last executing test programs: 9.061913366s ago: executing program 4 (id=1454): r0 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x11e, 0x63, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 8.066544533s ago: executing program 4 (id=1459): socket$inet6_sctp(0xa, 0x1, 0x84) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) futex(&(0x7f0000000040), 0x88, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x280000, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000001c0)=""/49, 0x31) getdents(r4, 0x0, 0x58) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000400), 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100f5, 0x8, 0x0, 0x0}}, 0x10) sendto(r2, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 7.962667495s ago: executing program 3 (id=1462): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy}}, 0x9) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x103382) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 7.764700777s ago: executing program 3 (id=1465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x3, 0x5}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x8c8, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.69218143s ago: executing program 3 (id=1468): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$TUNSETLINK(r1, 0x400454cd, 0xfffffffe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="130100008a2efb40470580005167010203010902120001000000000904"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)='l', 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x35000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0xfffffffffffffdc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x8}, 0x14) syz_open_dev$usbfs(0x0, 0xeff, 0x46003) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f00000006c0)=""/219, 0xdb, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendto$packet(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) 5.15704811s ago: executing program 4 (id=1472): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x20000001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000001d7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r1, 0x0, 0x0}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000001ec0)) socket$netlink(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r5}, 0x50) read$FUSE(r3, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0xee01) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r3, &(0x7f00000070c0)="a37b33352102270e8080da9acea18541f7a5c5c0ccac6b823171247e6e3675eaeae3fc94bd43baf4a099da2138a0fe4c613d6f13f998b175ae52341675e866014f466758a4fbd32928f56991cfdb381074d418d9690e966a9e10945f0a16abc6e27418ba809e9e22294a5f0c2ddb090d6849df842893a2f38c00c4c3689ec3875d021a3e221aa99d35e4660aa1796c2d4ea85bb91752c0c21dd01debd31e5d1eb7ddc9c64388008fa08a9871b9d158d0adbff0f57a19252b75100a980d86e9633cd793c8e2e33c00035a5ad72ef11437dc82e6e04d1a48d1f771d58f2f7dd978e9a4f3d462f03c0ca11026a9a15d1bd5c732b90d56a18ed5e16e4fc18739bd31eb7695369af1178a495890fc9e796d43f2f461e6d45634fb8e191c06c7c875fbad054f0ab21fecd7d3883a5d568426335c8902a1ef2e5856cf8888b91050dd50dd9e419b9a77dd6a135dbe314d769929a2ab34679406dc4314763867f7ad19945c550cce8d9243b1f602a47a7ca863895e5ddaff09fb773b1862a3757b2895054754c2a23a4b7975391972a9ad4f25245265bd77b634b9d834a88e9a16cc1a5b1dae4a46de62b939fe89403110778f126786aadd81950077de037b83550b1b897ebe50a3f660eb368cd771abb9fe1cf6fdd51e987757e3e7a6d9d1eebdacb8ecc00de9413f19b2a4063ad78b8eff9b5c420a06e21364d8c9fab06ee878e1344c767fe6e8d21dfe2f4dece09e2fbf405bc1008b2d0adf86fc70421952207b2265bacf5179efe10ba4c42e1f4d8f7c5b19352b866afd280c66b50d87c08a7e316270189f01397b70fe7b50e7426a5a760bafae1cd0c28469ccce09dd37afffce3ca4d5e05569bc145dc4ee1107097cee103a2215d87af81474231a8113b1f2924e6d5bf29742c3ef17d4f284db167a74f742b768bc3becc027c76d30e7921350746ababd6172895de2cd9e3a5e764edc8e2f3588b45574cc574993e84a47bb3d71867f412a7b20b82ac23e10a85f5f1984d25e42793798547837509bd94a7c8579f9181341b221f418cc0de373672ada07951cc7009300dbd0742426aba9eb1d533a0cd14a6b13f37854922228b9d0b1e20b67746102f84973405884ee2519227d3254c96e1146e08956cb1a474434b2ffe7a0b09e9437b303159abe4eca69f444be28ffe95a3935ad77dcb7291da653f9942926f6a3c750526dca116e7c278c628244e4b6c2da0eb2255e067bb11c42c03105bcb4ab9eb7a276e1f5d8cf7e779c158a2cc7f867d0e7fc5d77d797d725efd76ffde2c69b1abfa05dac952cf3ca5295845202341956d484859f7d5e2b3df31f9e2152674ecd71590605310c8fe238e33c0415469826c35aed0d65f3aa459ccf607e4b25f25cd08d65b48bd0f56461d995007dc5b00d8d91a9fa48286fa1d8dfb68fc9756cf928c05ba7f93f8285f7b6df63a5634c39da5ab555362339fd85dae4e952e06b8ad17bcf157733d55a30a05c0b6ac2ed2fd54ab1033dec41101f5251ed40c6f42e876328bad8f4fd21730cd1e2efb847dcb93ded254c4e66c6374ec40b124d32032f5ee5c52f0a51f2ca797b12f814a1f79e3e4d69412dbc834d620e72ee9648d67ff53eb126f7d382fd8f827fab96b7427cd0962e84542a98acc79cf429f004ce86f5841d0256c83a96087671365e3799951087a017f0a3ff7900b25515869ee524de62bd4e7c2c68e1c900f38b0f7bac92606a0d0eadfa9f1d5af8157f0d5a0d49dedb00bf5785f8b2f8c2f8c10f150a30c31141ca0545eda71841523c6986d7d5fbc1918d5c79e40b929c180153d34fc7c7faba1d471c10b52d3e93b8192fa4826d43ff9df160ab83041b0f647398964c108b7875d74d592d8ee2d5420316656626e58b4dba72bb09376592a062ba0cfa94469b2102ce05b68fd3d275f0941851dd6399cf386cb900441f0f762540ab58c1800e7e00bb34fe32eddc14f05d1537f6c23c8f5b5039b6a22b7d843476d22d4a1086f65aaad2699d402113e349ba58168fe5f9ed496f56d5c7864f6225b24562acad3aa8aac2cfc02e6d14fdaf89066022f61c3f7c0581bee46817ef95500a83e4dd6e6bbfec9ae785b59f29c61e23735543dc8d2596b5a787c00de7dd4209a656b398967d74d022f5a4be5c2ad5aa8e6fa76ebed097822c6b438655c05a5b5b9a3fefb8996c03aab4ef804f2145a9cecd2cc6ad2a54f4f13153da513ff3ff707ba8f34836fd7be482663557cf6923b2c417486a3bae32c28f5f9af211a4f60f202eb4bc5b4a9ac0c72f080c5ce3cd563b40dba488c6bb96f27935c2296e72063399bc0835f194e52d72efe2b0122728d6f841545bebd45b3d589e011f3360e9f90029d06b708b078f6c437862fd355604e87bf37c1ddf3a802fda5bbf03f8453cdb335fb381be1be1d9d3816654102b27dcb78c9b743b4ad22681b6f44dc854c96324d8c2ca678f31d3fe60c5144649340ad541edbc7c1d66314b566b43eeb9a1d9970726d25e529bb0b011b563378ec4580961d1137d47942b02f6f6c0e5322e879711bd4a98348180ca243ae538bd18e9bc1c217b36049e3ffefcfcb3a514dbdbdac14c47afec06b161355e89d1db713a007841e9f53ddc44764b61002c35f48f1c8d57e3c67415cbc920c9e69fb8a0ad8b2da067dd37d9c883dc5c24aac8105987f7b43df3fa2aab926566abdbb506d08b1db4b9f6aff592e68878fd22b2a04ccf8fad887ab7307f5bb5678659467547bb9b8c75a8f19a2fcffd855d917cf126ea4af832adb30df51f6e7311e15bdf0b14a019b4c5dd2a58ff142dbe159039a6dc73c099a72927e717dfcb2c438b9058bf7411786d930db5077533f35f56d02a647f14575abc3f7a149411c4597e9e9bc7e1767da725d8ea13d5c3fbc6e33cfe00b323a0d3abb4a928b180fd2007284ac614163e087c9d996f5f7545691c9b86557b09bb62bbb93d68c51a1f27fb57b869ff5702ee36ad13983f77682f278e09d17ded110beae19ba0a0200c8f9cdc624ded25da0f31b79b21897b25413af89066259aa41291275918a42105f277f5d606b24ca82f254d04fcd258651c565ef918c21a2f9e78162aeab6f19cb0e7c9e8b60b3de04b0916cb726d595e957a74290417e626366f20a33c2be052b3cdbcccca7210b4c9a02c42b749dce61714f59b144a92ad9af3501a3ab02654e6ec897bfa385f95f4e481c6e937122b163d8cb9292ae59c80fd00502e6a726949633e4b1ee09df492daec19d6d498090a9659d2fb7b63349988ffac6c792ad427eec0f48b9b285feba6d2365f1dff4852ea6b4d2289df7ece3a509cfa3574bc8f9e2670c8433885d8c9ec0494d40808d9c9d4efbf90d1b6558ae75e254ea3aff6f37f976aa2916b58a015e4919760063ebd2373730a37bd0f91b281c05b6fb3e35924b4ac88a0d0a8b0d125551458c719cd53cf9753fafc9535d6af395a5b29408d915e7259ab0f6c7abd8c754bb71ed1a476e6760eee035460d4dfec3c53f91636280056a57fc45e0f37a47f994f8b1bc42644c37fb004aef34bbfa71ef5b89b1ee581b8c803885d8f8637a2b3ae49078738580aa8c0d94c2564dd7b50bd6b718b854755b6a08d8d1a2ccf4eb3c704e53b8a299617134aa79fd00c8749e57965e9a16d73142f2812c3e1ffc09938406561949c674c35cf88128de9152b4a43d4e2432ac234014c12dbf057112d28d3125fc98bf0dd9a934217440199a698628778649cd1360d79db2d74fa34e94a6a9333f2804b8e4264160c493e951294810e6708ea888a48403aac2b21e136a1d8d07fe07930b543028b62ee39eb6f3480c27186bdcfef55e93343496eefb0c38b50cf9762dc606ab7fa4d155d2d965746baad06c3d39ce8fe350cfbf569676195330ec78f25f04a915685684f49a19f4102109a2cf60f28df29fcf74892ff84110ffa18fd43d3f8a10173b970ed934f5e30d170ef6348890be263f0d64ad5ae53e6e6b4895f3cdcd6fdaebd69fa2f067bd2a207559ca6cbdcebd4e18855642ffd8d5b85b6b805c2ca1c63de1cafe7ee1f2ceedd8fd5c6e22ab40ad8772027576080609c6d55a7d08149122c1fc28497723751abe76c8dd12c6e2f311ad531b0a2f8e04a5f17346ba602dadae0745ebd715853277e1b73ed2d0be842a95c955be66c7ab52a736709177a8a48255655f23076f6f0a8bd683b1ccc7866830ef3780d499760464da1a5aa731aa16fbd925fba7fd06702046dcbc3571031a7f58e9d9604de217acd0b59f790e78ebc51d91a45ef57c37417c5c1f34127aabe64a269b90f56e03280f10bbd1500ab30a3ee29c59fa0598a57eee3641cbe002fbca5b12102a7b8e7fd514bde6bb742dd139ecec58a0ee60b2fde003be535523d024aba223ff8e6cbd44cab79cf379389a64b1ccb1c72dc3e7fbb8d1f59a39a80cf5d30f5a66546e838959f2e4f19e854c7de93c8ec06a8f223f5355e9c76e17ad28a887dadc17a41fe80d878cb3e3bb863bbaa168c9a4ebd74475d7e6ae3d99a7aad9e23d3edf08ecb5143764099d258d4a6d82fc9afa5775f75b41bf36be25a537f2905903f82e08657fb7e341079ff29a656ff85ae34317c5b1a81d8e814d55807fcf2ed7250b29046d2e1d0a14ec7ba8910abfe0cc9aa04164b94a4bb0970f3f3b1eac5cfd1f32a5ac84d552f60962e98222b2a9513af22d5da3f005f6f9ae166797a94360235eac2a6ddb2321c2ec514eb6ccf086a8c83e65081ea67acac44753302d4519d0cfc796f56c04e849cdea18cbd32da25dddbfc2cd575c67f26882b5c2bc534701f11775d8e93131488141fbb61c61755aa30c1a1829140f0332a76317aafa08f072f00cb330c5adfdca9d9055b1fb51616e8ca5dc34dadc6911d93b93871115107c2371279e248ff898268cccb12b07cc555ad7bf7811910f37f2b07598f661dfa1f2ff6fe2d1f8aa4deebf260573b27ef6e578469ad652a4f31da494fe0d00e4c66e8011d5bb2c889331679544514f16c257e74ddca134aaa5d15707c26b3373c110e2ec61fede15fc6e52428e1b5788f5c667794c5bbb26e8aa7a66cc38bdb6150c7804d59a2ce2c2d4120f94afb3807a2b685fdede4da11bc63abf04bf0823897dddee0697924fe855fba225a97c5b5d1bd6cb17d6b0ce93e475a9b14130ca5cee7ba41d521f72214b2f0fbcc1fbec70ef4dc7a4c9442d02ec641bd087ffe52fc7c9f0c39d41d03d1f93cbb8896abbee62f3bb1685f97e22664fb45530681eb6393442cfae1366ddc395fd5aa4d4fd0c250566b1c7cc8cfe6b25e73315998b45af5dbca10696ed8d113f4f35f385840f0558e93740e9a5d2e6768a022d17d266f47d050a8e91e8e0bdbf0d5e92f8d8294c3666c00344d4336d23a4c4235a3bcbd69f4b4769d6b1f513544392ccb2b96b1c6292131014835dfefebb4686496fee657e4aca53fbbdc15e0a72b1af7bd58bc6b4959356e7726342a330e6b9badc94e7498569f3cac949acc0ea9fc149a874fe271829c72e917f1374a80f22c8bf0109a0ac1e1de013a826173853127c22f7ba826bba044bcd8898e2c8432ce54a98ab4d18eac68c208e51a3210c6730b81384cfd8a74e681627805fb100c26a2a8385686fbffedfc7583b2222e1f79e45de79069b9f37a07bf99386525091b6d614820deea7e3105dcefa214258a8603c876fb776d0b019c984e028da494ef3f8841bc889bed54ea443634c2885639e865f0cd0a1dfd6f7a3b22c51461e73b3650b9a63c48b400bdcfac039e4cfdbefbf869386075ce8790eb4a588fd49f49c54ac5a8c45641bba62620d15042f08f5305566bc19111d08fedb65e2f87fb28442340be88a40cfef7ab3dad7e79225c07d347c2526269e9e709a90a49345d3351ac967da890707ed2affd155f2b356bbbe756872ecf7d944d8be128cd36100c8913f7fcf67f5d6f71ea19aa8877806bd6f65f10b2bf72867a7f6b900a7e0049aba25e162d670399e407c1332855a8d2db7465a40704660cd63bbcde4e36412c1fb244a1d23edbeb9d1c7189343144c8e27c55249a2b7fc00134a230601ca488d9ff441508b14129046e918abe163a40ae26b77c6df0fb843610a93279168fd7244cf934f905fe33dd5675819bbeaf370bf9a1101159c57dcfa4820a76cfa5957355ee450371df3c5f61fe3f4cef0df889b69f543b3965dc19d48d897272146db5c34c26bb6a7b305e9bc9a63419b789abd8e6a72a89d95a422d7e77f9c0afc619c43c3b77c8ffd408383fee4475ff88c90372bf9fda91b8b3b19ee9cac890cc6aa13f3a33d40f3970626b8854e72ecd65467e40552ceed496a5144db8f4122d34246bf76651fb1f1a154c7a3906939bd1fb85cf99cad9ecb0d63e0bb31b8133c2eb0e6f66e8e36746589c30637f5e045b9a5b6b5c728398c326aa9e0e670098726d3127b2479442c8e64ed5402790af0a114c42a07d97c38b7c738c9bcb3ddde8e67c3e786dddf7f9bac3cb61998f73340cdc62eeed7f05f2768fdaa6a5d91d98531a80fb8f8acb5abe47972f0155a85ee95166b20f727bd4ae648ce3e0de4d80ca7227ef298d4f204f094f12c8acfdd2a6905743b8daf56b8160dd081c54eeda647e23efdf89972aee301cc4f67faabe82fd9db1455090c05391cfc3e4bec5d38fab3716e19638dfd483ee2bba57e4d1c00d01cc45a49e2727c19b104f1072f1a50407e4622be580d35393c7db5119017be6bd5acf3be228c42096af9739e44867782e600a48ab9baeec9e37e9863d1b19733c3fe47c30f328816966748ce717529752ebb9e2f582ddd132158ed2d68fd17de3e725cd0fc13477585341703b51682879a9a3167cca4cb09ce2449d18514d8b8343de79b332b6981101a3c6ae2679aeaea1cad81d216400c40cea6ebc99ee77b5ab7a508cfffcefa7b4d48a2ea8a3ff5917f43876ea653822a21e208d733847e017eaadc460c9828365a1a0d149ccda8a5c42ecb74ce102fc9cb75360e87b758f7cb55c593bacf8a7eb698cf300adc7000f9082aff2be93ddbed0dc487c72e3e7707bbdaf0d6c5df66140270ca71de6c86b4776033af0cef6b5c8d9bb4bd74d2f90bdbc6d13fe4b4d5477a16add3eb75e865aa4441b68b3640bae1f03e7bb261808f2c3fb5d3997b666c7b5f0df5a53a7114f1eed925eb1d5519542f12e9692ed7ed98e789b962a892727bc06fafbc9e335e245e8240eaeb15ee7dd4136d738c243838fc752095763b7647760045fbdf26c2646c00ccee6fc905fa7224981e40a2124629c43cc020e2c0c83e02aca162afc40bc19734dd22fce44839440f4e69fd7aeb7c3f35ef2d4eddffc0874ef77bf4df5e1a77e2495e31cf514d4dd252ec978dc47df2edcbba9a175d4ecb402fb701f0781b618824328a94112ebdd51137910810c565d564a76be9d1e5d13ee9ad311fdcbdefe16bc6fbe0e3dfab238742a80463de1849bcdd6120ab7b420c9fb3c0e1955e65b431b0f43d32260ecdbdb69a4d6ea6498ac377648c974f29393f23cf99e2aa2cfe128c371beab86b0ec5b20edb5ee451554fac22562083396329d774fa9be0f4bee29f2657840bd82e1b824b371c56dac44a45d4898cb25a9af0598cc8b2f2b753fa88e4c3da1927a789cfcd6e95639e88d384d701d47bf74e0d4cfc4031ae57915ff179dfee312b2a7aefd50ca4f7e4deaa526703f80d5fd696e9043ed2b8110a3fad5188bf84d55ff73ba9ec6a8145e17369686e2a43b4e8bd4d09351f969432ea0c7940f326eda2cb8a7eb709480b3072af8fd3370ba8edcab2a6e48f8f6bc9679ed95de2a91955acfb2bdbec12ca8809922115edf86c68dc3d16c6dfd89c386976a8e666a9f2f965978f26a73919354eb0779d0c6220db4dceaf92686dc222b8af5472512f065767b63b8b64d370e2dd78a0398cb53a497b4c76863b82836e34aaf8bfe1e530be4622d350c16d20d973b7d6907e21efb393f3f7e57b6e0d660a8af0c689bb3e0d0c70d8a90878d650cf60f56012e80edcd1fad4bf5d7e9989a628ae3b20e755507ce52a9537bb57ba49f263f5905dd0e7c8be3e095b3738cfb9b040d4d81b7ac352bb213d2b47e8b6807b13990ecfcad12f2e0e1e486b5e34513c7f52d04edbd3296f5f5f5ed3d36463dccd417f05c38f156b4e8a78a07ce8536f83c80c8b1af747c83d9250cec54af6a67cc91e69f810d191da79f6640503d63b6172533bcacf5563caeb44c2b657e3039e063531ea22b07797f73218b14d77d94488bbba374202eec6c067ce3336da24893658225dfff4a8c6083954c4dcb9d969941937e8c19c2350da5453dc304ba5db942b33e1d062070478af3721528a77f518b67cff9d7a2e31669bb4e8d0dd6f179805b2e47d30cc1abb532576e8ed067cd0188df6c49ee0c63393bec3d925d88ecebe6a5a8f37f1dfc6762c7a3a596049e7f1787bec7a03e55a50360b83158e49cd9732a66b1cef83e43fd2abd33f753efdb236675490fc9c9381e6f421c9384e43ded79ce91025af90fda6752355ddacbb72aa204e7efa77f3825d7f274aca737bc56c61a1d05bf7004a71c904e8483f3c4df3c9ff5c7b7e350b4c55786d3ea99bb61814881c6e98da71e8f5a0646c44912d12e4a5ad3f2ea14f4d4933ecf7ac8b9464a80204b9c3465fc397aac5a3827bef7187fafb2074b22af3dcde7edaef478c75a0b50ea2ea20b2e08c35b6e48c424e2e3d5767e13dbbb1b87c6012f204f18ae7483d5c29c0a9c46de7917031e168c71c0a5c336c578f9ec41844618d40098542c772110566f1c6271d08842e8870a3ff1890a21b42a1339705edf23ff0b819e13c1fe061f950b86dac060e1654c388c53fa2ebf5988c5d06237b3424d551e5b103494f75bbea021b70aa5a67636f2b243819ce4abae74c4560bf15c9c33d095381e8fcbcf3d32abb2d38e78b9f5b97303fb46d01892258232849700be13dfc18c4f91d5a99c6a05970a6b4dc9179ea91eb4de76bbdf7be554d597d21adb396f0a1fa10fbc99741cc25aca370bfb916bf5bffda325c2405151e8e51426c90e5d782599cc59a7b263ff7a319d04d42835744f628c98e3ee379486f4954eab1742840edcf0fe87fd472f5e439678ac0bbc2295b2c12ea28680794c1c60978498b151c0ef5097480d453a0c22ddb2159316e04539561efbb55926758ae6fb2a3a495cf8aa7b693f1d854f99065e748b735097ea63e21d89515913e797515be6a767d42707ef6a0ebb1d3ff0071a0f4eddfdc85922a15a95f98d5f4a672d93621c975a3601bae013103c68fca1f6fb1c4b5853ffbece2075419263e32c72159268e3dab4ca3f0e5b904f40667bebf099374636d55f5a9ee1bbda48b39def3106041878afb63970cabae3388a33719ed206db73f10e498ff4bf4c0e3606726fc851578613c4bc1429695de29f6d6807eba84afc6ded50b0aa5b77ba864e1b36c035a97df5154b1a40017d919acdb8de617d458ddfe2ceda137bd1da6e2ebd5e32f2553c43e14ef6939ec0fb26a65487557cb1300072f79cbaf74a1221fad0d12added22303067f8292abd1d81e3d2aa200d1d1ed377bd57245ba44b51c927ae8d39e7d46dac00ecbacf30d32aebb568e757680c975dcc6864fafca28609db1ba8a30a74e96a791176f76a5de88c50b49ea20e206557b6e4f44d819b471fa1017cba5e195206de632bfb1b52c4c491bf4d1fbcde097324c7d42cf386f3a8c8410ef5477acbcdba183f0272e5ed5a142523b94899159361e7e48e10ee29e7d0a56e673ef903bcde86c19f71209daec067283c5453cce3dd4f39ac9ce17aa02c7ce6ac359a8d4396ed1aaff38225d41733d469535d5c6cd12b96265653296de79418d088652fef9e684f2f3e2ba4a63ab9ef9de81539e6061037e4efa9e03bcd1e95b2f5d6cacccc9f4e1df7c543befea4fa60513d84bdc84ae761be441116327ec263912cfbc47545546b8b038fe741d3ba495c7d862edba2733b497cef8b823a0198a928fce7f51575a93409c463bbf0aebe8450ad408974c6cf1de0e8ce887beee7fe06cae1c0f502799c1aa1a5942c74cd52497c342367b5850e03e9161f7766b4f3e3e5f9de3282f16be48e0eb8171f0cbda19d6c274f12cd62bc4c1bed7642bb147e9bcf7474f820f60d9020e2edf0c6bb3eb8d1dd53c85303544c0fc353cf0b16091d0bf238df89ed025d6591c5b32de30bf9e8e277a8f5f7a61f15051e38ece2021395dd9be6795ee0879a0bba9af3447973797e92279b3e74321615020a4624fbd9f6fa307a94c68f164942b9c7e0af63c41a7c76fac6d77e135ff5bfdaa3dd4753d0d8094c65f25811c9f593fc07f0710eca9e88c02645f9314d4674c50f869f5ed5246e41333670234412d8b6b2c9a99bf483af0cc0bc56039535e6cd9be1b5801538b39f83ec9fc4bb78a8880c06d27d8838e551a7c5eee3c85421665ca2bff57c21dd37e55939ee9f7e06cfcfc18a41b261422d7f94f1ee692960ba2a81a70c167d9e477d2b4a489dd08b1851dc79d651b468c179bc3e2c32215fa74ee00d449735094ee3a6c819decf11728cea207d41d3c665d210e1ab26a79fbbfba8aed8b401227a1adae500333a29d88086f796757dc12af76888c857407a21d9ed483651003f3298bbdb23f27e3e3e5f99f0dfb64534dd1676403042c62966fc7a3da65a089726ed48fd522b92ca292d0139b424fb6e2fa2b81cc5f95d0d64846d2060ad32edb8fe52eaa06b063512ae25c08664e65c5331dd17abf062a78bab8993766893d1cc04850015013a2f461fd96572496020145dc8fdb6f7393b0b1a380296f3cd8d50dcaa54d5259b0e6bc2da29edd01f9419806149c471d97f9f78f8be7236c7d6ec62885854a95ad81f3f7a2fe7968b446e655e1318d118bf731758a75a9747b6e15e945de3c05f962df9975d4268feea8e5de68fdf385636c66670cf195b7455b8d0b69eef633dc7ac799c451b000413efdcd62701eeaa7de5ecfe21c60aea75e22104f9a8ab443141dc18a61914a5c89336ec08ebe7454e4a5568b7fcd1ef25bdca18d3a6c10879564907742588d2b08d1e946712584acab70b3015cf91bfe1e88e8340b6d1b3f801a9fee09ade3f5989f6738401b56e117c36a9feb7809561f01ac1f360edaa29873a0e4daef2df8e97a483995f0ac114d324672c354a52ad8507b6d9c7ab8a3643fc8b46cc357c8eb396d6dba21b99611ef16139fe123f60c84ff1848dd74a8f32682293b2f5e5d496a8b88bee8990287400f4fa4420492bc85a0422ce9179a0cb7aead52f937c985da74c772538e2c5f3cfb88dda634635d0e797d52f5e3f250587f1b1817a9ea2d44cc2a40819c4f8f12d20a95c999e4b911a261fc4d179c3cec165d4737b72acef9e5f302cc90aec7f21e95c3d4f1df4ab39ff06e6baf9b8da3475e6f9cf9754f7ceabc3fa4e61c374fef8df2826aa4cca6703959b4d82224a3e02c68b4c53e9d850164c98f74bd4d2eff235329a1e72f144d1977780f3ad70162788b5fcb57277665bf136261710260277b4a8b68a067bdfa1d5c5f1d5ea42d45e1b5031b9824f3e23", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x24}}) ioctl$FS_IOC_RESVSP(r4, 0x801c581f, 0x0) 4.322527497s ago: executing program 0 (id=1477): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4a, &(0x7f0000000000)={0x0, 0x0}, 0x8) 4.30508347s ago: executing program 0 (id=1478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x3, 0x5}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x8c8, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.272683972s ago: executing program 4 (id=1479): r0 = syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x16, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x87, 0x3, 0x2}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0x8f, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xfd, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0xa, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 3.998410868s ago: executing program 3 (id=1480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@kprobe_multi=@syms={0x1, 0x8, &(0x7f0000000300)=[&(0x7f0000000080)='\xd5\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='syzkaller\x00', 0x0, &(0x7f0000000180)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='-\xf8}\x7f.