last executing test programs: 16.754596025s ago: executing program 1 (id=1096): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe803500121100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 15.742636006s ago: executing program 1 (id=1101): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000020000000700000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r2) 14.708679834s ago: executing program 1 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 14.170836027s ago: executing program 0 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 14.039758708s ago: executing program 3 (id=1110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[], 0xffdd) 13.873604419s ago: executing program 1 (id=1111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 13.207681023s ago: executing program 3 (id=1114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 12.894182359s ago: executing program 1 (id=1116): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000020000000700000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r2) 12.315117337s ago: executing program 3 (id=1118): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x0) 12.043469655s ago: executing program 0 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="5c0000000b0601"], 0x5c}}, 0x4800) 11.852813387s ago: executing program 1 (id=1120): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) socket$inet(0x2, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fsmount(r1, 0x0, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x200, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b'], 0x20) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r3, 0x2, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x84) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040), 0x20000000) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="800010", 0x3}], 0x1, &(0x7f00000008c0)=ANY=[], 0x18}}], 0x1, 0x20040000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, 0x0, 0x0) 11.731047691s ago: executing program 3 (id=1121): socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11.022877087s ago: executing program 0 (id=1122): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 7.554704524s ago: executing program 2 (id=1124): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) fallocate(r1, 0x10, 0x0, 0x1062200) socket$nl_route(0x10, 0x3, 0x0) 7.204067114s ago: executing program 3 (id=1125): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000340)={0x0, 0x3}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001740)={0x1, 0x89}, 0x2) 6.628053805s ago: executing program 4 (id=1126): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.150998737s ago: executing program 2 (id=1127): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r1) close(r0) 6.03156305s ago: executing program 3 (id=1128): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000002d40)=ANY=[], 0x1, 0xee7, &(0x7f0000001e40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8CT0gKiGKhDhVHKi4UCqlSEUCVapQT21PrXrrCfVCpSqVgnpoIyWusnlvvfuc6a7H9qy9+/tJ375982bn+8YbOTPj2bcBGFuN9uPRo4tFCO9+9s6jLz9VfHJ12V2dNQ60H4vYa4UQml39ItveF3HB5YsvnbheW4TD7cfUD49d6Lx2NoRwLhwIn4dW+Gh55asP33vk4Mevz9zy1tlnXtmm3e/I9wMAAEbR+T+t/O2+f/zxgYVL5/cfD9Od5en4vBX7s/G4/1A8UE7Hy43Q2y+6ottUtt5EjEa23kS23mSWZ7IkXzPbTrNkvak++Sa6ll1vPwEAAGA3Sue1rVA0lnr6jcbS0rXz/qu+mJ8qlp47vXLqzJAKBQAAACr796vtm26FEEIIIYQQQggxwrE6P+wrEAAAAMC4yecLW+fc1s7U1dlaa7D8Fx5uXP/1sAXq/vcv/+7K/8FrfuMAAFDdqB5Npv1Kx9FpHoN8HsGJ7HUbPf5vZNuZ3GCdZfMK9iwvdu7bVFZ//nPdqcrq3+j7OCxl9efzYe5UZfXn83TuVGX1T9dcR1Vl9c/UXEdVZfXvqbmOqsrq31tzHVWV1T9bcx1VldU/V3MdVZXVf0PNdVRVVv++muuoqqz+3XJbbVn9rZrrqKqs/oWa66iqrP4ba66jqrL6b6q5jqrK6r+55jqG5c7Ypp/D/my8+/w5P6fbLed4AAAAMO7+a/4/IYQQYl2074PYAXUIMdpR7IAahBBifOLVYV+AAAAAAIYufS4gfQB9NUrjE33GJ7vHZ9ZWSOPNPq+f6jM+3WccAAAACOG3b5y67e1i7XP+m50PL80btSd8ciVUmMcon+huo/k3O+/ZZvPvlnnLAAAAGC/F9z6/cv+j77+wcOn8/uNdZ79X4vlumgd0Ml4b+DT2030Bc1m/SOfQx3vzNErWy68P3FC2vcc3uaMAAAAwxtL5eysUjaWu8+5WaDSWltbOxxdDszh1euXkodhP38/yh/nm9NXlD9VcNwAAADC4tfP965//p+/xXQxTxdJzp1dOnbnWn+ssbza6rwvMry0vuq8LtLLlh0uWH4n99P2dP5jf016+dOKHK09t9c4DAADAmDjz4tlnnlxZOfkjTzzxxJPOk2H/ZgIAALbal1++0/zxkbnfXfv8/9r8d+nz/wdivxXn9vtzXCHdJ5A+B7Du8/pP9OaZL1vv+d71Wtl6EzGms7pnurYT2vMN9r5uoSxfq3c7UyX5ZrN8c1m+fJ6CyWz9lG9ftjyfnzCtN58tz+dhnMxyFFn+uwMAAACUW37h2eeXz7x49sHTzz759MmnTz535PCx7x47duih7zy03L6vf7n77n4AAABgN1q76XfYlQAAAAAAAAAAAAAAAAAAAMD4quPrxIa9jwAAADDu/vVqCOGcEEJUjtXp4dcghBBCCCHEron2d7vXn7cx7OsPAAAAwPi5fPGlE93tOueKLc3X2VrrWnMl5k3t3IN/XbgaabULD0/0vH7vllbDuKv737/8uyv/B69tbf6Z9GTg33/ZJePj1fLeu/zLxe78t08OmD/f/8er5T+Y5b83DJZ/9f0s/xPV8t+X5d87YP51+/98tfz3x/yLsX/wnkHz977/07FN+7FnwPzfzvb/qTBo/mz/WwMmzDwQ8wPAOBrVGwDSUUI6jp6N/bS/8XAzTGSv2+jxfyPbzuSmK+/dbjoOujX20/HSXJY32Wj9s9n2bqhYZy6va6cqq3+r3sftVlZ/s+Y6qiqrf6rmOqoqq3+65jqqKqt/puY6qiqrf9Dz0GErq3+3XFcuq3+25jqqKqt/ruY6qiqrf6P/jw9LWf37aq6jqrL652uuo6qy+iteVqtdWf0LNddRVVn9N9ZcR1Vl9d9Ucx1VldV/c811DMsdsS07H07nn/NxLPVbWX/6Oj/LUb22AAAAALvNP83/J4QQQghRKdr3y+yAOoYTXXfLDb0WsRXxn9Vrhl2HEGL7YnV1iBcfGLrt/TQzADuV3//jzfs/3rz/4837z/+T7uEvsn4y0Wd8ss94s8/4VDae/3ud7jN+U7bd1XRdM7q5z/jX+ozv6zN+a5/xxT7jt/UZv73P+B19xgEAABgPt8TW+SEAAACMrpd/9embv7n3iYsLl87vPx6m1s07fyj2p+Pf1t+I/Xze+6QZ/+b/k9j/RWx/H9u/Z+u7/wQAAAC2X/qeGH//BwAAgNGVvqfU+T8AAACMroXYOv8HAACA0XVjbJ3/AwAAwAgrZq6/OLbpusDdsR10Xj8AYOf7emzvjO3+2N4V22/ENh0H3BPbb9ZUHwCwdX7+/Z8ee7tYm+//SDZ+OS5P7Trnrl0pKBq9M/nvie3e2H5rwHry7wMYNH+yb8A825V/fpP5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDR0Wg/Hj26WITw7mfvPPqzqTf/cnXZXZ01DrQfi9hrhRCandel0bX+r+OKly++dKK7vRLbIhwORSg6y8NjFzqZZkMI58KB8HlohY+WV7768L1HDn78+swtb5195pVt/BH07B8AAACMov8FAAD//2hPI3g=") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$packet(0x11, 0x3, 0x300) openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x181041, 0x11) mount(&(0x7f0000004a00)=@nullb, &(0x7f0000004a40)='./file0\x00', &(0x7f0000004a80)='nfs\x00', 0x0, &(0x7f0000004ac0)='\x00') setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = memfd_secret(0x0) ftruncate(r4, 0x7fc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup3(0xffffffffffffffff, r5, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r6, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r5, &(0x7f0000000000), 0x200a00}]) 5.889255815s ago: executing program 4 (id=1129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000001d40cb06a7810000000000010902240001000040ad09040000010300010009210101000122050009058103ff030c0000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20110700000007010006000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x200) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, 0x0, 0x800) 5.201595971s ago: executing program 2 (id=1130): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000020000000700000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r2) 3.920614928s ago: executing program 2 (id=1131): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/247, 0xf7}], 0x1, &(0x7f0000000380)=[{&(0x7f0000217f28)=""/229, 0xe5}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.375503569s ago: executing program 4 (id=1132): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400201, 0x105) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.00552039s ago: executing program 2 (id=1133): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.743488575s ago: executing program 0 (id=1134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$rose(r1, &(0x7f0000000080)="92cecf446aa7e71dc87383e44d5ed935b8bbe3d386aa2653bd92c61a513ff0d72e640e57227aa39c47d4c6c7bff37f5c381ca7a8040afc459f2038c9ea143d5b443d544cda84262b3fbece0d63b26ab1325af49bccb985d5defeac", 0x5b, 0x20040041, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12021, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008ac0)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4005) 2.052045331s ago: executing program 2 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5}) 2.004001368s ago: executing program 0 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = dup(r0) r2 = socket(0x1e, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.507401975s ago: executing program 4 (id=1137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x44}}, 0x0) 1.390055246s ago: executing program 0 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r3, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000010000000100"], 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 778.721729ms ago: executing program 4 (id=1139): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x400007, &(0x7f0000000ec0)={[{@volume={'volume', 0x3d, 0x3f}}, {@volume}, {@session}, {@uid_forget}, {@undelete}, {}, {@longad}, {@uid_forget}, {@utf8}]}, 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1e4047c, &(0x7f0000000ec0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 0s ago: executing program 4 (id=1140): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r1) close(r0) kernel console output (not intermixed with test programs): ›z«Y" or missing value [ 384.683943][ T7457] ufs: wrong mount options [ 384.770230][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 384.780810][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 385.366098][ T7465] loop1: detected capacity change from 0 to 1024 [ 385.462091][ T7462] loop2: detected capacity change from 0 to 4096 [ 385.774802][ T7462] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 386.144381][ T7472] loop3: detected capacity change from 0 to 4096 [ 386.169317][ T7472] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 386.511643][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 386.682093][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 386.706848][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.717735][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.750602][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 386.760983][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.769480][ T25] usb 2-1: Product: syz [ 386.774198][ T25] usb 2-1: Manufacturer: syz [ 386.783141][ T25] usb 2-1: SerialNumber: syz [ 387.072180][ T25] usb 2-1: 0:2 : does not exist [ 387.143315][ T25] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 387.180106][ T7482] loop4: detected capacity change from 0 to 2048 [ 387.216976][ T7482] EXT4-fs: Ignoring removed bh option [ 387.272616][ T25] usb 2-1: USB disconnect, device number 11 [ 387.276091][ T7482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.628860][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.641629][ T44] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 387.854306][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 387.877775][ T44] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 387.887400][ T44] usb 1-1: config 0 has no interface number 0 [ 387.894199][ T44] usb 1-1: config 0 interface 184 has no altsetting 0 [ 388.018186][ T44] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 388.028160][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.036625][ T44] usb 1-1: Product: syz [ 388.041031][ T44] usb 1-1: Manufacturer: syz [ 388.046148][ T44] usb 1-1: SerialNumber: syz [ 388.065209][ T44] usb 1-1: config 0 descriptor?? [ 388.105001][ T44] smsc75xx v1.0.0 [ 388.265461][ T1327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.363854][ T7497] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 388.467105][ T1327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.608501][ T7497] bond1 (unregistering): Released all slaves [ 388.687100][ T1327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.769268][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 388.781005][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 388.805079][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 388.816365][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 388.833866][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 388.846231][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 388.856950][ T44] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 388.892052][ T1327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.997082][ T44] usb 1-1: USB disconnect, device number 10 [ 389.281852][ T1327] bridge_slave_1: left allmulticast mode [ 389.287871][ T1327] bridge_slave_1: left promiscuous mode [ 389.294762][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.325402][ T7499] loop1: detected capacity change from 0 to 4096 [ 389.377762][ T1327] bridge_slave_0: left allmulticast mode [ 389.383890][ T1327] bridge_slave_0: left promiscuous mode [ 389.391216][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.585844][ T7499] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 390.164075][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.243035][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.273157][ T1327] bond0 (unregistering): Released all slaves [ 390.295734][ T1327] bond1 (unregistering): (slave bond2): Releasing backup interface [ 390.304106][ T1327] bond2 (unregistering): left promiscuous mode [ 390.325736][ T1327] bond1 (unregistering): Released all slaves [ 390.369156][ T1327] bond2 (unregistering): Released all slaves [ 391.160808][ T1327] hsr_slave_0: left promiscuous mode [ 391.221601][ T1327] hsr_slave_1: left promiscuous mode [ 391.229464][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.238639][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.316038][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.324200][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.354053][ T7518] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.492' sets config #2 [ 391.426034][ T1327] veth1_macvtap: left promiscuous mode [ 391.432513][ T1327] veth0_macvtap: left promiscuous mode [ 391.438596][ T1327] veth1_vlan: left promiscuous mode [ 391.445030][ T1327] veth0_vlan: left promiscuous mode [ 391.467355][ T5083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.522637][ T5083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.554367][ T5083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.568770][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.581462][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 391.601748][ T44] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 391.613151][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.147540][ T1327] team0 (unregistering): Port device team_slave_1 removed [ 392.186559][ T1327] team0 (unregistering): Port device team_slave_0 removed [ 393.209933][ T7523] chnl_net:caif_netlink_parms(): no params data found [ 393.220519][ T7534] loop2: detected capacity change from 0 to 1024 [ 393.255659][ T7534] EXT4-fs: Ignoring removed nobh option [ 393.261966][ T7534] EXT4-fs: Ignoring removed bh option [ 393.431121][ T7534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.451774][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 393.631801][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 393.663172][ T44] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 393.672527][ T44] usb 1-1: config 0 has no interface number 0 [ 393.679064][ T44] usb 1-1: config 0 interface 184 has no altsetting 0 [ 393.734968][ T5083] Bluetooth: hci2: command tx timeout [ 393.740318][ T7542] loop1: detected capacity change from 0 to 4096 [ 393.759995][ T44] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 393.772955][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.783614][ T44] usb 1-1: Product: syz [ 393.788720][ T44] usb 1-1: Manufacturer: syz [ 393.794566][ T44] usb 1-1: SerialNumber: syz [ 393.806178][ T44] usb 1-1: config 0 descriptor?? [ 393.819163][ T44] smsc75xx v1.0.0 [ 394.168389][ T7542] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 394.464675][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 