state [ 1059.531843][T15606] bridge0: port 3(vlan2) entered disabled state [ 1059.541085][T15606] device vlan2 entered promiscuous mode [ 1059.574407][T15606] device bond0 entered promiscuous mode [ 1059.583699][T15606] device bond_slave_0 entered promiscuous mode [ 1059.596742][T15606] device bond_slave_1 entered promiscuous mode [ 1059.629792][T15606] bridge0: port 3(vlan2) entered blocking state [ 1059.636203][T15606] bridge0: port 3(vlan2) entered forwarding state [ 1060.194982][ T4294] usb 10-1: USB disconnect, device number 3 [ 1060.244187][T15628] overlayfs: failed to resolve './file1': -2 [ 1062.341304][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079c87800: rx timeout, send abort [ 1062.350580][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079c87800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1062.395270][ T4370] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1062.584972][ T4370] usb 9-1: Using ep0 maxpacket: 32 [ 1062.592779][ T4370] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1062.605048][ T1190] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1062.623330][ T4370] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1062.634108][ T4370] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1062.698217][ T4370] usb 9-1: Product: syz [ 1062.702699][ T4370] usb 9-1: Manufacturer: syz [ 1062.729086][ T4370] usb 9-1: SerialNumber: syz [ 1062.771524][ T4370] usb 9-1: config 0 descriptor?? [ 1062.795366][T15670] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1062.817050][ T1190] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1062.851543][ T1190] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1062.877676][ T1190] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1062.887299][ T1190] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.061933][T11086] usb 9-1: USB disconnect, device number 3 [ 1063.115195][ T1190] usb 10-1: usb_control_msg returned -32 [ 1063.121055][ T1190] usbtmc 10-1:16.0: can't read capabilities [ 1065.333669][ T4294] usb 10-1: USB disconnect, device number 4 [ 1065.995248][T15783] overlayfs: failed to resolve './file1': -2 [ 1066.974971][T11086] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1067.064847][ T4370] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1067.177358][T11086] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1067.187659][T11086] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1067.206493][T11086] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1067.220622][T11086] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.244735][ T4370] usb 10-1: Using ep0 maxpacket: 32 [ 1067.251898][ T4370] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1067.277919][ T4370] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1067.292936][ T4370] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1067.306718][ T4370] usb 10-1: Product: syz [ 1067.311029][ T4370] usb 10-1: Manufacturer: syz [ 1067.318097][ T4370] usb 10-1: SerialNumber: syz [ 1067.332832][ T4370] usb 10-1: config 0 descriptor?? [ 1067.338686][T15810] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1067.436867][T11086] usb 7-1: usb_control_msg returned -32 [ 1067.442530][T11086] usbtmc 7-1:16.0: can't read capabilities [ 1067.617357][T11086] usb 10-1: USB disconnect, device number 5 [ 1067.930310][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880312be000: rx timeout, send abort [ 1068.443619][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880312be000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1068.593904][T15837] 9pnet_virtio: no channels available for device syz [ 1068.848270][T15840] overlayfs: failed to resolve './file1': -2 [ 1069.846099][ T4294] usb 7-1: USB disconnect, device number 52 [ 1071.514190][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805812bc00: rx timeout, send abort [ 1071.522659][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805812bc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1072.084753][ T1190] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1072.264688][ T1190] usb 8-1: Using ep0 maxpacket: 32 [ 1072.272446][ T1190] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1072.296876][ T1190] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1072.316357][ T1190] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1072.333511][ T1190] usb 8-1: Product: syz [ 1072.340353][ T1190] usb 8-1: Manufacturer: syz [ 1072.354657][ T1190] usb 8-1: SerialNumber: syz [ 1072.366139][ T1190] usb 8-1: config 0 descriptor?? [ 1072.376232][T15885] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1073.439742][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027d79000: rx timeout, send abort [ 1073.447302][ T4294] usb 8-1: USB disconnect, device number 8 [ 1073.448576][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027d79000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1073.488267][ T27] audit: type=1326 audit(1743751830.357:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15913 comm="syz.9.3322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9d818d169 code=0x0 [ 1074.311116][T15942] overlayfs: failed to clone upperpath [ 1075.744725][ T4417] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1075.943179][ T4417] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1075.954167][ T4417] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1076.001552][ T4417] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1076.026057][ T4417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.241805][ T4417] usb 7-1: usb_control_msg returned -32 [ 1076.247509][ T4417] usbtmc 7-1:16.0: can't read capabilities [ 1077.640452][ T4417] usb 7-1: USB disconnect, device number 53 [ 1080.044774][ T4370] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1080.239995][ T4370] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1080.274703][ T4370] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1080.314883][ T4370] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1080.323984][ T4370] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.590636][ T4370] usb 8-1: usb_control_msg returned -32 [ 1080.596529][ T4370] usbtmc 8-1:16.0: can't read capabilities [ 1082.494699][ T4370] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1082.694936][ T4370] usb 7-1: Using ep0 maxpacket: 32 [ 1082.701906][ T4370] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1082.750110][ T4417] usb 8-1: USB disconnect, device number 9 [ 1082.757362][ T4370] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1082.773586][ T4370] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1082.825219][ T4370] usb 7-1: Product: syz [ 1082.829447][ T4370] usb 7-1: Manufacturer: syz [ 1082.834077][ T4370] usb 7-1: SerialNumber: syz [ 1082.936203][ T4370] usb 7-1: config 0 descriptor?? [ 1082.943320][T16105] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1083.645465][ T4417] usb 7-1: USB disconnect, device number 54 [ 1084.704824][ T1190] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1084.746940][T16169] fuse: Bad value for 'fd' [ 1084.910203][ T1190] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1085.754715][ T1190] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.777705][ T1190] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1085.790661][ T1190] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.892267][T16189] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1086.000567][T16189] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1086.040361][T16189] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1086.085912][T16189] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1086.102652][T16189] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1086.111783][ T1190] usb 8-1: usb_control_msg returned -32 [ 1086.124979][ T1190] usbtmc 8-1:16.0: can't read capabilities [ 1086.133304][T16189] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1086.185145][T16189] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1087.856436][ T4417] usb 8-1: USB disconnect, device number 10 [ 1089.064770][ T14] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1089.266042][ T14] usb 7-1: Using ep0 maxpacket: 32 [ 1089.277909][ T14] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1089.320885][ T14] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1089.354956][ T14] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1089.373411][ T14] usb 7-1: Product: syz [ 1089.390058][ T14] usb 7-1: Manufacturer: syz [ 1089.404635][ T14] usb 7-1: SerialNumber: syz [ 1089.419009][ T14] usb 7-1: config 0 descriptor?? [ 