@\'-\xfd[\x00', &(0x7f00000002c0)='),^%#\x00'], 0x0, 0x3}}, 0x30) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a44000000001010902440001010000000904000003020600000524060000"], 0x0) getpid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000200)) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.945915325s ago: executing program 0 (id=1481): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000006780)=0x82e, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x1f, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffd}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="023d6e6e1e04cb6c7530e8ee9a6aa5d500000004", @ANYBLOB="07b8e923c9b3a7a76a4d0147d843c922030fa42c39293e821d4a99355b8d8209010157e02b9e920d5999ccd2e3661607f24cfa879342a8cc6d030dd86672b812420539930cf01967f76748a0cedab2c66bcd590ab8be54db5642356ac26c3e349c6414be82586f3b5908f7ea8a40ddf7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYBLOB="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"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0xe) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000040)=0x68) syz_emit_ethernet(0x82, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES8=r6, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="42d43907fdffe8c99bd4821e5098299aa9ff462d4ae93490056a3c30c0e6bb43027b5ce7b2fa3b13c107183ea00a0c402f82c85c5692bcc6b33a86ac04aa02056ec866573e8f79f050b8dcd79f2e055815bf0116809e043b484fb5caf474a2", @ANYRES64=r0, @ANYRESHEX=r7], 0x4c}, 0x1, 0x0, 0x0, 0x4078895}, 0x4004894) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x11, r4, 0xa8cfb000) r9 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffe, 0x0, 0xfc, 0x4, 0x0, @rand_addr, @empty}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.945559152s ago: executing program 1 (id=1482): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xa9, &(0x7f0000000000), &(0x7f0000000240)=0x4) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001240)={{r5, 0x8000000000000000, 0x6, 0x2, 0x4, 0x8, 0xe, 0x0, 0x1, 0x9, 0x7b, 0x9, 0x8001, 0x5dc723d9, 0x3}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240), &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0xffffffffffffffff, 0x5000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000cc0)={0x0, 0x0, 0x0, &(0x7f0000000300)}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b3300000000000800001500000008000300", @ANYRES32=0x0, @ANYBLOB="80"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r9, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r9) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x0, 0x7, 0x3}]}}]}, 0x48}}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)=""/203, &(0x7f0000000040)=0xcb) socket$tipc(0x1e, 0x2, 0x0) 3.013690395s ago: executing program 0 (id=1484): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000480)=@delchain={0x480, 0x65, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xc, 0xe}, {0xffe0, 0xfff2}}, [@f_tcindex={{0xc}, {0x38, 0x2, [@TCA_TCINDEX_ACT={0x34, 0x7, [@m_skbedit={0x30, 0x18, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}, @f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x2fa, 0x2, 0x80000001, 0xe, 0xffff, 0x36, 0x101, 0x0, 0x6, 0x2, 0x9, 0x3ff, 0x1000000, 0x3, 0xb, 0xddf2, 0x6, 0x400, 0x3, 0x2f4, 0xa, 0x7, 0x5, 0x6, 0x4, 0x401, 0x0, 0x5, 0x9, 0x7, 0x2, 0x2, 0xfffffff9, 0x7, 0x200, 0xff, 0xc, 0x8, 0x42cc, 0x4, 0x26, 0x1, 0x6, 0x5, 0xb5, 0xd, 0x0, 0x5, 0x9, 0x5, 0x10001, 0xffff6184, 0x1, 0x2, 0x0, 0x6, 0x7, 0x7, 0x1, 0x5, 0x3, 0x6, 0x3, 0x4, 0x6, 0xa, 0x8, 0xffffff80, 0x3, 0x6, 0x9, 0x9, 0x9, 0x30f, 0xfffffff8, 0x7, 0x6cc6000, 0x4, 0xe, 0x0, 0x5, 0x68a4, 0x4, 0xa0e1, 0xfffffff7, 0x7ff, 0x2, 0x3800000, 0x7fffffff, 0x101, 0xfffffffc, 0x0, 0xfffffffd, 0x6, 0xfffffffc, 0x0, 0x5, 0x5, 0x7, 0x7fffffff, 0x5, 0x2, 0x400, 0x7, 0x8, 0x7, 0x5, 0x5, 0x7fff, 0x1, 0x8, 0x700000, 0x2, 0x6, 0x7, 0x200, 0xad, 0x7fff, 0x2, 0x7fffffff, 0x80, 0x3, 0xf, 0x9, 0x1af, 0x6, 0x7, 0x10001, 0x1, 0x5, 0xc97a, 0x0, 0x6, 0x9, 0x5ff76f1, 0x101, 0x8000, 0xffffffff, 0x2, 0x8, 0x80, 0x1, 0x7, 0x1000, 0x2, 0x0, 0x10000000, 0x0, 0x3, 0x5, 0x9, 0xfff, 0xff, 0x8, 0x1, 0x2, 0x100, 0x3, 0xfb8, 0x9, 0xfffffffd, 0x5, 0x0, 0x2, 0x45a, 0x7, 0x7f, 0x6, 0x2, 0xfffffffd, 0x101, 0x8, 0x7fff, 0x32e6, 0x2, 0x8, 0xb, 0x6, 0x79, 0xd, 0xb97, 0x2, 0x80000001, 0x2, 0x4, 0x6, 0x9, 0x9, 0xea, 0x3, 0x26, 0xf, 0x9, 0x3, 0x4, 0x3, 0x8, 0x8000, 0x3ff, 0x40000000, 0x4, 0xffff7fff, 0x1, 0x6102c146, 0x9, 0xa71, 0x7, 0xe, 0x7, 0x9, 0x4, 0x80, 0x80000000, 0x1, 0x8, 0x6, 0xcab3, 0x787, 0xd, 0xffff, 0x401, 0x27b3e5ab, 0xb5, 0x8, 0x6, 0x3, 0x401, 0xb, 0x7, 0x7, 0x7, 0x4, 0x6, 0x4, 0x1, 0x5, 0x100, 0x39e, 0x2, 0x0, 0x7952, 0x43392dfb, 0x2, 0x0, 0x4, 0x10001, 0x400, 0xb8a9, 0x22, 0x401, 0x6, 0x1, 0xf8a1, 0xa]}]}]}}]}, 0x480}}, 0x8844) 2.913758698s ago: executing program 1 (id=1485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@random="2b311033c20a", @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x2, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x5, {[@exp_smc]}}, {"983c7bd71a7f30f2fae49d81748f067393d1be8518221fae6f635bb57f6f"}}}}}}, 0x0) 2.346714146s ago: executing program 2 (id=1489): r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000140)={0xa20000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0}) 2.301944828s ago: executing program 2 (id=1490): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x200}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4101, 0x12) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x5, 0x1000, 0x1000, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x10) 2.076089955s ago: executing program 4 (id=1491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x3, 0x5}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x8c8, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.986603278s ago: executing program 3 (id=1492): r0 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x11e, 0x63, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000200)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.976296032s ago: executing program 0 (id=1493): r0 = syz_usb_connect(0x4, 0xf, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000001440)=[{&(0x7f0000000000)="9f", 0x1}, {0x0, 0x18100}], 0x2, 0x19, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup3(r4, r5, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209000005240000010524"], 0x0) 1.933230094s ago: executing program 1 (id=1494): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d000100000000090400000002"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.29808265s ago: executing program 4 (id=1495): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 554.64642ms ago: executing program 2 (id=1496): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) 501.210588ms ago: executing program 2 (id=1497): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffc057f851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601e54e9c93ee3568f89a3427c84262ff67b67bcb1b997ce8b6325d151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000e40)="029993440c7a0c95d3bb8cf353fd63ca88ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c364fb7ac429e434ccb0320483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca001c470155ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000f80)="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", 0x171}, {&(0x7f0000000680)="397d5f2edc82d0d67b12598491a939501079de6b93337ae5ab9ee47dc3e798cf69cfebf169fc7257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9dbfc4fe6db927cd4d03965f420326d5a4066c8726b9f2ca90f2158d3cc3f0ac8df7ab", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c80)}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="446712ba514f4d", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba6216814134", 0x5e}], 0x1}}], 0x4, 0xc0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000002900000004000000000000000000000018000000000000"], 0x30}}], 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 445.993342ms ago: executing program 2 (id=1498): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy}}, 0x9) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x103382) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 352.198196ms ago: executing program 2 (id=1499): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000866660488000000000001090224000100000000090400000103"], 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156d79b", 0x40}], 0x1}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x4, 0x64737664, 0x3, @stepwise={0xffffffff, 0x4b0, 0xffffffff, 0x5, 0x9a, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 351.426579ms ago: executing program 3 (id=1500): r0 = socket$inet_smc(0x2b, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000280)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000380)={&(0x7f0000000300)=[r6, r7, r8], &(0x7f0000000340)=[0x80000, 0x7ff, 0x8], 0x0, 0x3, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2000010, &(0x7f0000000140)=ANY=[], 0x3, 0x6b5, &(0x7f0000001240)="$eJzs3c1vHGcdB/DvrNeOHargtEkaoaJaiVSQIhInVgrhQkAI5VChqhw4W4nTWNkkle0it0LgQgUnJA79AwqSb5yQkDgGhXM50auPlZC4RBwiLkYzO2uv7d14Hb+XzycazzP7vMxvfvvMjHed1Qb4v3XrUpqPU+TWpbcWy+2V5anWyvLUibq6laQsv5Q0kzSSFA+T4klys6wvkozW6/b2x73388nsjXc+f7ryRXurWS9Vv0ZX/0H0aLtUL5lIMlSvtxoedBcbxrvdPv5NRgYda0PDMmkXOwcPh211i6WddN/JeQscMZ27U9G+b24xnpys7/HV7wT11aFxcBHujx1d5QAAAOCY+uzRYUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx0/9/f9FvTTqdSZSdL7/f6TzWF0+1h4fdgAAAAAAAAAAsAdef5ZnWcypzvZqUf3N/0K1cSb/XU2+kvczn5nM5XIWM52FLGQuV5OMdw00sji9sDB3da1nqXfPaz17XjuoIwYAAAAAAACAL6Vf5db63/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAoKJKh9qpaznTK42k028WMlD+Wkn90ysdE0evBxwcfBwAAAOzK6Av0+eqzPMtiTv3zr+3t1aJ6zX+uer08mvfzMAuZzUJamcmd+jV0+aq/sbI81VpZnnpQLlvH/f6/dxRGNWLa7z303vP5qsVY7ma2euRyblfB3Emj6lk634mnd1wflTEV36sNGFmzTmu5s9/3exdhT+z0rYjxMrhkLSOTdWyNZDhJmYGieqOmLL++oeu2z05z857SyPDanq6msfbOz5l9yPnJel0ez2/2Nec7tZaJRqpMXOuafeeen4nkG3/500/vtR7ev3d3/tLROaRtDPV5fPOcmOrKxKvHOhPNHbafrDJxdm37Vn6Un+RSJvJ25jKbn2U6C5nJal0/Xc/n8uf48zN1c8PW29tFMlI/L+3nbJuYGmVME/lhFd10LlR9T2U2RR7lTmbyZvXvWq7m27me67nR9Qyf7Rt3dWzVWd9YP+tX16uS/K1n8Be/WRfGkvy2Xm/JwSb9ZudeaV/7y7ye7spre9Y/XWt1uus8mOzK0stlZvrflV/k2tj8Wl0o9/Hren00jNeZKE+gzl2iE90r7XnSrO9Lm+f5H6oJMt96eH/u3vR7fcZf2rT9Rr0up9Xy1weNcnjwA3ph5Xx5OaP1lWTj7CjrXlm7ypzecFcdqf/i0q5rbKk7W9UVRedM/XHfM3UkmTjXc6Rr1Uiv9qybqurOd9Vt+H0rj9LKnQPIHwC7NJ6TI2P/Gvts7NOxj8fujb01+oMT3znx2kiG/z783ebk0BuN14o/59P8IqcOO1IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgymP/gw/vTrdbMXO9Co3/VNoXtRt5UKOov9HmhfW0snNhd976Fp6PJwI1Hs6nxcPnA/gT2nMLY5jC2FFZ/mRxcPHWh8yWCvdv8riw0M8iAN7dr89EA8Zw44CflaBWG0nsCHPKFCdh3VxYevHdl/oMPvzX7YPrdmXdnHg5fv35j8sb1N6eu3J1tzUy2fx52lMB+WL/pH3YkAAAAAAAAAAAAwKB6fTDgwks7+KBL/894+J+FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ64dSnNxylydfLyZLm9sjzVKpdOeb1lM0mjkRQ/T4onyc20l4x3DVfkj0+y2mM/n8zeeOfzpytfrI/VbLdPGvV6F5bqJRNJhur1Xo13e9fjFf/pHGGZsIudxMFh+18AAAD//9kP8rA=") ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e4b56"}}) write$binfmt_elf32(r2, &(0x7f0000001e80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) fcntl$setpipe(r1, 0x407, 0x8001a0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x200002, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000080)) 246.57027ms ago: executing program 1 (id=1501): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00', 0x6, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000000500050008000000180001801400020073797a5f74756e"], 0x34}}, 0x0) 167.529124ms ago: executing program 1 (id=1502): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000d}) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r0, &(0x7f00000000c0), 0x2a) 66.10731ms ago: executing program 1 (id=1503): openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008666604880000000000010902240001000000000904000001030000000921000000013307"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=1504): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000002400)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000000000000150000000001"], 0x29) kernel console output (not intermixed with test programs): pacity change from 0 to 40427 [ 234.670749][ T7670] F2FS-fs (loop2): Invalid segment count (0) [ 234.680587][ T7670] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 234.691155][ T7670] F2FS-fs (loop2): invalid crc value [ 234.717391][ T7670] F2FS-fs (loop2): Found nat_bits in checkpoint [ 234.855375][ T7670] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 234.870616][ T7670] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 235.053623][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.081081][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.095711][ T35] bond0 (unregistering): Released all slaves [ 235.132747][ T35] bond1 (unregistering): (slave bond2): Releasing backup interface [ 235.142017][ T35] bond1 (unregistering): Released all slaves [ 235.160008][ T7681] dccp_close: ABORT with 32 bytes unread [ 235.764425][ T7698] fuse: Unknown parameter '0x0000000000000003' [ 236.115190][ T5248] Bluetooth: hci3: command tx timeout [ 236.239943][ T35] bond2 (unregistering): Released all slaves [ 236.268824][ T7606] team0: Port device team_slave_0 added [ 236.284655][ T7694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.684'. [ 236.375568][ T7606] team0: Port device team_slave_1 added [ 236.467224][ T25] usb 5-1: USB disconnect, device number 4 [ 238.013585][ T7710] loop3: detected capacity change from 0 to 8 [ 238.020710][ T7710] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 238.038631][ T7709] syz.4.688 (7709): drop_caches: 2 [ 238.344749][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.534624][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.695094][ T7713] loop4: detected capacity change from 0 to 256 [ 238.758348][ T7606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.873369][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.880839][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.914573][ T7606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.216159][ T7606] hsr_slave_0: entered promiscuous mode [ 239.226096][ T7606] hsr_slave_1: entered promiscuous mode [ 239.344498][ T7730] loop4: detected capacity change from 0 to 1024 [ 239.409764][ T7730] hfsplus: request for non-existent node -709361664 in B*Tree [ 239.417417][ T7730] hfsplus: request for non-existent node -709361664 in B*Tree [ 239.426477][ T7730] hfsplus: b-tree write err: -5, ino 8 [ 239.836359][ T35] hsr_slave_0: left promiscuous mode [ 239.983901][ T35] hsr_slave_1: left promiscuous mode [ 240.008477][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.047406][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.058128][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.065665][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.108843][ T35] veth1_macvtap: left promiscuous mode [ 240.129805][ T35] veth0_macvtap: left promiscuous mode [ 240.156383][ T35] veth1_vlan: left promiscuous mode [ 240.161728][ T35] veth0_vlan: left promiscuous mode [ 240.263385][ T7746] loop0: detected capacity change from 0 to 1024 [ 240.323843][ T7746] loop0: detected capacity change from 0 to 512 [ 240.341111][ T7746] EXT4-fs: Ignoring removed nobh option [ 240.379622][ T7746] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 240.809813][ T7748] loop0: detected capacity change from 0 to 256 [ 241.000154][ T7732] dccp_close: ABORT with 32 bytes unread [ 241.391197][ T7755] netlink: 72 bytes leftover after parsing attributes in process `syz.0.699'. [ 241.563011][ T35] team0 (unregistering): Port device team_slave_1 removed [ 241.612245][ T35] team0 (unregistering): Port device team_slave_0 removed [ 242.356427][ T7762] loop3: detected capacity change from 0 to 4096 [ 242.530680][ T7768] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.023735][ T7781] loop4: detected capacity change from 0 to 2048 [ 243.735182][ T7781] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.070067][ T7788] netlink: zone id is out of range [ 245.075508][ T7788] netlink: zone id is out of range [ 245.080646][ T7788] netlink: zone id is out of range [ 245.085928][ T7788] netlink: zone id is out of range [ 245.091065][ T7788] netlink: zone id is out of range [ 245.097088][ T7788] netlink: zone id is out of range [ 245.104184][ T7788] netlink: zone id is out of range [ 245.109724][ T7788] netlink: set zone limit has 4 unknown bytes [ 245.196398][ T7789] loop3: detected capacity change from 0 to 128 [ 245.542489][ T7796] warning: `syz.2.710' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 245.776374][ T7807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.712'. [ 246.134659][ T7812] loop2: detected capacity change from 0 to 256 [ 246.145850][ T7812] exfat: Deprecated parameter 'namecase' [ 246.151707][ T7812] exfat: Deprecated parameter 'utf8' [ 246.157275][ T7812] exfat: Deprecated parameter 'namecase' [ 246.163011][ T7812] exfat: Deprecated parameter 'utf8' [ 246.203235][ T7812] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 246.810532][ T7606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.143546][ T7606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.236812][ T7606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.249491][ T7818] loop3: detected capacity change from 0 to 4096 [ 247.624913][ T7606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.978463][ T7834] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.087014][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.105256][ T7606] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.120136][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.127742][ T5570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.147356][ T7836] loop2: detected capacity change from 0 to 64 [ 248.250915][ T7606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.261377][ T7606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.293991][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.301192][ T5570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.627316][ T7858] loop2: detected capacity change from 0 to 128 [ 248.661362][ T7860] loop3: detected capacity change from 0 to 764 [ 248.753190][ T7860] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 249.032271][ T7825] loop4: detected capacity change from 0 to 32768 [ 249.638387][ T7863] loop0: detected capacity change from 0 to 1024 [ 249.650686][ T7869] 9pnet_fd: p9_fd_create_tcp (7869): problem connecting socket to 127.0.0.1 [ 249.807748][ T7865] netlink: 'syz.2.725': attribute type 2 has an invalid length. [ 249.945078][ T7825] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.719 (7825) [ 250.017841][ T7863] hfsplus: request for non-existent node -709361664 in B*Tree [ 250.025447][ T7863] hfsplus: request for non-existent node -709361664 in B*Tree [ 250.033257][ T7863] hfsplus: b-tree write err: -5, ino 8 [ 250.189587][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 250.343667][ T7877] vlan2: entered promiscuous mode [ 250.348991][ T7877] team0: entered promiscuous mode [ 250.358754][ T7877] team_slave_0: entered promiscuous mode [ 250.368769][ T7877] team_slave_1: entered promiscuous mode [ 250.390045][ T7877] vlan2: entered allmulticast mode [ 250.411534][ T7877] team0: entered allmulticast mode [ 250.423099][ T7877] team_slave_0: entered allmulticast mode [ 250.454749][ T7877] team_slave_1: entered allmulticast mode [ 250.547255][ T7606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.589010][ T7606] veth0_vlan: entered promiscuous mode [ 250.748189][ T7606] veth1_vlan: entered promiscuous mode [ 250.839522][ T7896] loop2: detected capacity change from 0 to 64 [ 251.480766][ T7606] veth0_macvtap: entered promiscuous mode [ 251.560305][ T7606] veth1_macvtap: entered promiscuous mode [ 251.688349][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.707750][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.717793][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.728565][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.738764][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.749536][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.759674][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.768387][ T7906] loop0: detected capacity change from 0 to 512 [ 251.771655][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.787967][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.798429][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.809261][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.819323][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.830182][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.833178][ T7906] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 251.846511][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.861970][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.871854][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.882343][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.893394][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.923344][ T7913] loop2: detected capacity change from 0 to 128 [ 251.935346][ T7606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.950672][ T7606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.970515][ T4653] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 251.974652][ T7606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.010236][ T7606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.154695][ T4653] usb 4-1: Using ep0 maxpacket: 8 [ 252.172307][ T7906] loop0: detected capacity change from 0 to 1024 [ 252.191872][ T4653] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 252.218564][ T7917] netlink: 'syz.2.738': attribute type 2 has an invalid length. [ 252.338010][ T4653] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 252.348125][ T4653] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.359409][ T4653] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.372917][ T4653] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.382690][ T4653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.041427][ T7920] hfsplus: xattr search failed [ 253.048483][ T7920] hfsplus: unable to mark blocks free: error -4 [ 253.055247][ T7920] hfsplus: can't free extent [ 253.066548][ T7921] hfsplus: xattr searching failed [ 253.075377][ T7924] hfsplus: xattr searching failed [ 253.082028][ T29] audit: type=1800 audit(1729301132.472:35): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.737" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 253.145215][ T29] audit: type=1800 audit(1729301132.482:36): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.737" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 253.252278][ T4653] usb 4-1: GET_CAPABILITIES returned 0 [ 253.265027][ T4653] usbtmc 4-1:16.0: can't read capabilities [ 253.560487][ T5859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.589969][ T5859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.689087][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.741872][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.329528][ T7941] loop4: detected capacity change from 0 to 1024 [ 255.144625][ T7941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.192692][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 255.222019][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 255.254659][ T7965] loop1: detected capacity change from 0 to 64 [ 255.348401][ T6116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.929297][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.935831][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.603539][ T7988] loop4: detected capacity change from 0 to 764 [ 256.644374][ T7988] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 256.818362][ T7977] loop0: detected capacity change from 0 to 32768 [ 257.073461][ T7991] 9pnet_fd: p9_fd_create_tcp (7991): problem connecting socket to 127.0.0.1 [ 257.246251][ T7977] JBD2: Ignoring recovery information on journal [ 257.548995][ T7977] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 257.931405][ T5665] ocfs2: Unmounting device (7,0) on (node local) [ 257.997864][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.761'. [ 258.060341][ T7976] loop1: detected capacity change from 0 to 40427 [ 258.188343][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.761'. [ 258.431754][ T7976] F2FS-fs (loop1): invalid crc value [ 258.687417][ T7976] F2FS-fs (loop1): Found nat_bits in checkpoint [ 259.420715][ T8019] fuse: Unknown parameter '0x0000000000000003' [ 260.161944][ T8023] netlink: zone id is out of range [ 260.176587][ T8023] netlink: zone id is out of range [ 260.181746][ T8023] netlink: zone id is out of range [ 260.212650][ T8023] netlink: zone id is out of range [ 260.238032][ T8023] netlink: zone id is out of range [ 260.243629][ T8029] overlayfs: missing 'lowerdir' [ 260.264827][ T8023] netlink: zone id is out of range [ 260.291713][ T8023] netlink: zone id is out of range [ 260.307648][ T8023] netlink: set zone limit has 4 unknown bytes [ 260.355900][ T8033] loop1: detected capacity change from 0 to 64 [ 260.664828][ T8036] loop4: detected capacity change from 0 to 1024 [ 260.752436][ T8036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.879697][ T25] usb 4-1: USB disconnect, device number 11 [ 262.272766][ T4626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.291542][ T4626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.301645][ T4626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.312516][ T4626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.321784][ T4626] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 262.330667][ T4626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.544643][ T8064] capability: warning: `syz.4.774' uses deprecated v2 capabilities in a way that may be insecure [ 262.797652][ T8048] loop1: detected capacity change from 0 to 32768 [ 262.924319][ T8048] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 262.957390][ T8068] loop2: detected capacity change from 0 to 256 [ 262.972607][ T6116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.116102][ T8070] overlayfs: missing 'lowerdir' [ 263.134415][ T8068] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 263.154406][ T7606] ocfs2: Unmounting device (7,1) on (node local) [ 263.387316][ T8074] netlink: zone id is out of range [ 263.397100][ T35] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.398515][ T8074] netlink: zone id is out of range [ 263.437069][ T8081] loop0: detected capacity change from 0 to 764 [ 263.512932][ T8081] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 264.141673][ T8095] loop2: detected capacity change from 0 to 1024 [ 264.474610][ T8094] 9pnet_fd: p9_fd_create_tcp (8094): problem connecting socket to 127.0.0.1 [ 264.836264][ T8095] hfsplus: request for non-existent node -709361664 in B*Tree [ 264.843861][ T8095] hfsplus: request for non-existent node -709361664 in B*Tree [ 264.852776][ T8095] hfsplus: b-tree write err: -5, ino 8 [ 264.928338][ T4626] Bluetooth: hci0: command tx timeout [ 264.966657][ T35] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.251164][ T35] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.324048][ T8104] loop1: detected capacity change from 0 to 256 [ 265.428394][ T8104] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 265.547193][ T35] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.744185][ T8111] loop0: detected capacity change from 0 to 8 [ 265.852503][ T8113] loop4: detected capacity change from 0 to 8 [ 266.597708][ T8111] SQUASHFS error: Failed to read block 0x4e8: -5 [ 266.627277][ T8111] SQUASHFS error: Failed to read block 0x6e6: -5 [ 266.633765][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.641469][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.648711][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.655270][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.662661][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.669743][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.676321][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.683771][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.690890][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.697856][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.705546][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.712477][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.718770][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.726111][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.733150][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.739453][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.746836][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.753665][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.759951][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.767292][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.774244][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.780834][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.788383][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.795361][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.803877][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.811384][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.818427][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.824790][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.832170][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.839174][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.845609][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.852996][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.859973][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.866636][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.874026][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.881060][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.954787][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.962252][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.969321][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.975712][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 266.983096][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 266.990150][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 266.996602][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.003983][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.014443][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.021059][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.028554][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.035536][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.041847][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.049398][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.057900][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.064153][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.071531][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.078427][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.084718][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.092042][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.098972][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.105306][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.112986][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.119868][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.126381][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.133692][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.140831][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.145686][ T29] audit: type=1800 audit(1729301146.012:37): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.795" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 267.147321][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.174114][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.181562][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.187874][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.195257][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.202114][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.208442][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.214702][ T4626] Bluetooth: hci0: command tx timeout [ 267.216166][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.228572][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.235000][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.242324][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.249694][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.256129][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.263453][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.270378][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.276732][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.284042][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.290358][ T8116] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 267.291331][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.306813][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.314444][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.322958][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.329268][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.336736][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.343580][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.349911][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.357263][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.364095][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.367902][ T8118] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.800'. [ 267.370393][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.386676][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.393503][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.399832][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.405762][ T8116] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 267.407213][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.426186][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.432429][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.439817][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.446749][ T8111] SQUASHFS error: Failed to read block 0x0: -5 [ 267.453012][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.460387][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.467360][ T8111] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 267.474845][ T8111] SQUASHFS error: read_indexes: reading block [6e4:0] [ 267.533431][ T8116] overlayfs: missing 'lowerdir' [ 267.595563][ T8061] chnl_net:caif_netlink_parms(): no params data found [ 267.766182][ T8129] loop1: detected capacity change from 0 