394.476084][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 394.499662][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 394.511958][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 394.522283][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 394.532924][ T44] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 394.543586][ T44] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 394.704349][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.712283][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.720132][ T7523] bridge_slave_0: entered allmulticast mode [ 394.729556][ T7523] bridge_slave_0: entered promiscuous mode [ 394.753180][ T44] usb 1-1: USB disconnect, device number 11 [ 394.826562][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.834692][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.842718][ T7523] bridge_slave_1: entered allmulticast mode [ 394.852446][ T7523] bridge_slave_1: entered promiscuous mode [ 395.038233][ T7554] xt_TCPMSS: Only works on TCP SYN packets [ 395.182296][ T7523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.263940][ T7523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.392512][ T2013] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 395.503169][ T7523] team0: Port device team_slave_0 added [ 395.553541][ T7523] team0: Port device team_slave_1 added [ 395.601780][ T2013] usb 2-1: Using ep0 maxpacket: 8 [ 395.639274][ T2013] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.650006][ T2013] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 395.659609][ T2013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.719243][ T2013] usb 2-1: config 0 descriptor?? [ 395.804198][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.812299][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.838810][ T7523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.852563][ T5083] Bluetooth: hci2: command tx timeout [ 395.879066][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.887398][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.916806][ T7523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.960377][ T44] usb 2-1: USB disconnect, device number 13 [ 396.159751][ T7523] hsr_slave_0: entered promiscuous mode [ 396.176932][ T7523] hsr_slave_1: entered promiscuous mode [ 396.186012][ T7523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.194776][ T7523] Cannot create hsr debugfs directory [ 397.164096][ T7227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.289358][ T7572] loop1: detected capacity change from 0 to 2048 [ 397.299989][ T7572] EXT4-fs: Ignoring removed bh option [ 397.437593][ T7572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.526458][ T7581] loop2: detected capacity change from 0 to 17 [ 397.568860][ T7581] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 397.814639][ T7185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.827416][ T7523] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 397.892621][ T5083] Bluetooth: hci2: command tx timeout [ 397.894732][ T7523] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 398.004606][ T7523] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 398.068822][ T7523] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 398.295358][ T7590] random: crng reseeded on system resumption [ 398.448885][ T7591] loop1: detected capacity change from 0 to 64 [ 398.459273][ T2013] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 398.612867][ T2013] usb 3-1: Using ep0 maxpacket: 32 [ 398.626779][ T2013] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 398.636285][ T2013] usb 3-1: config 0 has no interface number 0 [ 398.643007][ T2013] usb 3-1: config 0 interface 184 has no altsetting 0 [ 398.703811][ T2013] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 398.714210][ T2013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.722776][ T2013] usb 3-1: Product: syz [ 398.727216][ T2013] usb 3-1: Manufacturer: syz [ 398.732793][ T2013] usb 3-1: SerialNumber: syz [ 398.816761][ T2013] usb 3-1: config 0 descriptor?? [ 398.892964][ T2013] smsc75xx v1.0.0 [ 399.150263][ T7185] hfs: node 4:3 still has 2 user(s)! [ 399.361740][ T7523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.492028][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 399.503346][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 399.554231][ T7523] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.576400][ T7598] ipvlan1: entered allmulticast mode [ 399.587446][ T7598] veth0_vlan: entered allmulticast mode [ 399.602497][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 399.613786][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 399.623896][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 399.626388][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.635301][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 399.642466][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.652469][ T2013] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 399.826776][ T2013] usb 3-1: USB disconnect, device number 12 [ 399.846088][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.853900][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.971908][ T5083] Bluetooth: hci2: command tx timeout [ 400.973124][ T7615] loop2: detected capacity change from 0 to 2048 [ 400.982331][ T7615] EXT4-fs: Ignoring removed bh option [ 401.000058][ T7619] program syz.1.523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.102541][ T7615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.372569][ T7227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.470490][ T7523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.601630][ T44] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 401.801676][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 401.819847][ T44] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 401.828951][ T44] usb 5-1: config 179 has no interface number 0 [ 401.840157][ T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 401.853720][ T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 401.865821][ T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 401.878357][ T44] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 401.878560][ T7523] veth0_vlan: entered promiscuous mode [ 401.888973][ T44] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 401.909436][ T44] usb 5-1: config 179 interface 65 has no altsetting 0 [ 401.917511][ T44] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 401.927548][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.965702][ T44] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 402.044593][ T7523] veth1_vlan: entered promiscuous mode [ 402.267686][ T7523] veth0_macvtap: entered promiscuous mode [ 402.339224][ T7633] random: crng reseeded on system resumption [ 402.360625][ T7629] loop2: detected capacity change from 0 to 1024 [ 402.374427][ T7523] veth1_macvtap: entered promiscuous mode [ 402.509908][ T5843] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 402.596922][ T7629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.610662][ T7629] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.692180][ T7523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.704112][ T7523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.714471][ T7523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.725409][ T7523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.725637][ T7639] fuse: Bad value for 'fd' [ 402.735561][ T7523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.735654][ T7523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.735825][ T7523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.735918][ T7523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.794694][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.822897][ T7629] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.525: corrupted xattr block 128: invalid ea_ino [ 402.851770][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 402.870793][ T5843] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.881463][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 402.889031][ T5843] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 402.898510][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.914573][ T7523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.926255][ T7523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.937191][ T7523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.947987][ T7523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.961863][ T7523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.974100][ T7523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.984313][ T7523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.996062][ T7523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.011029][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.028235][ T29] audit: type=1800 audit(1740205661.238:31): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.525" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 403.050946][ T5843] usb 2-1: config 0 descriptor?? [ 403.278025][ T7523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.288610][ T7523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.299424][ T7523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.309037][ T7523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.629458][ T7227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.701748][ T5843] usbhid 2-1:0.0: can't add hid device: -71 [ 403.708466][ T5843] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 403.756248][ T5843] usb 2-1: USB disconnect, device number 14 [ 404.210944][ T7648] veth0_to_bond: entered promiscuous mode [ 404.256856][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 404.358329][ T7648] veth0_to_bond (unregistering): left promiscuous mode [ 404.386095][ T7647] block device autoloading is deprecated and will be removed. [ 404.464613][ T7648] bond0: (slave bond_slave_0): Releasing backup interface [ 404.681875][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 404.892108][ T5843] usb 5-1: USB disconnect, device number 15 [ 404.892346][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 404.906851][ T5843] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 404.944446][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 404.997057][ T25] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 405.009660][ T25] usb 3-1: config 0 has no interface number 0 [ 405.017692][ T25] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 405.028271][ T25] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 405.131724][ T25] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 405.141313][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.149582][ T25] usb 3-1: Product: syz [ 405.154202][ T25] usb 3-1: Manufacturer: syz [ 405.159049][ T25] usb 3-1: SerialNumber: syz [ 405.208320][ T25] usb 3-1: config 0 descriptor?? [ 405.223772][ T7649] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 405.617461][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.629598][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.313189][ T5843] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 406.474770][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 406.504933][ T5843] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 406.513851][ T5843] usb 5-1: config 0 has no interface number 0 [ 406.520212][ T5843] usb 5-1: config 0 interface 184 has no altsetting 0 [ 406.586744][ T5843] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 406.596782][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.605251][ T5843] usb 5-1: Product: syz [ 406.609673][ T5843] usb 5-1: Manufacturer: syz [ 406.615342][ T5843] usb 5-1: SerialNumber: syz [ 406.683930][ T7667] loop0: detected capacity change from 0 to 2048 [ 406.700832][ T5843] usb 5-1: config 0 descriptor?? [ 406.721173][ T7667] EXT4-fs: Ignoring removed bh option [ 406.732178][ T5843] smsc75xx v1.0.0 [ 407.033965][ T7667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.608193][ T25] usb 3-1: USB disconnect, device number 13 [ 407.637583][ T5843] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 407.649079][ T5843] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 407.664310][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.731977][ T5843] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 407.743360][ T5843] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 407.753475][ T5843] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 407.764259][ T5843] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 407.778295][ T5843] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 407.909075][ T5843] usb 5-1: USB disconnect, device number 16 [ 408.061801][ T7684] random: crng reseeded on system resumption [ 408.191914][ T7680] loop1: detected capacity change from 0 to 1024 [ 408.261779][ T7684] loop2: detected capacity change from 0 to 64 [ 408.298908][ T7680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.312324][ T7680] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.350171][ T7680] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.538: corrupted xattr block 128: invalid ea_ino [ 408.395551][ T7691] fuse: Bad value for 'fd' [ 408.518618][ T2013] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 408.677463][ T7185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.706762][ T2013] usb 1-1: device descriptor read/64, error -71 [ 408.792966][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.802755][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.914523][ T7227] hfs: node 4:3 still has 2 user(s)! [ 408.966812][ T2013] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 409.061920][ T5843] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 409.135754][ T2013] usb 1-1: device descriptor read/64, error -71 [ 409.188632][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.197030][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.254949][ T2013] usb usb1-port1: attempt power cycle [ 409.344663][ T5843] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 409.350225][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.354589][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.354716][ T5843] usb 5-1: Product: syz [ 409.362678][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.391028][ T5843] usb 5-1: Manufacturer: syz [ 409.396034][ T5843] usb 5-1: SerialNumber: syz [ 409.516633][ T5843] usb 5-1: config 0 descriptor?? [ 409.672157][ T2013] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 409.697824][ T2013] usb 1-1: device descriptor read/8, error -71 [ 409.737145][ T5843] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 409.940202][ T5843] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 409.947550][ T5843] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 409.954755][ T5843] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 409.987937][ T2013] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 410.038764][ T2013] usb 1-1: device descriptor read/8, error -71 [ 410.064197][ T5843] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 410.151712][ T5843] usb 5-1: USB disconnect, device number 17 [ 410.166294][ T2013] usb usb1-port1: unable to enumerate USB device [ 410.249896][ T7711] loop1: detected capacity change from 0 to 64 [ 411.075069][ T7725] veth0_to_bond: entered promiscuous mode [ 411.088725][ T7721] loop1: detected capacity change from 0 to 2048 [ 411.101202][ T7721] EXT4-fs: Ignoring removed bh option [ 411.125319][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 