last executing test programs: 13m22.290293474s ago: executing program 32 (id=777): fanotify_init(0x20, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r0 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53049e4) write$binfmt_script(r3, &(0x7f0000004000)={'#! ', './file0'}, 0xb) close(r3) execve(0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$afs(0x0, 0x0, &(0x7f0000000200), 0x4080, &(0x7f00000000c0)={[{@dyn}, {@flock_write}]}) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0xcb0a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11m51.307737605s ago: executing program 33 (id=999): socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xfffc}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x6, 0xffdffffffffffffc, 0x9, 0x7, 0x105, 0x0, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000df0004000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) syz_emit_ethernet(0x36, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="596c20a5627346559f02012bc7d110f37e982365b54418cfbe97d80cb9e016f22707f197de0743ac125fdfb183920c1cfad8993e11c096a421259358b4cd988e83070cadf02a1b6d28398d34a5a192c1be2cd585382c580d94277ad09f7e4f251ff62e33308bfcb1ac111c8447a49314ea2b00ddeff5ed3d3890fddf581be8df8e03f3451d92ed5908cb2c58f8a3d02ba09a2192bc9169e01a356141e17f45b6cbb10ee942ccfb7c5282983e0557e8ff10d4d807a0f650028de6aa06040c62c0124cd67d724eabe5c25f65b0f45e7ed3ca86010c906ff4f2dc7dbc", @ANYRES8], 0x98}, 0x1, 0x0, 0x0, 0x4004c050}, 0x404c011) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[], 0x0) write(r6, &(0x7f00000007c0)="fc0000001a000700ab092500090007000aab0700a90113001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5567b91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87000000000000000000004baeb6384eeb1cc8e324d02fba4e97e1011bb7d126f105dc89b8fe74c57c8f2b4bfc191b52fd56ecb9c7668cb19c3e3999416029850900", 0x132) ioctl$SIOCSIFMTU(r6, 0x89b0, &(0x7f0000000100)={'veth0_vlan\x00', 0x8a}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x58, 0x5, 0x10001, 0xca, @mcast2, @local, 0x20, 0x40, 0x1, 0x8}}) 11m28.421133826s ago: executing program 34 (id=1061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0xf4) 5m50.975507269s ago: executing program 35 (id=2289): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1000a05, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x1, 0xc4d, &(0x7f0000001400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000440)=""/4085, 0x104a) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3840024, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x1000008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) 5m32.630385588s ago: executing program 4 (id=2376): socket$nl_netfilter(0x10, 0x3, 0xc) gettid() capset(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000010c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) 5m28.250201953s ago: executing program 4 (id=2384): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000080)='/dev/sequencer2\x00', 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="810100000000000081", @ANYRES16=r0], 0x10) 5m24.483965055s ago: executing program 4 (id=2389): socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2243) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x2, 0x2, &(0x7f0000000280)={0x1b, "faeb4a503bd08689e41751a4fc78219dae1d2a12fb0e65ccb19b79fdafbbf6b691"}}) 5m21.206239044s ago: executing program 4 (id=2393): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() capset(&(0x7f0000000740)={0x20080522, r0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000010c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) 5m18.493279291s ago: executing program 36 (id=2373): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008890) listen(r1, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000d00)="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", 0x2f2}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x8044) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)=0x26) socket$unix(0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) 5m18.339795462s ago: executing program 4 (id=2399): ioprio_set$pid(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x21, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000180)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x2000, 0x105) fcntl$setstatus(r1, 0x4, 0x12400) sendfile(r0, r1, 0x0, 0xffffffff004) 5m16.79123044s ago: executing program 4 (id=2400): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$packet(0x11, 0x3, 0x300) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@local}, @my=0x1, 0x0, 0x0, 0x421}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioprio_set$pid(0x2, 0x0, 0x2007) ioctl$SG_IO(r6, 0x2285, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, 0x0, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000006809000000000000810000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 5m0.94630871s ago: executing program 37 (id=2400): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$packet(0x11, 0x3, 0x300) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@local}, @my=0x1, 0x0, 0x0, 0x421}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioprio_set$pid(0x2, 0x0, 0x2007) ioctl$SG_IO(r6, 0x2285, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, 0x0, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000006809000000000000810000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 4m23.130350405s ago: executing program 8 (id=2485): unshare(0x2a020480) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) 4m21.950117955s ago: executing program 8 (id=2488): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@loopback, 0x1000, 0x2, 0x3, 0xff, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}]}]}, 0x13c}}, 0x20000000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 4m20.80184841s ago: executing program 8 (id=2491): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="df", 0x1}], 0x1) 4m19.194527376s ago: executing program 8 (id=2497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) unshare(0x6a040000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 4m17.178206512s ago: executing program 8 (id=2503): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") 4m15.643061133s ago: executing program 8 (id=2508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x5c, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0xfffffd65}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) 3m59.816359201s ago: executing program 38 (id=2508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x5c, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0xfffffd65}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) 2m28.698237858s ago: executing program 9 (id=2842): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, &(0x7f00000000c0)={'hsr0\x00'}) 2m27.872981604s ago: executing program 9 (id=2844): r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) 2m27.329425711s ago: executing program 9 (id=2848): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(0x0, 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2m26.654161s ago: executing program 9 (id=2851): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) mmap(&(0x7f000009a000/0x3000)=nil, 0x3000, 0x3000004, 0x100110, r0, 0xfd452000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) open(0x0, 0x44842, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) shmget$private(0x0, 0x3000, 0xfcf774859b375a8c, &(0x7f0000ffd000/0x3000)=nil) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 2m25.324539716s ago: executing program 9 (id=2857): socket$inet_tcp(0x2, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x3c) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xf2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000180)='nfs\x00', 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 2m22.748143669s ago: executing program 9 (id=2868): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x20008844) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) mq_open(&(0x7f0000000180)='c6xdigio\x00', 0x40, 0x10, &(0x7f0000000240)={0x2, 0x7, 0x0, 0x9}) ioctl$COMEDI_INSN(r1, 0x8028640c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m15.533168201s ago: executing program 7 (id=2888): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)={0x208, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0xc, 0xbf, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x92, 0x0, 0x0, @pid}, @nested={0x38, 0x3b, 0x0, 0x1, [@nested={0x34, 0xdb, 0x0, 0x1, [@nested={0x2d, 0x38, 0x0, 0x1, [@generic="98f87cf6f5bcb28e9ae3943c02809d73310fd263c5c091dd8a487d68aa13944a72aa813a7ff606b96f"]}]}]}]}, @nested={0x1a4, 0x6, 0x0, 0x1, [@nested={0x1a0, 0xc0, 0x0, 0x1, [@nested={0x19c, 0x13e, 0x0, 0x1, [@nested={0x198, 0xa0, 0x0, 0x1, [@nested={0x194, 0x61, 0x0, 0x1, [@nested={0x190, 0x6d, 0x0, 0x1, [@nested={0x18c, 0xd1, 0x0, 0x1, [@nested={0x188, 0x112, 0x0, 0x1, [@nested={0xe3, 0xcd, 0x0, 0x1, [@generic="42110f1d6f88ff52f41c6a703875b814ba2c48b3f0cf607256b8d243a3227bb11571d268c41187452c28663be3d9e39505157b48b9212b07ca7b4686a2a55f4f80cbea3f494421c794c12d35f89faffe1de6605dfada605ad7c5d1212f30e4f92cf2ae0e57c77aa34e47801d546b04458c2f6011fb906b6ed5217cb687ba4ddfe78e78b635fdfc513245c2cf7b69f9218d14bb4039e9e3c4cd1c649f4cdea528557d814da783fd6a399fb44d9ceae7ab2e046a74094f015f2aad655abdd7d7bd884d9eacfdffb8d690d970427074e38ab80e3fd67c77f2", @nested={0x4, 0x28}, @nested={0x4, 0x104}]}, @typed={0x5, 0x92, 0x0, 0x0, @str='\x00'}, @nested={0x80, 0x134, 0x0, 0x1, [@nested={0x79, 0x5a, 0x0, 0x1, [@generic="d66c736c5a61f54a6b2d0a3dfe54651994b95af3052f76caf05d51c1221cebafc78c3ed8ca9570146dd91f5d5cd35713490f7d34b54c175a724b54b5235748ae02d002f6bc05fb3ab953ea0ef143502504e9e3d344cb6d0b09039c48278bd6715df2e356b6262b20eab1e3d2ccf7384c8fd3135818"]}]}, @typed={0x9, 0xb8, 0x0, 0x0, @binary="31e0c88f08"}, @nested={0xc, 0x23, 0x0, 0x1, [@typed={0x8, 0xe5, 0x0, 0x0, @fd}]}]}]}]}]}]}]}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m13.99287732s ago: executing program 7 (id=2894): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0x150d, &(0x7f0000001540)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) 2m13.004974209s ago: executing program 7 (id=2897): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x8, 0x6, 0x88100, 0x9ff, 0x5, "7ac8f572c4b5743f907eeacc0289ddc12fa431", 0x0, 0x5}) write$UHID_INPUT(r1, 0x0, 0x0) 2m12.414916033s ago: executing program 7 (id=2900): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2m11.665984525s ago: executing program 7 (id=2902): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) open(0x0, 0x44842, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) shmget$private(0x0, 0x3000, 0xfcf774859b375a8c, &(0x7f0000ffd000/0x3000)=nil) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) 2m10.345075949s ago: executing program 7 (id=2903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 2m7.341136211s ago: executing program 39 (id=2868): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x20008844) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) mq_open(&(0x7f0000000180)='c6xdigio\x00', 0x40, 0x10, &(0x7f0000000240)={0x2, 0x7, 0x0, 0x9}) ioctl$COMEDI_INSN(r1, 0x8028640c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m54.305707002s ago: executing program 40 (id=2903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 1m13.728519291s ago: executing program 6 (id=2996): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000080)=0x5, 0x4) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000540)) 1m12.860497941s ago: executing program 6 (id=2998): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) mmap(&(0x7f000009a000/0x3000)=nil, 0x3000, 0x3000004, 0x100110, r0, 0xfd452000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) open(0x0, 0x44842, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) shmget$private(0x0, 0x3000, 0xfcf774859b375a8c, &(0x7f0000ffd000/0x3000)=nil) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) 1m11.427242297s ago: executing program 6 (id=3003): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x10) getresgid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0x0) 1m10.985340091s ago: executing program 6 (id=3005): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() capset(&(0x7f0000000740)={0x20080522, r0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) 1m7.06562273s ago: executing program 6 (id=3015): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x8, 0x4, 0x4, 0x10002, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) 1m6.431696385s ago: executing program 6 (id=3017): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x24048004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 50.768581892s ago: executing program 41 (id=3017): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x24048004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 8.222154873s ago: executing program 0 (id=3177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20008000) 7.605754476s ago: executing program 0 (id=3181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x40000105, 0x0, 0x0}) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000480)=')\x80\xab}\xd3\xed\x02\x9d!z\xc6\xb9\xa8\x9d\x82\nc\xa9\x02\xc5\x94\xe1\xdc\xdbd\x04\x836\xe8\x9f\xfc[\x05\xe0\xc6\x89\x83rh\xb2\xbf\xa2\x9d_\x91\xb1\xc8\xe9\x99', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.54653367s ago: executing program 5 (id=3192): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() capset(&(0x7f0000000740)={0x20080522, r0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000010c240000e9fffff5ffffffff09", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) 5.22696151s ago: executing program 3 (id=3193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="249b3e39a9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="a90497", 0x3}], 0x1, &(0x7f0000001940)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x4004800) 4.702420598s ago: executing program 3 (id=3196): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0xfffe, 0x1}, 0x8) 4.45277454s ago: executing program 2 (id=3197): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x555b9eb7}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="25003300d0000000080211000001080211000000505050505050"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.89998838s ago: executing program 2 (id=3199): r0 = socket(0x840000000002, 0x3, 0xff) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000f00)='./file0\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf12, &(0x7f000001b700)="$eJzs3U9sXNW5APBzxx7biU08Bh4YeIQ8eE8EHtghidR0FwTqErHpHhQSGmEoauiCiD+hC0QlRJEQq4oFFRtKpRSplUCVKtRV21Wr7toN6oZKVSoFddEiJa5snzMeH/sy42v7znjm95M+nzn33LnfdzMj597rO2cCMLIaqz9PnpwvQnj303ceffmp4pcry+5qr3Fk9WcRe60QQrOjX2Tb+zwuuHb1pTNbtUU4vvoz9cNjV9rPnQ4hXApHwmehFT5aXPryw/ceOfrx61O3vHXxmVf2aPfb8v0AAIBhdPn3S3++72+/e2Duq8uHT4fJ9vJ0fN6K/el43H8sHiin4+VG2NgvOqLTRLbeWIxGtt5Ytt54lme8JF8z206zZL2JLvnGOpZttZ8AAACwH6Xz2lYoGgsb+o3GwsLaef+Kz2cnioXnzi+du9CnQgEAAIDK/vnq6k23QgghhBCi1mgOQA1CCCFGKZZn+30FAgAAABg1+Xxhm1za3Zm62ltr9Zb/ysONrZ8Pu6Du97/8+yv/B6/5jQMAQHXDejSZ9isdR6d5DPJ5BMey5233+L+RbWd8m3WWzSu4YXmRdiefvbD/yurP/10HVVn9230d+6Ws/nw+zEFVVv/gvdO3Vlb/ZM11VFVW/1TNdVRVVv+Bmuuoqqz+gzXXUVVZ/dM111FVWf0zNddRVVn9N9RcR1Vl9R+quY6qyurfL7fVltXfqrmOqsrqn6u5jqrK6r+x5jqqKqv/pprrqKqs/ptrrqNf7oxt+nc4nI13nj/n53T75RwPAAAARt2/zf8nhBBCbIrV+yAGoA4hhjuKAahBfF20/943ALUIIXYer/b16gMAAAAwCNLnAtKn3pejND7WZXw8fpZodXxqfYU03uzy/Iku45NdxgEAAIAQfvXGudveLtY/57/T+fA65o26HirMY5TPR7jd/Dud92yn+ffLvGUAAACMluJbn12//9H3X5j76vLh0x1nv9fj+W6aB3Q8Xhv4JPbTfQEzWb9I59CnN+ZplKyXXx+4oWx7j+9wRwEAAGCEpfP3VigaCx3n3a3QaCwsrJ+Pz4dmce780tljsZ++n+W3s83JleUP1Vw3AAAA0Lv18/2tz//T9/jOh4li4bnzS+curPVn2subjc7rArPry4vO6wKtbPnxkuUnYj99f+d3Zg+sLl84892lp3Z75wEAAGBEXHjx4jNPLi2d/Z4HHnjgQftBv38zAQAAu+2LL95pfv/EzK/XPv+/Pv9d+vz/kdhvxbn9/hBXSPcJpM8BbPq8/hMb88yWrff8xvVa2XpjMSazuqc6trPiQPa8ubJ8rY3bmSjJN53lm8ny5fMUjGfrp3yHsuX5/IRpvdlseT4P43iWo8jy3x0AAACg3OILzz6/eOHFiw+ef/bJp88+ffa5E8dPffPUqWMPfeOhxdX7+hc77+4HAAAA9qP1m377XQkAAAAAAAAAAAAAAAAAAACMrjq+Tqzf+wgAAACj7h+vhhAuCSFE5Vie7H8NQgxbvD8ANQghhBBij2L1u93rz9vo9/UHAAAAYPRcu/rSmRCmQggr7RYuFbuar7211lpz/epa3tTOPPinuZVIq115eGzD8w/uajWMumvxfZfaTXb5/S///sr/wWu7m38qPej59192yfh0tbz3Lv50vjP/7eM95s/3//Fq+Y9m+e8NveVffj/L/0S1/Pdl+Q/2mH/T/j9fLf/9Mf987B+9p9f8G1//ydim/TjQY/7/z/b/qdBr/mz/Wz0mzDwQ8wPAKBrWGwDSUUI6jp6O/bS/8XAzjGXP2+7xfyPbzviOK9+43XQcdGvsp+OlmSxvst36p7Pt3VCxzlxe16Aqq3+3Xse9VlZ/s+Y6qiqrf6LmOqoqq3+y5jqqKqt/quY6qiqrv9fz0H4rq3+/XFcuq3+65jqqKqt/puY6qiqrf7v/j/dLWf2Haq6jqrL6Z2uuo6qy+iteVqtdWf1zNddRVVn9N9ZcR1Vl9d9Ucx1VldV/c8119MsdsS07H07nn7NxLPVbWX9yi3/LYb22AAAAAPvN30d2/r94paPvdQghhBBiv8bUoB9LJHuy/fE93r74S835/rW8pt/7LYTYu1hervuKA4Nkbz/NDMCg8vt/tHn9R5vXf7R5/fk66R7+IusnY13Gx7uMN7uMT2Tj+ft1ssv4Tdl2l9N1zejmLuP/1WX8UJfxW7uMz3cZv63L+O1dxu/oMg4AAMBouCW2zg8BAABgeL38s0/e/MW9T1yd++ry4dNhYtO888difzL+bf2N2M/nvU+a8W/+P4j9n8T2N7H9a7a++08AAABg76XvifH3fwAAABhe6XtKnf8DAADA8JqLrfN/AAAAGF43xtb5PwAAAAyxYmrrxbFN1wXujm2v8/oBAIPvv2N7Z2wPx/au2P5PbNNxwD2x/d+a6gMAds+Pv/3DU28X6/P9n8jGr8Xlqd3k0tqVgqKxcSb/A7E9GNv/67Ge/PsAes2fHOoxz17ln91hfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgeDRWf548OV+E8O6n7zz6o4k3/7iy7K72GkdWfxax1wohNNvPS6Pr/Z/HFa9dfelMZ3s9tkU4HopQtJeHx660M02HEC6FI+Gz0AofLS59+eF7jxz9+PWpW966+Mwre/hPsGH/AAAAYBj9JwAA//863R/x") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x20, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@gid}, {@gid}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fmask={'fmask', 