1089.436370][T16248] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1089.671658][T11086] usb 7-1: USB disconnect, device number 55 [ 1089.835457][ T3638] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1090.139833][ T3638] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1090.227523][ T3638] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1090.388266][ T3638] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1090.415770][ T3638] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.706631][ T3638] usb 10-1: usb_control_msg returned -32 [ 1090.721010][ T3638] usbtmc 10-1:16.0: can't read capabilities [ 1091.344672][T11086] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1091.546534][T11086] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.558620][T11086] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1091.575258][T11086] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1091.584540][T11086] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.604684][T11086] usb 8-1: Product: syz [ 1091.608923][T11086] usb 8-1: Manufacturer: syz [ 1091.613557][T11086] usb 8-1: SerialNumber: syz [ 1092.053957][T16297] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1092.562497][ T3638] usb 10-1: USB disconnect, device number 6 [ 1092.914936][ T1190] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1093.041162][T16297] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1093.104708][ T1190] usb 9-1: Using ep0 maxpacket: 32 [ 1093.124245][ T1190] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1093.168146][ T1190] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1093.184690][ T1190] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1093.205443][ T1190] usb 9-1: Product: syz [ 1093.214966][ T1190] usb 9-1: Manufacturer: syz [ 1093.219649][ T1190] usb 9-1: SerialNumber: syz [ 1093.246624][ T1190] usb 9-1: config 0 descriptor?? [ 1093.252562][T16321] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1093.265326][T11086] cdc_mbim 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1093.273058][T11086] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1093.301478][T11086] cdc_mbim 8-1:1.0: setting rx_max = 2048 [ 1093.507612][ T1190] usb 9-1: USB disconnect, device number 4 [ 1093.571745][T11086] cdc_mbim 8-1:1.0: setting tx_max = 184 [ 1093.581586][T11086] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 1093.609530][T11086] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 42:42:42:42:42:42 [ 1093.790331][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 1093.797316][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 1093.805515][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 1093.812248][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 1093.832386][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 1093.839146][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 1093.846166][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 1093.852888][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 1093.883592][ T1190] usb 8-1: USB disconnect, device number 11 [ 1093.897706][ T1190] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 1095.258178][T11086] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1095.463559][T11086] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1095.481963][T11086] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1095.522947][T11086] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1095.540255][T11086] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.775107][T11086] usb 7-1: usb_control_msg returned -32 [ 1095.781927][T11086] usbtmc 7-1:16.0: can't read capabilities [ 1095.809472][T11086] usb 7-1: USB disconnect, device number 56 [ 1096.568162][T16423] overlayfs: missing 'lowerdir' [ 1096.661418][T16429] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1096.729216][T16429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1096.841405][T16429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1097.212329][T16429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1097.460967][T16429] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1097.478464][ C1] Illegal XDP return value 16128 on prog (id 893) dev veth0_to_bridge, expect packet loss! [ 1098.544864][T11086] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1099.394638][T11086] usb 