411.198933][ T7725] veth0_to_bond (unregistering): left promiscuous mode [ 411.224129][ T7725] bond0: (slave bond_slave_0): Releasing backup interface [ 411.224694][ T7721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.467155][ T5843] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 411.564301][ T7185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.631523][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 411.681827][ T5843] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 411.690942][ T5843] usb 5-1: config 0 has no interface number 0 [ 411.697650][ T5843] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 411.708597][ T5843] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 411.711748][ T7733] loop2: detected capacity change from 0 to 1024 [ 411.732341][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 411.776419][ T7736] random: crng reseeded on system resumption [ 411.939872][ T5843] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 411.942373][ T7733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.949840][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.961702][ T7733] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.972724][ T5843] usb 5-1: Product: syz [ 411.972834][ T5843] usb 5-1: Manufacturer: syz [ 411.972930][ T5843] usb 5-1: SerialNumber: syz [ 412.026079][ T7733] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.551: corrupted xattr block 128: invalid ea_ino [ 412.034638][ T7739] loop0: detected capacity change from 0 to 64 [ 412.040173][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 412.058825][ T25] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 412.059376][ T7733] fuse: Bad value for 'fd' [ 412.067550][ T25] usb 4-1: config 0 has no interface number 0 [ 412.067689][ T25] usb 4-1: config 0 interface 184 has no altsetting 0 [ 412.098882][ T5843] usb 5-1: config 0 descriptor?? [ 412.108730][ T7728] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 412.129580][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 412.139667][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.148413][ T25] usb 4-1: Product: syz [ 412.153001][ T25] usb 4-1: Manufacturer: syz [ 412.157916][ T25] usb 4-1: SerialNumber: syz [ 412.196113][ T25] usb 4-1: config 0 descriptor?? [ 412.223885][ T25] smsc75xx v1.0.0 [ 412.546997][ T7227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.732260][ T7741] loop1: detected capacity change from 0 to 4096 [ 412.815954][ T7741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.956339][ T7741] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 412.969885][ T5797] hfs: node 4:3 still has 2 user(s)! [ 413.125942][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 413.137916][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 413.182031][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 413.194174][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 413.210440][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 413.222865][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 413.234262][ T25] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 413.318056][ T7750] ipvlan1: entered allmulticast mode [ 413.324006][ T7750] veth0_vlan: entered allmulticast mode [ 413.475868][ T25] usb 4-1: USB disconnect, device number 21 [ 413.713709][ T7185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.385531][ T5843] usb 5-1: USB disconnect, device number 18 [ 414.475000][ T7755] loop0: detected capacity change from 0 to 2048 [ 414.527021][ T7755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.599740][ T7761] loop1: detected capacity change from 0 to 736 [ 415.318200][ T7769] loop4: detected capacity change from 0 to 2048 [ 415.328091][ T7769] EXT4-fs: Ignoring removed bh option [ 415.373345][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 415.413429][ T5843] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 415.425639][ T7769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.534723][ T7776] random: crng reseeded on system resumption [ 415.561689][ T5843] usb 1-1: device descriptor read/64, error -71 [ 415.609186][ T7777] loop3: detected capacity change from 0 to 64 [ 415.698817][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 415.721798][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 415.735127][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.750690][ T25] usb 2-1: config 11 has an invalid interface number: 138 but max is 0 [ 415.763258][ T25] usb 2-1: config 11 has no interface number 0 [ 415.769819][ T25] usb 2-1: config 11 interface 138 has no altsetting 0 [ 415.802249][ T5843] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 415.814698][ T25] usb 2-1: New USB device found, idVendor=0bfd, idProduct=000c, bcdDevice=c8.e1 [ 415.831172][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.841861][ T25] usb 2-1: Product: syz [ 415.847263][ T25] usb 2-1: Manufacturer: ï½ ï¢é—­î›•é«ëƒ­á°°ë£†ïœ°ç€€ë’Žâ»¸ê©šá³¾ä”•ï ¶æ­¥êµ­ê§•íŠ¶ì¢¸ä¾“â‹£îŒå¾¬ä–¥í–²æ¿©ï†¦ì¢ ã²«ë¯‰î•µæ²³â´½ç‹£ã»è¯ˆè¯ˆé¸ïƒŽâ¿ï£±â¿•ï“«â²«Ü©ë“ꙓ鉱꯷剎饙è„å¿­ë´â­²è˜­éœ‡ã’ƒã›‰ê’²æ•“㽹⋭é‰ë££íŒè…£ç«™ê¿šè¶²êº¬ [ 415.876291][ T25] usb 2-1: SerialNumber: syz [ 415.893237][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 415.931599][ T29] audit: type=1326 audit(1740205674.248:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.2.564" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 415.971833][ T5843] usb 1-1: device descriptor read/64, error -71 [ 416.014150][ T7779] tipc: Started in network mode [ 416.019382][ T7779] tipc: Node identity ac14140f, cluster identity 4711 [ 416.030436][ T7779] tipc: Enabled bearer , priority 10 [ 416.096913][ T5843] usb usb1-port1: attempt power cycle [ 416.222270][ T7761] netlink: 'syz.1.558': attribute type 1 has an invalid length. [ 416.291678][ T7761] bond1: entered promiscuous mode [ 416.298341][ T7761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.396866][ T7523] hfs: node 4:3 still has 2 user(s)! [ 416.482052][ T5843] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 416.497495][ T7783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.514271][ T5843] usb 1-1: device descriptor read/8, error -71 [ 416.517343][ T7783] bond1: (slave bond2): making interface the new active one [ 416.528426][ T7783] bond2: entered promiscuous mode [ 416.539294][ T7783] bond1: (slave bond2): Enslaving as an active interface with an up link [ 416.761738][ T5843] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 416.809393][ T7787] ipvlan1: entered allmulticast mode [ 416.815386][ T7787] veth0_vlan: entered allmulticast mode [ 416.838146][ T5843] usb 1-1: device descriptor read/8, error -71 [ 416.945709][ T25] kvaser_usb 2-1:11.138: error -ENODEV: Cannot get usb endpoint(s) [ 416.958126][ T5843] usb usb1-port1: unable to enumerate USB device [ 417.013522][ T25] usb 2-1: USB disconnect, device number 15 [ 417.141771][ T5843] tipc: Node number set to 2886997007 [ 417.454525][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 417.624037][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 417.673449][ T7799] loop4: detected capacity change from 0 to 2048 [ 417.732446][ T5843] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 417.761991][ T7799] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.810841][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 417.842644][ T25] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 417.851803][ T25] usb 4-1: config 0 has no interface number 0 [ 417.858611][ T25] usb 4-1: config 0 interface 184 has no altsetting 0 [ 417.902122][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 417.915138][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.924518][ T25] usb 4-1: Product: syz [ 417.928964][ T25] usb 4-1: Manufacturer: syz [ 417.931540][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 417.933902][ T25] usb 4-1: SerialNumber: syz [ 417.979406][ T25] usb 4-1: config 0 descriptor?? [ 417.988902][ T5843] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 417.997855][ T5843] usb 3-1: config 0 has no interface number 0 [ 418.000951][ T25] smsc75xx v1.0.0 [ 418.004401][ T5843] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 418.004552][ T5843] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 418.065885][ T5843] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 418.075639][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.086718][ T5843] usb 3-1: Product: syz [ 418.091130][ T5843] usb 3-1: Manufacturer: syz [ 418.096128][ T5843] usb 3-1: SerialNumber: syz [ 418.163827][ T5843] usb 3-1: config 0 descriptor?? [ 418.174326][ T7797] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 418.375418][ T5841] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 418.515337][ T5841] usb 2-1: device descriptor read/64, error -71 [ 418.564537][ T7804] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 418.572529][ T7804] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 418.582332][ T7804] vhci_hcd vhci_hcd.0: Device attached [ 418.677297][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 418.773809][ T44] vhci_hcd: vhci_device speed not set [ 418.780755][ T5841] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 418.841122][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 418.852832][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 418.898374][ T44] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 418.909318][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 418.922312][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 418.932582][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 418.948643][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 418.960865][ T25] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 419.042881][ T5841] usb 2-1: device descriptor read/64, error -71 [ 419.061780][ T25] usb 4-1: USB disconnect, device number 22 [ 419.131639][ T5842] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 419.152970][ T5841] usb usb2-port1: attempt power cycle [ 419.315495][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 419.334254][ T5842] usb 5-1: config 5 has an invalid interface number: 147 but max is 0 [ 419.347103][ T5842] usb 5-1: config 5 has no interface number 0 [ 419.355757][ T5842] usb 5-1: config 5 interface 147 has no altsetting 0 [ 419.421135][ T5842] usb 5-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=cb.27 [ 419.430887][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.439711][ T5842] usb 5-1: Product: syz [ 419.447715][ T5842] usb 5-1: Manufacturer: syz [ 419.453850][ T5842] usb 5-1: SerialNumber: syz [ 419.521599][ T5841] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 419.557653][ T5841] usb 2-1: device descriptor read/8, error -71 [ 419.731970][ T5842] usb 5-1: bad CDC descriptors [ 419.738705][ T5842] cdc_acm 5-1:5.147: Zero length descriptor references [ 419.747194][ T5842] cdc_acm 5-1:5.147: probe with driver cdc_acm failed with error -22 [ 419.805305][ T5842] usb 5-1: USB disconnect, device number 19 [ 419.841624][ T5841] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 419.882264][ T7813] fuse: Unknown parameter 'fd0x0000000000000004' [ 419.888499][ T5841] usb 2-1: device descriptor read/8, error -71 [ 420.013505][ T5841] usb usb2-port1: unable to enumerate USB device [ 420.300672][ T7805] vhci_hcd: connection reset by peer [ 420.308432][ T4117] vhci_hcd: stop threads [ 420.314122][ T4117] vhci_hcd: release socket [ 420.319577][ T4117] vhci_hcd: disconnect device [ 420.550757][ T5843] usb 3-1: USB disconnect, device number 14 [ 420.751810][ T5841] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 420.931707][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 420.956189][ T5841] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.967642][ T5841] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.015131][ T5841] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.025053][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.033471][ T5841] usb 1-1: Product: syz [ 421.037895][ T5841] usb 1-1: Manufacturer: syz [ 421.042905][ T5841] usb 1-1: SerialNumber: syz [ 421.086746][ T5843] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 421.228952][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 421.281744][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 421.329842][ T5843] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.341505][ T5843] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.351719][ T5843] usb 5-1: config 0 interface 0 has no altsetting 0 [ 421.359259][ T5843] usb 5-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 421.362701][ T5841] usb 1-1: 0:2 : does not exist [ 421.368878][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.403671][ T5843] usb 5-1: config 0 descriptor?? [ 421.511938][ T5841] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 421.651744][ T5841] usb 1-1: USB disconnect, device number 20 [ 421.729673][ T7833] loop1: detected capacity change from 0 to 64 [ 421.914792][ T5843] hid (null): unknown global tag 0xd [ 421.920550][ T5843] hid (null): unknown global tag 0x3b [ 421.926493][ T5843] hid (null): global environment stack underflow [ 421.933465][ T5843] hid (null): report_id 25602 is invalid [ 421.939375][ T5843] hid (null): bogus close delimiter [ 421.945263][ T5843] hid (null): global environment stack underflow [ 421.952033][ T5843] hid (null): unknown global tag 0xd [ 421.968060][ T5843] hid (null): unknown global tag 0xe [ 421.974290][ T5843] hid (null): global environment stack underflow [ 421.991967][ T5843] hid-generic 0003:060B:430A.0002: unexpected long global item [ 422.093514][ T5843] hid-generic 0003:060B:430A.0002: probe with driver hid-generic failed with error -22 [ 422.149604][ T5843] usb 5-1: USB disconnect, device number 20 [ 422.691698][ T5843] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 422.728063][ T7845] netlink: 61927 bytes leftover after parsing attributes in process `syz.1.588'. [ 422.902173][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 422.915378][ T5843] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 422.924181][ T5843] usb 1-1: config 0 has no interface number 0 [ 422.933863][ T5843] usb 1-1: config 0 interface 184 has no altsetting 0 [ 423.032894][ T5843] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 423.043235][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.051709][ T5843] usb 1-1: Product: syz [ 423.056199][ T5843] usb 1-1: Manufacturer: syz [ 423.061008][ T5843] usb 1-1: SerialNumber: syz [ 423.112958][ T5843] usb 1-1: config 0 descriptor?? [ 423.136645][ T5843] smsc75xx v1.0.0 [ 423.314303][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 423.589768][ T5843] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 423.602856][ T5843] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 423.613042][ T5843] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 423.624632][ T5843] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 423.704232][ T7850] loop2: detected capacity change from 0 to 4096 [ 423.742228][ T7850] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 424.041914][ T44] vhci_hcd: vhci_device speed not set [ 424.076451][ T7863] random: crng reseeded on system resumption [ 424.221201][ T7865] netlink: 'syz.3.596': attribute type 1 has an invalid length. [ 424.331512][ T7867] loop1: detected capacity change from 0 to 64 [ 424.342239][ T7865] bond1 (unregistering): Released all slaves [ 425.254120][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 425.271815][ T5841] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 425.471539][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 