0x3d, 0x8}}, {@namecase}, {@umask={'umask', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x1, 0x1534, &(0x7f0000001f40)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0}}], 0x1, 0xc044) 3.740634959s ago: executing program 3 (id=3200): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.471047169s ago: executing program 5 (id=3201): mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1) 3.266521112s ago: executing program 1 (id=3202): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf251500000008002c002e00000058002b80080001000000000008000100020000000c000500100200000000000008000100020000000800010002000000200003800600010007000000000000000203aaaaaaaaaaaa0700020003000000080001000000000008", @ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) 3.004592921s ago: executing program 0 (id=3203): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 2.867811292s ago: executing program 5 (id=3204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20008000) 2.692402061s ago: executing program 1 (id=3205): r0 = syz_open_dev$video(0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x4, 0x100, 0x0, {0x1000004, 0x16, 0x9, 0x5}}) 2.575852528s ago: executing program 3 (id=3206): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="249b3e39a9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="a90497", 0x3}], 0x1, &(0x7f0000001940)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x4004800) 2.536369551s ago: executing program 2 (id=3207): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0x0) 2.383477895s ago: executing program 5 (id=3208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xf6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x47}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x8}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x20006085}, 0x400c0) 2.149945577s ago: executing program 0 (id=3209): unshare(0x26000400) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x4000000, 0x81, 0xfffffdff, 0x10}) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) 2.062204377s ago: executing program 1 (id=3210): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0xfffe, 0x1}, 0x8) 2.061974287s ago: executing program 3 (id=3211): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() capset(&(0x7f0000000740)={0x20080522, r0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000010c240000e9fffff5ffffffff092403f3ff00", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) 1.850274185s ago: executing program 5 (id=3212): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x555b9eb7}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="25003300d0000000080211000001080211000000505050505050"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.745833319s ago: executing program 2 (id=3213): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 1.522225234s ago: executing program 1 (id=3214): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e15, &(0x7f0000013e80)="$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") mount(0x0, 0x0, 0x0, 0x2390024, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1) 1.522017053s ago: executing program 0 (id=3215): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf251500000008002c002e00000058002b80080001000000000008000100020000000c000500100200000000000008000100020000000800010002000000200003800600010007000000000000000203aaaaaaaaaaaa07000200030000000800010000000000080003", @ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) 1.362600917s ago: executing program 5 (id=3216): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)={0x20, 0x1, 0x3, "8eaa59"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 933.885015ms ago: executing program 0 (id=3217): r0 = socket(0x840000000002, 0x3, 0xff) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000f00)='./file0\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf12, &(0x7f000001b700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x20, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@gid}, {@gid}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fmask={'fmask', 0x3d, 0x8}}, {@namecase}, {@umask={'umask', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x1, 0x1534, &(0x7f0000001f40)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0}}], 0x1, 0xc044) 868.947452ms ago: executing program 2 (id=3218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x3}], &(0x7f0000000240)='GPL\x00', 0x2, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) 684.521947ms ago: executing program 1 (id=3219): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 349.414707ms ago: executing program 2 (id=3220): r0 = syz_open_dev$video(&(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, 0x0) 167.192887ms ago: executing program 1 (id=3221): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x80040002, 0x0, 0x0, 0x41100, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 0s ago: executing program 3 (id=3222): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="249b3e39a9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="a90497", 0x3}], 0x1, &(0x7f0000001940)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x4004800) kernel console output (not intermixed with test programs): 629153.033:116): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2481" name="/newroot/255/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 967.103727][T12590] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 967.112945][T12590] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 967.134529][T12583] EXT4-fs (loop7): shut down requested (1) [ 967.259259][ T42] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 967.269058][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.524622][ T8743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.919077][ T42] usb 10-1: config 0 descriptor?? [ 968.060986][ T42] cp210x 10-1:0.0: cp210x converter detected [ 968.177228][ T42] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 968.185214][ T42] cp210x 10-1:0.0: querying part number failed [ 968.736795][ T42] usb 10-1: cp210x converter now attached to ttyUSB0 [ 968.888240][T12602] syzkaller0: entered promiscuous mode [ 968.894103][T12602] syzkaller0: entered allmulticast mode [ 969.399982][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2488'. [ 969.485775][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2489'. [ 970.502786][ T24] usb 10-1: USB disconnect, device number 2 [ 970.678212][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 970.687776][ T24] cp210x 10-1:0.0: device disconnected [ 971.588464][T12625] loop7: detected capacity change from 0 to 1024 [ 971.597601][T12625] EXT4-fs: Ignoring removed oldalloc option [ 971.603842][T12625] EXT4-fs: Ignoring removed bh option [ 971.829727][T12625] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.031266][T12625] EXT4-fs (loop7): shut down requested (1) [ 972.311184][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 972.318035][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.769632][ T8743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.913078][T12639] syzkaller0: entered promiscuous mode [ 973.919257][T12639] syzkaller0: entered allmulticast mode [ 974.038095][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2501'. [ 974.251464][T12645] loop8: detected capacity change from 0 to 256 [ 974.382713][T12645] exfat: Invalid uid '0x00000000ffffffff' [ 975.197726][ T5859] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 975.447380][ T5859] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 975.457346][ T5859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.563644][ T5859] usb 10-1: config 0 descriptor?? [ 975.606828][ T5859] cp210x 10-1:0.0: cp210x converter detected [ 975.941296][ T5859] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 975.954764][ T5859] cp210x 10-1:0.0: querying part number failed [ 976.070787][ T5859] usb 10-1: cp210x converter now attached to ttyUSB0 [ 976.577202][T12662] loop6: detected capacity change from 0 to 1024 [ 976.615075][T12662] EXT4-fs: Ignoring removed oldalloc option [ 976.621683][T12662] EXT4-fs: Ignoring removed bh option [ 976.849994][T12662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.919800][T12662] EXT4-fs (loop6): shut down requested (1) [ 977.041780][ T8614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.657460][ T24] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 977.974104][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 977.984481][ T8154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.118701][ T5859] usb 10-1: USB disconnect, device number 3 [ 978.147431][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.158082][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.168026][ T5859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 978.178318][ T5859] cp210x 10-1:0.0: device disconnected [ 978.279218][ T8154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.504364][ T8154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.649409][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 978.659338][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.667817][ T24] usb 8-1: Product: syz [ 978.672213][ T24] usb 8-1: Manufacturer: syz [ 978.674693][ T8154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.677175][ T24] usb 8-1: SerialNumber: syz [ 979.319948][T12678] syzkaller0: entered promiscuous mode [ 979.325707][T12678] syzkaller0: entered allmulticast mode [ 979.422878][ T8154] bridge_slave_1: left allmulticast mode [ 979.434075][ T8154] bridge_slave_1: left promiscuous mode [ 979.441055][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.475148][ T8154] bridge_slave_0: left allmulticast mode [ 979.481381][ T8154] bridge_slave_0: left promiscuous mode [ 979.489750][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.765412][ T24] usb 8-1: 0:2 : does not exist [ 979.771610][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2515'. [ 980.493854][ T24] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 980.565256][ T8154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.645674][ T8154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.711643][ T8154] bond0 (unregistering): Released all slaves [ 981.084967][ T8154] tipc: Disabling bearer [ 981.117119][ T8154] tipc: Left network mode [ 981.309181][ T24] usb 8-1: USB disconnect, device number 37 [ 981.942430][ T8154] hsr_slave_0: left promiscuous mode [ 981.969002][ T8154] hsr_slave_1: left promiscuous mode [ 981.976307][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.984517][ T8154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.084388][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.097178][ T8154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.285463][ T8154] veth1_macvtap: left promiscuous mode [ 982.291372][ T8154] veth0_macvtap: left promiscuous mode [ 982.301577][ T8154] veth1_vlan: left promiscuous mode [ 982.307473][ T8154] veth0_vlan: left promiscuous mode [ 982.909971][T12695] loop0: detected capacity change from 0 to 1024 [ 982.934585][T12695] EXT4-fs: Ignoring removed oldalloc option [ 982.941512][T12695] EXT4-fs: Ignoring removed bh option [ 983.106236][T12695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.478637][ T8154] team0 (unregistering): Port device team_slave_1 removed [ 983.503290][T12695] EXT4-fs (loop0): shut down requested (1) [ 983.697502][ T8154] team0 (unregistering): Port device team_slave_0 removed [ 984.019170][T12360] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.304260][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 985.365432][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2529'. [ 985.669134][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 985.682785][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.839181][ T24] usb 1-1: config 0 descriptor?? [ 985.892440][ T24] cp210x 1-1:0.0: cp210x converter detected [ 986.141702][ T24] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 986.150213][ T24] cp210x 1-1:0.0: querying part number failed [ 986.233702][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 986.510732][T12717] syzkaller0: entered promiscuous mode [ 986.516665][T12717] syzkaller0: entered allmulticast mode [ 987.388845][T12719] loop6: detected capacity change from 0 to 4096 [ 987.490666][T12719] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 988.417289][ T795] usb 1-1: USB disconnect, device number 4 [ 988.498766][ T795] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 988.508653][ T795] cp210x 1-1:0.0: device disconnected [ 988.907024][T12735] loop0: detected capacity change from 0 to 1024 [ 988.985139][T12735] EXT4-fs: Ignoring removed oldalloc option [ 988.991755][T12735] EXT4-fs: Ignoring removed bh option [ 989.189854][T12735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.404519][ T30] audit: type=1804 audit(1767629175.433:117): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2536" name="/newroot/10/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 989.525663][T12743] EXT4-fs (loop0): shut down requested (1) [ 989.880836][T12360] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.920975][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'. [ 991.150339][T12760] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2544'. [ 992.138708][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 992.162553][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 992.171599][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 992.184568][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 992.243081][T12773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 993.932321][T12786] loop0: detected capacity change from 0 to 1024 [ 993.981210][T12786] EXT4-fs: Ignoring removed oldalloc option [ 993.987815][T12786] EXT4-fs: Ignoring removed bh option [ 994.240426][T12786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.286812][ T51] Bluetooth: hci3: command tx timeout [ 994.498549][T12770] chnl_net:caif_netlink_parms(): no params data found [ 994.525335][ T30] audit: type=1804 audit(1767629180.533:118): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2552" name="/newroot/13/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 994.569470][T12786] EXT4-fs (loop0): shut down requested (1) [ 994.953952][T12360] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.376805][ T51] Bluetooth: hci3: command tx timeout [ 996.501190][T12770] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.508868][T12770] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.516847][T12770] bridge_slave_0: entered allmulticast mode [ 996.528212][T12770] bridge_slave_0: entered promiscuous mode [ 996.731999][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2556'. [ 996.798611][T12770] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.806031][T12770] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.813948][T12770] bridge_slave_1: entered allmulticast mode [ 996.822856][T12770] bridge_slave_1: entered promiscuous mode [ 996.923407][T12804] loop0: detected capacity change from 0 to 4096 [ 997.040276][T12804] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 997.600726][ T3016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.696179][T12770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.841282][ T3016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.874489][T12811] loop7: detected capacity change from 0 to 512 [ 997.938251][T12770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.052351][T12811] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 998.065661][T12811] EXT4-fs (loop7): SIPHASH is not a valid default hash value [ 998.432914][T12770] team0: Port device team_slave_0 added [ 998.453532][ T51] Bluetooth: hci3: command tx timeout [ 998.522853][ T3016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.654021][T12770] team0: Port device team_slave_1 added [ 998.744356][ T3016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.966182][T12813] loop6: detected capacity change from 0 to 4096 [ 999.244990][T12770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.252904][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.279516][T12770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.580360][T12770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.589709][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.621186][T12770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.718137][ T3016] bridge_slave_1: left allmulticast mode [ 999.724133][ T3016] bridge_slave_1: left promiscuous mode [ 999.732403][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.843361][ T3016] bridge_slave_0: left allmulticast mode [ 999.849517][ T3016] bridge_slave_0: left promiscuous mode [ 999.855962][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.976010][T12820] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1000.634054][ T51] Bluetooth: hci3: command tx timeout [ 1001.912037][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.028628][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.044365][ T3016] bond0 (unregistering): Released all slaves [ 1002.589084][ T3016] tipc: Left network mode [ 1002.613323][T12770] hsr_slave_0: entered promiscuous mode [ 1002.622908][T12770] hsr_slave_1: entered promiscuous mode [ 1002.631518][T12770] debugfs: 'hsr0' already exists in 'hsr' [ 1002.638291][T12770] Cannot create hsr debugfs directory [ 1002.960586][T12833] loop7: detected capacity change from 0 to 1024 [ 1003.042084][T12833] EXT4-fs: Ignoring removed oldalloc option [ 1003.049099][T12833] EXT4-fs: Ignoring removed bh option [ 1003.219867][T12833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.440687][ T30] audit: type=1804 audit(1767629189.453:119): pid=12833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2564" name="/newroot/281/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 1003.587886][T12839] EXT4-fs (loop7): shut down requested (1) [ 1003.602070][ T3016] hsr_slave_0: left promiscuous mode [ 1003.637473][ T3016] hsr_slave_1: left promiscuous mode [ 1003.645457][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.654769][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.771920][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.779765][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.914823][ T3016] veth1_macvtap: left promiscuous mode [ 1003.920842][ T3016] veth0_macvtap: left promiscuous mode [ 1003.926936][ T3016] veth1_vlan: left promiscuous mode [ 1003.932534][ T3016] veth0_vlan: left promiscuous mode [ 1004.090506][ T8743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.130940][T12843] overlayfs: missing 'lowerdir' [ 1004.847559][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 1004.901922][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 1005.040360][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2568'. [ 1005.087157][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1006.189185][T12857] tipc: Started in network mode [ 1006.194534][T12857] tipc: Node identity f6878d86618d, cluster identity 4711 [ 1006.203264][T12857] tipc: Enabled bearer , priority 0 [ 1006.291694][T12861] syzkaller0: entered promiscuous mode [ 1006.297714][T12861] syzkaller0: entered allmulticast mode [ 1006.385374][T12855] loop6: detected capacity change from 0 to 4096 [ 1006.417099][T12857] tipc: Resetting bearer [ 1006.537591][T12856] tipc: Resetting bearer [ 1006.571786][T12856] tipc: Disabling bearer [ 1006.599811][T12865] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1008.041884][T12871] loop9: detected capacity change from 0 to 1024 [ 1008.093279][T12871] EXT4-fs: Ignoring removed oldalloc option [ 1008.099863][T12871] EXT4-fs: Ignoring removed bh option [ 1008.157808][T12770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1008.268768][T12871] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.314327][T12770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1008.432257][T12770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1008.450616][T12871] EXT4-fs (loop9): shut down requested (1) [ 1008.574008][T12770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1008.997442][T12274] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.822011][T12770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.991159][T12770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.141434][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.149106][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.166523][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.173938][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.485386][T12770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1010.497194][T12770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1010.643785][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2580'. [ 1011.723561][T12891] loop7: detected capacity change from 0 to 8 [ 1011.908567][T12895] loop6: detected capacity change from 0 to 512 [ 1012.030132][T12895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.849218][T12770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.926299][T12900] loop0: detected capacity change from 0 to 4096 [ 1013.149214][ T8614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.214518][T12906] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1013.482744][T12770] veth0_vlan: entered promiscuous mode [ 1013.644727][T12770] veth1_vlan: entered promiscuous mode [ 1014.027914][T12770] veth0_macvtap: entered promiscuous mode [ 1014.105086][T12770] veth1_macvtap: entered promiscuous mode [ 1014.326801][T12770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.431209][T12770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.502161][T12489] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.596225][T12489] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.677096][T12489] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.687428][T12489] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.396798][T12918] loop9: detected capacity change from 0 to 1024 [ 1015.402864][T12918] EXT4-fs: Ignoring removed oldalloc option [ 1015.403008][T12918] EXT4-fs: Ignoring removed bh option [ 1015.489422][T12918] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.598931][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1015.662422][T12918] EXT4-fs (loop9): shut down requested (1) [ 1015.794417][ T24] usb 7-1: config 0 has no interfaces? [ 1015.800488][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1015.813474][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.852737][ T795] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1015.925216][T12274] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.960136][ T24] usb 7-1: config 0 descriptor?? [ 1016.077254][ T795] usb 1-1: Using ep0 maxpacket: 8 [ 1016.112308][ T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1016.123982][ T795] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1016.133988][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.177101][ T795] usb 1-1: config 0 descriptor?? [ 1016.318199][ T24] usb 7-1: USB disconnect, device number 16 [ 1016.541237][ T795] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1016.596343][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2592'. [ 1017.491759][T12936] pimreg: tun_chr_ioctl cmd 35108 [ 1019.415307][ T24] usb 1-1: USB disconnect, device number 5 [ 1019.896085][T12954] loop7: detected capacity change from 0 to 4096 [ 1020.046180][T12961] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1020.222419][T12959] loop0: detected capacity change from 0 to 1024 [ 1020.243891][T12959] EXT4-fs: Ignoring removed oldalloc option [ 1020.250790][T12959] EXT4-fs: Ignoring removed bh option [ 1020.291971][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2602'. [ 1020.404626][T12959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.485250][T12959] EXT4-fs (loop0): shut down requested (1) [ 1020.682149][T12360] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.452437][T12973] loop6: detected capacity change from 0 to 512 [ 1021.776724][T12973] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2601: inode has both inline data and extents flags [ 1021.835896][T12973] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2601: couldn't read orphan inode 15 (err -117) [ 1021.876920][ T795] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1021.897342][T12973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.104083][ T795] usb 1-1: config 0 has no interfaces? [ 1022.110288][ T795] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1022.119927][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.223254][ T795] usb 1-1: config 0 descriptor?? [ 1022.569525][ T795] usb 1-1: USB disconnect, device number 6 [ 1023.355194][ T8614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.400820][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.410018][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.782282][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.790644][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.935163][T12995] loop9: detected capacity change from 0 to 128 [ 1024.728442][T13001] syzkaller0: entered promiscuous mode [ 1024.734215][T13001] syzkaller0: entered allmulticast mode [ 1025.944894][T13006] loop0: detected capacity change from 0 to 4096 [ 1026.149091][T13013] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1026.288980][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2614'. [ 1028.807070][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1029.118537][ T24] usb 10-1: config 0 has no interfaces? [ 1029.124441][ T24] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1029.134064][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.225124][ T24] usb 10-1: config 0 descriptor?? [ 1029.465360][T13039] overlayfs: failed to resolve './file1': -2 [ 1029.641281][ T24] usb 10-1: USB disconnect, device number 4 [ 1030.403352][T13042] syzkaller0: entered promiscuous mode [ 1030.409658][T13042] syzkaller0: entered allmulticast mode [ 1031.732287][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2626'. [ 1032.125468][T13053] loop6: detected capacity change from 0 to 4096 [ 1032.337886][T13056] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1033.769836][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.776696][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1034.091650][T13070] loop6: detected capacity change from 0 to 1024 [ 1034.150908][T13070] EXT4-fs: Ignoring removed mblk_io_submit option [ 1034.158522][T13070] EXT4-fs: inline encryption not supported [ 1034.217207][T13072] overlayfs: failed to resolve './file1': -2 [ 1034.237848][T13070] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1034.401565][T13070] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2632: bad orphan inode 11 [ 1034.423060][T13070] EXT4-fs (loop6): Remounting filesystem read-only [ 1034.430993][T13070] ext4_test_bit(bit=10, block=4) = 1 [ 1034.438471][T13070] is_bad_inode(inode)=0 [ 1034.442863][T13070] NEXT_ORPHAN(inode)=3254779904 [ 1034.448686][T13070] max_ino=32 [ 1034.452174][T13070] i_nlink=0 [ 1034.457986][T13070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.797444][ T24] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1034.938044][ T8614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.958564][T13080] syzkaller0: entered promiscuous mode [ 1034.964306][T13080] syzkaller0: entered allmulticast mode [ 1035.003207][ T24] usb 8-1: config 0 has no interfaces? [ 1035.009145][ T24] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1035.020829][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.142183][ T24] usb 8-1: config 0 descriptor?? [ 1035.420801][ T24] usb 8-1: USB disconnect, device number 38 [ 1035.567641][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2639'. [ 1035.587895][ T795] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1035.787768][ T795] usb 4-1: Using ep0 maxpacket: 8 [ 1035.836764][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1035.848482][ T795] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1035.862005][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.978114][ T795] usb 4-1: config 0 descriptor?? [ 1036.302337][ T795] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1036.473592][ T148] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.704265][ T148] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.862191][ T148] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.038985][ T148] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.656007][ T148] bridge_slave_1: left allmulticast mode [ 1037.662738][ T148] bridge_slave_1: left promiscuous mode [ 1037.669711][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.831000][ T148] bridge_slave_0: left allmulticast mode [ 1037.837433][ T148] bridge_slave_0: left promiscuous mode [ 1037.844232][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.233084][T13112] loop0: detected capacity change from 0 to 128 [ 1038.331791][T13112] affs: No valid root block on device loop0 [ 1038.496076][T13115] overlayfs: failed to resolve './file1': -2 [ 1038.577276][ T795] usb 4-1: USB disconnect, device number 14 [ 1038.781079][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.894232][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.947285][ T148] bond0 (unregistering): Released all slaves [ 1039.113205][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 1039.356123][T13125] syzkaller0: entered promiscuous mode [ 1039.362415][T13125] syzkaller0: entered allmulticast mode [ 1039.507003][ T5859] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1039.687901][ T148] hsr_slave_0: left promiscuous mode [ 1039.701398][ T148] hsr_slave_1: left promiscuous mode [ 1039.710046][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.717898][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.754127][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.762860][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.774013][ T5859] usb 7-1: config 0 has no interfaces? [ 1039.780193][ T5859] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1039.789922][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.891901][ T5859] usb 7-1: config 0 descriptor?? [ 1039.901870][ T148] veth1_macvtap: left promiscuous mode [ 1039.910046][ T148] veth0_macvtap: left promiscuous mode [ 1039.916001][ T148] veth1_vlan: left promiscuous mode [ 1039.921767][ T148] veth0_vlan: left promiscuous mode [ 1040.381899][ T5859] usb 7-1: USB disconnect, device number 17 [ 1040.790068][ T148] team0 (unregistering): Port device team_slave_1 removed [ 1040.885975][ T148] team0 (unregistering): Port device team_slave_0 removed [ 1040.927819][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 1041.990428][T13149] loop3: detected capacity change from 0 to 1024 [ 1042.071344][T13149] EXT4-fs: Ignoring removed oldalloc option [ 1042.077878][T13149] EXT4-fs: Ignoring removed bh option [ 1042.245498][T13149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.325900][T13149] EXT4-fs (loop3): shut down requested (1) [ 1042.435829][T12770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.455417][T13160] overlayfs: failed to resolve './file0': -2 [ 1042.537299][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1042.718846][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1042.779293][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1042.792124][ T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1042.802792][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.888928][ T24] usb 7-1: config 0 descriptor?? [ 1042.976157][T13164] syzkaller0: entered promiscuous mode [ 1042.982107][T13164] syzkaller0: entered allmulticast mode [ 1043.058394][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 1043.131610][ T24] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1043.188097][ T795] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1043.377348][ T795] usb 10-1: config 0 has no interfaces? [ 1043.383400][ T795] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1043.393278][ T795] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.469018][ T795] usb 10-1: config 0 descriptor?? [ 1043.810298][ T795] usb 10-1: USB disconnect, device number 5 [ 1045.326053][ T24] usb 7-1: USB disconnect, device number 18 [ 1045.431632][T13193] loop3: detected capacity change from 0 to 1024 [ 1045.459127][T13193] EXT4-fs: Ignoring removed oldalloc option [ 1045.465387][T13193] EXT4-fs: Ignoring removed bh option [ 1045.545725][T13193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.671442][T13193] EXT4-fs (loop3): shut down requested (1) [ 1045.962954][T12770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.489293][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2679'. [ 1046.829361][T13208] syzkaller0: entered promiscuous mode [ 1046.835343][T13208] syzkaller0: entered allmulticast mode [ 1047.598827][ T5859] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1047.862865][ T5859] usb 8-1: config 0 has no interfaces? [ 1047.869273][ T5859] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1047.878979][ T5859] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.918803][ T5859] usb 8-1: config 0 descriptor?? [ 1048.292020][ T24] usb 8-1: USB disconnect, device number 39 [ 1048.660827][T13222] loop9: detected capacity change from 0 to 4096 [ 1048.684989][T13222] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1049.323980][T13235] loop6: detected capacity change from 0 to 1024 [ 1049.361638][T13235] EXT4-fs: Ignoring removed oldalloc option [ 1049.372287][T13235] EXT4-fs: Ignoring removed bh option [ 1049.487376][T13235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.548954][T13235] EXT4-fs (loop6): shut down requested (1) [ 1049.861908][ T8614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.238375][T13249] loop3: detected capacity change from 0 to 64 [ 1050.274411][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2693'. [ 1050.334345][T13249] hfs: request for non-existent node 1280 in B*Tree [ 