9-1: Using ep0 maxpacket: 32 [ 1099.401725][T11086] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1099.433080][T11086] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1099.451063][T11086] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1099.496971][T16480] overlayfs: missing 'lowerdir' [ 1099.514662][T11086] usb 9-1: Product: syz [ 1099.530487][T11086] usb 9-1: Manufacturer: syz [ 1099.545584][T11086] usb 9-1: SerialNumber: syz [ 1099.588464][T11086] usb 9-1: config 0 descriptor?? [ 1099.613623][T16462] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1099.701590][T16484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1099.737554][T16484] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1099.844130][ T4370] usb 9-1: USB disconnect, device number 5 [ 1100.312858][T16508] overlayfs: missing 'lowerdir' [ 1101.850793][T16535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1101.914391][T16535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1101.937382][T16535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1101.981798][T16535] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1102.375725][ T14] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1102.659977][T16567] overlayfs: missing 'lowerdir' [ 1102.674672][ T14] usb 10-1: Using ep0 maxpacket: 32 [ 1102.681917][ T14] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1103.507969][ T14] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1103.517328][ T14] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1103.525756][ T14] usb 10-1: Product: syz [ 1103.530131][ T14] usb 10-1: Manufacturer: syz [ 1103.535923][ T14] usb 10-1: SerialNumber: syz [ 1103.542529][ T14] usb 10-1: config 0 descriptor?? [ 1103.548333][T16550] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1103.601409][T16575] fuse: Bad value for 'fd' [ 1103.780072][ T14] usb 10-1: USB disconnect, device number 7 [ 1104.024311][T16587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1104.041951][T16587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1104.053795][T16587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1104.077928][T16587] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1104.544813][ T14] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1104.848031][T16611] fuse: Bad value for 'fd' [ 1105.503606][ T14] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1105.525382][ T14] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1105.584784][ T14] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1105.593890][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.605133][T16616] overlayfs: missing 'lowerdir' [ 1105.852803][ T14] usb 7-1: usb_control_msg returned -32 [ 1105.863821][ T14] usbtmc 7-1:16.0: can't read capabilities [ 1105.890662][ T14] usb 7-1: USB disconnect, device number 57 [ 1106.513572][T16646] fuse: Bad value for 'fd' [ 1106.976720][ T4370] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1107.275033][ T4370] usb 8-1: Using ep0 maxpacket: 32 [ 1107.295623][ T4370] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1107.389859][ T4370] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1107.449693][ T4370] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1107.497315][ T4370] usb 8-1: Product: syz [ 1107.501608][ T4370] usb 8-1: Manufacturer: syz [ 1107.521470][ T4370] usb 8-1: SerialNumber: syz [ 1107.552985][ T4370] usb 8-1: config 0 descriptor?? [ 1107.560093][T16652] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1107.805137][ T3638] usb 8-1: USB disconnect, device number 12 [ 1107.973743][T16673] overlayfs: missing 'lowerdir' [ 1108.494793][ T14] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1108.770881][ T14] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1108.888562][ T14] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1109.150647][ T14] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1109.191969][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.434931][ T14] usb 7-1: usb_control_msg returned -71 [ 1109.440586][ T14] usbtmc 7-1:16.0: can't read capabilities [ 1109.500163][ T14] usb 7-1: USB disconnect, device number 58 [ 1111.650597][T16746] overlayfs: missing 'workdir' [ 1113.158543][ T14] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1113.346371][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.367478][ T14] usb 7-1: config 0 has no interfaces? [ 1113.379920][ T14] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1113.420807][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.447572][ T14] usb 7-1: config 0 descriptor?? [ 1114.564458][ T4417] usb 7-1: USB disconnect, device number 59 [ 1114.580787][T16813] overlayfs: missing 'workdir' [ 1115.808958][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.815474][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.571440][T16866] overlayfs: missing 'workdir' [ 1119.444746][T11086] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1119.664173][T11086] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1119.685002][T11086] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1119.702482][T11086] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1119.728438][T11086] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.873755][T16921] fuse: Bad value for 'fd' [ 1119.968578][T11086] usb 7-1: usb_control_msg returned -32 [ 1119.974246][T11086] usbtmc 7-1:16.0: can't read capabilities [ 1120.062435][T16922] overlayfs: missing 'lowerdir' [ 1120.563479][ T4370] usb 7-1: USB disconnect, device number 60 [ 1121.513622][ T1190] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1121.601580][T16950] overlayfs: unrecognized mount option "verity=require" or missing value [ 1121.714664][ T1190] usb 9-1: Using ep0 maxpacket: 32 [ 1121.722197][ T1190] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1121.742796][ T1190] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.762061][ T1190] usb 9-1: config 0 descriptor?? [ 1121.790926][ T1190] as10x_usb: device has been detected [ 1121.792338][T16960] fuse: Bad value for 'fd' [ 1121.797062][ T1190] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1121.836973][ T1190] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1121.947744][ T1190] as10x_usb: error during firmware upload part1 [ 1121.992309][ T1190] Registered device nBox DVB-T Dongle [ 1122.013662][ T1190] usb 9-1: USB disconnect, device number 6 [ 1122.125138][ T1190] Unregistered device nBox DVB-T Dongle [ 1122.128302][ T1190] as10x_usb: device has been disconnected [ 1122.603502][T16985] overlayfs: missing 'lowerdir' [ 1122.671399][T16989] vxcan1: tx address claim with different name [ 1122.699019][ T4417] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1123.136149][T12238] Bluetooth: hci3: command 0x0406 tx timeout [ 1123.666656][T16998] fuse: Bad value for 'fd' [ 1123.694530][ T4417] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1123.711685][ T4417] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1123.772662][ T4417] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1123.791118][ T4417] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.027892][ T4417] usb 10-1: usb_control_msg returned -32 [ 1124.044440][ T4417] usbtmc 10-1:16.0: can't read capabilities [ 1124.599906][ T14] usb 10-1: USB disconnect, device number 8 [ 1126.256628][T17068] overlayfs: missing 'lowerdir' [ 1126.891180][T17094] overlayfs: failed to clone upperpath [ 1127.274747][ T6210] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1127.516472][ T6210] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1127.632989][ T6210] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1127.885109][ T6210] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1127.914970][ T14] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1127.925119][ T6210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.165318][ T14] usb 9-1: device descriptor read/64, error -71 [ 1128.169872][ T6210] usb 8-1: usb_control_msg returned -32 [ 1128.189648][ T6210] usbtmc 8-1:16.0: can't read capabilities [ 1128.444815][ T14] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1128.618475][ T14] usb 9-1: device descriptor read/64, error -71 [ 1128.745299][ T14] usb usb9-port1: attempt power cycle [ 1128.769190][T11086] usb 8-1: USB disconnect, device number 13 [ 1129.164872][ T14] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1129.218136][ T14] usb 9-1: device descriptor read/8, error -71 [ 1129.307894][T17160] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1129.359006][T17160] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1129.604817][ T14] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1129.637041][ T14] usb 9-1: device descriptor read/8, error -71 [ 1129.785614][ T14] usb usb9-port1: unable to enumerate USB device [ 1130.898794][ T4265] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 1132.314892][ T6210] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1132.484824][ T6210] usb 7-1: device descriptor read/64, error -71 [ 1132.500739][T17229] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1132.514799][T17229] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1132.758770][ T6210] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1132.924874][ T6210] usb 7-1: device descriptor read/64, error -71 [ 1133.054840][ T6210] usb usb7-port1: attempt power cycle [ 1133.247210][ T4265] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1133.256041][ T4265] Bluetooth: hci0: Injecting HCI hardware error event [ 1133.268635][ T4265] Bluetooth: hci0: hardware error 0x00 [ 1133.474800][ T6210] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1133.555347][ T6210] usb 7-1: device descriptor read/8, error -71 [ 1134.925040][T12238] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1134.934029][T12238] Bluetooth: hci3: Injecting HCI hardware error event [ 1134.943731][T12238] Bluetooth: hci3: hardware error 0x00 [ 1135.265131][T17304] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1135.324677][ T4265] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1135.352577][T17304] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1136.511514][ T14] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1136.674662][ T14] usb 9-1: device descriptor read/64, error -71 [ 1136.944748][ T14] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1137.104681][ T14] usb 9-1: device descriptor read/64, error -71 [ 1137.225475][ T14] usb usb9-port1: attempt power cycle [ 1137.244845][T12238] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1137.493182][ T6210] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 1137.654751][ T6210] usb 7-1: device descriptor read/64, error -71 [ 1137.774909][ T14] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1137.834123][ T14] usb 9-1: device descriptor read/8, error -71 [ 1138.175068][ T14] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1138.265785][ T14] usb 9-1: device descriptor read/8, error -71 [ 1138.545050][ T14] usb usb9-port1: unable to enumerate USB device [ 1138.724741][ T6210] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1138.894920][ T6210] usb 7-1: device descriptor read/64, error -71 [ 1139.014807][ T6210] usb usb7-port1: attempt power cycle [ 1139.424764][ T6210] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1139.496392][ T6210] usb 7-1: device descriptor read/8, error -71 [ 1139.778282][ T6210] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 1139.825615][ T6210] usb 7-1: device descriptor read/8, error -71 [ 1140.755436][ T6210] usb usb7-port1: unable to enumerate USB device [ 1140.819320][T17425] tmpfs: Unknown parameter 'usrquota' [ 1141.753133][T17460] [ 1141.755526][T17460] ====================================================== [ 1141.762560][T17460] WARNING: possible circular locking dependency detected [ 1141.769594][T17460] 6.1.132-syzkaller #0 Not tainted [ 1141.774724][T17460] ------------------------------------------------------ [ 1141.781761][T17460] syz.3.3820/17460 is trying to acquire lock: [ 1141.787839][T17460] ffff8880293e8158 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 1141.797538][T17460] [ 1141.797538][T17460] but task is already holding lock: [ 1141.804904][T17460] ffff888053dd54a0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 1141.815802][T17460] [ 1141.815802][T17460] which lock already depends on the new lock. [ 1141.815802][T17460] [ 1141.826209][T17460] [ 1141.826209][T17460] the existing dependency chain (in reverse order) is: [ 1141.835316][T17460] [ 1141.835316][T17460] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 1141.844109][T17460] lock_acquire+0x1f8/0x5a0 [ 1141.849155][T17460] down_write+0x36/0x60 [ 1141.853847][T17460] process_measurement+0x446/0x21b0 [ 1141.859573][T17460] ima_file_mmap+0x121/0x1c0 [ 1141.864690][T17460] __se_sys_remap_file_pages+0x67a/0x8b0 [ 1141.870848][T17460] do_syscall_64+0x3b/0xb0 [ 