425.540448][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.551493][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.597552][ T5841] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.607169][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.615658][ T5841] usb 5-1: Product: syz [ 425.620057][ T5841] usb 5-1: Manufacturer: syz [ 425.625087][ T5841] usb 5-1: SerialNumber: syz [ 425.761533][ T44] usb 1-1: USB disconnect, device number 21 [ 425.937788][ T5841] usb 5-1: 0:2 : does not exist [ 426.010695][ T5841] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 426.143588][ T5841] usb 5-1: USB disconnect, device number 21 [ 426.879164][ T7891] loop0: detected capacity change from 0 to 2048 [ 426.916423][ T7891] EXT4-fs: Ignoring removed bh option [ 427.033650][ T7891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.495839][ T7909] tap0: tun_chr_ioctl cmd 1074025677 [ 427.502781][ T7909] tap0: linktype set to 0 [ 427.503634][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.612253][ T7911] random: crng reseeded on system resumption [ 427.696272][ T7912] netlink: 48 bytes leftover after parsing attributes in process `syz.3.609'. [ 428.331637][ T5843] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 428.507968][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 428.555131][ T5843] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 428.567503][ T5843] usb 5-1: config 0 has no interface number 0 [ 428.575014][ T5843] usb 5-1: config 0 interface 184 has no altsetting 0 [ 428.625354][ T5843] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 428.634984][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.643956][ T5843] usb 5-1: Product: syz [ 428.648354][ T5843] usb 5-1: Manufacturer: syz [ 428.653326][ T5843] usb 5-1: SerialNumber: syz [ 428.709032][ T5843] usb 5-1: config 0 descriptor?? [ 428.741418][ T5843] smsc75xx v1.0.0 [ 429.094339][ T2013] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 429.144308][ T5843] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 429.155775][ T5843] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 429.166095][ T5843] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 429.182435][ T5843] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 429.311927][ T2013] usb 4-1: Using ep0 maxpacket: 16 [ 429.337632][ T2013] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.348769][ T2013] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.420057][ T2013] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.429595][ T2013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.438350][ T2013] usb 4-1: Product: syz [ 429.442918][ T2013] usb 4-1: Manufacturer: syz [ 429.447751][ T2013] usb 4-1: SerialNumber: syz [ 429.745760][ T2013] usb 4-1: 0:2 : does not exist [ 429.821936][ T2013] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 429.871616][ T7936] loop0: detected capacity change from 0 to 2048 [ 429.950856][ T7936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.967603][ T2013] usb 4-1: USB disconnect, device number 23 [ 430.761052][ T7946] loop1: detected capacity change from 0 to 64 [ 430.802045][ T7947] netlink: 48 bytes leftover after parsing attributes in process `syz.0.625'. [ 431.256961][ T2013] usb 5-1: USB disconnect, device number 22 [ 431.854044][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 432.145133][ T5841] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 432.331703][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 432.360321][ T5841] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 432.369275][ T5841] usb 1-1: config 0 has no interface number 0 [ 432.375995][ T5841] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 432.386348][ T5841] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 432.433030][ T5841] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 432.442687][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.453853][ T5841] usb 1-1: Product: syz [ 432.458262][ T5841] usb 1-1: Manufacturer: syz [ 432.469511][ T5841] usb 1-1: SerialNumber: syz [ 432.573459][ T5841] usb 1-1: config 0 descriptor?? [ 432.582926][ T7971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 433.227523][ T7985] netlink: 48 bytes leftover after parsing attributes in process `syz.4.637'. [ 433.322203][ T7980] loop3: detected capacity change from 0 to 2048 [ 433.381435][ T7980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.448192][ T7987] loop1: detected capacity change from 0 to 64 [ 433.493194][ T2013] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 433.692427][ T2013] usb 3-1: Using ep0 maxpacket: 16 [ 433.730745][ T2013] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.746949][ T2013] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.875896][ T2013] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.887358][ T2013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.896378][ T2013] usb 3-1: Product: syz [ 433.900790][ T2013] usb 3-1: Manufacturer: syz [ 433.905801][ T2013] usb 3-1: SerialNumber: syz [ 433.926261][ T7991] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 433.934410][ T7991] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 433.942978][ T7991] vhci_hcd vhci_hcd.0: Device attached [ 434.049872][ T7992] vhci_hcd: connection closed [ 434.051007][ T4054] vhci_hcd: stop threads [ 434.061091][ T4054] vhci_hcd: release socket [ 434.066141][ T4054] vhci_hcd: disconnect device [ 434.168884][ T2013] usb 3-1: 0:2 : does not exist [ 434.221935][ T2013] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 434.358343][ T2013] usb 3-1: USB disconnect, device number 15 [ 434.656293][ T5843] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 434.800352][ T5841] usb 1-1: USB disconnect, device number 22 [ 434.852397][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 434.877939][ T5843] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 434.887040][ T5843] usb 4-1: config 0 has no interface number 0 [ 434.893614][ T5843] usb 4-1: config 0 interface 184 has no altsetting 0 [ 434.949328][ T5843] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 434.959170][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.967694][ T5843] usb 4-1: Product: syz [ 434.972399][ T5843] usb 4-1: Manufacturer: syz [ 434.977257][ T5843] usb 4-1: SerialNumber: syz [ 435.005045][ T5843] usb 4-1: config 0 descriptor?? [ 435.033234][ T5843] smsc75xx v1.0.0 [ 435.459417][ T5843] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 435.470919][ T5843] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 435.481014][ T5843] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 435.492399][ T5843] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 435.550488][ T8002] loop0: detected capacity change from 0 to 1024 [ 435.628902][ T8002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.643164][ T8002] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.690407][ T8002] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.643: corrupted xattr block 128: invalid ea_ino [ 435.746708][ T8012] fuse: Bad value for 'fd' [ 436.021078][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.460907][ T8022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.649'. [ 436.948258][ T8025] loop1: detected capacity change from 0 to 64 [ 437.134528][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 437.462623][ T2013] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 437.632703][ T8037] loop2: detected capacity change from 0 to 256 [ 437.647854][ T5843] usb 4-1: USB disconnect, device number 24 [ 437.661897][ T2013] usb 1-1: Using ep0 maxpacket: 16 [ 437.664845][ T8037] MINIX-fs: deleted inode referenced: 1 [ 437.709498][ T2013] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 437.718271][ T2013] usb 1-1: config 0 has no interface number 0 [ 437.725595][ T2013] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 437.737363][ T2013] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 437.831140][ T2013] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 437.840776][ T2013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.849442][ T2013] usb 1-1: Product: syz [ 437.854176][ T2013] usb 1-1: Manufacturer: syz [ 437.859015][ T2013] usb 1-1: SerialNumber: syz [ 437.914123][ T2013] usb 1-1: config 0 descriptor?? [ 437.924406][ T8034] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 438.648630][ T8046] loop4: detected capacity change from 0 to 1024 [ 438.781789][ T8046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.795189][ T8046] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.998821][ T8046] fuse: Bad value for 'fd' [ 439.046096][ T8058] netlink: 48 bytes leftover after parsing attributes in process `syz.2.663'. [ 439.312491][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.091744][ T5841] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 440.323541][ T5841] usb 2-1: no configurations [ 440.326924][ T2013] usb 1-1: USB disconnect, device number 23 [ 440.328311][ T5841] usb 2-1: can't read configurations, error -22 [ 440.475316][ T5841] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 440.634719][ T8074] loop0: detected capacity change from 0 to 256 [ 440.675491][ T5841] usb 2-1: no configurations [ 440.680371][ T5841] usb 2-1: can't read configurations, error -22 [ 440.702034][ T5841] usb usb2-port1: attempt power cycle [ 440.717539][ T8074] MINIX-fs: deleted inode referenced: 1 [ 441.061801][ T5841] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 441.102029][ T5841] usb 2-1: no configurations [ 441.107150][ T5841] usb 2-1: can't read configurations, error -22 [ 441.287549][ T5841] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 441.354399][ T5841] usb 2-1: no configurations [ 441.362430][ T5841] usb 2-1: can't read configurations, error -22 [ 441.392540][ T5841] usb usb2-port1: unable to enumerate USB device [ 441.407022][ T8082] loop4: detected capacity change from 0 to 1024 [ 441.453180][ T8082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.469387][ T8082] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.509439][ T8086] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 273: padding at end of block bitmap is not set [ 441.510832][ T8088] netlink: 48 bytes leftover after parsing attributes in process `syz.3.675'. [ 441.611061][ T8082] fuse: Bad value for 'fd' [ 441.782794][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.243552][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 442.521783][ T2013] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 442.538720][ T8105] loop4: detected capacity change from 0 to 2048 [ 442.549504][ T8105] EXT4-fs: Ignoring removed bh option [ 442.607730][ T8105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.702380][ T2013] usb 1-1: Using ep0 maxpacket: 16 [ 442.770491][ T2013] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 442.779429][ T2013] usb 1-1: config 0 has no interface number 0 [ 442.785981][ T2013] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 442.797889][ T2013] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 442.820988][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.865363][ T2013] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 442.875749][ T2013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.884214][ T2013] usb 1-1: Product: syz [ 442.888773][ T2013] usb 1-1: Manufacturer: syz [ 442.896006][ T2013] usb 1-1: SerialNumber: syz [ 443.020394][ T2013] usb 1-1: config 0 descriptor?? [ 443.029890][ T8101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 443.251147][ T8110] loop2: detected capacity change from 0 to 256 [ 443.297246][ T8110] MINIX-fs: deleted inode referenced: 1 [ 443.379605][ T8110] fuse: Bad value for 'fd' [ 443.661165][ T8116] random: crng reseeded on system resumption [ 444.121370][ T8122] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 444.291838][ T8122] bond3 (unregistering): Released all slaves [ 445.111141][ T8134] fuse: Unknown parameter 'fd0x0000000000000004' [ 445.613204][ T2013] usb 1-1: USB disconnect, device number 24 [ 446.001615][ T5870] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 446.174614][ T5870] usb 2-1: no configurations [ 446.179663][ T5870] usb 2-1: can't read configurations, error -22 [ 446.288537][ T8149] loop3: detected capacity change from 0 to 256 [ 446.302752][ T8149] MINIX-fs: deleted inode referenced: 1 [ 446.329409][ T8149] fuse: Bad value for 'fd' [ 446.361650][ T5870] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 446.525035][ T5870] usb 2-1: no configurations [ 446.530031][ T5870] usb 2-1: can't read configurations, error -22 [ 446.550642][ T5870] usb usb2-port1: attempt power cycle [ 446.901932][ T5870] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 446.938027][ T5870] usb 2-1: no configurations [ 446.943167][ T5870] usb 2-1: can't read configurations, error -22 [ 447.034938][ T8157] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 447.114071][ T8157] bond3 (unregistering): Released all slaves [ 447.114459][ T5870] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 447.165043][ T5870] usb 2-1: no configurations [ 447.170103][ T5870] usb 2-1: can't read configurations, error -22 [ 447.188136][ T5870] usb usb2-port1: unable to enumerate USB device [ 447.272094][ T2013] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 447.431659][ T2013] usb 1-1: Using ep0 maxpacket: 16 [ 447.449527][ T2013] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.460643][ T2013] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.492490][ T2013] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.503908][ T2013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.512956][ T2013] usb 1-1: Product: syz [ 447.517356][ T2013] usb 1-1: Manufacturer: syz [ 447.522532][ T2013] usb 1-1: SerialNumber: syz [ 447.761903][ T2013] usb 1-1: 0:2 : does not exist [ 447.787038][ T2013] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 447.860054][ T8165] random: crng reseeded on system resumption [ 447.865199][ T2013] usb 1-1: USB disconnect, device number 25 [ 448.045649][ T8165] loop3: detected capacity change from 0 to 64 [ 448.240057][ T7523] hfs: node 4:3 still has 1 user(s)! [ 448.411837][ T8168] veth0_to_bond: entered promiscuous mode [ 448.428989][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'. [ 448.479415][ T8168] veth0_to_bond (unregistering): left promiscuous mode [ 448.519531][ T8168] bond0: (slave bond_slave_0): Releasing backup interface [ 448.771739][ T2013] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 448.801962][ T5870] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 448.942952][ T2013] usb 4-1: Using ep0 maxpacket: 16 [ 448.983907][ T2013] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 448.992760][ T2013] usb 4-1: config 0 has no interface number 0 [ 448.999146][ T2013] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 449.009514][ T2013] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 449.021695][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 449.081478][ T5870] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 449.090254][ T5870] usb 5-1: config 0 has no interface number 0 [ 449.096981][ T5870] usb 5-1: config 0 interface 184 has no altsetting 0 [ 449.122273][ T5870] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 449.132413][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.142543][ T5870] usb 5-1: Product: syz [ 449.147555][ T5870] usb 5-1: Manufacturer: syz [ 449.152528][ T5870] usb 5-1: SerialNumber: syz [ 449.161732][ T2013] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 449.172014][ T2013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.180402][ T2013] usb 4-1: Product: syz [ 449.185043][ T2013] usb 4-1: Manufacturer: syz [ 449.189912][ T2013] usb 4-1: SerialNumber: syz [ 449.207771][ T5870] usb 5-1: config 0 descriptor?? [ 449.222970][ T2013] usb 4-1: config 0 descriptor?? [ 449.233320][ T8169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 449.249221][ T5870] smsc75xx v1.0.0 [ 449.257633][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 449.269075][ T5870] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 449.467346][ T8179] loop2: detected capacity change from 0 to 256 [ 449.491181][ T8179] MINIX-fs: deleted inode referenced: 1 [ 449.528754][ T8179] fuse: Bad value for 'fd' [ 449.632124][ T5870] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 449.827541][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 449.871585][ T5870] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 449.880376][ T5870] usb 1-1: config 0 has no interface number 0 [ 449.887055][ T5870] usb 1-1: config 0 interface 184 has no altsetting 0 [ 449.975974][ T5870] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 449.985825][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.994392][ T5870] usb 1-1: Product: syz [ 449.999082][ T5870] usb 1-1: Manufacturer: syz [ 450.004298][ T5870] usb 1-1: SerialNumber: syz [ 450.032996][ T5870] usb 1-1: config 0 descriptor?? [ 450.056033][ T5870] smsc75xx v1.0.0 [ 450.344800][ T8187] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 450.432501][ T8187] bond3 (unregistering): Released all slaves [ 450.722450][ T5870] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 450.734991][ T5870] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 450.746445][ T5870] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 450.758373][ T5870] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 450.768668][ T5870] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 450.782661][ T5870] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 450.794613][ T5870] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 450.815986][ T5870] usb 1-1: USB disconnect, device number 26 [ 451.059421][ T8192] loop1: detected capacity change from 0 to 2048 [ 451.108856][ T8192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.359997][ T8194] random: crng reseeded on system resumption [ 451.820425][ T8194] loop2: detected capacity change from 0 to 64 [ 451.839236][ T2013] usb 4-1: USB disconnect, device number 25 [ 451.937150][ T8197] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 451.943977][ T8197] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 451.952509][ T8197] vhci_hcd vhci_hcd.0: Device attached [ 452.084449][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 452.143638][ T5841] vhci_hcd: vhci_device speed not set [ 452.157555][ T44] usb 5-1: USB disconnect, device number 23 [ 452.241617][ T5841] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 452.326109][ T8201] loop1: detected capacity change from 0 to 2048 [ 452.350528][ T8201] EXT4-fs: Ignoring removed bh option [ 452.413666][ T8201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.542529][ T2013] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 452.657316][ T7185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.712126][ T2013] usb 1-1: Using ep0 maxpacket: 16 [ 452.752908][ T2013] usb 1-1: config 5 has an invalid interface number: 147 but max is 0 [ 452.761630][ T2013] usb 1-1: config 5 has no interface number 0 [ 452.767973][ T2013] usb 1-1: config 5 interface 147 has no altsetting 0 [ 452.841022][ T2013] usb 1-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=cb.27 [ 452.850641][ T2013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.859631][ T2013] usb 1-1: Product: syz [ 452.864231][ T2013] usb 1-1: Manufacturer: syz [ 452.869083][ T2013] usb 1-1: SerialNumber: syz [ 453.432073][ T44] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 453.526643][ T8221] netlink: 'syz.2.724': attribute type 1 has an invalid length. [ 453.628754][ T8221] bond1 (unregistering): Released all slaves [ 453.663831][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 453.700022][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.710542][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.750430][ T8198] vhci_hcd: connection reset by peer [ 453.763543][ T2013] usb 1-1: bad CDC descriptors [ 453.770195][ T2013] cdc_acm 1-1:5.147: Zero length descriptor references [ 453.777611][ T2013] cdc_acm 1-1:5.147: probe with driver cdc_acm failed with error -22 [ 453.786969][ T4001] vhci_hcd: stop threads [ 453.791582][ T4001] vhci_hcd: release socket [ 453.796285][ T4001] vhci_hcd: disconnect device [ 453.813293][ T2013] usb 1-1: USB disconnect, device number 27 [ 453.871016][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.881745][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.890005][ T44] usb 2-1: Product: syz [ 453.894587][ T44] usb 2-1: Manufacturer: syz [ 453.899412][ T44] usb 2-1: SerialNumber: syz [ 454.184430][ T44] usb 2-1: 0:2 : does not exist [ 454.233080][ T44] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 454.322731][ T44] usb 2-1: USB disconnect, device number 28 [ 454.360386][ T8227] loop3: detected capacity change from 0 to 2048 [ 454.430054][ T8227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.556945][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 454.634522][ T5842] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 454.812742][ T5842] usb 1-1: Using ep0 maxpacket: 32 [ 454.838708][ T5842] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 454.848759][ T5842] usb 1-1: config 0 has no interface number 0 [ 454.851758][ T2013] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 454.857514][ T5842] usb 1-1: config 0 interface 184 has no altsetting 0 [ 454.926979][ T5842] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 454.937218][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.945731][ T5842] usb 1-1: Product: syz [ 454.950121][ T5842] usb 1-1: Manufacturer: syz [ 454.956002][ T5842] usb 1-1: SerialNumber: syz [ 454.966565][ T5842] usb 1-1: config 0 descriptor?? [ 454.985160][ T5842] smsc75xx v1.0.0 [ 455.066271][ T2013] usb 3-1: Using ep0 maxpacket: 16 [ 455.107114][ T2013] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 455.115940][ T2013] usb 3-1: config 0 has no interface number 0 [ 455.123247][ T2013] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 455.133549][ T2013] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 455.232337][ T2013] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 455.241881][ T2013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.250150][ T2013] usb 3-1: Product: syz [ 455.254666][ T2013] usb 3-1: Manufacturer: syz [ 455.259505][ T2013] usb 3-1: SerialNumber: syz [ 455.286669][ T2013] usb 3-1: config 0 descriptor?? [ 455.303900][ T8234] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 455.322258][ T5870] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 455.359169][ T8240] random: crng reseeded on system resumption [ 455.495536][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 455.513796][ T5870] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 455.522720][ T5870] usb 4-1: config 0 has no interface number 0 [ 455.529286][ T5870] usb 4-1: config 0 interface 184 has no altsetting 0 [ 455.627090][ T5870] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 455.636914][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.645463][ T5870] usb 4-1: Product: syz [ 455.650035][ T5870] usb 4-1: Manufacturer: syz [ 455.655238][ T5870] usb 4-1: SerialNumber: syz [ 455.696841][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 455.708340][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 455.736875][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 455.748378][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 455.753057][ T5870] usb 4-1: config 0 descriptor?? [ 455.758395][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 455.758540][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 455.784523][ T5870] smsc75xx v1.0.0 [ 455.785098][ T5842] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 455.788635][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 455.811857][ T5870] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 455.842180][ T8241] loop4: detected capacity change from 0 to 2048 [ 455.855418][ T8243] loop1: detected capacity change from 0 to 1024 [ 455.902225][ T8241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.921386][ T5842] usb 1-1: USB disconnect, device number 28 [ 457.201553][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 457.324920][ T5841] vhci_hcd: vhci_device speed not set [ 457.560454][ T8261] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 457.603795][ T5842] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 457.612133][ T2013] usb 3-1: USB disconnect, device number 16 [ 457.708100][ T8261] bond3 (unregistering): Released all slaves [ 457.782177][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 457.827090][ T5842] usb 1-1: config 5 has an invalid interface number: 147 but max is 0 [ 457.835982][ T5842] usb 1-1: config 5 has no interface number 0 [ 457.842717][ T5842] usb 1-1: config 5 interface 147 has no altsetting 0 [ 457.921733][ T5842] usb 1-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=cb.27 [ 457.931399][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.939667][ T5842] usb 1-1: Product: syz [ 457.944189][ T5842] usb 1-1: Manufacturer: syz [ 457.951958][ T5842] usb 1-1: SerialNumber: syz [ 458.246971][ T5842] usb 1-1: bad CDC descriptors [ 458.258804][ T5842] cdc_acm 1-1:5.147: Zero length descriptor references [ 458.267894][ T5842] cdc_acm 1-1:5.147: probe with driver cdc_acm failed with error -22 [ 458.319316][ T5842] usb 1-1: USB disconnect, device number 29 [ 458.455995][ T8271] random: crng reseeded on system resumption [ 458.641669][ T5841] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 458.642978][ T8271] loop2: detected capacity change from 0 to 64 [ 458.743073][ T5842] usb 4-1: USB disconnect, device number 26 [ 458.831912][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 458.857143][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.871135][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.929604][ T5841] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.939647][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.948041][ T5841] usb 5-1: Product: syz [ 458.952586][ T5841] usb 5-1: Manufacturer: syz [ 458.957403][ T5841] usb 5-1: SerialNumber: syz [ 459.007160][ T7227] hfs: node 4:3 still has 2 user(s)! [ 459.108609][ T8276] random: crng reseeded on system resumption [ 459.255848][ T5841] usb 5-1: 0:2 : does not exist [ 459.300543][ T5841] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 459.315541][ T8277] loop3: detected capacity change from 0 to 1024 [ 459.446117][ T5841] usb 5-1: USB disconnect, device number 24 [ 459.922098][ T2013] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 460.121631][ T2013] usb 3-1: Using ep0 maxpacket: 32 [ 460.172629][ T2013] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 460.181121][ T2013] usb 3-1: config 0 has no interface number 0 [ 460.187650][ T2013] usb 3-1: config 0 interface 184 has no altsetting 0 [ 460.258969][ T2013] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 460.269579][ T2013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.278869][ T2013] usb 3-1: Product: syz [ 460.284091][ T2013] usb 3-1: Manufacturer: syz [ 460.288934][ T2013] usb 3-1: SerialNumber: syz [ 460.354296][ T2013] usb 3-1: config 0 descriptor?? [ 460.383939][ T2013] smsc75xx v1.0.0 [ 460.819867][ T8301] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 461.032999][ T8301] bond1 (unregistering): Released all slaves [ 461.051995][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 461.064622][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 461.152084][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 461.166427][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 461.179362][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 461.190561][ T2013] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 461.201114][ T2013] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 461.295471][ T2013] usb 3-1: USB disconnect, device number 17 [ 461.353012][ T5870] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 461.366286][ T8297] loop4: detected capacity change from 0 to 4096 [ 461.421055][ T8297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.524303][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 461.548619][ T5870] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 461.557501][ T5870] usb 2-1: config 0 has no interface number 0 [ 461.557941][ T8297] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 461.563931][ T5870] usb 2-1: config 0 interface 184 has no altsetting 0 [ 461.639943][ T5870] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 461.649591][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.658098][ T5870] usb 2-1: Product: syz [ 461.662622][ T5870] usb 2-1: Manufacturer: syz [ 461.667453][ T5870] usb 2-1: SerialNumber: syz [ 461.683183][ T5870] usb 2-1: config 0 descriptor?? [ 461.713438][ T5870] smsc75xx v1.0.0 [ 461.717308][ T5870] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 461.728591][ T5870] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 461.815383][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 462.171939][ T5841] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 462.191049][ T8322] random: crng reseeded on system resumption [ 462.378142][ T8323] loop2: detected capacity change from 0 to 1024 [ 462.438097][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 462.456378][ T5841] usb 4-1: config 5 has an invalid interface number: 147 but max is 0 [ 462.465450][ T5841] usb 4-1: config 5 has no interface number 0 [ 462.472360][ T5841] usb 4-1: config 5 interface 147 has no altsetting 0 [ 462.494640][ T5841] usb 4-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=cb.27 [ 462.504470][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.512880][ T5841] usb 4-1: Product: syz [ 462.517831][ T5841] usb 4-1: Manufacturer: syz [ 462.522820][ T5841] usb 4-1: SerialNumber: syz [ 462.778548][ T5841] usb 4-1: bad CDC descriptors [ 462.785516][ T5841] cdc_acm 4-1:5.147: Zero length descriptor references [ 462.793214][ T5841] cdc_acm 4-1:5.147: probe with driver cdc_acm failed with error -22 [ 462.811439][ T5841] usb 4-1: USB disconnect, device number 27 [ 463.493998][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.145693][ T8343] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 464.258917][ T8343] bond1 (unregistering): Released all slaves [ 464.347322][ T8341] loop4: detected capacity change from 0 to 4096 [ 464.483730][ T5841] usb 2-1: USB disconnect, device number 29 [ 464.846064][ T5870] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 464.891690][ T29] audit: type=1800 audit(1740205723.198:33): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.764" name="file0" dev="loop4" ino=0 res=0 errno=0 [ 464.946323][ T8352] random: crng reseeded on system resumption [ 465.064901][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 465.085021][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.096562][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 465.103693][ T5870] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 465.113225][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.145192][ T5870] usb 4-1: config 0 descriptor?? [ 