1050.341650][T13249] hfs: request for non-existent node 1280 in B*Tree [ 1050.870511][T13254] syzkaller0: entered promiscuous mode [ 1050.876277][T13254] syzkaller0: entered allmulticast mode [ 1052.202811][T13276] loop9: detected capacity change from 0 to 1024 [ 1052.260608][T13276] EXT4-fs: Ignoring removed oldalloc option [ 1052.267247][T13276] EXT4-fs: Ignoring removed bh option [ 1052.355361][T13278] loop6: detected capacity change from 0 to 1024 [ 1052.368956][T13276] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.390353][T13278] EXT4-fs: Ignoring removed oldalloc option [ 1052.400749][T13278] EXT4-fs: Ignoring removed bh option [ 1052.511242][T13278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.587601][ T30] audit: type=1804 audit(1767629238.613:120): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2703" name="/newroot/51/file1/bus" dev="loop9" ino=18 res=1 errno=0 [ 1052.621213][T13278] EXT4-fs (loop6): shut down requested (1) [ 1052.663178][T13288] EXT4-fs (loop9): shut down requested (1) [ 1052.912412][ T8614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.950635][T12274] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.129963][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2708'. [ 1053.608668][T13300] syzkaller0: entered promiscuous mode [ 1053.614461][T13300] syzkaller0: entered allmulticast mode [ 1055.480351][T13329] netlink: 'syz.3.2721': attribute type 10 has an invalid length. [ 1055.488990][T13329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2721'. [ 1055.544440][T13328] loop6: detected capacity change from 0 to 1024 [ 1055.599907][T13328] EXT4-fs: Ignoring removed oldalloc option [ 1055.606222][T13328] EXT4-fs: Ignoring removed bh option [ 1055.649406][T13329] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 1055.659689][T13329] team0: Failed to send options change via netlink (err -105) [ 1055.667610][T13329] team0: Port device netdevsim1 added [ 1055.703501][ T8154] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 1055.743801][T13328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.873622][T13328] EXT4-fs (loop6): shut down requested (1) [ 1056.086303][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2724'. [ 1056.148774][ T8614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.293815][T12773] Bluetooth: hci2: command 0x0406 tx timeout [ 1057.083836][T13350] syzkaller0: entered promiscuous mode [ 1057.091031][T13350] syzkaller0: entered allmulticast mode [ 1058.774123][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2738'. [ 1059.475951][T13388] syzkaller0: entered promiscuous mode [ 1059.482072][T13388] syzkaller0: entered allmulticast mode [ 1060.006744][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1060.029919][T13398] overlayfs: failed to resolve './file0': -2 [ 1060.207138][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1060.247527][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.258275][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.317080][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1060.330275][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.339963][ T24] usb 7-1: Product: syz [ 1060.344360][ T24] usb 7-1: Manufacturer: syz [ 1060.349429][ T24] usb 7-1: SerialNumber: syz [ 1060.618067][ T24] usb 7-1: 0:2 : does not exist [ 1060.676752][ T24] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1060.828411][ T24] usb 7-1: USB disconnect, device number 19 [ 1061.403949][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2752'. [ 1062.660042][T13437] overlayfs: failed to resolve './file1': -2 [ 1062.691643][T13434] syzkaller0: entered promiscuous mode [ 1062.697543][T13434] syzkaller0: entered allmulticast mode [ 1063.608658][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1063.717572][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2765'. [ 1063.800681][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1063.866076][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.876776][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1063.944147][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1063.956564][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.964846][ T24] usb 7-1: Product: syz [ 1063.969547][ T24] usb 7-1: Manufacturer: syz [ 1063.974360][ T24] usb 7-1: SerialNumber: syz [ 1064.342551][ T24] usb 7-1: 0:2 : does not exist [ 1064.460940][ T24] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1064.568934][ T24] usb 7-1: USB disconnect, device number 20 [ 1064.784723][T13465] loop0: detected capacity change from 0 to 256 [ 1064.958679][T13465] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1065.710345][T13480] syzkaller0: entered promiscuous mode [ 1065.716279][T13480] syzkaller0: entered allmulticast mode [ 1065.833313][T13472] loop7: detected capacity change from 0 to 4096 [ 1065.938365][T13481] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1066.195436][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2777'. [ 1067.632429][T13501] loop7: detected capacity change from 0 to 4096 [ 1067.686277][T13501] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1067.741209][T13501] ntfs3(loop7): ino=3, mi_enum_attr [ 1067.886892][ T5859] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1067.938414][T13501] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1067.945935][T13501] ntfs3(loop7): Failed to load $Extend (-22). [ 1067.952845][T13501] ntfs3(loop7): Failed to initialize $Extend. [ 1067.959573][T13501] ntfs3(loop7): ino=5, mi_enum_attr [ 1067.965185][T13501] ntfs3(loop7): Failed to load root (-22). [ 1068.082223][ T5859] usb 10-1: Using ep0 maxpacket: 16 [ 1068.141872][ T5859] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.152624][ T5859] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1068.167449][ T795] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1068.204997][ T5859] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1068.217476][ T5859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.225880][ T5859] usb 10-1: Product: syz [ 1068.231259][ T5859] usb 10-1: Manufacturer: syz [ 1068.236199][ T5859] usb 10-1: SerialNumber: syz [ 1068.358790][ T795] usb 7-1: config 0 has no interfaces? [ 1068.365802][ T795] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1068.377380][ T795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.448861][T13516] syzkaller0: entered promiscuous mode [ 1068.454766][T13516] syzkaller0: entered allmulticast mode [ 1068.487338][ T795] usb 7-1: config 0 descriptor?? [ 1068.535067][ T5859] usb 10-1: 0:2 : does not exist [ 1068.555940][ T5859] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1068.642917][ T5859] usb 10-1: USB disconnect, device number 6 [ 1068.796149][ T24] usb 7-1: USB disconnect, device number 21 [ 1068.985164][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'. [ 1069.039011][T13521] loop7: detected capacity change from 0 to 4096 [ 1069.157687][T13527] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1071.166714][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2803'. [ 1071.201334][T13556] loop0: detected capacity change from 0 to 256 [ 1071.219226][T13556] exfat: Deprecated parameter 'utf8' [ 1071.225026][T13556] exfat: Bad value for 'dmask' [ 1071.906901][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1071.938828][T13562] loop6: detected capacity change from 0 to 4096 [ 1071.957657][ T42] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1072.037871][T13568] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1072.091365][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1072.125174][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.136749][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1072.182356][ T42] usb 4-1: config 0 has no interfaces? [ 1072.188650][ T42] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1072.198192][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.280505][ T42] usb 4-1: config 0 descriptor?? [ 1072.287791][ T24] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1072.297582][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.308937][ T24] usb 10-1: Product: syz [ 1072.313473][ T24] usb 10-1: Manufacturer: syz [ 1072.319494][ T24] usb 10-1: SerialNumber: syz [ 1072.579029][ T795] usb 4-1: USB disconnect, device number 15 [ 1072.638228][ T24] usb 10-1: 0:2 : does not exist [ 1072.693186][ T24] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1072.785827][ T24] usb 10-1: USB disconnect, device number 7 [ 1074.442509][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2816'. [ 1076.477589][T13608] loop3: detected capacity change from 0 to 4096 [ 1076.604967][T13615] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1076.856776][ T24] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1077.040985][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1077.076876][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.087817][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1077.168457][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1077.178334][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.186897][ T24] usb 7-1: Product: syz [ 1077.191288][ T24] usb 7-1: Manufacturer: syz [ 1077.196111][ T24] usb 7-1: SerialNumber: syz [ 1077.525016][ T24] usb 7-1: 0:2 : does not exist [ 1077.553671][ T24] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1077.655540][ T24] usb 7-1: USB disconnect, device number 22 [ 1078.622569][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2827'. [ 1080.568033][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1080.764645][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.775509][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1080.858935][ T24] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1080.868825][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1080.877469][ T24] usb 10-1: SerialNumber: syz [ 1081.229697][ T24] usb 10-1: 0:2 : does not exist [ 1081.318474][ T24] usb 10-1: USB disconnect, device number 8 [ 1081.770051][ T5859] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1081.965482][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 1082.002027][ T5859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.012808][ T5859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1082.093350][ T5859] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1082.103098][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.111854][ T5859] usb 4-1: Product: syz [ 1082.116308][ T5859] usb 4-1: Manufacturer: syz [ 1082.121336][ T5859] usb 4-1: SerialNumber: syz [ 1082.189732][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2841'. [ 1082.451276][ T5859] usb 4-1: 0:2 : does not exist [ 1082.511913][ T5859] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1082.711731][ T5859] usb 4-1: USB disconnect, device number 16 [ 1083.206796][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1083.395665][ T24] usb 7-1: config 0 has no interfaces? [ 1083.401938][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1083.411629][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.471020][ T24] usb 7-1: config 0 descriptor?? [ 1083.786118][ T24] usb 7-1: USB disconnect, device number 23 [ 1084.523586][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2853'. [ 1084.756073][T13695] loop3: detected capacity change from 0 to 1024 [ 1084.785373][T13695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1084.887166][T13695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.902491][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1085.084946][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.096025][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1085.175852][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1085.185516][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1085.193865][ T24] usb 1-1: SerialNumber: syz [ 1085.425155][T12770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.463666][T13706] loop7: detected capacity change from 0 to 64 [ 1085.566089][ T24] usb 1-1: 0:2 : does not exist [ 1085.710862][ T24] usb 1-1: USB disconnect, device number 7 [ 1086.419511][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1086.607356][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1086.645537][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.659266][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1086.751541][ T24] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1086.761367][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.769919][ T24] usb 10-1: Product: syz [ 1086.774369][ T24] usb 10-1: Manufacturer: syz [ 1086.780102][ T24] usb 10-1: SerialNumber: syz [ 1087.114823][ T24] usb 10-1: 0:2 : does not exist [ 1087.171092][ T24] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1087.308535][ T24] usb 10-1: USB disconnect, device number 9 [ 1088.105147][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2866'. [ 1090.412798][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1090.639449][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.650019][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1090.748999][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1090.758441][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1090.766949][ T24] usb 7-1: SerialNumber: syz [ 1091.167649][ T24] usb 7-1: 0:2 : does not exist [ 1091.325144][ T24] usb 7-1: USB disconnect, device number 24 [ 1092.311941][ T5859] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1092.539011][ T5859] usb 8-1: Using ep0 maxpacket: 16 [ 1092.571959][ T5859] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.585278][ T5859] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1092.677634][ T5859] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1092.689010][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.698418][ T5859] usb 8-1: Product: syz [ 1092.702827][ T5859] usb 8-1: Manufacturer: syz [ 1092.708954][ T5859] usb 8-1: SerialNumber: syz [ 1092.981759][ T5859] usb 8-1: 0:2 : does not exist [ 1093.045111][ T5859] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1093.199872][ T5859] usb 8-1: USB disconnect, device number 40 [ 1093.284292][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 1095.220366][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1095.227131][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1096.277028][ T5859] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1096.488013][ T5859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.498578][ T5859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1096.549776][ T5859] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1096.559672][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1096.568499][ T5859] usb 4-1: SerialNumber: syz [ 1096.925553][ T5859] usb 4-1: 0:2 : does not exist [ 1097.050149][ T5859] usb 4-1: USB disconnect, device number 17 [ 1097.216572][T13800] loop7: detected capacity change from 0 to 256 [ 1097.350192][T13800] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1098.478765][ T5859] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1098.492466][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2896'. [ 1098.686787][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 1098.717779][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1098.731127][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1098.839479][ T5859] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1098.849364][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.858056][ T5859] usb 4-1: Product: syz [ 1098.862357][ T5859] usb 4-1: Manufacturer: syz [ 1098.867492][ T5859] usb 4-1: SerialNumber: syz [ 1098.990533][ T5859] usb 4-1: config 0 descriptor?? [ 1099.013672][ T5859] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1099.023510][ T5859] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1099.734366][ T5859] em28xx 4-1:0.0: chip ID is em28178 [ 1099.882982][T13821] loop6: detected capacity change from 0 to 256 [ 1099.952367][T13821] exfat: Deprecated parameter 'utf8' [ 1099.965105][T13821] exfat: Deprecated parameter 'namecase' [ 1100.048537][ T24] usb 4-1: USB disconnect, device number 18 [ 1100.058815][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 1100.101353][ T24] em28xx 4-1:0.0: Freeing device [ 1100.120418][T13821] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1100.137675][T13821] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 1102.239417][ T5859] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1102.427822][ T5859] usb 7-1: config 0 has no interfaces? [ 1102.433706][ T5859] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1102.443210][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.459139][ T795] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1102.496721][ T5859] usb 7-1: config 0 descriptor?? [ 1102.654433][ T795] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.665369][ T795] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1102.740403][ T795] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1102.750128][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1102.758519][ T795] usb 4-1: SerialNumber: syz [ 1102.791507][ T5859] usb 