to 128 [ 268.090605][ T35] bridge_slave_1: left allmulticast mode [ 268.105212][ T35] bridge_slave_1: left promiscuous mode [ 268.122245][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.358578][ T35] bridge_slave_0: left allmulticast mode [ 268.364949][ T35] bridge_slave_0: left promiscuous mode [ 268.374266][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.285079][ T5248] Bluetooth: hci0: command tx timeout [ 269.301840][ T8168] fuse: Unknown parameter '0x0000000000000003' [ 269.370980][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.382230][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.393069][ T35] bond0 (unregistering): Released all slaves [ 269.403244][ T8137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.808'. [ 269.419581][ T8137] geneve2: entered promiscuous mode [ 269.430648][ T8135] netlink: 'syz.1.805': attribute type 2 has an invalid length. [ 269.611215][ T8172] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.812'. [ 269.819331][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.827537][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.828617][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 269.834823][ T8061] bridge_slave_0: entered allmulticast mode [ 269.837520][ T8061] bridge_slave_0: entered promiscuous mode [ 269.951075][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.026412][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.064750][ T8183] loop0: detected capacity change from 0 to 512 [ 270.086295][ T8183] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 270.094879][ T8061] bridge_slave_1: entered allmulticast mode [ 270.103647][ T8061] bridge_slave_1: entered promiscuous mode [ 270.208302][ T8183] loop0: detected capacity change from 0 to 1024 [ 270.552616][ T29] audit: type=1800 audit(1729301149.952:38): pid=8189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.816" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 271.190929][ T29] audit: type=1800 audit(1729301150.012:39): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.816" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 271.218168][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.859585][ T5248] Bluetooth: hci0: command tx timeout [ 271.875958][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.339172][ T8212] netlink: 'syz.1.827': attribute type 72 has an invalid length. [ 272.448190][ T8218] fuse: Unknown parameter '0x0000000000000003' [ 272.452096][ T8217] loop4: detected capacity change from 0 to 1024 [ 272.497875][ T8217] hfsplus: request for non-existent node -709361664 in B*Tree [ 272.505754][ T8217] hfsplus: request for non-existent node -709361664 in B*Tree [ 272.513680][ T8217] hfsplus: b-tree write err: -5, ino 8 [ 272.812921][ T35] hsr_slave_0: left promiscuous mode [ 273.076331][ T35] hsr_slave_1: left promiscuous mode [ 273.222502][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.236768][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.258973][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.306262][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.918895][ T35] veth1_macvtap: left promiscuous mode [ 273.924469][ T35] veth0_macvtap: left promiscuous mode [ 273.940611][ T35] veth1_vlan: left promiscuous mode [ 273.955348][ T35] veth0_vlan: left promiscuous mode [ 274.474107][ T8229] loop0: detected capacity change from 0 to 40427 [ 274.525769][ T8229] F2FS-fs (loop0): invalid crc value [ 274.539973][ T8229] F2FS-fs (loop0): Found nat_bits in checkpoint [ 274.604890][ T8229] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 274.835982][ T35] team0 (unregistering): Port device team_slave_1 removed [ 274.902959][ T35] team0 (unregistering): Port device team_slave_0 removed [ 274.934114][ T8229] syz.0.824: attempt to access beyond end of device [ 274.934114][ T8229] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 274.962898][ T8229] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 274.978543][ T8229] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 275.748798][ T8252] loop2: detected capacity change from 0 to 256 [ 275.775601][ T8252] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 275.854055][ T8061] team0: Port device team_slave_0 added [ 275.892669][ T8061] team0: Port device team_slave_1 added [ 276.092648][ T8268] netlink: 'syz.4.837': attribute type 72 has an invalid length. [ 276.208413][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.222473][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.387715][ T8061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.429726][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.443369][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.505276][ T8061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.709215][ T8287] loop4: detected capacity change from 0 to 256 [ 276.805131][ T8287] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 276.831203][ T8061] hsr_slave_0: entered promiscuous mode [ 276.881957][ T8061] hsr_slave_1: entered promiscuous mode [ 276.941085][ T8061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.949360][ T8061] Cannot create hsr debugfs directory [ 276.989527][ T8284] overlayfs: failed to resolve './file1': -2 [ 277.220841][ T8301] loop4: detected capacity change from 0 to 512 [ 277.304224][ T8301] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 277.357291][ T8306] netlink: 'syz.2.850': attribute type 72 has an invalid length. [ 277.742357][ T8313] loop1: detected capacity change from 0 to 8 [ 279.941135][ T8352] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.860'. [ 280.366365][ T8061] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.424248][ T8061] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.956010][ T8061] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.079746][ T8061] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 281.188787][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.862'. [ 281.375309][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.443675][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.447334][ T8338] loop1: detected capacity change from 0 to 32768 [ 281.494544][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.501755][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.529184][ T8338] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 281.586020][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.593157][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.676534][ T7606] ocfs2: Unmounting device (7,1) on (node local) [ 282.360712][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.446581][ T8404] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.871'. [ 282.562410][ T8061] veth0_vlan: entered promiscuous mode [ 282.575602][ T8061] veth1_vlan: entered promiscuous mode [ 282.809510][ T8410] loop0: detected capacity change from 0 to 1024 [ 283.580896][ T8061] veth0_macvtap: entered promiscuous mode [ 283.587861][ T8392] net_ratelimit: 6 callbacks suppressed [ 283.587879][ T8392] dccp_close: ABORT with 67 bytes unread [ 283.603950][ T8061] veth1_macvtap: entered promiscuous mode [ 283.950651][ T8410] hfsplus: request for non-existent node -709361664 in B*Tree [ 283.958282][ T8410] hfsplus: request for non-existent node -709361664 in B*Tree [ 283.967246][ T8410] hfsplus: b-tree write err: -5, ino 8 [ 284.032328][ T8416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.875'. [ 284.065056][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.076453][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.086766][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.100315][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.100338][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.100353][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.139181][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.149889][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.248087][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.331058][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.412204][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.460630][ T8434] loop2: detected capacity change from 0 to 128 [ 284.463586][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.502550][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.531845][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.560232][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.625721][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.713308][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.785997][ T8437] overlayfs: failed to resolve './file1': -2 [ 284.802180][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.854337][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.877'. [ 284.884355][ T8442] netlink: 'syz.2.880': attribute type 2 has an invalid length. [ 284.904475][ T8061] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.933957][ T8061] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.971586][ T8061] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.998679][ T8061] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.240973][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.271561][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.459953][ T1595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.476440][ T1595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.795345][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 287.979460][ T8498] loop0: detected capacity change from 0 to 764 [ 288.003252][ T8500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.894'. [ 288.037218][ T8498] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 288.052762][ T8500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.894'. [ 288.149640][ T8500] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 288.183767][ T8500] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 288.229376][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 288.280598][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 288.425254][ T8513] 9pnet_fd: p9_fd_create_tcp (8513): problem connecting socket to 127.0.0.1 [ 288.454694][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 288.543753][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 288.728721][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 288.833927][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.913448][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.033008][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 289.033268][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.128687][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.434857][ T25] usb 3-1: GET_CAPABILITIES returned 0 [ 289.440400][ T25] usbtmc 3-1:16.0: can't read capabilities [ 290.330588][ T8535] loop4: detected capacity change from 0 to 1024 [ 290.403971][ T8535] hfsplus: request for non-existent node -709361664 in B*Tree [ 290.411733][ T8535] hfsplus: request for non-existent node -709361664 in B*Tree [ 290.419639][ T8535] hfsplus: b-tree write err: -5, ino 8 [ 290.708424][ T8553] overlayfs: failed to resolve './file1': -2 [ 291.602403][ T8531] loop1: detected capacity change from 0 to 40427 [ 291.853378][ T8531] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.091753][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 292.115023][ T8531] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.141142][ T5248] Bluetooth: hci5: unexpected event for opcode 0x2031 [ 292.157862][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 292.260549][ T8578] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 292.313142][ T8578] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 292.739682][ T8593] loop3: detected capacity change from 0 to 512 [ 292.787150][ T8593] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 292.976282][ T8597] loop1: detected capacity change from 0 to 64 [ 295.365454][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.919'. [ 295.415648][ T8637] netlink: 'syz.3.919': attribute type 7 has an invalid length. [ 295.423305][ T8637] netlink: 'syz.3.919': attribute type 8 has an invalid length. [ 295.473972][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 296.031969][ T8639] loop1: detected capacity change from 0 to 40427 [ 296.168180][ T5248] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 296.177199][ T5248] Bluetooth: hci5: Injecting HCI hardware error event [ 296.192378][ T5248] Bluetooth: hci5: hardware error 0x00 [ 296.304918][ T8639] F2FS-fs (loop1): Found nat_bits in checkpoint [ 296.812210][ T8639] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 296.903031][ T7606] syz-executor: attempt to access beyond end of device [ 296.903031][ T7606] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.929583][ T7606] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 296.973863][ T25] usb 3-1: USB disconnect, device number 2 [ 298.404707][ T5248] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 298.705323][ T8681] loop2: detected capacity change from 0 to 64 [ 299.025072][ T5321] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 299.251327][ T5321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 299.482151][ T5321] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 299.674220][ T5321] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 299.754691][ T5321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.818820][ T5321] usb 4-1: config 0 descriptor?? [ 299.873928][ T5321] gspca_main: spca561-2.14.0 probing abcd:cdee [ 299.954706][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 300.126642][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 300.157754][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 300.215456][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 300.275835][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.326565][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.391437][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.442180][ T5321] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 300.463685][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.478009][ T5321] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.480878][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 300.501751][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 300.511134][ T5321] usb 4-1: MIDIStreaming interface descriptor not found [ 300.549003][ T8702] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 300.632152][ T8702] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 300.736587][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 300.752434][ T9] usbtmc 2-1:16.0: can't read capabilities [ 301.900916][ T9] usb 4-1: USB disconnect, device number 12 [ 302.069116][ T8725] netlink: 72 bytes leftover after parsing attributes in process `syz.4.949'. [ 302.300435][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.950'. [ 302.524345][ T8730] geneve2: entered promiscuous mode [ 303.193047][ T8736] overlayfs: failed to resolve './file1': -2 [ 304.405050][ T8754] loop3: detected capacity change from 0 to 4096 [ 305.380092][ T8767] loop4: detected capacity change from 0 to 512 [ 305.409934][ T8754] ntfs3(loop3): failed to convert "0080" to cp932 [ 305.420444][ T8767] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 305.478794][ T8754] ntfs3(loop3): failed to convert name for inode 1e. [ 306.586192][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'. [ 306.599595][ T8772] geneve2: entered promiscuous mode [ 306.717917][ T8777] netlink: 72 bytes leftover after parsing attributes in process `syz.3.965'. [ 308.068517][ T8789] loop0: detected capacity change from 0 to 8 [ 309.936681][ T8808] netlink: 72 bytes leftover after parsing attributes in process `syz.2.978'. [ 309.948370][ T8794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.303831][ T8812] fuse: Unknown parameter '0x0000000000000003' [ 311.443469][ T4626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.457720][ T4626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.471952][ T8823] loop3: detected capacity change from 0 to 4096 [ 311.480307][ T4626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.686696][ T4626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.703026][ T4626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 311.709193][ T8823] ntfs3(loop3): failed to convert "0080" to cp860 [ 311.715384][ T4626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.719152][ T8823] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 311.804669][ T5240] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 311.841492][ T8823] ntfs3(loop3): failed to convert name for inode 1e. [ 311.955109][ T5240] usb 5-1: Using ep0 maxpacket: 8 [ 311.973185][ T5240] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 311.989683][ T8829] chnl_net:caif_netlink_parms(): no params data found [ 312.000905][ T5240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 312.041076][ T5240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.093783][ T5240] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.966364][ T5240] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 312.975643][ T5240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.257084][ T8854] fuse: Unknown parameter '0x0000000000000003' [ 313.264053][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.286294][ T5240] usb 5-1: GET_CAPABILITIES returned 0 [ 313.299818][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.307164][ T5240] usbtmc 5-1:16.0: can't read capabilities [ 313.326444][ T8829] bridge_slave_0: entered allmulticast mode [ 313.363283][ T8829] bridge_slave_0: entered promiscuous mode [ 313.371409][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.378825][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.399892][ T8829] bridge_slave_1: entered allmulticast mode [ 313.413919][ T8829] bridge_slave_1: entered promiscuous mode [ 313.834671][ T4626] Bluetooth: hci2: command tx timeout [ 313.859650][ T8829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.872368][ T8829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.934234][ T8829] team0: Port device team_slave_0 added [ 313.946886][ T8829] team0: Port device team_slave_1 added [ 313.995997][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.012810][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.039232][ T8829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.051090][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.058148][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.084426][ T8829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.194845][ T8829] hsr_slave_0: entered promiscuous mode [ 314.201819][ T8829] hsr_slave_1: entered promiscuous mode [ 314.215350][ T8829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.248548][ T8829] Cannot create hsr debugfs directory [ 314.460454][ T8866] loop2: detected capacity change from 0 to 1024 [ 314.486404][ T8866] hfsplus: request for non-existent node -709361664 in B*Tree [ 314.493884][ T8866] hfsplus: request for non-existent node -709361664 in B*Tree [ 314.501574][ T8866] hfsplus: b-tree write err: -5, ino 8 [ 314.517659][ T5287] usb 5-1: USB disconnect, device number 5 [ 314.964021][ T8863] loop0: detected capacity change from 0 to 32768 [ 314.999690][ T5287] usb 2-1: USB disconnect, device number 4 [ 315.021206][ T8863] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.139822][ T8877] loop3: detected capacity change from 0 to 512 [ 315.152585][ T8877] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 315.285852][ T8829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.325220][ T8877] loop3: detected capacity change from 0 to 1024 [ 315.745016][ T8886] loop4: detected capacity change from 0 to 1024 [ 315.770900][ T8886] hfsplus: request for non-existent node -709361664 in B*Tree [ 315.778626][ T8886] hfsplus: request for non-existent node -709361664 in B*Tree [ 315.786512][ T8886] hfsplus: b-tree write err: -5, ino 8 [ 315.846145][ T4626] Bluetooth: hci2: command tx timeout [ 315.901478][ T8863] XFS (loop0): Ending clean mount [ 315.912824][ T8863] XFS (loop0): Quotacheck needed: Please wait. [ 315.963869][ T8863] XFS (loop0): Quotacheck: Done. [ 315.988205][ T8829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.275982][ T5665] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.389126][ T8884] loop2: detected capacity change from 0 to 40427 [ 316.422411][ T8884] F2FS-fs (loop2): invalid crc value [ 316.464249][ T8829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.539031][ T8884] F2FS-fs (loop2): Found nat_bits in checkpoint [ 316.583144][ T8890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1005'. [ 316.592908][ T8890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1005'. [ 316.688564][ T8890] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 316.775600][ T8884] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 316.775820][ T8890] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 317.113732][ T8829] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.543665][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.550178][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.978513][ T4626] Bluetooth: hci2: command tx timeout [ 318.210712][ T8884] syz.2.1001: attempt to access beyond end of device [ 318.210712][ T8884] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 318.225050][ T8884] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 318.438800][ T2944] bridge_slave_1: left allmulticast mode [ 318.456695][ T8917] loop4: detected capacity change from 0 to 1024 [ 318.484027][ T2944] bridge_slave_1: left promiscuous mode [ 318.492908][ T8917] hfsplus: request for non-existent node -709361664 in B*Tree [ 318.500683][ T8917] hfsplus: request for non-existent node -709361664 in B*Tree [ 318.508738][ T8917] hfsplus: b-tree write err: -5, ino 8 [ 318.529449][ T8912] loop0: detected capacity change from 0 to 4096 [ 318.539132][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.554822][ T29] audit: type=1800 audit(1729301197.952:40): pid=8915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1000" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 318.579971][ T8912] ntfs3(loop0): It is recommened to use chkdsk. [ 318.618862][ T2944] bridge_slave_0: left allmulticast mode [ 318.619967][ T8912] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 318.643946][ T2944] bridge_slave_0: left promiscuous mode [ 318.646185][ T8912] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 318.665168][ T29] audit: type=1800 audit(1729301197.992:41): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1000" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 318.685029][ T8912] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 318.696139][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.754270][ T8912] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 318.772576][ T8912] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00 [ 318.791243][ T8912] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00 [ 318.804747][ T8912] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00 [ 318.822667][ T8912] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00 [ 318.856724][ T8912] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00 [ 319.483189][ T8927] loop0: detected capacity change from 0 to 1024 [ 319.590523][ T8927] hfsplus: request for non-existent node -709361664 in B*Tree [ 319.598139][ T8927] hfsplus: request for non-existent node -709361664 in B*Tree [ 319.606142][ T8927] hfsplus: b-tree write err: -5, ino 8 [ 320.920091][ T4626] Bluetooth: hci2: command tx timeout [ 320.926390][ T8934] loop4: detected capacity change from 0 to 764 [ 320.960015][ T8934] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 321.253394][ T8937] loop3: detected capacity change from 0 to 64 [ 321.580406][ T8944] 9pnet_fd: p9_fd_create_tcp (8944): problem connecting socket to 127.0.0.1 [ 321.855635][ T8948] fuse: Unknown parameter '0x0000000000000003' [ 322.416626][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.471493][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.483416][ T2944] bond0 (unregistering): Released all slaves [ 322.599081][ T8957] input: syz1 as /devices/virtual/input/input6 [ 322.711750][ T8829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.944204][ T8829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.012314][ T8956] loop0: detected capacity change from 0 to 512 [ 323.213907][ T8956] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 323.283524][ T8960] loop4: detected capacity change from 0 to 512 [ 323.298887][ T8956] loop0: detected capacity change from 0 to 1024 [ 323.373193][ T8960] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.1025: casefold flag without casefold feature [ 323.419295][ T8960] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1025: couldn't read orphan inode 15 (err -117) [ 323.467861][ T8829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.500105][ T8960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.567390][ T8829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.687989][ T8960] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.1025: Directory hole found for htree leaf block 0 [ 323.730241][ T8966] loop2: detected capacity change from 0 to 1024 [ 323.766234][ T8966] hfsplus: request for non-existent node -709361664 in B*Tree [ 323.773775][ T8966] hfsplus: request for non-existent node -709361664 in B*Tree [ 323.781763][ T8966] hfsplus: b-tree write err: -5, ino 8 [ 323.813072][ T8969] loop3: detected capacity change from 0 to 1024 [ 323.937076][ T8969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.946436][ T29] audit: type=1800 audit(1729301204.342:42): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1024" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 324.974974][ T29] audit: type=1800 audit(1729301204.372:43): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1024" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 325.055262][ T6116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.071850][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.114317][ T8829] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.436641][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.443811][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.512113][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.519314][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.612574][ T2944] hsr_slave_0: left promiscuous mode [ 325.905915][ T2944] hsr_slave_1: left promiscuous mode [ 325.997681][ T8971] tty tty27: ldisc open failed (-12), clearing slot 26 [ 326.023186][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.053371][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.302793][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.314623][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.316191][ T8061] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.335427][ T9000] loop4: detected capacity change from 0 to 64 [ 326.429637][ T2944] veth1_macvtap: left promiscuous mode [ 326.476771][ T2944] veth0_macvtap: left promiscuous mode [ 326.482439][ T2944] veth1_vlan: left promiscuous mode [ 326.488014][ T2944] veth0_vlan: left promiscuous mode [ 326.604258][ T9002] loop3: detected capacity change from 0 to 1024 [ 326.630495][ T9002] hfsplus: request for non-existent node -709361664 in B*Tree [ 326.638083][ T9002] hfsplus: request for non-existent node -709361664 in B*Tree [ 326.645950][ T9002] hfsplus: b-tree write err: -5, ino 8 [ 326.759512][ T9007] fuse: Unknown parameter '0x0000000000000003' [ 327.273228][ T9016] loop3: detected capacity change from 0 to 128 [ 327.286768][ T9016] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 327.403950][ T9016] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 327.436707][ T9016] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.1041: checksumming directory block 0 [ 327.886343][ T8061] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.903912][ T8990] loop0: detected capacity change from 0 to 32768 [ 328.170153][ T8990] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 328.375247][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 328.694928][ T8990] (syz.0.1034,8990,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 329.062974][ T5665] ocfs2: Unmounting device (7,0) on (node local) [ 330.005306][ T2944] team0 (unregistering): Port device team_slave_1 removed [ 330.146244][ T2944] team0 (unregistering): Port device team_slave_0 removed [ 330.163674][ T9030] loop3: detected capacity change from 0 to 764 [ 330.201902][ T9030] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 330.830909][ T9035] loop0: detected capacity change from 0 to 1024 [ 331.009801][ T9038] 9pnet_fd: p9_fd_create_tcp (9038): problem connecting socket to 127.0.0.1 [ 331.029831][ T9035] hfsplus: request for non-existent node -709361664 in B*Tree [ 331.037496][ T9035] hfsplus: request for non-existent node -709361664 in B*Tree [ 331.045396][ T9035] hfsplus: b-tree write err: -5, ino 8 [ 331.701851][ T9040] loop3: detected capacity change from 0 to 32768 [ 331.735952][ T9040] btrfs: Deprecated parameter 'usebackuproot' [ 331.762726][ T9040] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 331.786955][ T9040] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1048 (9040) [ 331.856352][ T9040] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.902502][ T9040] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 331.925417][ T9040] BTRFS info (device loop3): disk space caching is enabled [ 331.933532][ T9040] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 332.087412][ T9044] loop0: detected capacity change from 0 to 32768 [ 332.183560][ T9044] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 332.411624][ T5665] ocfs2: Unmounting device (7,0) on (node local) [ 332.456143][ T8829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.497609][ T8061] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 333.467501][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.793254][ T8829] veth0_vlan: entered promiscuous mode [ 334.104433][ T9073] loop4: detected capacity change from 0 to 40427 [ 334.119694][ T8829] veth1_vlan: entered promiscuous mode [ 334.142161][ T8829] veth0_macvtap: entered promiscuous mode [ 334.151145][ T8829] veth1_macvtap: entered promiscuous mode [ 334.185960][ T9073] F2FS-fs (loop4): invalid crc value [ 334.214990][ T9073] F2FS-fs (loop4): Found nat_bits in checkpoint [ 334.284678][ T9073] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 334.304461][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.331604][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.394363][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.405011][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.420466][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.495048][ T9096] loop3: detected capacity change from 0 to 1024 [ 334.526867][ T9096] hfsplus: request for non-existent node -709361664 in B*Tree [ 334.534417][ T9096] hfsplus: request for non-existent node -709361664 in B*Tree [ 334.544010][ T9096] hfsplus: b-tree write err: -5, ino 8 [ 334.611284][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.668447][ T9099] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1061'. [ 334.681947][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.720406][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1061'. [ 334.739434][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.795173][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.827485][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.874572][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.889872][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.906667][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.921209][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.260182][ T9103] loop0: detected capacity change from 0 to 32768 [ 335.264260][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.311714][ T9107] binder: 9106:9107 ioctl c0306201 0 returned -14 [ 335.319176][ T9107] binder: 9106:9107 ioctl c06864ce 0 returned -22 [ 335.326067][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.338488][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.384456][ T9103] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 335.407572][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.429811][ T9103] XFS (loop0): empty log check failed [ 335.435478][ T9103] XFS (loop0): log mount/recovery failed: error -5 [ 335.439600][ T9114] fuse: Unknown parameter '0x0000000000000003' [ 335.460522][ T8829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.480566][ T9103] XFS (loop0): log mount failed [ 335.514823][ T8829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.523612][ T8829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.562790][ T9073] syz.4.1055: attempt to access beyond end of device [ 335.562790][ T9073] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 335.644847][ T9073] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 335.653917][ T8829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.757742][ T9119] loop3: detected capacity change from 0 to 256 [ 335.781466][ T9119] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 336.110046][ T9121] loop0: detected capacity change from 0 to 64 [ 336.156540][ T9121] syz.0.1062: attempt to access beyond end of device [ 336.156540][ T9121] loop0: rw=0, sector=548, nr_sectors = 2 limit=64 [ 336.170456][ T9121] Buffer I/O error on dev loop0, logical block 274, async page read [ 336.183205][ T9121] syz.0.1062: attempt to access beyond end of device [ 336.183205][ T9121] loop0: rw=0, sector=548, nr_sectors = 2 limit=64 [ 336.196528][ T9121] Buffer I/O error on dev loop0, logical block 274, async page read [ 336.537227][ T9121] syz.0.1062 (9121) used greatest stack depth: 18064 bytes left [ 336.559071][ T29] audit: type=1800 audit(1729301215.612:44): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1062" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 336.680316][ T5858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.712517][ T5858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.829854][ T9123] loop3: detected capacity change from 0 to 4096 [ 336.856088][ T9123] ntfs3(loop3): It is recommened to use chkdsk. [ 336.863706][ T9123] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 336.871791][ T9123] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 336.899395][ T9123] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 336.925011][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.932875][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.940910][ T9123] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 336.995928][ T9123] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 337.027889][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1067'. [ 337.055181][ T9123] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 337.063539][ T9123] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 337.133265][ T9123] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 337.143316][ T9123] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 337.910430][ T9136] loop3: detected capacity change from 0 to 256 [ 337.920144][ T9136] exfat: Deprecated parameter 'namecase' [ 337.926215][ T9136] exfat: Deprecated parameter 'utf8' [ 337.931788][ T9136] exfat: Deprecated parameter 'namecase' [ 337.937581][ T9136] exfat: Deprecated parameter 'utf8' [ 338.120331][ T9136] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 338.630384][ T9140] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 338.762093][ T9146] loop1: detected capacity change from 0 to 764 [ 338.781787][ T9143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1068'. [ 338.793190][ T9146] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 339.131198][ T9156] 9pnet_fd: p9_fd_create_tcp (9156): problem connecting socket to 127.0.0.1 [ 339.754650][ T5321] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 339.998660][ T5321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 340.011531][ T5321] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.026446][ T9155] loop2: detected capacity change from 0 to 1024 [ 340.028360][ T5321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.074820][ T9155] hfsplus: request for non-existent node -709361664 in B*Tree [ 340.099102][ T9155] hfsplus: request for non-existent node -709361664 in B*Tree [ 340.112242][ T9155] hfsplus: b-tree