465.209533][ T8359] loop1: detected capacity change from 0 to 64 [ 465.837889][ T5870] usbhid 4-1:0.0: can't add hid device: -71 [ 465.846318][ T5870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 465.911854][ T5870] usb 4-1: USB disconnect, device number 28 [ 465.985460][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 466.011510][ T5841] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 466.181920][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 466.199472][ T5841] usb 3-1: config 0 interface 0 altsetting 190 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 466.213406][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 466.220462][ T5841] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 466.232894][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.259387][ T5841] usb 3-1: config 0 descriptor?? [ 466.394656][ T5842] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 466.575563][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 466.619355][ T5842] usb 5-1: config 5 has an invalid interface number: 147 but max is 0 [ 466.628401][ T5842] usb 5-1: config 5 has no interface number 0 [ 466.635098][ T5842] usb 5-1: config 5 interface 147 has no altsetting 0 [ 466.713021][ T8363] tmpfs: Bad value for 'mode' [ 466.731584][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 466.734318][ T5842] usb 5-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=cb.27 [ 466.740656][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 466.749974][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.773404][ T5842] usb 5-1: Product: syz [ 466.778010][ T5842] usb 5-1: Manufacturer: syz [ 466.783110][ T5842] usb 5-1: SerialNumber: syz [ 466.864866][ T8371] loop1: detected capacity change from 0 to 4096 [ 466.955873][ T5841] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 466.968323][ T5841] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 466.976738][ T5841] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 466.979572][ T8371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.984332][ T5841] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 467.004754][ T5841] uclogic 0003:5543:0781.0003: unknown main item tag 0x0 [ 467.046031][ T5842] usb 5-1: bad CDC descriptors [ 467.053128][ T5842] cdc_acm 5-1:5.147: Zero length descriptor references [ 467.064724][ T5842] cdc_acm 5-1:5.147: probe with driver cdc_acm failed with error -22 [ 467.086300][ T5841] uclogic 0003:5543:0781.0003: No inputs registered, leaving [ 467.097105][ T5841] uclogic 0003:5543:0781.0003: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0 [ 467.114958][ T5842] usb 5-1: USB disconnect, device number 25 [ 467.159500][ T8371] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 467.168003][ T5841] usb 3-1: USB disconnect, device number 18 [ 467.479231][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 467.511496][ T8385] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 467.579034][ T8385] bond1 (unregistering): Released all slaves [ 467.701536][ T5870] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 467.893082][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 467.913076][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 467.920653][ T5870] usb 4-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 467.930422][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.982929][ T5870] usb 4-1: config 0 descriptor?? [ 468.367389][ T8395] random: crng reseeded on system resumption [ 468.502670][ T5870] wacom 0003:056A:037A.0004: item fetching failed at offset 6/7 [ 468.536685][ T5870] wacom 0003:056A:037A.0004: parse failed [ 468.544284][ T5870] wacom 0003:056A:037A.0004: probe with driver wacom failed with error -22 [ 468.568084][ T8397] loop4: detected capacity change from 0 to 64 [ 468.639532][ T8392] loop2: detected capacity change from 0 to 4096 [ 468.692790][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.779'. [ 468.704800][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 468.762542][ T5870] usb 4-1: USB disconnect, device number 29 [ 469.038508][ T8399] loop0: detected capacity change from 0 to 2048 [ 469.095520][ T29] audit: type=1800 audit(1740205727.418:34): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.783" name="file0" dev="loop2" ino=0 res=0 errno=0 [ 469.149347][ T8399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.411734][ T7185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.943706][ T8407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.789'. [ 470.231598][ T5841] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 470.249763][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.256764][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.358714][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 470.460852][ T8414] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 470.483120][ T5841] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 470.492772][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.557763][ T5841] usb 5-1: config 0 descriptor?? [ 470.563371][ T8414] bond1 (unregistering): Released all slaves [ 470.632131][ T5842] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 470.843875][ T5842] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 470.858495][ T5842] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 470.870602][ T5842] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 470.958221][ T5842] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.967777][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.976301][ T5842] usb 3-1: SerialNumber: syz [ 471.244735][ T5842] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 471.253126][ T5842] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 471.280590][ T5842] usb 3-1: USB disconnect, device number 19 [ 471.503568][ T8416] fuse: Invalid rootmode [ 471.811940][ T5842] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 471.891781][ T29] audit: type=1326 audit(1740205730.208:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.0.799" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fd579 code=0x0 [ 471.989972][ T5842] usb 3-1: device descriptor read/64, error -71 [ 472.232003][ T5842] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 472.381814][ T5842] usb 3-1: device descriptor read/64, error -71 [ 472.504265][ T5842] usb usb3-port1: attempt power cycle [ 472.862131][ T5842] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 472.916120][ T5842] usb 3-1: device descriptor read/8, error -71 [ 473.029265][ T8446] netlink: 48 bytes leftover after parsing attributes in process `syz.3.804'. [ 473.172191][ T5842] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 473.225063][ T5842] usb 3-1: device descriptor read/8, error -71 [ 473.286367][ T5870] usb 5-1: USB disconnect, device number 26 [ 473.356390][ T5842] usb usb3-port1: unable to enumerate USB device [ 473.560036][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 473.647791][ T8450] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 473.768734][ T8450] bond1 (unregistering): Released all slaves [ 474.784995][ T8471] netlink: 48 bytes leftover after parsing attributes in process `syz.1.816'. [ 474.869364][ T8472] loop2: detected capacity change from 0 to 256 [ 474.894898][ T8472] exfat: Deprecated parameter 'namecase' [ 474.979611][ T8472] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 474.993985][ T8466] loop0: detected capacity change from 0 to 4096 [ 475.038556][ T8466] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 475.100484][ T8468] loop3: detected capacity change from 0 to 4096 [ 475.139667][ T8468] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 475.653143][ T5870] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 475.864946][ T8480] loop2: detected capacity change from 0 to 1024 [ 475.881819][ T5870] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 475.891950][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.949225][ T5870] usb 2-1: config 0 descriptor?? [ 475.961049][ T8480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.977663][ T8480] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.108843][ T8480] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.820: corrupted xattr block 128: invalid ea_ino [ 476.265387][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 476.353494][ T8490] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 476.492802][ T8491] bond3 (unregistering): Released all slaves [ 476.617078][ T7227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.411559][ T7134] Bluetooth: hci1: command 0x0406 tx timeout [ 477.746240][ T5841] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 477.924750][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 477.950559][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 477.985818][ T5841] usb 4-1: config 128 has an invalid interface number: 113 but max is 0 [ 477.994962][ T5841] usb 4-1: config 128 has no interface number 0 [ 478.001665][ T5841] usb 4-1: config 128 interface 113 has no altsetting 0 [ 478.049563][ T5841] usb 4-1: New USB device found, idVendor=3277, idProduct=0072, bcdDevice=19.c7 [ 478.059455][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.067950][ T5841] usb 4-1: Product: syz [ 478.072666][ T5841] usb 4-1: Manufacturer: syz [ 478.077520][ T5841] usb 4-1: SerialNumber: syz [ 478.356402][ T5841] usb 4-1: Found UVC 0.00 device syz (3277:0072) [ 478.363367][ T5841] usb 4-1: No valid video chain found. [ 478.429447][ T5841] usb 4-1: USB disconnect, device number 30 [ 478.472586][ T5870] usb 2-1: USB disconnect, device number 30 [ 479.172304][ T5841] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 479.362260][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 479.369602][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 479.399434][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.408370][ T8528] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 479.411605][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 479.411764][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 479.411913][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.412118][ T5841] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 479.412252][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.470976][ T5841] usb 5-1: config 0 descriptor?? [ 479.486281][ T8519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 479.514793][ T8526] loop0: detected capacity change from 0 to 2048 [ 479.584577][ T5841] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 479.683214][ T8526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.749278][ T8528] bond1 (unregistering): Released all slaves [ 479.879301][ T8519] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 480.003544][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.013616][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.140331][ T5870] usb 5-1: USB disconnect, device number 27 [ 480.563669][ T8536] loop1: detected capacity change from 0 to 4096 [ 480.579774][ T8536] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 480.755359][ T5870] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 480.942013][ T5870] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 480.951738][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.012383][ T5870] usb 3-1: config 0 descriptor?? [ 481.037082][ T8545] loop3: detected capacity change from 0 to 164 [ 481.531785][ T5841] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 481.698530][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short [ 481.714208][ T5841] usb 4-1: config index 0 descriptor too short (expected 12592, got 95) [ 481.722953][ T5841] usb 4-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 481.732169][ T5841] usb 4-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 481.742744][ T5841] usb 4-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 481.757243][ T5841] usb 4-1: config index 1 descriptor too short (expected 12592, got 95) [ 481.766063][ T5841] usb 4-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 481.775067][ T5841] usb 4-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 481.785666][ T5841] usb 4-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 481.798142][ T5841] usb 4-1: config index 2 descriptor too short (expected 12592, got 95) [ 481.810135][ T5841] usb 4-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 481.819202][ T5841] usb 4-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 481.829690][ T5841] usb 4-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 481.842632][ T5841] usb 4-1: config index 3 descriptor too short (expected 12592, got 95) [ 481.851463][ T5841] usb 4-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 481.860386][ T5841] usb 4-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 481.871021][ T5841] usb 4-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 481.884355][ T5841] usb 4-1: config index 4 descriptor too short (expected 12592, got 95) [ 481.893150][ T5841] usb 4-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 481.902203][ T5841] usb 4-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 481.914970][ T5841] usb 4-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 481.937222][ T5841] usb 4-1: string descriptor 0 read error: -22 [ 481.944444][ T5841] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 481.953891][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.531663][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 483.261616][ T5083] Bluetooth: hci2: command 0x0405 tx timeout [ 483.568101][ T5841] usb 3-1: USB disconnect, device number 24 [ 484.003759][ T5841] usb 4-1: USB disconnect, device number 31 [ 489.583190][ T5870] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 489.770519][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 489.807780][ T5870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.821700][ T5870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.882722][ T5870] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 489.892709][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.902752][ T5870] usb 3-1: Product: syz [ 489.907156][ T5870] usb 3-1: Manufacturer: syz [ 489.912840][ T5870] usb 3-1: SerialNumber: syz [ 490.157865][ T5870] usb 3-1: 0:2 : does not exist [ 490.190527][ T5870] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 490.238889][ T5870] usb 3-1: USB disconnect, device number 25 [ 494.292209][ T8567] random: crng reseeded on system resumption [ 494.640764][ T8575] loop0: detected capacity change from 0 to 1024 [ 494.675878][ T8572] loop1: detected capacity change from 0 to 1024 [ 495.612040][ T8582] loop2: detected capacity change from 0 to 4096 [ 495.697792][ T8582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.752862][ T8582] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 495.961940][ T5870] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 496.121798][ T5870] usb 2-1: device descriptor read/64, error -71 [ 496.362949][ T5870] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 496.532449][ T5870] usb 2-1: device descriptor read/64, error -71 [ 496.643488][ T5870] usb usb2-port1: attempt power cycle [ 496.763031][ T8602] loop0: detected capacity change from 0 to 4096 [ 496.905888][ T8602] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 496.923567][ T29] audit: type=1804 audit(1740205755.248:36): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.866" name="/newroot/188/file0/file0" dev="loop0" ino=0 res=1 errno=0 [ 497.017896][ T5870] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 497.044980][ T5870] usb 2-1: device descriptor read/8, error -71 [ 497.092779][ T5841] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 497.261651][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 497.278343][ T5841] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 497.287272][ T5841] usb 5-1: config 0 has no interface number 0 [ 497.292224][ T5870] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 497.293613][ T5841] usb 5-1: config 0 interface 184 has no altsetting 0 [ 497.320264][ T5841] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 497.329930][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.338461][ T5841] usb 5-1: Product: syz [ 497.343360][ T5841] usb 5-1: Manufacturer: syz [ 497.348228][ T5841] usb 5-1: SerialNumber: syz [ 497.356579][ T5870] usb 2-1: device descriptor read/8, error -71 [ 497.359125][ T5841] usb 5-1: config 0 descriptor?? [ 497.388287][ T5841] smsc75xx v1.0.0 [ 497.392242][ T5841] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 497.403547][ T5841] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 497.449204][ T8612] tipc: Started in network mode [ 497.455278][ T8612] tipc: Node identity ac1414aa, cluster identity 4711 [ 497.462882][ T8612] tipc: New replicast peer: 100.1.1.1 [ 497.469527][ T8612] tipc: Enabled bearer , priority 10 [ 497.477830][ T5870] usb usb2-port1: unable to enumerate USB device [ 497.939328][ T7227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.592408][ T5841] tipc: Node number set to 2886997162 [ 499.011699][ T5870] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 499.174289][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 499.204428][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.216342][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 499.224021][ T5870] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 499.233531][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.251546][ T5870] usb 3-1: config 0 descriptor?? [ 499.847225][ T5870] usbhid 3-1:0.0: can't add hid device: -71 [ 499.854544][ T5870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 499.874984][ T5870] usb 3-1: USB disconnect, device number 26 [ 500.297605][ T5841] usb 5-1: USB disconnect, device number 28 [ 500.764212][ T8646] FAULT_INJECTION: forcing a failure. [ 500.764212][ T8646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.777872][ T8646] CPU: 1 UID: 0 PID: 8646 Comm: syz.1.883 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 500.778001][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 500.778077][ T8646] Call Trace: [ 500.778129][ T8646] [ 500.778174][ T8646] dump_stack_lvl+0x216/0x2d0 [ 500.778316][ T8646] dump_stack+0x1e/0x24 [ 500.778425][ T8646] should_fail_ex+0x767/0x830 [ 500.778599][ T8646] should_fail+0x2a/0x40 [ 500.778747][ T8646] should_fail_usercopy+0x2e/0x40 [ 500.778909][ T8646] _copy_from_user+0x35/0x110 [ 500.779070][ T8646] get_compat_msghdr+0x66/0x720 [ 500.779229][ T8646] ? kmsan_get_metadata+0x13e/0x1c0 [ 500.779396][ T8646] ___sys_sendmsg+0x1a4/0x3c0 [ 500.779520][ T8646] ? kmsan_get_metadata+0x13e/0x1c0 [ 500.779675][ T8646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 500.779845][ T8646] ? __rcu_read_unlock+0x7b/0xe0 [ 500.780014][ T8646] ? __fget_files+0x42b/0x500 [ 500.780190][ T8646] ? kmsan_get_metadata+0x13e/0x1c0 [ 500.780342][ T8646] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 500.780513][ T8646] __sys_sendmsg+0x1b6/0x300 [ 500.780635][ T8646] ? kmsan_get_metadata+0x13e/0x1c0 [ 500.780791][ T8646] ? kmsan_get_metadata+0x13e/0x1c0 [ 500.780953][ T8646] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 500.781124][ T8646] ia32_sys_call+0x2685/0x4180 [ 500.781270][ T8646] __do_fast_syscall_32+0xb0/0x110 [ 500.781417][ T8646] ? irqentry_exit+0x16/0x60 [ 500.781545][ T8646] do_fast_syscall_32+0x38/0x80 [ 500.781680][ T8646] do_SYSENTER_32+0x1f/0x30 [ 500.781815][ T8646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.781992][ T8646] RIP: 0023:0xf7f97579 [ 500.782081][ T8646] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 500.782197][ T8646] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 500.782315][ T8646] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 500.782401][ T8646] RDX: 00000000240040c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.782478][ T8646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.782551][ T8646] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 500.782625][ T8646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.782715][ T8646] [ 501.080265][ T8640] loop3: detected capacity change from 0 to 4096 [ 501.221730][ T5870] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 501.368962][ T8640] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 501.396424][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 501.405532][ T29] audit: type=1804 audit(1740205759.718:37): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.880" name="/newroot/76/file0/file0" dev="loop3" ino=0 res=1 errno=0 [ 501.457998][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.470194][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 501.525925][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 501.535483][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.543901][ T5870] usb 5-1: Product: syz [ 501.548309][ T5870] usb 5-1: Manufacturer: syz [ 501.553392][ T5870] usb 5-1: SerialNumber: syz [ 501.906604][ T5870] usb 5-1: 0:2 : does not exist [ 501.944371][ T5870] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 502.054821][ T5870] usb 5-1: USB disconnect, device number 29 [ 502.136250][ T8659] FAULT_INJECTION: forcing a failure. [ 502.136250][ T8659] name failslab, interval 1, probability 0, space 0, times 0 [ 502.149822][ T8659] CPU: 1 UID: 0 PID: 8659 Comm: syz.2.890 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 502.149961][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 502.150037][ T8659] Call Trace: [ 502.150084][ T8659] [ 502.150132][ T8659] dump_stack_lvl+0x216/0x2d0 [ 502.150270][ T8659] dump_stack+0x1e/0x24 [ 502.150383][ T8659] should_fail_ex+0x767/0x830 [ 502.150558][ T8659] should_failslab+0x17f/0x210 [ 502.150719][ T8659] kmem_cache_alloc_node_noprof+0xf4/0xe00 [ 502.150866][ T8659] ? __alloc_skb+0x1e9/0x7b0 [ 502.151032][ T8659] ? kmsan_get_metadata+0x13e/0x1c0 [ 502.151197][ T8659] __alloc_skb+0x1e9/0x7b0 [ 502.151360][ T8659] netlink_alloc_large_skb+0x1b4/0x280 [ 502.151514][ T8659] netlink_sendmsg+0xa96/0x11e0 [ 502.151689][ T8659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.151840][ T8659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.152000][ T8659] __sock_sendmsg+0x30f/0x380 [ 502.152150][ T8659] ____sys_sendmsg+0x890/0xda0 [ 502.152295][ T8659] ___sys_sendmsg+0x28d/0x3c0 [ 502.152419][ T8659] ? kmsan_get_metadata+0x13e/0x1c0 [ 502.152575][ T8659] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 502.152744][ T8659] ? __rcu_read_unlock+0x7b/0xe0 [ 502.152919][ T8659] ? __fget_files+0x42b/0x500 [ 502.153086][ T8659] ? kmsan_get_metadata+0x13e/0x1c0 [ 502.153241][ T8659] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 502.153413][ T8659] __sys_sendmsg+0x1b6/0x300 [ 502.153553][ T8659] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 502.153718][ T8659] ia32_sys_call+0x2685/0x4180 [ 502.153869][ T8659] __do_fast_syscall_32+0xb0/0x110 [ 502.154042][ T8659] ? irqentry_exit+0x16/0x60 [ 502.154170][ T8659] do_fast_syscall_32+0x38/0x80 [ 502.154311][ T8659] do_SYSENTER_32+0x1f/0x30 [ 502.154446][ T8659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.154628][ T8659] RIP: 0023:0xf741d579 [ 502.154721][ T8659] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 502.154833][ T8659] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 502.154962][ T8659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 502.155050][ T8659] RDX: 0000000020040810 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.155129][ T8659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.155203][ T8659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 502.155284][ T8659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.155376][ T8659] [ 502.931857][ T5841] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 503.119381][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 503.156513][ T5841] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 503.165291][ T5841] usb 3-1: config 0 has no interface number 0 [ 503.171763][ T5841] usb 3-1: config 0 interface 184 has no altsetting 0 [ 503.230463][ T5841] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 503.242840][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.251112][ T5841] usb 3-1: Product: syz [ 503.255782][ T5841] usb 3-1: Manufacturer: syz [ 503.260603][ T5841] usb 3-1: SerialNumber: syz [ 503.281757][ T5841] usb 3-1: config 0 descriptor?? [ 503.305394][ T5841] smsc75xx v1.0.0 [ 503.313732][ T5841] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 503.325683][ T5841] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 504.025125][ T8685] loop1: detected capacity change from 0 to 1024 [ 504.110397][ T8685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.123487][ T8685] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.162221][ T8685] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.899: corrupted xattr block 128: invalid ea_ino [ 504.329362][ T7185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.401038][ T8698] digital: digital_start_poll: Unknown protocol [ 504.799122][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 504.814588][ T8706] loop3: detected capacity change from 0 to 16 [ 504.849119][ T8706] erofs (device loop3): mounted with root inode @ nid 36. [ 505.301731][ T5841] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 505.491510][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 505.524439][ T5841] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.535154][ T5841] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.599294][ T5841] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 505.609507][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.617983][ T5841] usb 2-1: Product: syz [ 505.622547][ T5841] usb 2-1: Manufacturer: syz [ 505.627424][ T5841] usb 2-1: SerialNumber: syz [ 505.914977][ T5841] usb 2-1: 0:2 : does not exist [ 505.956986][ T5841] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 506.146688][ T5842] usb 3-1: USB disconnect, device number 27 [ 506.200814][ T5841] usb 2-1: USB disconnect, device number 35 [ 506.285595][ T7134] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 506.507524][ T8727] loop2: detected capacity change from 0 to 1024 [ 506.672688][ T8727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.685490][ T8727] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.807360][ T8727] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.912: corrupted xattr block 128: invalid ea_ino [ 507.096078][ T7227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.262374][ T29] audit: type=1326 audit(1740205765.568:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.3.916" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa3579 code=0x0 [ 507.616655][ T29] audit: type=1326 audit(1740205765.938:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.2.917" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 507.645250][ T8748] loop1: detected capacity change from 0 to 512 [ 507.743497][ T8748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 507.756956][ T8748] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.950029][ T8748] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 507.961809][ T8748] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 507.972687][ T8748] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.919: Failed to acquire dquot type 0 [ 507.996211][ T8748] netlink: 'syz.1.919': attribute type 11 has an invalid length. [ 508.004494][ T8748] netlink: 36 bytes leftover after parsing attributes in process `syz.1.919'. [ 508.319832][ T7185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 508.699028][ T8763] fuse: Bad value for 'fd' [ 508.771968][ T5842] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 508.870218][ T7134] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 508.970839][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 509.002518][ T5842] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 509.011069][ T5842] usb 4-1: config 0 has no interface number 0 [ 509.018691][ T5842] usb 4-1: config 0 interface 184 has no altsetting 0 [ 509.086404][ T5842] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 509.096021][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.105151][ T5842] usb 4-1: Product: syz [ 509.109570][ T5842] usb 4-1: Manufacturer: syz [ 509.115433][ T5842] usb 4-1: SerialNumber: syz [ 509.154017][ T5842] usb 4-1: config 0 descriptor?? [ 509.178498][ T5842] smsc75xx v1.0.0 [ 509.182482][ T5842] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 509.193585][ T5842] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 509.299299][ T8769] loop2: detected capacity change from 0 to 1024 [ 509.372062][ T8769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.384795][ T8769] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.455721][ T8769] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.927: corrupted xattr block 128: invalid ea_ino [ 509.808938][ T7227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.932272][ T5842] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 510.946557][ T7134] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 511.088057][ T8801] fuse: Bad value for 'group_id' [ 511.105896][ T8801] fuse: Bad value for 'group_id' [ 511.111905][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 511.135462][ T5842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.146058][ T5842] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.204681][ T5842] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 511.214189][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.222528][ T5842] usb 2-1: Product: syz [ 511.226921][ T5842] usb 2-1: Manufacturer: syz [ 511.231867][ T5842] usb 2-1: SerialNumber: syz [ 511.512758][ T5842] usb 2-1: 0:2 : does not exist [ 511.548490][ T8805] fuse: Bad value for 'fd' [ 511.554616][ T5842] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 511.653787][ T5842] usb 2-1: USB disconnect, device number 36 [ 512.108027][ T5842] usb 4-1: USB disconnect, device number 32 [ 512.295333][ T8808] loop4: detected capacity change from 0 to 4096 [ 512.343636][ T8808] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 512.405981][ T8808] ntfs3(loop4): failed to replay log file. Can't mount rw! [ 513.061008][ T8809] loop4: detected capacity change from 0 to 1024 [ 513.470009][ T8825] FAULT_INJECTION: forcing a failure. [ 513.470009][ T8825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.483613][ T8825] CPU: 1 UID: 0 PID: 8825 Comm: syz.3.950 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 513.483742][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 513.483824][ T8825] Call Trace: [ 513.483874][ T8825] [ 513.483918][ T8825] dump_stack_lvl+0x216/0x2d0 [ 513.484054][ T8825] dump_stack+0x1e/0x24 [ 513.484165][ T8825] should_fail_ex+0x767/0x830 [ 513.484340][ T8825] should_fail+0x2a/0x40 [ 513.484491][ T8825] should_fail_usercopy+0x2e/0x40 [ 513.484658][ T8825] _copy_from_user+0x35/0x110 [ 513.484827][ T8825] get_compat_msghdr+0x66/0x720 [ 513.484984][ T8825] ? kmsan_get_metadata+0x13e/0x1c0 [ 513.485151][ T8825] ___sys_sendmsg+0x1a4/0x3c0 [ 513.485274][ T8825] ? kmsan_get_metadata+0x13e/0x1c0 [ 513.485433][ T8825] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 513.485603][ T8825] ? __rcu_read_unlock+0x7b/0xe0 [ 513.485774][ T8825] ? __fget_files+0x42b/0x500 [ 513.485944][ T8825] ? kmsan_get_metadata+0x13e/0x1c0 [ 513.486100][ T8825] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 513.486267][ T8825] __sys_sendmsg+0x1b6/0x300 [ 513.486387][ T8825] ? kmsan_get_metadata+0x13e/0x1c0 [ 513.486547][ T8825] ? kmsan_get_metadata+0x13e/0x1c0 [ 513.486714][ T8825] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 513.486886][ T8825] ia32_sys_call+0x2685/0x4180 [ 513.487043][ T8825] __do_fast_syscall_32+0xb0/0x110 [ 513.487194][ T8825] ? irqentry_exit+0x16/0x60 [ 513.487322][ T8825] do_fast_syscall_32+0x38/0x80 [ 513.487464][ T8825] do_SYSENTER_32+0x1f/0x30 [ 513.487600][ T8825] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 513.487784][ T8825] RIP: 0023:0xf7fa3579 [ 513.487879][ T8825] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 513.487997][ T8825] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 513.488114][ T8825] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 513.488201][ T8825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.488278][ T8825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 513.488353][ T8825] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 513.488430][ T8825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.488526][ T8825] [ 514.082028][ T7134] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 514.745437][ T5842] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 514.959551][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 514.991831][ T5842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.002700][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.038586][ T5842] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 515.048240][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.056825][ T5842] usb 5-1: Product: syz [ 515.061319][ T5842] usb 5-1: Manufacturer: syz [ 515.066148][ T5842] usb 5-1: SerialNumber: syz [ 515.068424][ T8837] loop0: detected capacity change from 0 to 4096 [ 515.150471][ T8850] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 515.158687][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 515.253952][ T8837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.374662][ T8837] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 515.396502][ T5842] usb 5-1: 0:2 : does not exist [ 515.439972][ T5842] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 515.571524][ T5842] usb 5-1: USB disconnect, device number 30 [ 516.247144][ T8864] loop4: detected capacity change from 0 to 164 [ 516.284039][ T8867] loop2: detected capacity change from 0 to 64 [ 516.677678][ T5083] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 516.801519][ T5842] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 517.044125][ T5842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 517.075791][ T5842] usb 5-1: config index 0 descriptor too short (expected 12592, got 95) [ 517.084532][ T5842] usb 5-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 517.093606][ T5842] usb 5-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 517.104119][ T5842] usb 5-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 517.148242][ T5842] usb 5-1: config index 1 descriptor too short (expected 12592, got 95) [ 517.156991][ T5842] usb 5-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 517.166204][ T5842] usb 5-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 517.177191][ T5842] usb 5-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 517.217452][ T5842] usb 5-1: config index 2 descriptor too short (expected 12592, got 95) [ 517.226820][ T5842] usb 5-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 517.239256][ T5842] usb 5-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 517.250337][ T5842] usb 5-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 517.351732][ T5842] usb 5-1: config index 3 descriptor too short (expected 12592, got 95) [ 517.360393][ T5842] usb 5-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 517.369434][ T5842] usb 5-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 517.380051][ T5842] usb 5-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 517.452103][ T5842] usb 5-1: config index 4 descriptor too short (expected 12592, got 95) [ 517.460840][ T5842] usb 5-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 517.469987][ T5842] usb 5-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 517.480966][ T5842] usb 5-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 517.540595][ T5842] usb 5-1: string descriptor 0 read error: -22 [ 517.550895][ T5842] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.560872][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.707340][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.373170][ T5083] Bluetooth: hci2: command 0x0405 tx timeout [ 519.498006][ T5870] usb 5-1: USB disconnect, device number 31 [ 519.936941][ T8910] veth0_vlan: entered allmulticast mode [ 520.240372][ T8912] syzkaller0: entered promiscuous mode [ 520.248301][ T8912] syzkaller0: entered allmulticast mode [ 520.273694][ T8910] ªªªªªª: renamed from vlan0 [ 526.643416][ T8996] pim6reg1: entered promiscuous mode [ 526.649131][ T8996] pim6reg1: entered allmulticast mode [ 526.817845][ T9001] pim6reg1: entered promiscuous mode [ 526.828888][ T9001] pim6reg1: entered allmulticast mode [ 528.417161][ T9023] pim6reg1: entered promiscuous mode [ 528.423504][ T9023] pim6reg1: entered allmulticast mode [ 528.443684][ T9022] pim6reg1: entered promiscuous mode [ 528.449222][ T9022] pim6reg1: entered allmulticast mode [ 529.456284][ T9033] pim6reg1: entered promiscuous mode [ 529.462232][ T9033] pim6reg1: entered allmulticast mode [ 530.403273][ T9048] pim6reg1: entered promiscuous mode [ 530.408919][ T9048] pim6reg1: entered allmulticast mode [ 531.690563][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.697439][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.339236][ T9106] pim6reg1: entered promiscuous mode [ 535.345118][ T9106] pim6reg1: entered allmulticast mode [ 536.819016][ T9127] veth0_vlan: entered allmulticast mode [ 538.780687][ T9148] pim6reg1: entered promiscuous mode [ 538.786635][ T9148] pim6reg1: entered allmulticast mode [ 544.240923][ T9218] pim6reg1: entered promiscuous mode [ 544.248097][ T9218] pim6reg1: entered allmulticast mode [ 545.178510][ T9231] tc_dump_action: action bad kind [ 545.952045][ T9235] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1119'. [ 546.521628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 547.035214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 547.080675][ T9243] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 548.651636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 550.005259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 550.545810][ T9252] misc userio: Can't change port type on an already running userio instance [ 551.644067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 551.912474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 552.031879][ T9258] loop3: detected capacity change from 0 to 4096 [ 552.062030][ T5841] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 552.120572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 552.164520][ T9262] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 552.270386][ T5841] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 552.279926][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.359729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 552.395997][ T5841] usb 5-1: config 0 descriptor?? [ 552.462366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 552.470942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 553.096972][ T5841] hid-rmi 0003:06CB:81A7.0005: hidraw0: USB HID v1.01 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 553.246738][ T5841] usb 5-1: USB disconnect, device number 32 [ 556.836200][ T9286] loop4: detected capacity change from 0 to 2048 [ 556.938155][ T9286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.270243][ T9288] ===================================================== [ 558.281747][ T9288] BUG: KMSAN: uninit-value in cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 558.290589][ T9288] cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 558.297216][ T9288] ____sys_sendmsg+0x22c/0xda0 [ 558.303419][ T9288] __sys_sendmsg_sock+0x42/0x60 [ 558.308384][ T9288] io_sendmsg+0x36a/0xe30 [ 558.313391][ T9288] io_issue_sqe+0x394/0x1fb0 [ 558.318091][ T9288] io_submit_sqes+0x11c3/0x2ff0 [ 558.323222][ T9288] __se_sys_io_uring_enter+0x41d/0x4da0 [ 558.328878][ T9288] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 558.335075][ T9288] ia32_sys_call+0xd59/0x4180 [ 558.339855][ T9288] __do_fast_syscall_32+0xb0/0x110 [ 558.345178][ T9288] do_fast_syscall_32+0x38/0x80 [ 558.350119][ T9288] do_SYSENTER_32+0x1f/0x30 [ 558.354819][ T9288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.361425][ T9288] [ 558.363791][ T9288] Uninit was stored to memory at: [ 558.368933][ T9288] io_sendmsg+0x694/0xe30 [ 558.373904][ T9288] io_issue_sqe+0x394/0x1fb0 [ 558.378593][ T9288] io_submit_sqes+0x11c3/0x2ff0 [ 558.384637][ T9288] __se_sys_io_uring_enter+0x41d/0x4da0 [ 558.390295][ T9288] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 558.396217][ T9288] ia32_sys_call+0xd59/0x4180 [ 558.402917][ T9288] __do_fast_syscall_32+0xb0/0x110 [ 558.408192][ T9288] do_fast_syscall_32+0x38/0x80 [ 558.414258][ T9288] do_SYSENTER_32+0x1f/0x30 [ 558.418953][ T9288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.425995][ T9288] [ 558.428408][ T9288] Uninit was created at: [ 558.433074][ T9288] __alloc_frozen_pages_noprof+0x9a7/0xe00 [ 558.439088][ T9288] alloc_pages_mpol+0x4cd/0x890 [ 558.444168][ T9288] alloc_frozen_pages_noprof+0x1bf/0x1e0 [ 558.449947][ T9288] allocate_slab+0x23a/0x1110 [ 558.456201][ T9288] ___slab_alloc+0x1287/0x3540 [ 558.461303][ T9288] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 558.467476][ T9288] __io_alloc_req_refill+0x84/0x5b0 [ 558.472905][ T9288] io_submit_sqes+0x90f/0x2ff0 [ 558.477783][ T9288] __se_sys_io_uring_enter+0x41d/0x4da0 [ 558.483712][ T9288] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 558.489538][ T9288] ia32_sys_call+0xd59/0x4180 [ 558.494474][ T9288] __do_fast_syscall_32+0xb0/0x110 [ 558.499699][ T9288] do_fast_syscall_32+0x38/0x80 [ 558.506526][ T9288] do_SYSENTER_32+0x1f/0x30 [ 558.511785][ T9288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.518335][ T9288] [ 558.520741][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.0.1138 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 558.531727][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 558.542037][ T9288] ===================================================== [ 558.549024][ T9288] Disabling lock debugging due to kernel taint [ 558.555376][ T9288] Kernel panic - not syncing: kmsan.panic set ... [ 558.561909][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.0.1138 Tainted: G B 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 558.574233][ T9288] Tainted: [B]=BAD_PAGE [ 558.578464][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 558.588640][ T9288] Call Trace: [ 558.592009][ T9288] [ 558.594992][ T9288] dump_stack_lvl+0x216/0x2d0 [ 558.599767][ T9288] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.605731][ T9288] dump_stack+0x1e/0x24 [ 558.610023][ T9288] panic+0x4e2/0xcf0 [ 558.614047][ T9288] ? kmsan_get_metadata+0xe1/0x1c0 [ 558.619280][ T9288] kmsan_report+0x2c7/0x2d0 [ 558.623898][ T9288] ? kmsan_get_metadata+0xe0/0x1c0 [ 558.629122][ T9288] ? __msan_warning+0x95/0x120 [ 558.633981][ T9288] ? cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 558.640604][ T9288] ? ____sys_sendmsg+0x22c/0xda0 [ 558.645651][ T9288] ? __sys_sendmsg_sock+0x42/0x60 [ 558.650761][ T9288] ? io_sendmsg+0x36a/0xe30 [ 558.655374][ T9288] ? io_issue_sqe+0x394/0x1fb0 [ 558.660252][ T9288] ? io_submit_sqes+0x11c3/0x2ff0 [ 558.665387][ T9288] ? __se_sys_io_uring_enter+0x41d/0x4da0 [ 558.671252][ T9288] ? __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 558.677180][ T9288] ? ia32_sys_call+0xd59/0x4180 [ 558.682139][ T9288] ? __do_fast_syscall_32+0xb0/0x110 [ 558.687543][ T9288] ? do_fast_syscall_32+0x38/0x80 [ 558.692673][ T9288] ? do_SYSENTER_32+0x1f/0x30 [ 558.697450][ T9288] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.704087][ T9288] ? kernel_text_address+0x129/0x1b0 [ 558.709512][ T9288] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.714895][ T9288] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 558.721341][ T9288] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.726656][ T9288] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.732588][ T9288] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 558.738525][ T9288] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.743837][ T9288] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 558.750275][ T9288] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.755609][ T9288] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.761557][ T9288] __msan_warning+0x95/0x120 [ 558.766254][ T9288] cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 558.772708][ T9288] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 558.778647][ T9288] ? stack_depot_save_flags+0x6db/0x750 [ 558.784316][ T9288] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 558.790763][ T9288] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.796082][ T9288] ____sys_sendmsg+0x22c/0xda0 [ 558.800937][ T9288] ? __fget_files+0x42b/0x500 [ 558.805732][ T9288] ? kmsan_get_metadata+0xe0/0x1c0 [ 558.810993][ T9288] __sys_sendmsg_sock+0x42/0x60 [ 558.815998][ T9288] io_sendmsg+0x36a/0xe30 [ 558.820463][ T9288] ? __pfx_io_sendmsg+0x10/0x10 [ 558.825432][ T9288] io_issue_sqe+0x394/0x1fb0 [ 558.830147][ T9288] io_submit_sqes+0x11c3/0x2ff0 [ 558.835126][ T9288] ? kmsan_get_metadata+0xe0/0x1c0 [ 558.840354][ T9288] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 558.846813][ T9288] __se_sys_io_uring_enter+0x41d/0x4da0 [ 558.852487][ T9288] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.857802][ T9288] ? bpf_trace_run2+0x25a/0x510 [ 558.862763][ T9288] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.868075][ T9288] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.873999][ T9288] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.879334][ T9288] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.885269][ T9288] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.891224][ T9288] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 558.897002][ T9288] ia32_sys_call+0xd59/0x4180 [ 558.901788][ T9288] __do_fast_syscall_32+0xb0/0x110 [ 558.907019][ T9288] ? switch_fpu_return+0x17/0x20 [ 558.912173][ T9288] do_fast_syscall_32+0x38/0x80 [ 558.917198][ T9288] do_SYSENTER_32+0x1f/0x30 [ 558.921807][ T9288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.928273][ T9288] RIP: 0023:0xf73fd579 [ 558.932428][ T9288] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 558.952143][ T9288] RSP: 002b:00000000f506555c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 558.960654][ T9288] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000000047f6 [ 558.968705][ T9288] RDX: 000000000080ffff RSI: 0000000000000000 RDI: 0000000000000000 [ 558.976784][ T9288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.984834][ T9288] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 558.992883][ T9288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.000943][ T9288] [ 559.004353][ T9288] Kernel Offset: disabled [ 559.008761][ T9288] Rebooting in 86400 seconds..