7-1: USB disconnect, device number 25 [ 1103.074748][ T795] usb 4-1: 0:2 : does not exist [ 1103.178359][ T795] usb 4-1: USB disconnect, device number 19 [ 1103.932265][T13851] loop6: detected capacity change from 0 to 64 [ 1104.013978][T13851] Trying to free block not in datazone [ 1104.123997][T13851] Trying to free block not in datazone [ 1104.131276][T13851] minix_free_inode: bit 5 already cleared [ 1104.219543][T12773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1104.234238][T12773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1104.248400][T12773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1104.263266][T12773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1104.277448][T12773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1104.814762][T13856] loop3: detected capacity change from 0 to 256 [ 1104.890050][T13856] exfat: Deprecated parameter 'utf8' [ 1104.895697][T13856] exfat: Bad value for 'dmask' [ 1105.013678][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2911'. [ 1105.777411][T13852] chnl_net:caif_netlink_parms(): no params data found [ 1106.160957][T13863] loop3: detected capacity change from 0 to 1024 [ 1106.299230][T13863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1106.368299][ T51] Bluetooth: hci1: command tx timeout [ 1106.476141][T13863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1107.473750][T13852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.481809][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.489776][T13852] bridge_slave_0: entered allmulticast mode [ 1107.499033][T13852] bridge_slave_0: entered promiscuous mode [ 1107.584624][T13852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.592585][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.600508][T13852] bridge_slave_1: entered allmulticast mode [ 1107.609746][T13852] bridge_slave_1: entered promiscuous mode [ 1107.895752][T13852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.018270][T13852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.275257][T13852] team0: Port device team_slave_0 added [ 1108.294698][T12770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.337975][T13852] team0: Port device team_slave_1 added [ 1108.461870][ T51] Bluetooth: hci1: command tx timeout [ 1108.750753][T13852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.758246][T13852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.786202][T13852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.028574][T13852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.035750][T13852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.062352][T13852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.077027][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1109.527401][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1109.658591][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.669095][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1109.775184][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1109.786946][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.795217][ T24] usb 4-1: Product: syz [ 1109.800543][ T24] usb 4-1: Manufacturer: syz [ 1109.805353][ T24] usb 4-1: SerialNumber: syz [ 1110.025106][T13852] hsr_slave_0: entered promiscuous mode [ 1110.035388][T13852] hsr_slave_1: entered promiscuous mode [ 1110.371308][ T24] usb 4-1: 0:2 : does not exist [ 1110.468075][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1110.534598][ T51] Bluetooth: hci1: command tx timeout [ 1110.640975][T13888] loop6: detected capacity change from 0 to 1024 [ 1110.753648][T13888] EXT4-fs: Ignoring removed oldalloc option [ 1110.760379][T13888] EXT4-fs: Ignoring removed bh option [ 1110.807217][ T24] usb 4-1: USB disconnect, device number 20 [ 1110.902563][T13888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.126646][ T30] audit: type=1804 audit(1767629297.143:121): pid=13888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2920" name="/newroot/420/file1/bus" dev="loop6" ino=18 res=1 errno=0 [ 1111.733252][ T8614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.887180][ T795] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1112.177420][ T795] usb 4-1: config 0 has no interfaces? [ 1112.183128][ T795] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1112.192819][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.265938][ T795] usb 4-1: config 0 descriptor?? [ 1112.584483][ T795] usb 4-1: USB disconnect, device number 21 [ 1112.609218][ T51] Bluetooth: hci1: command tx timeout [ 1112.964789][T13899] loop6: detected capacity change from 0 to 4096 [ 1113.564478][T13904] loop3: detected capacity change from 0 to 64 [ 1113.640134][T13852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1113.780740][T13852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1113.897893][T13852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1113.992831][T13852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1114.083936][ T198] hfs: request for non-existent node 1280 in B*Tree [ 1114.092152][ T198] hfs: request for non-existent node 1280 in B*Tree [ 1115.202006][T13852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.466860][T13852] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.497129][T13915] loop0: detected capacity change from 0 to 1024 [ 1115.618708][ T4068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.626141][ T4068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.739519][T13915] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1115.753121][ T4068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.760848][ T4068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.321406][T13915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1116.571112][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 1116.973316][ T795] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1117.199396][ T795] usb 7-1: Using ep0 maxpacket: 16 [ 1117.240056][ T795] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.250575][ T795] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1117.353776][ T795] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1117.367230][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.375558][ T795] usb 7-1: Product: syz [ 1117.380675][ T795] usb 7-1: Manufacturer: syz [ 1117.385489][ T795] usb 7-1: SerialNumber: syz [ 1117.731139][T12773] Bluetooth: hci3: command 0x0406 tx timeout [ 1117.791359][ T795] usb 7-1: 0:2 : does not exist [ 1117.830387][T12360] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.858889][ T795] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1117.959030][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2931'. [ 1118.011217][ T795] usb 7-1: USB disconnect, device number 26 [ 1119.044997][T12773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1119.054318][T12773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1119.064967][T12773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1119.094883][T12773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1119.114514][T12773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1119.796705][ T5859] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1120.052354][ T5859] usb 7-1: config 0 has no interfaces? [ 1120.058450][ T5859] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1120.068097][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.179620][T13945] loop3: detected capacity change from 0 to 256 [ 1120.207761][ T5859] usb 7-1: config 0 descriptor?? [ 1120.238949][T13945] exfat: Deprecated parameter 'utf8' [ 1120.244506][T13945] exfat: Bad value for 'dmask' [ 1120.517656][T13932] chnl_net:caif_netlink_parms(): no params data found [ 1121.032673][T13949] loop3: detected capacity change from 0 to 64 [ 1121.069108][T13852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.169073][T12773] Bluetooth: hci4: command tx timeout [ 1121.289530][ T795] usb 7-1: USB disconnect, device number 27 [ 1121.303284][T13949] Trying to free block not in datazone [ 1123.249564][T12773] Bluetooth: hci4: command tx timeout [ 1123.685934][T13932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.693531][T13932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.701417][T13932] bridge_slave_0: entered allmulticast mode [ 1123.713412][T13932] bridge_slave_0: entered promiscuous mode [ 1123.924258][T13932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.932012][T13932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.939879][T13932] bridge_slave_1: entered allmulticast mode [ 1123.948965][T13932] bridge_slave_1: entered promiscuous mode [ 1123.974510][T13975] loop6: detected capacity change from 0 to 64 [ 1124.247272][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2942'. [ 1124.563011][T13932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.657256][T13932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.893814][T13932] team0: Port device team_slave_0 added [ 1125.002778][T13932] team0: Port device team_slave_1 added [ 1125.329317][T12773] Bluetooth: hci4: command tx timeout [ 1125.481704][T13932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.490123][T13932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.517077][T13932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.722105][T13932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.729442][T13932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.755992][T13932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.061853][T13987] loop3: detected capacity change from 0 to 64 [ 1126.281461][T13987] Trying to free block not in datazone [ 1126.345717][T13932] hsr_slave_0: entered promiscuous mode [ 1126.355282][T13932] hsr_slave_1: entered promiscuous mode [ 1126.364181][T13932] debugfs: 'hsr0' already exists in 'hsr' [ 1126.370310][T13932] Cannot create hsr debugfs directory [ 1126.719790][T13988] loop6: detected capacity change from 0 to 256 [ 1126.792345][T13988] exfat: Deprecated parameter 'utf8' [ 1126.798138][T13988] exfat: Bad value for 'dmask' [ 1127.215007][T13852] veth0_vlan: entered promiscuous mode [ 1127.372165][T13852] veth1_vlan: entered promiscuous mode [ 1127.421398][T12773] Bluetooth: hci4: command tx timeout [ 1127.755127][T13852] veth0_macvtap: entered promiscuous mode [ 1127.814350][ T5859] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1127.923205][T13852] veth1_macvtap: entered promiscuous mode [ 1127.940358][ T795] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1128.065523][ T5859] usb 4-1: config 0 has no interfaces? [ 1128.071979][ T5859] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1128.081539][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.139979][ T5859] usb 4-1: config 0 descriptor?? [ 1128.203394][ T795] usb 1-1: Using ep0 maxpacket: 32 [ 1128.280858][ T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.293084][ T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.303923][ T795] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1128.314160][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.355021][T13852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.598036][ T5877] usb 4-1: USB disconnect, device number 22 [ 1128.607519][T13852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.644651][ T795] usb 1-1: config 0 descriptor?? [ 1128.951684][T13932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1129.108484][ T86] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.182432][T13932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1129.264863][ T86] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.360803][T13932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1129.460140][T13932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1129.485566][ T795] usbhid 1-1:0.0: can't add hid device: -71 [ 1129.497539][ T795] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1129.530290][ T86] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.589046][ T795] usb 1-1: USB disconnect, device number 8 [ 1129.603763][ T86] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.717784][T13932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.834671][T13932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.936693][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.944118][ T8154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.959178][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.966700][ T8154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.179954][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2953'. [ 1134.584682][T14038] loop3: detected capacity change from 0 to 256 [ 1134.697504][ T795] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1134.723865][T14038] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1134.907269][ T795] usb 7-1: config 0 has no interfaces? [ 1134.913055][ T795] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1134.922708][ T795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.999129][ T795] usb 7-1: config 0 descriptor?? [ 1135.305777][ T795] usb 7-1: USB disconnect, device number 28 [ 1135.319952][ T42] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1135.678012][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 1135.702628][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.713190][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1135.925416][ T42] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1135.935324][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.943913][ T42] usb 1-1: Product: syz [ 1135.948495][ T42] usb 1-1: Manufacturer: syz [ 1135.953317][ T42] usb 1-1: SerialNumber: syz [ 1135.995623][T13932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.610964][T13932] veth0_vlan: entered promiscuous mode [ 1136.793377][ T42] usb 1-1: 0:2 : does not exist [ 1136.804302][T13932] veth1_vlan: entered promiscuous mode [ 1137.105672][ T42] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1137.147477][T13932] veth0_macvtap: entered promiscuous mode [ 1137.231713][T13932] veth1_macvtap: entered promiscuous mode [ 1137.431161][T13932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.527514][T13932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.645233][ T4009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.719783][ T4009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.859974][T12499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.351283][ T4209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.460356][ T42] usb 1-1: USB disconnect, device number 9 [ 1138.831476][T14065] loop0: detected capacity change from 0 to 128 [ 1139.336960][ T11] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1139.684187][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1139.698915][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1139.910239][ T11] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1139.919840][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.929823][ T11] usb 7-1: Product: syz [ 1139.934232][ T11] usb 7-1: Manufacturer: syz [ 1139.939271][ T11] usb 7-1: SerialNumber: syz [ 1140.039241][ T11] usb 7-1: config 0 descriptor?? [ 1140.078131][ T11] iguanair 7-1:0.0: probe with driver iguanair failed with error -12 [ 1140.193372][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.203363][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.336019][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 1140.453721][T12334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.462466][T12334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.660320][ T24] usb 7-1: USB disconnect, device number 29 [ 1140.987045][ T11] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1141.176987][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 1141.317663][ T11] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1141.330889][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.339599][ T11] usb 4-1: Product: syz [ 1141.343912][ T11] usb 4-1: Manufacturer: syz [ 1141.348843][ T11] usb 4-1: SerialNumber: syz [ 1141.404608][T14080] loop0: detected capacity change from 0 to 256 [ 1141.430043][ T11] usb 4-1: config 0 descriptor?? [ 1141.463772][ T11] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1141.585848][T14080] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1142.766672][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1142.920673][ T11] gspca_topro: reg_r err -71 [ 1142.925886][ T11] gspca_topro: Sensor soi763a [ 1142.988463][ T11] usb 4-1: USB disconnect, device number 23 [ 1143.018930][ T24] usb 6-1: config 0 has no interfaces? [ 1143.024737][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1143.034679][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.194554][ T24] usb 6-1: config 0 descriptor?? [ 1143.412677][T14086] loop6: detected capacity change from 0 to 4096 [ 1143.507956][ T11] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1143.652912][ T24] usb 6-1: USB disconnect, device number 10 [ 1143.727383][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 1143.761521][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.772509][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.901031][ T11] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1143.911050][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.919512][ T11] usb 1-1: Product: syz [ 1143.923810][ T11] usb 1-1: Manufacturer: syz [ 1143.928715][ T11] usb 1-1: SerialNumber: syz [ 1144.341436][ T11] usb 1-1: 0:2 : does not exist [ 1144.470215][ T11] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1144.612604][ T11] usb 1-1: USB disconnect, device number 10 [ 1145.307432][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1145.640043][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2971'. [ 1145.938586][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2971'. [ 1146.015243][ T8154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.023428][ T8154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.309048][ T4068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.317299][ T4068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.661730][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 1147.561950][T14120] loop2: detected capacity change from 0 to 128 [ 1147.659459][T14120] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1147.716988][T14120] hpfs: filesystem error: improperly stopped [ 1147.723344][T14120] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1147.731566][T14120] hpfs: You really don't want any checks? You are crazy... [ 1147.754269][T14117] loop6: detected capacity change from 0 to 1024 [ 1147.938076][T14120] hpfs: hpfs_map_sector(): read error [ 1147.943717][T14120] hpfs: code page support is disabled [ 1147.967312][T14117] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1148.078904][T14120] hpfs: hpfs_map_4sectors(): unaligned read [ 1148.173445][T14120] hpfs: hpfs_map_4sectors(): unaligned read [ 1148.179770][T14120] hpfs: filesystem error: unable to find root dir [ 1148.221795][T14117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.246716][T14120] hpfs: hpfs_map_4sectors(): unaligned read [ 1148.253273][T14120] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1148.304169][T14126] loop5: detected capacity change from 0 to 256 [ 1148.656566][T14126] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1148.787616][ T8614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.043305][T14128] tipc: Enabling of bearer rejected, failed to enable media [ 1149.089393][T14128] syzkaller0: entered promiscuous mode [ 1149.095276][T14128] syzkaller0: entered allmulticast mode [ 1149.397970][ T11] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1149.648679][ T11] usb 1-1: config 0 has no interfaces? [ 1149.654380][ T11] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1149.664124][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.760216][ T11] usb 1-1: config 0 descriptor?? [ 1149.989765][ T11] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1150.162755][ T795] usb 1-1: USB disconnect, device number 11 [ 1150.177644][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 1150.212167][ T11] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.222725][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1150.311994][ T11] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1150.321656][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.330088][ T11] usb 6-1: Product: syz [ 1150.338123][ T11] usb 6-1: Manufacturer: syz [ 1150.342947][ T11] usb 6-1: SerialNumber: syz [ 1150.374666][T14134] loop6: detected capacity change from 0 to 4096 [ 1150.613787][T14142] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1150.658258][ T11] usb 6-1: 0:2 : does not exist [ 1150.687507][ T11] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1150.828391][ T11] usb 6-1: USB disconnect, device number 11 [ 1151.802787][T12334] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.018196][T12334] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.092293][T14151] process 'syz.0.2988' launched './file1' with NULL argv: empty string added [ 1152.208248][T12334] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.331648][ T11] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1152.380827][T12334] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.477041][ T795] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1152.547428][ T11] usb 3-1: device descriptor read/64, error -71 [ 1152.717346][ T795] usb 7-1: Using ep0 maxpacket: 32 [ 1152.755926][ T795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.767447][ T795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.777743][ T795] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1152.787213][ T795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.822433][T12334] bridge_slave_1: left allmulticast mode [ 1152.828611][T12334] bridge_slave_1: left promiscuous mode [ 1152.835038][T12334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.857152][ T11] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1152.873573][ T795] usb 7-1: config 0 descriptor?? [ 1152.887273][T12334] bridge_slave_0: left allmulticast mode [ 1152.893275][T12334] bridge_slave_0: left promiscuous mode [ 1152.903045][T12334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.146823][ T11] usb 3-1: device descriptor read/64, error -71 [ 1153.385965][ T11] usb usb3-port1: attempt power cycle [ 1153.449409][T12334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.582604][T12334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.602189][T12334] bond0 (unregistering): Released all slaves [ 1153.747020][ T11] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1153.810409][ T11] usb 3-1: device descriptor read/8, error -71 [ 1154.068319][ T11] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1154.122109][ T11] usb 3-1: device descriptor read/8, error -71 [ 1154.137491][ T795] usbhid 7-1:0.0: can't add hid device: -71 [ 1154.144282][ T795] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1154.186590][ T795] usb 7-1: USB disconnect, device number 30 [ 1154.204801][T14152] lec:lec_atm_close: lec0: Shut down! [ 1154.237608][ T11] usb usb3-port1: unable to enumerate USB device [ 1154.460053][T12334] hsr_slave_0: left promiscuous mode [ 1154.477585][T12334] hsr_slave_1: left promiscuous mode [ 1154.485670][T12334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.493683][T12334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.558248][T14163] loop0: detected capacity change from 0 to 128 [ 1154.568954][T12334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.576943][T12334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.631326][T14163] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1154.650313][T12334] veth1_macvtap: left promiscuous mode [ 1154.656020][T12334] veth0_macvtap: left promiscuous mode [ 1154.662294][T12334] veth1_vlan: left promiscuous mode [ 1154.669684][T12334] veth0_vlan: left promiscuous mode [ 1154.916862][T14163] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.313250][T14169] loop3: detected capacity change from 0 to 256 [ 1155.467529][ T795] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1155.522922][T14169] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1155.753693][ T795] usb 6-1: Using ep0 maxpacket: 16 [ 1155.817962][ T795] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1155.830827][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1155.931883][ T795] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1155.941545][ T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.949879][ T795] usb 6-1: Product: syz [ 1155.954205][ T795] usb 6-1: Manufacturer: syz [ 1155.959060][ T795] usb 6-1: SerialNumber: syz [ 1155.988447][ T795] usb 6-1: config 0 descriptor?? [ 1156.002231][T12334] team0 (unregistering): Port device team_slave_1 removed [ 1156.082981][ T795] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1156.092752][ T795] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1156.106192][T12334] team0 (unregistering): Port device team_slave_0 removed [ 1156.758244][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1156.764963][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1157.190793][ T795] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1157.225405][ T795] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1157.250797][ T795] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1157.259583][ T795] em28xx 6-1:0.0: No AC97 audio processor [ 1157.318069][ T795] usb 6-1: USB disconnect, device number 12 [ 1157.325624][ T795] em28xx 6-1:0.0: Disconnecting em28xx [ 1157.365733][ T795] em28xx 6-1:0.0: Freeing device [ 1157.584704][T14172] tipc: Enabling of bearer rejected, failed to enable media [ 1157.621893][T14172] syzkaller0: entered promiscuous mode [ 1157.628290][T14172] syzkaller0: entered allmulticast mode [ 1157.877039][T13996] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1158.093807][T13996] usb 4-1: config 0 has no interfaces? [ 1158.099874][T13996] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1158.109643][T13996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.202261][T13996] usb 4-1: config 0 descriptor?? [ 1158.491351][ T24] usb 4-1: USB disconnect, device number 25 [ 1158.807071][T12360] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1159.106685][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1159.387757][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1159.450271][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.461844][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1159.807996][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1159.817524][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.825820][ T24] usb 3-1: Product: syz [ 1159.830844][ T24] usb 3-1: Manufacturer: syz [ 1159.835669][ T24] usb 3-1: SerialNumber: syz [ 1160.531382][T13996] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1160.703585][T13996] usb 7-1: device descriptor read/64, error -71 [ 1160.961842][T13996] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1161.156990][T13996] usb 7-1: device descriptor read/64, error -71 [ 1161.211906][ T24] usb 3-1: 0:2 : does not exist [ 1161.284362][T14200] loop3: detected capacity change from 0 to 256 [ 1161.297282][T13996] usb usb7-port1: attempt power cycle [ 1161.406836][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1161.523438][T14200] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1161.548294][ T24] usb 3-1: USB disconnect, device number 32 [ 1161.676911][T13996] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1161.771642][T13996] usb 7-1: device descriptor read/8, error -71 [ 1162.049173][T13996] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1162.128284][T13996] usb 7-1: device descriptor read/8, error -71 [ 1162.244987][T13996] usb usb7-port1: unable to enumerate USB device [ 1162.702382][T14206] tipc: Enabling of bearer rejected, failed to enable media [ 1162.772158][T14209] syzkaller0: entered promiscuous mode [ 1162.778264][T14209] syzkaller0: entered allmulticast mode [ 1164.116911][ T42] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1164.213820][ T4209] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.379986][ T42] usb 6-1: config 0 has no interfaces? [ 1164.385810][ T42] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1164.396201][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.433071][ T4209] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.471916][ T42] usb 6-1: config 0 descriptor?? [ 1164.574959][ T4209] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.681690][ T4209] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.882470][T13996] usb 6-1: USB disconnect, device number 13 [ 1165.106779][ T795] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1165.314221][ T4209] bridge_slave_1: left allmulticast mode [ 1165.320571][ T4209] bridge_slave_1: left promiscuous mode [ 1165.330343][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.416685][ T795] usb 1-1: Using ep0 maxpacket: 16 [ 1165.445337][ T4209] bridge_slave_0: left allmulticast mode [ 1165.452214][ T4209] bridge_slave_0: left promiscuous mode [ 1165.459028][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.481919][ T795] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.495108][ T795] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1165.561977][ T795] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1165.574437][ T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.584109][ T795] usb 1-1: Product: syz [ 1165.588592][ T795] usb 1-1: Manufacturer: syz [ 1165.595733][ T795] usb 1-1: SerialNumber: syz [ 1165.922043][ T795] usb 1-1: 0:2 : does not exist [ 1166.020367][ T795] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1166.241678][ T795] usb 1-1: USB disconnect, device number 12 [ 1166.603998][T14235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1166.966961][ T4209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.992555][ T4209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.011572][ T4209] bond0 (unregistering): Released all slaves [ 1167.045311][T14235] netlink: 'syz.3.3021': attribute type 1 has an invalid length. [ 1167.054112][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1167.225212][ T4209] tipc: Left network mode [ 1167.723338][ T4209] hsr_slave_0: left promiscuous mode [ 1167.750382][ T4209] hsr_slave_1: left promiscuous mode [ 1167.759277][ T4209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.767323][ T4209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.803775][ T4209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.811689][ T4209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.860108][ T4209] veth1_macvtap: left promiscuous mode [ 1167.866206][ T4209] veth0_macvtap: left promiscuous mode [ 1167.872281][ T4209] veth1_vlan: left promiscuous mode [ 1167.877940][ T4209] veth0_vlan: left promiscuous mode [ 1168.299849][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1168.329162][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3026'. [ 1168.395649][T14252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3026'. [ 1168.734721][ T4209] team0 (unregistering): Port device team_slave_1 removed [ 1168.817677][ T4209] team0 (unregistering): Port device team_slave_0 removed [ 1169.205718][ T24] usb 4-1: device descriptor read/64, error -71 [ 1169.876733][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1171.177249][ T24] usb 4-1: device descriptor read/64, error -71 [ 1171.289838][ T24] usb usb4-port1: attempt power cycle [ 1171.716919][ T42] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1171.913731][ T42] usb 6-1: config 0 has no interfaces? [ 1171.919947][ T42] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1171.929569][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.007579][ T42] usb 6-1: config 0 descriptor?? [ 1172.293077][ T24] usb 6-1: USB disconnect, device number 14 [ 1172.696835][ T795] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1172.765486][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1172.868940][ T795] usb 3-1: Using ep0 maxpacket: 16 [ 1172.902560][ T795] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.914166][ T795] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1172.985595][ T795] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1172.995237][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.003727][ T795] usb 3-1: Product: syz [ 1173.008431][ T795] usb 3-1: Manufacturer: syz [ 1173.013251][ T795] usb 3-1: SerialNumber: syz [ 1174.095457][ T795] usb 3-1: 0:2 : does not exist [ 1174.151898][ T795] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1174.278886][ T795] usb 3-1: USB disconnect, device number 33 [ 1174.844535][T14288] loop2: detected capacity change from 0 to 8 [ 1174.945364][T14288] cramfs: Error -3 while decompressing! [ 1174.951501][T14288] cramfs: ffffffff950ac068(18)->ffff88808b3ee000(4096) [ 1174.959096][T14288] cramfs: Error -3 while decompressing! [ 1174.964838][T14288] cramfs: ffffffff950ac068(18)->ffff88808b3ee000(4096) [ 1174.988592][ T30] audit: type=1800 audit(1767629361.013:122): pid=14288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3039" name="file1" dev="loop2" ino=324 res=0 errno=0 [ 1175.458060][ T795] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1175.680766][ T795] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.691458][ T795] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1175.732229][ T795] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1175.742213][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1175.750792][ T795] usb 4-1: SerialNumber: syz [ 1176.035447][ T795] usb 4-1: invalid UAC_HEADER (v1) [ 1176.150861][ T795] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1176.189414][ T795] usb 4-1: USB disconnect, device number 29 [ 1178.234492][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3046'. [ 1181.533410][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1181.542530][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1181.551632][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1181.581014][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1181.593142][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1182.648954][T14318] chnl_net:caif_netlink_parms(): no params