1141.875785][T17460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1141.882202][T17460] [ 1141.882202][T17460] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 1141.889773][T17460] validate_chain+0x1661/0x5950 [ 1141.895147][T17460] __lock_acquire+0x125b/0x1f80 [ 1141.900619][T17460] lock_acquire+0x1f8/0x5a0 [ 1141.905657][T17460] down_read_killable+0xc6/0xd10 [ 1141.911132][T17460] mmap_read_lock_killable+0x1d/0x60 [ 1141.916947][T17460] lock_mm_and_find_vma+0x2a7/0x2e0 [ 1141.922672][T17460] exc_page_fault+0x169/0x620 [ 1141.927872][T17460] asm_exc_page_fault+0x22/0x30 [ 1141.933252][T17460] fault_in_readable+0x1c8/0x340 [ 1141.938811][T17460] fault_in_iov_iter_readable+0xdb/0x270 [ 1141.944977][T17460] generic_perform_write+0x207/0x5e0 [ 1141.950788][T17460] __generic_file_write_iter+0x176/0x400 [ 1141.956945][T17460] generic_file_write_iter+0xab/0x310 [ 1141.962846][T17460] vfs_write+0x857/0xbc0 [ 1141.967715][T17460] ksys_write+0x19c/0x2c0 [ 1141.972738][T17460] do_syscall_64+0x3b/0xb0 [ 1141.977692][T17460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1141.984118][T17460] [ 1141.984118][T17460] other info that might help us debug this: [ 1141.984118][T17460] [ 1141.994346][T17460] Possible unsafe locking scenario: [ 1141.994346][T17460] [ 1142.001789][T17460] CPU0 CPU1 [ 1142.007148][T17460] ---- ---- [ 1142.012508][T17460] lock(&sb->s_type->i_mutex_key#12); [ 1142.017984][T17460] lock(&mm->mmap_lock); [ 1142.024850][T17460] lock(&sb->s_type->i_mutex_key#12); [ 1142.032834][T17460] lock(&mm->mmap_lock); [ 1142.037169][T17460] [ 1142.037169][T17460] *** DEADLOCK *** [ 1142.037169][T17460] [ 1142.045308][T17460] 3 locks held by syz.3.3820/17460: [ 1142.050499][T17460] #0: ffff88807c0c6868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 1142.059741][T17460] #1: ffff8880579b8460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 1142.068631][T17460] #2: ffff888053dd54a0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 1142.079958][T17460] [ 1142.079958][T17460] stack backtrace: [ 1142.085853][T17460] CPU: 1 PID: 17460 Comm: syz.3.3820 Not tainted 6.1.132-syzkaller #0 [ 1142.094022][T17460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1142.104090][T17460] Call Trace: [ 1142.107375][T17460] [ 1142.110307][T17460] dump_stack_lvl+0x1e3/0x2cb [ 1142.114989][T17460] ? nf_tcp_handle_invalid+0x647/0x647 [ 1142.120451][T17460] ? print_circular_bug+0x12b/0x1a0 [ 1142.125653][T17460] check_noncircular+0x2fa/0x3b0 [ 1142.130594][T17460] ? add_chain_block+0x850/0x850 [ 1142.135532][T17460] ? lockdep_lock+0x11f/0x2a0 [ 1142.140236][T17460] ? _find_first_zero_bit+0xd0/0x100 [ 1142.145536][T17460] validate_chain+0x1661/0x5950 [ 1142.150397][T17460] ? reacquire_held_locks+0x660/0x660 [ 1142.155772][T17460] ? reacquire_held_locks+0x660/0x660 [ 1142.161146][T17460] ? mark_lock+0x9a/0x340 [ 1142.165480][T17460] ? reacquire_held_locks+0x660/0x660 [ 1142.170852][T17460] ? __lock_acquire+0x125b/0x1f80 [ 1142.175887][T17460] ? mark_lock+0x9a/0x340 [ 1142.180220][T17460] __lock_acquire+0x125b/0x1f80 [ 1142.185099][T17460] lock_acquire+0x1f8/0x5a0 [ 1142.189609][T17460] ? mmap_read_lock_killable+0x1d/0x60 [ 1142.195084][T17460] ? read_lock_is_recursive+0x10/0x10 [ 1142.200553][T17460] ? __might_sleep+0xb0/0xb0 [ 1142.205150][T17460] down_read_killable+0xc6/0xd10 [ 1142.210100][T17460] ? mmap_read_lock_killable+0x1d/0x60 [ 1142.215567][T17460] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1142.221560][T17460] ? cmp_ex_search+0x70/0x90 [ 1142.226165][T17460] ? mmap_read_lock_killable+0x1d/0x60 [ 1142.231648][T17460] ? bsearch+0x8e/0xb0 [ 1142.235718][T17460] ? down_read_interruptible+0xc40/0xc40 [ 1142.241363][T17460] ? search_extable+0xaf/0xf0 [ 1142.246041][T17460] ? trim_init_extable+0x3c0/0x3c0 [ 1142.251154][T17460] ? fault_in_readable+0x1c8/0x340 [ 1142.256293][T17460] ? __init_rwsem+0x160/0x160 [ 1142.260975][T17460] ? print_irqtrace_events+0x210/0x210 [ 1142.266532][T17460] mmap_read_lock_killable+0x1d/0x60 [ 1142.271851][T17460] lock_mm_and_find_vma+0x2a7/0x2e0 [ 1142.277143][T17460] exc_page_fault+0x169/0x620 [ 1142.281825][T17460] asm_exc_page_fault+0x22/0x30 [ 1142.286678][T17460] RIP: 0010:fault_in_readable+0x1c8/0x340 [ 1142.292399][T17460] Code: 24 08 4c 8d b0 ff 0f 00 00 48 89 c3 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 