write err: -5, ino 8 [ 340.123205][ T5321] usb 4-1: Product: syz [ 340.131819][ T5321] usb 4-1: Manufacturer: syz [ 340.194319][ T5321] usb 4-1: SerialNumber: syz [ 340.241449][ T5321] usb 4-1: config 0 descriptor?? [ 340.611984][ T9160] dccp_close: ABORT with 32 bytes unread [ 341.078045][ T4653] usb 4-1: USB disconnect, device number 13 [ 341.716385][ T9154] loop4: detected capacity change from 0 to 40427 [ 341.842351][ T9154] F2FS-fs (loop4): Found nat_bits in checkpoint [ 341.848071][ T9171] loop1: detected capacity change from 0 to 4096 [ 341.877669][ T9171] ntfs3(loop1): It is recommened to use chkdsk. [ 341.893058][ T9179] tap0: tun_chr_ioctl cmd 1074025677 [ 341.913066][ T9171] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 341.925857][ T9179] tap0: linktype set to 782 [ 341.951796][ T9171] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 341.964434][ T9171] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 341.974654][ T9171] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 341.982543][ T9171] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00 [ 341.993160][ T9171] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00 [ 342.001217][ T9171] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00 [ 342.012249][ T9171] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00 [ 342.020215][ T9171] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00 [ 342.042133][ T9154] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 342.387436][ T9186] fuse: Unknown parameter '0x0000000000000003' [ 342.531450][ T9188] loop1: detected capacity change from 0 to 4096 [ 342.618665][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 343.210859][ T4626] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 343.612200][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1086'. [ 344.241618][ T9207] loop3: detected capacity change from 0 to 1024 [ 344.278960][ T9207] hfsplus: request for non-existent node -709361664 in B*Tree [ 344.286681][ T9207] hfsplus: request for non-existent node -709361664 in B*Tree [ 344.294445][ T9207] hfsplus: b-tree write err: -5, ino 8 [ 344.445780][ T9210] loop0: detected capacity change from 0 to 256 [ 344.481250][ T9210] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 344.762321][ T9213] loop0: detected capacity change from 0 to 1024 [ 344.769557][ T9213] hfsplus: Unknown parameter '' [ 345.487271][ T9217] loop3: detected capacity change from 0 to 512 [ 346.255393][ T9217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.268851][ T9217] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.309836][ T9220] loop0: detected capacity change from 0 to 4096 [ 346.361605][ T9220] ntfs3(loop0): It is recommened to use chkdsk. [ 346.405649][ T9220] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 346.463273][ T9220] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 346.471909][ T5287] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 346.489862][ T8061] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.495052][ T9220] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 346.521414][ T9220] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 346.544732][ T9220] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00 [ 346.552617][ T9220] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00 [ 346.604756][ T9220] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00 [ 346.619125][ T9220] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00 [ 346.634689][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 346.644816][ T9220] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00 [ 346.653574][ T5287] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 346.694711][ T5287] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 346.711121][ T5287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.747187][ T5287] usb 5-1: New USB device found, idVendor=eef5, idProduct=a1e2, bcdDevice=4d.71 [ 346.779626][ T5287] usb 5-1: New USB device strings: Mfr=97, Product=121, SerialNumber=3 [ 346.794872][ T5287] usb 5-1: Product: syz [ 346.811967][ T5287] usb 5-1: Manufacturer: syz [ 346.817483][ T5287] usb 5-1: SerialNumber: syz [ 346.915379][ T9229] loop3: detected capacity change from 0 to 4096 [ 348.036315][ T9237] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1100'. [ 348.558493][ T5287] usb 5-1: 0:2 : does not exist [ 348.599265][ T5287] usb 5-1: USB disconnect, device number 6 [ 348.627533][ T5246] udevd[5246]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.742744][ T9253] loop2: detected capacity change from 0 to 1024 [ 348.797571][ T9253] hfsplus: request for non-existent node -709361664 in B*Tree [ 348.844436][ T9253] hfsplus: request for non-existent node -709361664 in B*Tree [ 348.881528][ T9253] hfsplus: b-tree write err: -5, ino 8 [ 349.749852][ T9261] loop1: detected capacity change from 0 to 1024 [ 349.757061][ T9261] hfsplus: Unknown parameter '' [ 350.065950][ T9257] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 350.195616][ T9271] loop4: detected capacity change from 0 to 1024 [ 350.202674][ T9271] hfsplus: Unknown parameter '' [ 350.752855][ T9258] dccp_close: ABORT with 32 bytes unread [ 351.142594][ T9284] loop1: detected capacity change from 0 to 64 [ 352.257049][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1115'. [ 352.365138][ T9291] geneve2: entered promiscuous mode [ 352.846535][ T9299] loop2: detected capacity change from 0 to 1024 [ 352.853707][ T9299] hfsplus: Unknown parameter '' [ 353.748829][ T9319] loop2: detected capacity change from 0 to 1024 [ 353.865549][ T9319] hfsplus: request for non-existent node -709361664 in B*Tree [ 353.873139][ T9319] hfsplus: request for non-existent node -709361664 in B*Tree [ 353.932801][ T9319] hfsplus: b-tree write err: -5, ino 8 [ 354.311674][ T9316] loop0: detected capacity change from 0 to 40427 [ 354.350052][ T9316] F2FS-fs (loop0): Found nat_bits in checkpoint [ 354.433654][ T9316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 354.607237][ T5665] syz-executor: attempt to access beyond end of device [ 354.607237][ T5665] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 354.662722][ T5665] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 354.714780][ T5665] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 355.988060][ T9344] loop4: detected capacity change from 0 to 1024 [ 356.069379][ T9344] hfsplus: request for non-existent node -709361664 in B*Tree [ 356.115029][ T9344] hfsplus: request for non-existent node -709361664 in B*Tree [ 356.144920][ T9344] hfsplus: b-tree write err: -5, ino 8 [ 356.558910][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 357.555729][ T9359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1129'. [ 357.698062][ T9359] geneve2: entered promiscuous mode [ 359.699055][ T9374] input: syz1 as /devices/virtual/input/input7 [ 360.162353][ T9364] loop2: detected capacity change from 0 to 40427 [ 360.243594][ T9364] F2FS-fs (loop2): Found nat_bits in checkpoint [ 360.355711][ T9372] loop3: detected capacity change from 0 to 32768 [ 360.434155][ T9372] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 360.537105][ T9372] XFS (loop3): empty log check failed [ 360.543113][ T9372] XFS (loop3): log mount/recovery failed: error -5 [ 360.564230][ T9364] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 360.589624][ T9372] XFS (loop3): log mount failed [ 360.705563][ T9412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1152'. [ 360.744865][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1152'. [ 360.776458][ T5287] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 360.822909][ T5251] syz-executor: attempt to access beyond end of device [ 360.822909][ T5251] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 360.887492][ T5251] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 360.927829][ T5251] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 360.956326][ T5287] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 360.981832][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.015794][ T5287] usb 1-1: config 0 descriptor?? [ 361.449941][ T5287] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 361.861798][ T5287] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 361.885464][ T5287] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 361.903333][ T5287] usb 1-1: USB disconnect, device number 3 [ 362.166139][ T9443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1165'. [ 362.210204][ T9443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1165'. [ 362.615479][ T9441] loop2: detected capacity change from 0 to 40427 [ 362.643075][ T9441] F2FS-fs (loop2): Found nat_bits in checkpoint [ 362.770528][ T9441] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 362.926567][ T5251] syz-executor: attempt to access beyond end of device [ 362.926567][ T5251] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 362.973815][ T5251] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 362.994752][ T5251] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 363.255312][ T9466] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1171'. [ 363.275332][ T9466] unsupported nlmsg_type 40 [ 363.897618][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 365.701350][ T9512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1190'. [ 365.916902][ T9529] loop3: detected capacity change from 0 to 256 [ 366.008152][ T9529] FAT-fs (loop3): Directory bread(block 64) failed [ 366.034220][ T9529] FAT-fs (loop3): Directory bread(block 65) failed [ 366.035307][ T936] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 366.055421][ T9529] FAT-fs (loop3): Directory bread(block 66) failed [ 366.062072][ T9529] FAT-fs (loop3): Directory bread(block 67) failed [ 366.089821][ T9529] FAT-fs (loop3): Directory bread(block 68) failed [ 366.104779][ T9529] FAT-fs (loop3): Directory bread(block 69) failed [ 366.119668][ T9529] FAT-fs (loop3): Directory bread(block 70) failed [ 366.126940][ T9529] FAT-fs (loop3): Directory bread(block 71) failed [ 366.139776][ T9529] FAT-fs (loop3): Directory bread(block 72) failed [ 366.192749][ T9529] FAT-fs (loop3): Directory bread(block 73) failed [ 366.234780][ T936] usb 5-1: Using ep0 maxpacket: 8 [ 366.241759][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.318957][ T936] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 366.328213][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.339011][ T936] usb 5-1: config 0 descriptor?? [ 366.348747][ T936] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 366.456511][ T5287] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 366.728399][ T936] usb 5-1: USB disconnect, device number 7 [ 366.764605][ T5287] usb 1-1: Using ep0 maxpacket: 16 [ 366.783155][ T5287] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 366.793713][ T5287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.505129][ T5287] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.514225][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.517045][ T9556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1206'. [ 367.570921][ T5287] usb 1-1: Product: syz [ 367.604636][ T5287] usb 1-1: Manufacturer: syz [ 367.609293][ T5287] usb 1-1: SerialNumber: syz [ 367.775076][ T5240] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 367.867557][ T5287] usb 1-1: 0:2 : does not exist [ 367.954952][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.972911][ T5240] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 368.067490][ T5287] usb 1-1: USB disconnect, device number 4 [ 368.174481][ T9575] fuse: Unknown parameter '0x0000000000000003' [ 368.819794][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.829683][ T5240] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 368.854794][ T5246] udevd[5246]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.957089][ T936] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 369.004649][ T5240] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 369.014094][ T5240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.109844][ T5240] usb 4-1: Product: syz [ 369.114063][ T5240] usb 4-1: Manufacturer: syz [ 369.132419][ T5240] usb 4-1: SerialNumber: syz [ 369.198831][ T9581] input: syz1 as /devices/virtual/input/input8 [ 369.833278][ T5240] usb 4-1: config 0 descriptor?? [ 369.875293][ T5240] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 369.883063][ T5240] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 369.891592][ T5240] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 370.090449][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.190681][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.061493][ T9596] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 371.083367][ T9598] loop0: detected capacity change from 0 to 764 [ 371.132465][ T9555] IPVS: stopping backup sync thread 9596 ... [ 371.201833][ T9598] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 371.571966][ T9608] 9pnet_fd: p9_fd_create_tcp (9608): problem connecting socket to 127.0.0.1 [ 372.544977][ T5240] usb 4-1: USB disconnect, device number 14 [ 372.832004][ T9618] loop0: detected capacity change from 0 to 1024 [ 372.924766][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 372.993302][ T936] usb 5-1: device descriptor read/all, error -71 [ 373.095907][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 373.109618][ T8] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 373.142897][ T9618] hfsplus: request for non-existent node -709361664 in B*Tree [ 373.159302][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.178717][ T9618] hfsplus: request for non-existent node -709361664 in B*Tree [ 373.197966][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.222891][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.254347][ T8] usb 3-1: Product: syz [ 373.267637][ T8] usb 3-1: Manufacturer: syz [ 373.272374][ T8] usb 3-1: SerialNumber: syz [ 373.289626][ T9618] hfsplus: b-tree write err: -5, ino 8 [ 373.422694][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 373.529796][ T9620] sctp: [Deprecated]: syz.2.1230 (pid 9620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.529796][ T9620] Use struct sctp_sack_info instead [ 373.653282][ T9620] mmap: syz.2.1230 (9620) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 374.353734][ T8] usb 3-1: 0:2 : does not exist [ 374.388977][ T8] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 374.418313][ T8] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 374.488770][ T8] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 374.530672][ T8] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 374.688983][ T8] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 374.746320][ T8] usb 3-1: USB disconnect, device number 3 [ 374.766777][ T9643] loop1: detected capacity change from 0 to 40427 [ 374.871582][ T9643] F2FS-fs (loop1): Found nat_bits in checkpoint [ 374.881141][ T5246] udevd[5246]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.993939][ T9643] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 375.029273][ T9643] syz.1.1238: attempt to access beyond end of device [ 375.029273][ T9643] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 375.064209][ T9643] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 375.081941][ T9643] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 375.906569][ T9705] input: syz1 as /devices/virtual/input/input9 [ 377.065119][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 377.183276][ T9729] loop1: detected capacity change from 0 to 1024 [ 377.204475][ T9729] hfsplus: request for non-existent node -709361664 in B*Tree [ 377.213315][ T9729] hfsplus: request for non-existent node -709361664 in B*Tree [ 377.221213][ T9729] hfsplus: b-tree write err: -5, ino 8 [ 377.244873][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 377.276550][ T8] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 377.348805][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.413980][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.461392][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.509107][ T8] usb 1-1: Product: syz [ 377.541137][ T8] usb 1-1: Manufacturer: syz [ 377.572674][ T8] usb 1-1: SerialNumber: syz [ 377.833060][ T9726] sctp: [Deprecated]: syz.0.1252 (pid 9726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.833060][ T9726] Use struct sctp_sack_info instead [ 377.857080][ T9747] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1256'. [ 378.105840][ T936] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 378.274714][ T936] usb 5-1: Using ep0 maxpacket: 16 [ 378.285360][ T936] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 378.309794][ T936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 378.330013][ T936] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.344762][ T936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.364088][ T936] usb 5-1: Product: syz [ 378.371731][ T936] usb 5-1: Manufacturer: syz [ 378.394229][ T936] usb 5-1: SerialNumber: syz [ 378.561794][ T8] usb 1-1: 0:2 : does not exist [ 378.582432][ T8] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 378.600916][ T8] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 378.645878][ T8] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 378.665792][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.684900][ T8] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 378.718076][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.735884][ T5240] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 378.772303][ T8] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 378.847706][ T8] usb 1-1: USB disconnect, device number 5 [ 378.905782][ T5240] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 378.914360][ T5240] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 378.934408][ T5240] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 378.955152][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.961660][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.980850][ T5240] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 379.004777][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 379.047323][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 379.130013][ T5240] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 379.221936][ T5240] usb 4-1: string descriptor 0 read error: -22 [ 379.253042][ T5240] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 379.283511][ T5240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.341223][ T5240] usb 4-1: config 0 descriptor?? [ 379.367336][ T5240] hub 4-1:0.0: bad descriptor, ignoring hub [ 379.373279][ T5240] hub 4-1:0.0: probe with driver hub failed with error -5 [ 379.426901][ T5240] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 379.469252][ T936] usb 5-1: 0:2 : does not exist [ 379.503177][ T936] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 379.542054][ T936] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 379.579399][ T5321] usb 4-1: USB disconnect, device number 15 [ 379.586436][ T936] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 379.610405][ T936] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 379.648985][ T936] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 379.682890][ T936] usb 5-1: USB disconnect, device number 10 [ 379.729678][ T5246] udevd[5246]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 380.133562][ T9783] loop0: detected capacity change from 0 to 32768 [ 380.252898][ T9783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1265 (9783) [ 380.334617][ T5240] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 380.514671][ T5240] usb 2-1: Using ep0 maxpacket: 32 [ 380.532188][ T5240] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 380.679553][ T5240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.711166][ T5240] usb 2-1: Product: syz [ 381.677832][ T5240] usb 2-1: Manufacturer: syz [ 381.682440][ T5240] usb 2-1: SerialNumber: syz [ 381.704036][ T5240] usb 2-1: config 0 descriptor?? [ 382.264708][ T5240] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 382.303594][ T5240] airspy 2-1:0.0: Could not detect board [ 382.347310][ T5240] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 382.420517][ T5240] usb 2-1: USB disconnect, device number 5 [ 382.924761][ T5240] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 383.111373][ T5240] usb 2-1: Using ep0 maxpacket: 16 [ 383.207872][ T5240] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 383.218442][ T5240] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.297443][ T5240] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.306639][ T5240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.323229][ T5240] usb 2-1: Product: syz [ 383.334809][ T5240] usb 2-1: Manufacturer: syz [ 383.341124][ T5240] usb 2-1: SerialNumber: syz [ 383.442364][ T9839] netlink: 'syz.2.1285': attribute type 4 has an invalid length. [ 383.679014][ T9818] sctp: [Deprecated]: syz.1.1275 (pid 9818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.679014][ T9818] Use struct sctp_sack_info instead [ 383.989049][ T5240] usb 2-1: 0:2 : does not exist [ 383.997828][ T5240] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 384.010044][ T5240] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 384.026283][ T5240] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 384.062004][ T9852] fuse: Bad value for 'user_id' [ 384.067439][ T9852] fuse: Bad value for 'user_id' [ 384.087388][ T5240] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 384.114687][ T5240] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 384.127357][ T5240] usb 2-1: USB disconnect, device number 6 [ 384.192181][ T5246] udevd[5246]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.174585][ T9875] loop4: detected capacity change from 0 to 764 [ 385.228211][ T9875] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 386.000845][ T9877] 9pnet_fd: p9_fd_create_tcp (9877): problem connecting socket to 127.0.0.1 [ 386.070489][ T4626] Bluetooth: hci0: command 0x0406 tx timeout [ 386.246376][ T9873] netlink: 'syz.1.1297': attribute type 10 has an invalid length. [ 386.320146][ T9873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.449379][ T9873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.508772][ T9873] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 386.614889][ T936] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 386.721439][ T9887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1303'. [ 386.784649][ T936] usb 5-1: Using ep0 maxpacket: 16 [ 386.811738][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 386.848654][ T936] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 386.888494][ T936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.917691][ T936] usb 5-1: Product: syz [ 386.925243][ T936] usb 5-1: Manufacturer: syz [ 386.929884][ T936] usb 5-1: SerialNumber: syz [ 386.972367][ T936] usb 5-1: config 0 descriptor?? [ 387.296791][ T9891] loop1: detected capacity change from 0 to 32768 [ 387.308244][ T936] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 387.317977][ T936] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 387.335046][ T9891] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 387.447347][ T9891] XFS (loop1): empty log check failed [ 387.452812][ T9891] XFS (loop1): log mount/recovery failed: error -5 [ 387.488653][ T9891] XFS (loop1): log mount failed [ 387.749318][ T5282] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 388.303839][ T5282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.346023][ T936] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 388.365265][ T5282] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.427007][ T5282] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 388.436403][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 388.444428][ T5282] usb 4-1: SerialNumber: syz [ 388.558420][ T9917] random: crng reseeded on system resumption [ 388.849972][ T936] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 388.850123][ T936] em28xx 5-1:0.0: board has no eeprom [ 389.094872][ T5282] usb 4-1: 0:2 : does not exist [ 389.099851][ T5282] usb 4-1: unit 5 not found! [ 389.114746][ T936] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 389.123092][ T936] em28xx 5-1:0.0: dvb set to bulk mode. [ 389.126138][ T5282] usb 4-1: USB disconnect, device number 16 [ 389.170873][ T5253] udevd[5253]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.170926][ T8] em28xx 5-1:0.0: Binding DVB extension [ 389.225110][ T936] usb 5-1: USB disconnect, device number 11 [ 389.232275][ T936] em28xx 5-1:0.0: Disconnecting em28xx [ 389.363955][ T8] em28xx 5-1:0.0: Registering input extension [ 389.412471][ T936] em28xx 5-1:0.0: Closing input extension [ 389.519137][ T936] em28xx 5-1:0.0: Freeing device [ 389.632983][ T9924] loop1: detected capacity change from 0 to 1024 [ 389.679469][ T9926] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1314'. [ 389.770028][ T9924] hfsplus: request for non-existent node -709361664 in B*Tree [ 389.812806][ T29] audit: type=1326 audit(1729301269.212:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed7dff9 code=0x7ffc0000 [ 389.835002][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.853189][ T9924] hfsplus: request for non-existent node -709361664 in B*Tree [ 389.913626][ T9924] hfsplus: b-tree write err: -5, ino 8 [ 389.929365][ T29] audit: type=1326 audit(1729301269.242:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed7dff9 code=0x7ffc0000 [ 389.951529][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.059200][ T29] audit: type=1326 audit(1729301269.242:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f7c0ed7dff9 code=0x7ffc0000 [ 390.081471][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.184695][ T29] audit: type=1326 audit(1729301269.242:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed7dff9 code=0x7ffc0000 [ 390.264718][ T29] audit: type=1326 audit(1729301269.242:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed7dff9 code=0x7ffc0000 [ 390.344883][ T29] audit: type=1326 audit(1729301269.242:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f7c0ed7dff9 code=0x7ffc0000 [ 390.366966][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.444640][ T29] audit: type=1326 audit(1729301269.242:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed7dff9 code=0x7ffc0000 [ 390.466814][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.540346][ T29] audit: type=1326 audit(1729301269.242:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed7dff9 code=0x7ffc0000 [ 390.616470][ T29] audit: type=1326 audit(1729301269.252:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7c0ed7dff9 code=0x7ffc0000 [ 390.694637][ T29] audit: type=1326 audit(1729301269.252:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.4.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c0ed7e033 code=0x7ffc0000 [ 390.716648][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.434335][ T9944] loop4: detected capacity change from 0 to 32768 [ 391.462666][ T9944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1321 (9944) [ 391.556275][ T9944] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 391.610258][ T9944] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 391.636025][ T9944] BTRFS info (device loop4): using free-space-tree [ 391.753420][ T9970] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1327'. [ 392.933292][ T6116] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 392.980092][ T9996] loop0: detected capacity change from 0 to 764 [ 392.995939][ T9996] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 392.998532][ T9987] bond1: entered allmulticast mode [ 393.800231][T10000] loop3: detected capacity change from 0 to 32768 [ 394.269912][T10000] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 394.285926][T10000] XFS (loop3): empty log check failed [ 394.291383][T10000] XFS (loop3): log mount/recovery failed: error -5 [ 394.329646][T10000] XFS (loop3): log mount failed [ 394.794961][ T5282] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 394.994682][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 395.155676][ T5282] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 395.219503][ T5282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.267827][ T5282] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.282467][T10037] loop3: detected capacity change from 0 to 8 [ 395.562599][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.590686][ T5282] usb 5-1: Product: syz [ 395.599859][ T5282] usb 5-1: Manufacturer: syz [ 395.607900][ T5282] usb 5-1: SerialNumber: syz [ 395.613404][T10039] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1347'. [ 395.634695][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 395.854821][ T8] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 395.904987][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.929253][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.934757][ T936] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 395.958494][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.976926][ T8] usb 3-1: Product: syz [ 396.012882][ T8] usb 3-1: Manufacturer: syz [ 396.030549][ T8] usb 3-1: SerialNumber: syz [ 396.051516][ T8] usb 3-1: config 0 descriptor?? [ 396.160570][ T5282] usb 5-1: 0:2 : does not exist [ 396.169263][ T5282] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 396.174704][ T936] usb 4-1: Using ep0 maxpacket: 8 [ 396.184458][ T5282] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 396.217671][ T5282] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 396.247550][ T5282] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 396.257902][ T936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.277891][ T5282] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 396.308114][ T936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.326926][ T5282] usb 5-1: USB disconnect, device number 12 [ 396.348734][ T936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 396.475269][ T8] usb-storage 3-1:0.0: USB Mass Storage device detected [ 396.479282][T10036] loop0: detected capacity change from 0 to 32768 [ 396.484651][ T936] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 396.526304][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.556936][T10036] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1344 (10036) [ 396.570616][ T936] usb 4-1: config 0 descriptor?? [ 396.673450][T10051] loop1: detected capacity change from 0 to 1024 [ 396.878851][T10051] hfsplus: request for non-existent node -709361664 in B*Tree [ 396.886495][T10051] hfsplus: request for non-existent node -709361664 in B*Tree [ 396.894250][T10051] hfsplus: b-tree write err: -5, ino 8 [ 396.906971][T10036] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.991474][T10036] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 397.054830][T10036] BTRFS info (device loop0): using free-space-tree [ 397.246812][T10043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.254885][T10043] IPv6: NLM_F_CREATE should be set when creating new route [ 397.365668][T10043] netlink: 'syz.3.1348': attribute type 27 has an invalid length. [ 398.226317][ T5665] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 398.316356][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.325358][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.826313][T10085] loop4: detected capacity change from 0 to 1024 [ 398.837718][T10085] hfsplus: request for non-existent node -709361664 in B*Tree [ 398.845371][T10085] hfsplus: request for non-existent node -709361664 in B*Tree [ 398.853172][T10085] hfsplus: b-tree write err: -5, ino 8 [ 399.504631][ T4653] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 399.738696][T10043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.797798][T10043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.975637][ T9] usb 3-1: USB disconnect, device number 4 [ 400.051675][T10043] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.065156][T10043] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.116371][ T5248] Bluetooth: hci4: unexpected event for opcode 0x080e [ 400.124725][T10043] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.133629][T10043] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.143984][ T4653] usb 1-1: Using ep0 maxpacket: 16 [ 400.263890][ T4653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 400.355204][ T4653] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 400.364475][ T4653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.374228][ T4653] usb 1-1: Product: syz [ 400.385331][ T4653] usb 1-1: Manufacturer: syz [ 400.389979][ T4653] usb 1-1: SerialNumber: syz [ 400.413239][ T4653] usb 1-1: config 0 descriptor?? [ 400.477796][ T4653] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 400.502773][ T4653] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 400.524380][T10096] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1358'. [ 400.595571][ T936] usbhid 4-1:0.0: can't add hid device: -71 [ 400.601619][ T936] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 400.678498][ T936] usb 4-1: USB disconnect, device number 17 [ 400.753019][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1359'. [ 401.148006][T10114] loop3: detected capacity change from 0 to 1024 [ 401.255910][T10114] hfsplus: request for non-existent node -709361664 in B*Tree [ 401.263470][T10114] hfsplus: request for non-existent node -709361664 in B*Tree [ 401.271561][T10114] hfsplus: b-tree write err: -5, ino 8 [ 401.297125][ T4653] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 401.704338][T10121] trusted_key: syz.1.1366 sent an empty control message without MSG_MORE. [ 401.748985][T10120] vlan2: entered promiscuous mode [ 401.767479][ T4653] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 401.779389][ T4653] em28xx 1-1:0.0: board has no eeprom [ 401.786150][T10120] batadv0: entered promiscuous mode [ 401.809697][T10120] team0: Port device vlan2 added [ 401.822563][T10122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.854944][ T4653] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 401.863055][ T4653] em28xx 1-1:0.0: dvb set to bulk mode. [ 401.877098][ T5282] em28xx 1-1:0.0: Binding DVB extension [ 401.908735][ T4653] usb 1-1: USB disconnect, device number 6 [ 401.922777][ T4653] em28xx 1-1:0.0: Disconnecting em28xx [ 401.940901][ T5282] em28xx 1-1:0.0: Registering input extension [ 401.950769][ T4653] em28xx 1-1:0.0: Closing input extension [ 401.966356][ T4653] em28xx 1-1:0.0: Freeing device [ 401.994871][ T936] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 402.144635][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 402.362467][T10133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1370'. [ 402.917715][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1374'. [ 403.652520][T10156] loop4: detected capacity change from 0 to 1024 [ 403.844081][T10156] hfsplus: request for non-existent node -709361664 in B*Tree [ 403.851777][T10156] hfsplus: request for non-existent node -709361664 in B*Tree [ 403.859657][T10156] hfsplus: b-tree write err: -5, ino 8 [ 404.166236][ T5248] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 404.175172][ T5248] Bluetooth: hci4: Injecting HCI hardware error event [ 404.185172][ T4626] Bluetooth: hci4: hardware error 0x00 [ 404.221695][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 404.278315][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 404.291910][T10163] tun0: tun_chr_ioctl cmd 1074025677 [ 404.304832][T10163] tun0: linktype set to 65534 [ 404.366251][T10168] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1383'. [ 404.375460][T10166] netlink: 'syz.0.1382': attribute type 27 has an invalid length. [ 404.702609][ T936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 404.715455][ T4653] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 404.744899][ T936] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 404.766714][ T936] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 404.792308][ T936] usb 3-1: can't read configurations, error -71 [ 404.926928][ T4653] usb 2-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=67.51 [ 404.936141][ T4653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.944210][ T4653] usb 2-1: Product: syz [ 404.948955][ T4653] usb 2-1: Manufacturer: syz [ 404.953708][ T4653] usb 2-1: SerialNumber: syz [ 404.966162][ T4653] usb 2-1: config 0 descriptor?? [ 404.976994][ T4653] usbtest 2-1:0.0: EZ-USB device [ 404.992260][ T4653] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 405.007960][T10193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1388'. [ 405.260773][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 406.244786][ T4626] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 406.642259][ T4653] usb 2-1: USB disconnect, device number 7 [ 407.783709][T10238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1402'. [ 408.679952][T10248] random: crng reseeded on system resumption [ 409.078214][T10254] loop2: detected capacity change from 0 to 32768 [ 409.140912][T10254] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 409.195895][T10254] XFS (loop2): empty log check failed [ 409.201635][T10254] XFS (loop2): log mount/recovery failed: error -5 [ 409.210439][T10254] XFS (loop2): log mount failed [ 409.558891][T10276] loop2: detected capacity change from 0 to 64 [ 410.527519][T10289] loop2: detected capacity change from 0 to 1024 [ 410.644968][T10289] hfsplus: request for non-existent node -709361664 in B*Tree [ 410.652554][T10289] hfsplus: request for non-existent node -709361664 in B*Tree [ 410.661608][T10289] hfsplus: b-tree write err: -5, ino 8 [ 411.198477][T10293] random: crng reseeded on system resumption [ 411.284720][ T4653] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 411.449029][ T4653] usb 4-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=67.51 [ 411.459208][ T4653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.606272][ T4626] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 411.616409][ T4626] Bluetooth: hci1: Injecting HCI hardware error event [ 411.626775][ T5248] Bluetooth: hci1: hardware error 0x00 [ 411.789724][T10302] loop4: detected capacity change from 0 to 32768 [ 411.797701][ T4653] usb 4-1: Product: syz [ 411.803329][ T4653] usb 4-1: Manufacturer: syz [ 411.808070][ T4653] usb 4-1: SerialNumber: syz [ 411.886083][T10302] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 411.915484][ T4653] usb 4-1: config 0 descriptor?? [ 411.926973][T10302] XFS (loop4): empty log check failed [ 411.932404][T10302] XFS (loop4): log mount/recovery failed: error -5 [ 411.954128][T10302] XFS (loop4): log mount failed [ 411.968253][ T4653] usbtest 4-1:0.0: EZ-USB device [ 412.104930][ T4653] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 412.953887][ T4653] usb 4-1: USB disconnect, device number 18 [ 412.960461][T10319] loop4: detected capacity change from 0 to 64 [ 412.964733][ T936] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 413.017507][T10320] loop2: detected capacity change from 0 to 764 [ 413.062662][T10320] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 413.446708][ T936] usb 2-1: config 0 has no interfaces? [ 413.841177][ T5248] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 414.055209][ T936] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 414.090763][T10333] random: crng reseeded on system resumption [ 414.127043][ T936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.334698][ T936] usb 2-1: Product: syz [ 414.461821][ T936] usb 2-1: Manufacturer: syz [ 414.482064][ T936] usb 2-1: SerialNumber: syz [ 414.616157][T10339] loop4: detected capacity change from 0 to 1024 [ 415.217597][ T936] usb 2-1: config 0 descriptor?? [ 415.425628][T10339] hfsplus: request for non-existent node -709361664 in B*Tree [ 415.433147][T10339] hfsplus: request for non-existent node -709361664 in B*Tree [ 415.441083][T10339] hfsplus: b-tree write err: -5, ino 8 [ 416.263935][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 417.892311][T10360] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1446'. [ 418.186856][T10363] input: syz1 as /devices/virtual/input/input13 [ 419.383679][ T936] usb 2-1: can't set config #0, error -71 [ 419.490449][ T936] usb 2-1: USB disconnect, device number 8 [ 419.577289][T10382] random: crng reseeded on system resumption [ 419.606918][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1452'. [ 419.684686][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 419.834678][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 419.880035][ T46] usb 1-1: config 0 has no interfaces? [ 419.886672][ T46] usb 1-1: config 0 has no interfaces? [ 419.893106][ T46] usb 1-1: config 0 has no interfaces? [ 419.901175][ T46] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 419.910529][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.918680][ T46] usb 1-1: Product: syz [ 419.923515][ T46] usb 1-1: Manufacturer: syz [ 419.928428][ T46] usb 1-1: SerialNumber: syz [ 419.935515][ T46] usb 1-1: config 0 descriptor?? [ 420.533474][T10372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.599773][T10372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.632426][ T46] usb 1-1: USB disconnect, device number 7 [ 420.841153][ T5248] Bluetooth: hci0: unexpected event for opcode 0x080e [ 420.995861][T10411] input: syz1 as /devices/virtual/input/input14 [ 421.895725][T10414] loop2: detected capacity change from 0 to 32768 [ 421.939412][T10414] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 422.011044][T10414] XFS (loop2): empty log check failed [ 422.016630][T10414] XFS (loop2): log mount/recovery failed: error -5 [ 422.040636][T10414] XFS (loop2): log mount failed [ 423.003421][T10433] loop2: detected capacity change from 0 to 64 [ 423.021285][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1467'. [ 423.279143][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 423.434714][ T46] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 423.628161][ T46] usb 4-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=67.51 [ 423.641815][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.650972][ T46] usb 4-1: Product: syz [ 423.658803][ T46] usb 4-1: Manufacturer: syz [ 423.663858][ T46] usb 4-1: SerialNumber: syz [ 423.678893][ T46] usb 4-1: config 0 descriptor?? [ 423.710387][ T46] usbtest 4-1:0.0: EZ-USB device [ 423.716140][ T46] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 423.919043][ T936] usb 4-1: USB disconnect, device number 19 [ 424.418400][ T4653] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 424.479835][T10461] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 424.621007][ T4653] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 424.631431][ T4653] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.641803][ T4653] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 424.654612][ T4653] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.684712][ T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 424.703033][ T4653] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 424.754644][ T4653] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 424.793356][ T4653] usb 3-1: Product: syz [ 424.797948][ T4653] usb 3-1: Manufacturer: syz [ 424.823491][ T4653] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 424.860347][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 424.867312][ T46] usb 5-1: config 1 interface 0 altsetting 253 bulk endpoint 0x82 has invalid maxpacket 16 [ 424.872890][T10474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1481'. [ 424.883380][ T46] usb 5-1: config 1 interface 0 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 32 [ 424.902745][ T46] usb 5-1: config 1 interface 0 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 424.902866][ T5248] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 424.927489][ T5248] Bluetooth: hci0: Injecting HCI hardware error event [ 424.937107][ T4626] Bluetooth: hci0: hardware error 0x00 [ 424.971942][ T46] usb 5-1: config 1 interface 0 has no altsetting 0 [ 424.973480][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1482'. [ 425.003919][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.018004][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.037470][ T4653] usb 3-1: USB disconnect, device number 7 [ 425.057968][ T46] usb 5-1: SerialNumber: syz [ 425.074325][T10464] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 425.108050][T10464] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 425.115572][ T936] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 425.287817][ T936] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.306167][ T936] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.323960][ T936] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 425.341568][T10464] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 425.351314][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.363452][T10464] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 425.374138][ T936] usb 4-1: SerialNumber: syz [ 425.399749][ T936] cdc_ether 4-1:1.0: invalid descriptor buffer length [ 425.409951][ T936] usb 4-1: bad CDC descriptors [ 425.418543][ T936] usb-storage 4-1:1.0: USB Mass Storage device detected [ 425.452236][ T936] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 425.827191][ T46] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 426.032709][ T936] usb 5-1: USB disconnect, device number 13 [ 426.048609][ T936] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 426.078158][ T8] usb 4-1: USB disconnect, device number 20 [ 426.934294][T10526] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 426.976913][ T4626] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 427.104822][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 427.224702][ T5282] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 427.256251][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.267376][ T46] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 427.278602][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.292142][ T46] usb 2-1: config 0 descriptor?? [ 427.397588][ T5282] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 427.480787][ T5282] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.616503][ T5282] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 427.684722][ T5282] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.690835][ T936] usb 2-1: USB disconnect, device number 9 [ 427.774730][ T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 427.806767][ T5282] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 427.823646][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 427.847504][ T5282] usb 1-1: Product: syz [ 427.851699][ T5282] usb 1-1: Manufacturer: syz [ 427.878496][ T5282] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 427.965043][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 427.973719][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 427.988031][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 428.016795][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.035769][ T46] usb 5-1: Product: syz [ 428.040172][ T46] usb 5-1: Manufacturer: syz [ 428.047151][ T46] usb 5-1: SerialNumber: syz [ 428.071201][ T46] usb 5-1: config 0 descriptor?? [ 428.086984][ T936] usb 1-1: USB disconnect, device number 8 [ 428.137036][ T46] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 428.147316][ T46] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 428.835121][T10565] loop3: detected capacity change from 0 to 1024 [ 428.848014][ T5287] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 428.859633][ T46] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 428.909001][T10565] hfsplus: request for non-existent node -709361664 in B*Tree [ 428.916693][T10565] hfsplus: request for non-existent node -709361664 in B*Tree [ 428.926197][T10565] hfsplus: b-tree write err: -5, ino 8 [ 429.076511][ T5287] usb 3-1: Using ep0 maxpacket: 8 [ 429.131825][ T5287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.315424][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.354447][T10567] ------------[ cut here ]------------ [ 429.360960][T10567] kernel BUG at include/linux/highmem.h:269! [ 429.376193][T10567] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 429.383187][T10567] CPU: 0 UID: 0 PID: 10567 Comm: syz.0.1504 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 429.383647][ T46] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 429.393433][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 429.393454][T10567] RIP: 0010:fuse_dev_do_write+0x5d6d/0x5da0 [ 429.393489][T10567] Code: c6 a0 11 41 8c e8 43 fc c9 fe 90 0f 0b e8 ab 55 7e fe 4c 89 ef 48 c7 c6 40 11 41 8c e8 2c fc c9 fe 90 0f 0b e8 94 55 7e fe 90 <0f> 0b e8 8c 55 7e fe eb 0c e8 85 55 7e fe eb c1 e8 7e 55 7e fe 4c [ 429.393504][T10567] RSP: 0018:ffffc9000fc17860 EFLAGS: 00010283 [ 429.393533][T10567] RAX: ffffffff83168cbc RBX: 0000000000001001 RCX: 0000000000040000 [ 429.393546][T10567] RDX: ffffc90015381000 RSI: 000000000000020c RDI: 000000000000020d [ 429.393559][T10567] RBP: ffffc9000fc17bb0 R08: ffffffff8316685c R09: 1ffffd400029e2b0 [ 429.393574][T10567] R10: dffffc0000000000 R11: fffff9400029e2b1 R12: 0000000000001000 [ 429.393588][T10567] R13: ffffea00014f1580 R14: 1ffffd400029e2b0 R15: 0000000000000001 [ 429.393602][T10567] FS: 00007f9eb311c6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 429.393618][T10567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.393632][T10567] CR2: 00007fabf9961160 CR3: 0000000049292000 CR4: 00000000003526f0 [ 429.393649][T10567] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 429.393661][T10567] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 429.393673][T10567] Call Trace: [ 429.393681][T10567] [ 429.393690][T10567] ? __die_body+0x5f/0xb0 [ 429.393709][T10567] ? die+0x9e/0xc0 [ 429.393727][T10567] ? do_trap+0x15a/0x3a0 [ 429.393751][T10567] ? fuse_dev_do_write+0x5d6d/0x5da0 [ 429.393776][T10567] ? do_error_trap+0x1dc/0x2c0 [ 429.393797][T10567] ? fuse_dev_do_write+0x5d6d/0x5da0 [ 429.410325][ T5287] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 429.411807][T10567] ? __pfx_do_error_trap+0x10/0x10 [ 429.411839][T10567] ? report_bug+0x3e8/0x500 [ 429.430046][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.437299][T10567] ? handle_invalid_op+0x34/0x40 [ 429.437333][T10567] ? fuse_dev_do_write+0x5d6d/0x5da0 [ 429.437356][T10567] ? exc_invalid_op+0x38/0x50 [ 429.437374][T10567] ? asm_exc_invalid_op+0x1a/0x20 [ 429.437393][T10567] ? fuse_dev_do_write+0x390c/0x5da0 [ 429.437415][T10567] ? fuse_dev_do_write+0x5d6c/0x5da0 [ 429.437440][T10567] ? fuse_dev_do_write+0x5d6d/0x5da0 [ 429.437470][T10567] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 429.437490][T10567] ? preempt_schedule+0xe1/0xf0 [ 429.437513][T10567] ? __pfx_lock_release+0x10/0x10 [ 429.437533][T10567] ? aa_file_perm+0x137/0xf50 [ 429.437552][T10567] ? aa_file_perm+0x3ef/0xf50 [ 429.437574][T10567] ? __pfx_aa_file_perm+0x10/0x10 [ 429.437593][T10567] ? mark_lock+0x9a/0x360 [ 429.437616][T10567] fuse_dev_write+0x148/0x1d0 [ 429.437636][T10567] ? __pfx_fuse_dev_write+0x10/0x10 [ 429.437659][T10567] ? bpf_lsm_file_permission+0x9/0x10 [ 429.437675][T10567] ? security_file_permission+0x74/0x280 [ 429.437701][T10567] vfs_write+0xa6d/0xc90 [ 429.678387][T10567] ? __pfx_fuse_dev_write+0x10/0x10 [ 429.683594][T10567] ? __pfx_vfs_write+0x10/0x10 [ 429.688367][T10567] ? __fget_files+0x28/0x430 [ 429.692962][T10567] ? __fget_files+0x28/0x430 [ 429.697554][T10567] ksys_write+0x183/0x2b0 [ 429.701880][T10567] ? __pfx_ksys_write+0x10/0x10 [ 429.706725][T10567] ? do_syscall_64+0x100/0x230 [ 429.711482][T10567] ? do_syscall_64+0xb6/0x230 [ 429.716165][T10567] do_syscall_64+0xf3/0x230 [ 429.720660][T10567] ? clear_bhb_loop+0x35/0x90 [ 429.725333][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.731226][T10567] RIP: 0033:0x7f9eb237dff9 [ 429.735645][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.755334][T10567] RSP: 002b:00007f9eb311c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.763744][T10567] RAX: ffffffffffffffda RBX: 00007f9eb2535f80 RCX: 00007f9eb237dff9 [ 429.771728][T10567] RDX: 0000000000000029 RSI: 0000000020002400 RDI: 0000000000000004 [ 429.779702][T10567] RBP: 00007f9eb23f0296 R08: 0000000000000000 R09: 0000000000000000 [ 429.787669][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.795633][T10567] R13: 0000000000000000 R14: 00007f9eb2535f80 R15: 00007ffc7e8a95c8 [ 429.803603][T10567] [ 429.806619][T10567] Modules linked in: [ 429.811259][T10567] ---[ end trace 0000000000000000 ]--- [ 429.811914][ T46] em28xx 5-1:0.0: board has no eeprom [ 429.828423][T10567] RIP: 0010:fuse_dev_do_write+0x5d6d/0x5da0 [ 429.834438][T10567] Code: c6 a0 11 41 8c e8 43 fc c9 fe 90 0f 0b e8 ab 55 7e fe 4c 89 ef 48 c7 c6 40 11 41 8c e8 2c fc c9 fe 90 0f 0b e8 94 55 7e fe 90 <0f> 0b e8 8c 55 7e fe eb 0c e8 85 55 7e fe eb c1 e8 7e 55 7e fe 4c [ 429.843278][ T5287] usb 3-1: config 0 descriptor?? [ 429.864203][T10567] RSP: 0018:ffffc9000fc17860 EFLAGS: 00010283 [ 429.866957][ T5287] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 429.870768][T10567] RAX: ffffffff83168cbc RBX: 0000000000001001 RCX: 0000000000040000 [ 429.885847][ T5240] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 429.905222][T10567] RDX: ffffc90015381000 RSI: 000000000000020c RDI: 000000000000020d [ 429.913979][T10567] RBP: ffffc9000fc17bb0 R08: ffffffff8316685c R09: 1ffffd400029e2b0 [ 429.922231][ T46] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 429.931564][T10567] R10: dffffc0000000000 R11: fffff9400029e2b1 R12: 0000000000001000 [ 429.939690][ T46] em28xx 5-1:0.0: dvb set to bulk mode. [ 429.946349][ T5287] em28xx 5-1:0.0: Binding DVB extension [ 429.955630][T10567] R13: ffffea00014f1580 R14: 1ffffd400029e2b0 R15: 0000000000000001 [ 429.963868][ T46] usb 5-1: USB disconnect, device number 14 [ 429.970708][ T46] em28xx 5-1:0.0: Disconnecting em28xx [ 429.976335][T10567] FS: 00007f9eb311c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 429.985633][T10567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.992334][T10567] CR2: 00007fcac3d052d8 CR3: 0000000049292000 CR4: 00000000003526f0 [ 430.001039][ T5287] em28xx 5-1:0.0: Registering input extension [ 430.007657][ T46] em28xx 5-1:0.0: Closing input extension [ 430.013736][T10567] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.022610][T10567] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.031585][T10567] Kernel panic - not syncing: Fatal exception [ 430.037821][T10567] Kernel Offset: disabled [ 430.042143][T10567] Rebooting in 86400 seconds..