data found [ 1183.287102][ T795] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1183.527857][ T795] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1183.539672][ T795] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1183.551091][ T795] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1183.560553][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.652294][ T51] Bluetooth: hci5: command tx timeout [ 1183.673018][T14334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1183.711689][T14334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1183.829529][ T795] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1184.103666][T14318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.111397][T14318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.119426][T14318] bridge_slave_0: entered allmulticast mode [ 1184.132316][T14318] bridge_slave_0: entered promiscuous mode [ 1184.162899][T14318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.170086][ T24] usb 3-1: USB disconnect, device number 34 [ 1184.178011][T14318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.185700][T14318] bridge_slave_1: entered allmulticast mode [ 1184.194874][T14318] bridge_slave_1: entered promiscuous mode [ 1184.337479][T14318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.400777][T14318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.622585][T14318] team0: Port device team_slave_0 added [ 1184.671623][T14342] loop0: detected capacity change from 0 to 128 [ 1184.701806][T14318] team0: Port device team_slave_1 added [ 1184.748925][T14342] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1184.822609][T14342] hpfs: filesystem error: improperly stopped [ 1184.830193][T14342] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1184.830290][T14342] hpfs: You really don't want any checks? You are crazy... [ 1184.866734][T14342] hpfs: hpfs_map_sector(): read error [ 1184.866785][T14342] hpfs: code page support is disabled [ 1184.870241][T14342] hpfs: hpfs_map_4sectors(): unaligned read [ 1184.870449][T14342] hpfs: hpfs_map_4sectors(): unaligned read [ 1184.870493][T14342] hpfs: filesystem error: unable to find root dir [ 1185.001138][T14342] hpfs: hpfs_map_4sectors(): unaligned read [ 1185.001611][T14342] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1185.042400][T14318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.042462][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.042575][T14318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.081760][T14318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.189192][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.215576][T14318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.736770][ T51] Bluetooth: hci5: command tx timeout [ 1185.887842][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'. [ 1186.202328][T14318] hsr_slave_0: entered promiscuous mode [ 1186.213104][T14318] hsr_slave_1: entered promiscuous mode [ 1186.222517][T14318] debugfs: 'hsr0' already exists in 'hsr' [ 1186.228614][T14318] Cannot create hsr debugfs directory [ 1187.877325][ T51] Bluetooth: hci5: command tx timeout [ 1188.115640][T14318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1188.210544][T14318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1188.274525][ T795] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1188.296071][T14318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1188.383423][T14318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1188.488892][ T795] usb 3-1: Using ep0 maxpacket: 32 [ 1188.534355][ T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.545837][ T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.556147][ T795] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1188.565528][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.745430][ T795] usb 3-1: config 0 descriptor?? [ 1188.979920][ T795] usbhid 3-1:0.0: can't add hid device: -71 [ 1188.986827][ T795] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1189.079199][ T795] usb 3-1: USB disconnect, device number 35 [ 1189.491218][T14318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.698186][T14318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.762870][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.770515][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.893707][ T51] Bluetooth: hci5: command tx timeout [ 1189.967555][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.975140][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.362193][T14368] loop2: detected capacity change from 0 to 128 [ 1190.414360][T14368] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1190.468261][T14368] hpfs: filesystem error: improperly stopped [ 1190.474547][T14368] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1190.483876][T14368] hpfs: You really don't want any checks? You are crazy... [ 1190.574726][T14368] hpfs: hpfs_map_sector(): read error [ 1190.583233][T14368] hpfs: code page support is disabled [ 1190.652323][T14368] hpfs: hpfs_map_4sectors(): unaligned read [ 1190.681214][T14368] hpfs: hpfs_map_4sectors(): unaligned read [ 1190.692288][T14368] hpfs: filesystem error: unable to find root dir [ 1190.820957][T14370] hpfs: hpfs_map_4sectors(): unaligned read [ 1191.764907][ T11] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1191.794125][T14318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.988298][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 1192.139840][ T11] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1192.151686][ T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1192.163236][ T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1192.174944][ T11] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1192.390738][ T11] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1192.400817][ T11] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1192.409609][ T11] usb 4-1: Product: syz [ 1192.413997][ T11] usb 4-1: Manufacturer: syz [ 1192.418852][ T11] usb 4-1: SerialNumber: syz [ 1192.496128][T14374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1192.526149][ T11] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input25 [ 1192.641134][T14318] veth0_vlan: entered promiscuous mode [ 1192.753508][T14318] veth1_vlan: entered promiscuous mode [ 1192.775440][ T795] usb 4-1: USB disconnect, device number 30 [ 1192.802519][ T795] appletouch 4-1:1.0: input: appletouch disconnected [ 1192.887300][ T11] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1193.071852][T14318] veth0_macvtap: entered promiscuous mode [ 1193.130808][ T11] usb 6-1: config 0 has an invalid interface number: 207 but max is 0 [ 1193.140839][ T11] usb 6-1: config 0 has no interface number 0 [ 1193.153452][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3069'. [ 1193.170521][T14318] veth1_macvtap: entered promiscuous mode [ 1193.187624][ T11] usb 6-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1193.197454][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.205677][ T11] usb 6-1: Product: syz [ 1193.210345][ T11] usb 6-1: Manufacturer: syz [ 1193.215074][ T11] usb 6-1: SerialNumber: syz [ 1193.277539][ T11] usb 6-1: config 0 descriptor?? [ 1193.316203][ T11] qmi_wwan 6-1:0.207: bogus CDC Union: master=0, slave=1 [ 1193.483079][T14318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.537240][ T11] qmi_wwan 6-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1193.690333][T14318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.785033][ T42] usb 6-1: USB disconnect, device number 15 [ 1193.873212][ T148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.918860][ T148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.938876][ T148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.964408][ T148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.514493][T14399] loop2: detected capacity change from 0 to 128 [ 1195.564075][T14399] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1195.605230][T14399] hpfs: filesystem error: improperly stopped [ 1195.614546][T14399] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1195.622634][T14399] hpfs: You really don't want any checks? You are crazy... [ 1195.674092][T14399] hpfs: hpfs_map_sector(): read error [ 1195.681365][T14399] hpfs: code page support is disabled [ 1195.731310][T14399] hpfs: hpfs_map_4sectors(): unaligned read [ 1195.745125][T14399] hpfs: hpfs_map_4sectors(): unaligned read [ 1195.751942][T14399] hpfs: filesystem error: unable to find root dir [ 1195.856877][T14399] hpfs: hpfs_map_4sectors(): unaligned read [ 1195.863225][T14399] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1196.972846][T14416] loop5: detected capacity change from 0 to 1024 [ 1196.998920][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 1197.024300][T14416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1197.153157][T14416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1197.818315][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3085'. [ 1197.925330][T13852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.252419][T14433] tmpfs: Bad value for 'mpol' [ 1198.651743][ T795] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1198.737838][T14438] loop3: detected capacity change from 0 to 128 [ 1198.762639][T14438] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1198.806858][T14438] hpfs: filesystem error: improperly stopped [ 1198.813176][T14438] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1198.821460][T14438] hpfs: You really don't want any checks? You are crazy... [ 1198.864577][ T795] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1198.876732][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.919366][ T795] usb 3-1: config 0 descriptor?? [ 1198.936977][ T795] cp210x 3-1:0.0: cp210x converter detected [ 1198.982170][T14438] hpfs: hpfs_map_sector(): read error [ 1198.987951][T14438] hpfs: code page support is disabled [ 1199.041383][T14438] hpfs: hpfs_map_4sectors(): unaligned read [ 1199.062454][T14438] hpfs: hpfs_map_4sectors(): unaligned read [ 1199.068919][T14438] hpfs: filesystem error: unable to find root dir [ 1199.119068][T14443] loop5: detected capacity change from 0 to 8 [ 1199.181618][ T795] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1199.190431][ T795] cp210x 3-1:0.0: querying part number failed [ 1199.212986][ T795] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1199.249562][T14438] hpfs: hpfs_map_4sectors(): unaligned read [ 1199.256088][T14438] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1200.994342][ T4068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.002661][ T4068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.203063][ T8154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.211587][ T8154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.370122][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3094'. [ 1201.917937][ T795] usb 3-1: USB disconnect, device number 36 [ 1201.974327][ T795] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1201.983193][ T795] cp210x 3-1:0.0: device disconnected [ 1202.549269][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'. [ 1202.619797][T14464] loop3: detected capacity change from 0 to 1024 [ 1202.712873][T14464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1202.931594][T14464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1203.552642][T12770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.924513][T14476] loop0: detected capacity change from 0 to 128 [ 1204.023640][T14476] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1204.054743][T14476] hpfs: filesystem error: improperly stopped [ 1204.062556][T14476] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1204.071144][T14476] hpfs: You really don't want any checks? You are crazy... [ 1204.147712][T14476] hpfs: hpfs_map_sector(): read error [ 1204.153337][T14476] hpfs: code page support is disabled [ 1204.253349][T14476] hpfs: hpfs_map_4sectors(): unaligned read [ 1204.272528][T14476] hpfs: hpfs_map_4sectors(): unaligned read [ 1204.279028][T14476] hpfs: filesystem error: unable to find root dir [ 1204.399281][T14476] hpfs: hpfs_map_4sectors(): unaligned read [ 1204.409917][T14476] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1205.185607][T14484] loop2: detected capacity change from 0 to 512 [ 1205.451089][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3106'. [ 1205.787030][ T42] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1206.080391][ T42] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1206.089878][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.152276][ T42] usb 1-1: config 0 descriptor?? [ 1206.187072][ T42] cp210x 1-1:0.0: cp210x converter detected [ 1206.338885][ T8154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.351339][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'. [ 1206.412073][ T42] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1206.420092][ T42] cp210x 1-1:0.0: querying part number failed [ 1206.435339][ T42] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1206.570229][ T8154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.686492][ T8154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.788336][ T8154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.123369][T14503] loop1: detected capacity change from 0 to 1024 [ 1207.135269][T14503] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1207.146906][ T8154] bridge_slave_1: left allmulticast mode [ 1207.152808][ T8154] bridge_slave_1: left promiscuous mode [ 1207.159908][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.182004][ T8154] bridge_slave_0: left allmulticast mode [ 1207.188301][ T8154] bridge_slave_0: left promiscuous mode [ 1207.195120][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.305693][T14503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1208.148415][ T8154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.183919][T14318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.220643][ T8154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.264710][ T8154] bond0 (unregistering): Released all slaves [ 1208.547178][ T8154] tipc: Left network mode [ 1208.582059][ T8154] IPVS: stopping backup sync thread 9216 ... [ 1208.665951][T14493] usb 1-1: USB disconnect, device number 13 [ 1208.753396][T14493] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1208.762973][T14493] cp210x 1-1:0.0: device disconnected [ 1208.900408][T14520] loop1: detected capacity change from 0 to 128 [ 1208.977175][T14520] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1209.017022][T14520] hpfs: filesystem error: improperly stopped [ 1209.023376][T14520] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1209.031874][T14520] hpfs: You really don't want any checks? You are crazy... [ 1209.100175][T14520] hpfs: hpfs_map_sector(): read error [ 1209.105818][T14520] hpfs: code page support is disabled [ 1209.153557][T14520] hpfs: hpfs_map_4sectors(): unaligned read [ 1209.177761][T14520] hpfs: hpfs_map_4sectors(): unaligned read [ 1209.184119][T14520] hpfs: filesystem error: unable to find root dir [ 1209.302318][T14520] hpfs: hpfs_map_4sectors(): unaligned read [ 1209.309343][T14520] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1209.373493][ T8154] hsr_slave_0: left promiscuous mode [ 1209.417657][ T8154] hsr_slave_1: left promiscuous mode [ 1209.427362][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.435094][ T8154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.499122][ T8154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.507105][ T8154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.619761][ T8154] veth1_macvtap: left promiscuous mode [ 1209.626998][ T8154] veth0_macvtap: left promiscuous mode [ 1209.632969][ T8154] veth1_vlan: left promiscuous mode [ 1209.638722][ T8154] veth0_vlan: left promiscuous mode [ 1209.701278][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 1210.553020][ T8154] team0 (unregistering): Port device team_slave_1 removed [ 1210.586180][ T8154] team0 (unregistering): Port device team_slave_0 removed [ 1210.974080][T14532] loop1: detected capacity change from 0 to 2048 [ 1211.168489][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'. [ 1211.348239][T14532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1211.497705][ T8154] IPVS: stop unused estimator thread 0... [ 1211.523426][T14530] 9p: Bad value for 'rfdno' [ 1211.816974][T14493] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1212.047657][T14540] loop2: detected capacity change from 0 to 1024 [ 1212.057935][T14540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1212.117052][T14493] usb 2-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 1212.126502][T14493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.134866][T14493] usb 2-1: Product: syz [ 1212.139498][T14493] usb 2-1: Manufacturer: syz [ 1212.144319][T14493] usb 2-1: SerialNumber: syz [ 1212.219049][T14540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.598707][T14493] pwc: Visionite VCS-UC300 USB webcam detected. [ 1212.607381][T13932] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.641038][T14493] pwc: Failed to set LED on/off time (-71) [ 1212.667683][T14493] pwc: send_video_command error -71 [ 1212.673250][T14493] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1212.681677][T14493] Philips webcam 2-1:5.0: probe with driver Philips webcam failed with error -71 [ 1212.777086][T14493] usb 2-1: USB disconnect, device number 37 [ 1213.096916][ T795] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1213.274871][ T795] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1213.285287][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.355757][ T795] usb 1-1: config 0 descriptor?? [ 1213.380222][ T795] cp210x 1-1:0.0: cp210x converter detected [ 1213.507336][T14556] loop2: detected capacity change from 0 to 128 [ 1213.547946][T14556] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1213.601919][T14556] hpfs: filesystem error: improperly stopped [ 1213.609097][T14556] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1213.619747][T14556] hpfs: You really don't want any checks? You are crazy... [ 1213.624337][ T795] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1213.635493][ T795] cp210x 1-1:0.0: querying part number failed [ 1213.648511][T14556] hpfs: hpfs_map_sector(): read error [ 1213.654137][T14556] hpfs: code page support is disabled [ 1213.668752][T14556] hpfs: hpfs_map_4sectors(): unaligned read [ 1213.675192][T14556] hpfs: hpfs_map_4sectors(): unaligned read [ 1213.681950][T14556] hpfs: filesystem error: unable to find root dir [ 1213.692295][ T795] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1213.730383][T14556] hpfs: hpfs_map_4sectors(): unaligned read [ 1214.010306][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3134'. [ 1214.385679][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3135'. [ 1215.619897][T14574] loop1: detected capacity change from 0 to 1024 [ 1215.637786][T14574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1215.790075][T14574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.950611][T14318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.020532][ T795] usb 1-1: USB disconnect, device number 14 [ 1216.040651][ T795] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1216.049940][ T795] cp210x 1-1:0.0: device disconnected [ 1216.687157][T14588] loop3: detected capacity change from 0 to 128 [ 1216.759368][T14588] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1216.800321][T14591] loop2: detected capacity change from 0 to 128 [ 1216.831923][T14591] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1216.844886][T14588] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1216.900328][T14591] hpfs: filesystem error: improperly stopped [ 1216.906875][T14591] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1216.915022][T14591] hpfs: You really don't want any checks? You are crazy... [ 1216.955637][T14591] hpfs: hpfs_map_sector(): read error [ 1216.961552][T14591] hpfs: code page support is disabled [ 1217.038505][T14591] hpfs: hpfs_map_4sectors(): unaligned read [ 1217.044904][T14591] hpfs: hpfs_map_4sectors(): unaligned read [ 1217.051434][T14591] hpfs: filesystem error: unable to find root dir [ 1217.104021][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3147'. [ 1217.132371][T14591] hpfs: hpfs_map_4sectors(): unaligned read [ 1217.219780][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1217.281798][T12770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1217.648664][ T4068] wlan1: Trigger new scan to find an IBSS to join [ 1218.088188][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1218.094951][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1218.373296][T14606] loop3: detected capacity change from 0 to 1024 [ 1218.403917][T14606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1218.471280][T14606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.557058][ T795] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1218.777609][ T795] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1218.787504][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.849720][ T795] usb 3-1: config 0 descriptor?? [ 1218.900764][ T795] cp210x 3-1:0.0: cp210x converter detected [ 1218.901896][T12770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.107275][ T795] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1219.115057][ T795] cp210x 3-1:0.0: querying part number failed [ 1219.167475][ T795] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1219.602714][T14624] loop0: detected capacity change from 0 to 128 [ 1219.619237][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3160'. [ 1219.642102][T14624] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1219.677261][T14624] hpfs: filesystem error: improperly stopped [ 1219.683580][T14624] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1219.691980][T14624] hpfs: You really don't want any checks? You are crazy... [ 1219.724894][T14624] hpfs: hpfs_map_sector(): read error [ 1219.730822][T14624] hpfs: code page support is disabled [ 1219.743409][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3162'. [ 1219.756840][T14624] hpfs: hpfs_map_4sectors(): unaligned read [ 1219.782004][T14624] hpfs: hpfs_map_4sectors(): unaligned read [ 1219.788593][T14624] hpfs: filesystem error: unable to find root dir [ 1219.902364][T14624] hpfs: hpfs_map_4sectors(): unaligned read [ 1220.692460][ T4068] wlan1: Trigger new scan to find an IBSS to join [ 1221.438072][ T795] usb 3-1: USB disconnect, device number 37 [ 1221.500228][ T795] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1221.510682][ T795] cp210x 3-1:0.0: device disconnected [ 1221.527318][T14645] loop3: detected capacity change from 0 to 1024 [ 1221.583172][T14645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1221.686962][T14645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1222.123513][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'. [ 1222.161308][T12770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.433574][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3174'. [ 1223.647895][ T86] wlan1: Trigger new scan to find an IBSS to join [ 1223.729138][T14674] loop3: detected capacity change from 0 to 4096 [ 1223.862425][T14681] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1224.354177][T14684] loop1: detected capacity change from 0 to 1024 [ 1224.410026][T14684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1224.485973][T14684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.667857][ T4036] wlan1: Creating new IBSS network, BSSID 26:23:75:16:c3:77 [ 1224.734747][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3187'. [ 1224.993476][T14318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.110452][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3189'. [ 1225.756988][T14493] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1225.945761][T14493] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.956580][T14493] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1225.965751][T14493] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1226.088468][T14493] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1226.098499][T14493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1226.107033][T14493] usb 6-1: SerialNumber: syz [ 1226.396671][T14493] usb 6-1: 0:2 : does not exist [ 1226.433842][T14493] usb 6-1: USB disconnect, device number 16 [ 1227.507367][T14713] loop2: detected capacity change from 0 to 4096 [ 1227.638930][T14721] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1227.654192][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 1228.013694][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1229.147810][ T795] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1229.340373][T14750] loop1: detected capacity change from 0 to 128 [ 1229.356811][ T795] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.367677][ T795] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1229.382530][T14750] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1229.439464][ T795] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1229.449425][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1229.454158][T14750] hpfs: filesystem error: improperly stopped [ 1229.457884][ T795] usb 4-1: SerialNumber: syz [ 1229.469501][T14750] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1229.477660][T14750] hpfs: You really don't want any checks? You are crazy... [ 1229.537313][T14750] hpfs: hpfs_map_sector(): read error [ 1229.543042][T14750] hpfs: code page support is disabled [ 1229.572961][T14750] hpfs: hpfs_map_4sectors(): unaligned read [ 1229.587728][T14750] hpfs: hpfs_map_4sectors(): unaligned read [ 1229.597474][T14750] hpfs: filesystem error: unable to find root dir [ 1229.655727][T14750] hpfs: hpfs_map_4sectors(): unaligned read [ 1229.743021][ T795] usb 4-1: 0:2 : does not exist [ 1229.748568][ T795] usb 4-1: unit 5 not found! [ 1229.788784][ T795] usb 4-1: USB disconnect, device number 31 [ 1229.876735][T14493] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1230.071921][T14493] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1230.081549][T14493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.128833][T14493] usb 6-1: config 0 descriptor?? [ 1230.170796][T14493] cp210x 6-1:0.0: cp210x converter detected [ 1230.185697][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3219'. [ 1230.342115][T14755] loop0: detected capacity change from 0 to 4096 [ 1230.367699][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1230.409907][T14493] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1230.422658][T14493] cp210x 6-1:0.0: querying part number failed [ 1230.518749][T14493] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1230.552624][T14761] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1230.613706][ T5444] ===================================================== [ 1230.624232][ T5444] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 1230.632603][ T5444] _copy_to_iter+0xef3/0x33f0 [ 1230.637664][ T5444] __skb_datagram_iter+0x196/0x12c0 [ 1230.643217][ T5444] skb_copy_datagram_iter+0x5b/0x1e0 [ 1230.650471][ T5444] netlink_recvmsg+0x4bb/0xfe0 [ 1230.655628][ T5444] sock_recvmsg+0x2df/0x390 [ 1230.660709][ T5444] ____sys_recvmsg+0x193/0x610 [ 1230.665792][ T5444] ___sys_recvmsg+0x20b/0x850 [ 1230.671509][ T5444] __x64_sys_recvmsg+0x20e/0x3d0 [ 1230.677400][ T5444] x64_sys_call+0x38b7/0x3e70 [ 1230.682357][ T5444] do_syscall_64+0xd3/0xf80 [ 1230.687347][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.693486][ T5444] [ 1230.695932][ T5444] Uninit was stored to memory at: [ 1230.701692][ T5444] pskb_expand_head+0x310/0x15d0 [ 1230.707113][ T5444] netlink_trim+0x3a3/0x450 [ 1230.711861][ T5444] netlink_broadcast_filtered+0x80/0x28f0 [ 1230.721714][ T5444] nlmsg_notify+0x15b/0x2f0 [ 1230.727537][ T5444] rtnl_notify+0xba/0x100 [ 1230.732194][ T5444] wireless_nlevent_process+0xfe/0x290 [ 1230.738196][ T5444] process_scheduled_works+0xb91/0x1d80 [ 1230.744178][ T5444] worker_thread+0xedf/0x1590 [ 1230.749246][ T5444] kthread+0xd5c/0xf00 [ 1230.753576][ T5444] ret_from_fork+0x208/0x710 [ 1230.758598][ T5444] ret_from_fork_asm+0x1a/0x30 [ 1230.763621][ T5444] [ 1230.766046][ T5444] Uninit was stored to memory at: [ 1230.771693][ T5444] wireless_send_event+0x652/0x1540 [ 1230.777310][ T5444] ioctl_standard_iw_point+0x12b0/0x13f0 [ 1230.783228][ T5444] compat_standard_call+0x188/0x4c0 [ 1230.788865][ T5444] wext_ioctl_dispatch+0x192/0x7a0 [ 1230.794227][ T5444] compat_wext_handle_ioctl+0x1a1/0x300 [ 1230.800208][ T5444] compat_sock_ioctl+0x20c/0xff0 [ 1230.805416][ T5444] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1230.811358][ T5444] ia32_sys_call+0x25d9/0x4340 [ 1230.816532][ T5444] __do_fast_syscall_32+0x154/0x320 [ 1230.824563][ T5444] do_fast_syscall_32+0x38/0x80 [ 1230.830679][ T5444] do_SYSENTER_32+0x1f/0x30 [ 1230.835452][ T5444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1230.842204][ T5444] [ 1230.844728][ T5444] Local variable iwp created at: [ 1230.849966][ T5444] compat_standard_call+0x4a/0x4c0 [ 1230.855330][ T5444] wext_ioctl_dispatch+0x192/0x7a0 [ 1230.860878][ T5444] [ 1230.863364][ T5444] Bytes 60-63 of 64 are uninitialized [ 1230.869124][ T5444] Memory access of size 64 starts at ffff88801fc8ac00 [ 1230.876044][ T5444] Data copied to user address 00007ffef0917a20 [ 1230.882569][ T5444] [ 1230.885168][ T5444] CPU: 1 UID: 101 PID: 5444 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(none) [ 1230.897031][ T5444] Tainted: [L]=SOFTLOCKUP [ 1230.901497][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1230.912045][ T5444] ===================================================== [ 1230.919269][ T5444] Disabling lock debugging due to kernel taint [ 1230.928113][ T5444] Kernel panic - not syncing: kmsan.panic set ... [ 1230.934732][ T5444] CPU: 1 UID: 101 PID: 5444 Comm: dhcpcd Tainted: G B L syzkaller #0 PREEMPT(none) [ 1230.945760][ T5444] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1230.951442][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1230.961769][ T5444] Call Trace: [ 1230.965184][ T5444] [ 1230.968224][ T5444] __dump_stack+0x26/0x30 [ 1230.972803][ T5444] dump_stack_lvl+0x50/0x1c0 [ 1230.977622][ T5444] ? dump_stack+0x12/0x25 [ 1230.982269][ T5444] dump_stack+0x1e/0x25 [ 1230.986747][ T5444] vpanic+0x435/0xd30 [ 1230.990988][ T5444] panic+0x15d/0x160 [ 1230.995149][ T5444] kmsan_report+0x31c/0x320 [ 1230.999880][ T5444] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1231.006163][ T5444] ? kmsan_copy_to_user+0xf1/0x190 [ 1231.011513][ T5444] ? _copy_to_iter+0xef3/0x33f0 [ 1231.016543][ T5444] ? __skb_datagram_iter+0x196/0x12c0 [ 1231.022159][ T5444] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 1231.027862][ T5444] ? netlink_recvmsg+0x4bb/0xfe0 [ 1231.033064][ T5444] ? sock_recvmsg+0x2df/0x390 [ 1231.037912][ T5444] ? ____sys_recvmsg+0x193/0x610 [ 1231.043091][ T5444] ? ___sys_recvmsg+0x20b/0x850 [ 1231.048166][ T5444] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 1231.053507][ T5444] ? x64_sys_call+0x38b7/0x3e70 [ 1231.058582][ T5444] ? do_syscall_64+0xd3/0xf80 [ 1231.063484][ T5444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.069756][ T5444] ? finish_task_switch+0x1fe/0x8c0 [ 1231.075193][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 1231.080558][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1231.086629][ T5444] ? rb_erase+0x22d9/0x2750 [ 1231.091421][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 1231.096764][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 1231.102111][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 1231.107464][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1231.113522][ T5444] kmsan_internal_check_memory+0x1e1/0x230 [ 1231.119589][ T5444] kmsan_copy_to_user+0xf1/0x190 [ 1231.124759][ T5444] _copy_to_iter+0xef3/0x33f0 [ 1231.129647][ T5444] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1231.136241][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 1231.141621][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1231.147691][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 1231.153025][ T5444] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1231.159621][ T5444] __skb_datagram_iter+0x196/0x12c0 [ 1231.165055][ T5444] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1231.170961][ T5444] skb_copy_datagram_iter+0x5b/0x1e0 [ 1231.176471][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1231.182542][ T5444] netlink_recvmsg+0x4bb/0xfe0 [ 1231.187560][ T5444] ? aa_sock_msg_perm+0x284/0x2e0 [ 1231.192798][ T5444] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1231.198413][ T5444] sock_recvmsg+0x2df/0x390 [ 1231.203161][ T5444] ____sys_recvmsg+0x193/0x610 [ 1231.208160][ T5444] ? setup_fault_attr+0x290/0x300 [ 1231.213431][ T5444] ___sys_recvmsg+0x20b/0x850 [ 1231.218379][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1231.224436][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 1231.229793][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1231.235858][ T5444] __x64_sys_recvmsg+0x20e/0x3d0 [ 1231.241068][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 1231.246454][ T5444] x64_sys_call+0x38b7/0x3e70 [ 1231.251375][ T5444] do_syscall_64+0xd3/0xf80 [ 1231.256257][ T5444] ? clear_bhb_loop+0x40/0x90 [ 1231.261166][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.267295][ T5444] RIP: 0033:0x7f4584ba7407 [ 1231.271871][ T5444] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1231.291673][ T5444] RSP: 002b:00007ffef0917910 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 1231.300283][ T5444] RAX: ffffffffffffffda RBX: 00007f4584b1d740 RCX: 00007f4584ba7407 [ 1231.308510][ T5444] RDX: 0000000000000040 RSI: 00007ffef0917990 RDI: 0000000000000009 [ 1231.316638][ T5444] RBP: 000055fefe5d3aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.324794][ T5444] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 1231.332906][ T5444] R13: 00007ffef091baf0 R14: 0000000000000000 R15: 00007ffef091bae0 [ 1231.341090][ T5444] [ 1231.344876][ T5444] Kernel Offset: disabled [ 1231.349296][ T5444] Rebooting in 86400 seconds..