70 e8 32 da bf ff 4c 39 f3 74 73 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 1142.312088][T17460] RSP: 0018:ffffc9000c5c79e0 EFLAGS: 00050287 [ 1142.318152][T17460] RAX: ffffffff81cad01e RBX: 0000200000242000 RCX: 0000000000080000 [ 1142.326123][T17460] RDX: ffffc9000df7a000 RSI: 0000000000043bc6 RDI: 0000000000043bc7 [ 1142.334096][T17460] RBP: ffffc9000c5c7a98 R08: ffffffff81cacfb6 R09: ffffffff8441a0e5 [ 1142.342100][T17460] R10: 0000000000000002 R11: ffff888075308000 R12: 0000000000001000 [ 1142.350073][T17460] R13: dffffc0000000000 R14: 0000200000243000 R15: 1ffff920018b8f44 [ 1142.358054][T17460] ? fault_in_iov_iter_readable+0x45/0x270 [ 1142.363873][T17460] ? fault_in_readable+0x156/0x340 [ 1142.369000][T17460] ? fault_in_readable+0x1be/0x340 [ 1142.374115][T17460] ? fault_in_safe_writeable+0x250/0x250 [ 1142.379754][T17460] ? inode_to_bdi+0x65/0xd0 [ 1142.384269][T17460] fault_in_iov_iter_readable+0xdb/0x270 [ 1142.389930][T17460] generic_perform_write+0x207/0x5e0 [ 1142.395231][T17460] ? generic_file_direct_write+0x460/0x460 [ 1142.401039][T17460] ? __file_remove_privs+0x640/0x640 [ 1142.406325][T17460] ? generic_write_checks+0x138/0x1c0 [ 1142.411720][T17460] ? clear_nonspinnable+0x60/0x60 [ 1142.416752][T17460] __generic_file_write_iter+0x176/0x400 [ 1142.422388][T17460] generic_file_write_iter+0xab/0x310 [ 1142.427768][T17460] vfs_write+0x857/0xbc0 [ 1142.432018][T17460] ? file_end_write+0x250/0x250 [ 1142.436873][T17460] ? __fget_files+0x28/0x4a0 [ 1142.441465][T17460] ? __fget_files+0x435/0x4a0 [ 1142.446152][T17460] ? __fdget_pos+0x2ba/0x360 [ 1142.450746][T17460] ? ksys_write+0x77/0x2c0 [ 1142.455170][T17460] ksys_write+0x19c/0x2c0 [ 1142.459512][T17460] ? print_irqtrace_events+0x210/0x210 [ 1142.464984][T17460] ? __ia32_sys_read+0x80/0x80 [ 1142.469757][T17460] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1142.475747][T17460] ? lockdep_hardirqs_on+0x94/0x130 [ 1142.480953][T17460] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1142.486942][T17460] do_syscall_64+0x3b/0xb0 [ 1142.491361][T17460] ? clear_bhb_loop+0x45/0xa0 [ 1142.496049][T17460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.501948][T17460] RIP: 0033:0x7f900158d169 [ 1142.506385][T17460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.525997][T17460] RSP: 002b:00007f9002393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1142.534412][T17460] RAX: ffffffffffffffda RBX: 00007f90017a5fa0 RCX: 00007f900158d169 [ 1142.542383][T17460] RDX: 00000000fffffefc RSI: 0000200000000300 RDI: 0000000000000003 [ 1142.550353][T17460] RBP: 00007f900160e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1142.558322][T17460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.566292][T17460] R13: 0000000000000000 R14: 00007f90017a5fa0 R15: 00007ffc97e6b6a8 [ 1142.574283][T17460] [ 1142.577435][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.586260][ T6210] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1142.744628][T11086] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1142.756368][ T6210] usb 9-1: device descriptor read/64, error -71 [ 1142.904866][T11086] usb 8-1: device descriptor read/64, error -71 [ 1143.024820][ T6210] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1143.184624][ T6210] usb 9-1: device descriptor read/64, error -71 [ 1143.184703][T11086] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1143.304730][ T6210] usb usb9-port1: attempt power cycle [ 1143.346414][T11086] usb 8-1: device descriptor read/64, error -71 [ 1143.467013][T11086] usb usb8-port1: attempt power cycle [ 1143.714673][ T6210] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1143.745055][ T6210] usb 9-1: device descriptor read/8, error -71 [ 1143.874673][T11086] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1143.907481][T11086] usb 8-1: device descriptor read/8, error -71 [ 1144.014701][ T6210] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1144.045081][ T6210] usb 9-1: device descriptor read/8, error -71 [ 1144.165193][ T6210] usb usb9-port1: unable to enumerate USB device [ 1144.194630][T11086] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1144.238022][T11086] usb 8-1: device descriptor read/8, error -71 [ 1144.355329][T11086] usb usb8-port1: unable to enumerate USB device