last executing test programs: 2m26.478208435s ago: executing program 2 (id=1719): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0xc1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x4, 0xf}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) 2m22.147046474s ago: executing program 2 (id=1734): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) socket(0x8000000010, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_init(0xf00, 0x1) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) 2m21.915838027s ago: executing program 2 (id=1736): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x2, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) close_range(r0, 0xffffffffffffffff, 0x0) 2m20.79860636s ago: executing program 2 (id=1741): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0], 0x1, 0xadc, &(0x7f0000001900)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) 2m19.132890889s ago: executing program 2 (id=1746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0) 2m12.142032107s ago: executing program 2 (id=1755): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) socket(0x8000000010, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_init(0xf00, 0x1) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) 2m11.685789714s ago: executing program 32 (id=1755): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) socket(0x8000000010, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_init(0xf00, 0x1) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) 30.12311539s ago: executing program 0 (id=2118): syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000000)={0x6, 0x1, 0xd, 0x9, 0x0, 0x5, 0x2, 0x4}, &(0x7f0000000040)={0x8, 0x0, 0x3, 0x7fffffff, 0x7fffffff, 0x9, 0xfffffffffffffff7, 0x8001}, 0x0, 0x0, 0x0) 29.878206025s ago: executing program 0 (id=2120): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x82) 29.560616947s ago: executing program 0 (id=2122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4) 25.039869145s ago: executing program 0 (id=2134): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) 24.404920539s ago: executing program 0 (id=2139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 21.184055965s ago: executing program 0 (id=2142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4) 20.853389809s ago: executing program 33 (id=2142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4) 6.316928161s ago: executing program 1 (id=2199): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x102) accept4(r0, 0x0, 0x0, 0x0) 6.077737425s ago: executing program 1 (id=2201): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b4b, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000000)={r9, 0x2, 0x100, 0x5, 0x2, 0xfff, 0x68, 0x8, {0x0, @in6={{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x231}}, 0xae9, 0x3, 0x9, 0xfffffffe, 0x1}}, &(0x7f00000000c0)=0xb0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r11, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r10, 0x407, 0x176) vmsplice(r11, 0x0, 0x0, 0x0) write$P9_RSYMLINK(r11, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x0, 0x3}}, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x6a, 0xc8, 0x9f, 0x40, 0xc45, 0x624e, 0xaa6c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x0, 0x89, 0x35, 0xbf}}]}}]}}, 0x0) 5.455945298s ago: executing program 4 (id=2206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000002eb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) r9 = fsmount(r3, 0x1, 0x0) fchdir(r9) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r8}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x20040, 0x40, 0xe}, 0x18) socket$kcm(0x10, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000400)=0x6d) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002c000100000000000000000008000200", @ANYRES32=r12, @ANYBLOB="0b00001000000000"], 0x2c}], 0x1}, 0xcc000) 4.490266006s ago: executing program 4 (id=2208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff00000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_complete\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x1, 0x1}, &(0x7f0000000300)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x8c, 0x0, 0x4) io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0) 3.174943429s ago: executing program 4 (id=2210): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x5296, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe, 0x1a4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.910074316s ago: executing program 3 (id=2211): r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1) 2.741216743s ago: executing program 4 (id=2212): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="7f", 0x1}], 0x1}}], 0x1, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 2.719429615s ago: executing program 3 (id=2213): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x7ffffffe, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x5, 0x3}, 0x50) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x21, 0xc, 0x100, &(0x7f00000004c0)="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"}) r3 = getpid() syz_emit_ethernet(0x6e, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x1, 0xfffff500, 0x3, r3}) 2.619646505s ago: executing program 1 (id=2214): mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) 2.430166464s ago: executing program 3 (id=2215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000045c0)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x1000, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0x3, 0x1}}}, 0x24}}, 0x10) 2.429809754s ago: executing program 4 (id=2216): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x18}}, 0x880) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x82, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_open_dev$admmidi(0x0, 0x8, 0x30000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 2.429689444s ago: executing program 1 (id=2217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff00000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_complete\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x1, 0x1}, &(0x7f0000000300)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x8c, 0x0, 0x4) io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0) 2.213804156s ago: executing program 1 (id=2218): syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file1'}, 0xb) read$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x264e, 0x38414761, 0x1, @stepwise={0x4671f307, 0x1, 0x3, 0x2, 0xc, 0x1}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.060967002s ago: executing program 3 (id=2219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000240)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x317, &(0x7f0000000980)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1.306859998s ago: executing program 4 (id=2220): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) unshare(0x20040600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x1, 0xa7c, &(0x7f0000001a40)="$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") syz_clone3(&(0x7f00000004c0)={0x201080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000080)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x49b, &(0x7f0000000880)="$eJzs3M1vVFUbAPDn3nYGePlo3/fFDxC1SkwajS0tqCzcaDQxBqOJLnBZ24E0DNTQagCJFGNcmRgSXRuXRv8Cd8bEqCsTt65cGRIibABXNffOvWUY+iHMtAOd3y+Zzjn3nt57njn348w5tw2gZw1lP5KIbRHxe0QMNLI3FxhqvF27cnby+pWzk0ksLLz5V5KXu3rl7GRZtPy9rUVmOI1IP06Kndxs9vSZYxP1eu1kkR+dO/7u6OzpM0+/f3ziaO1o7cT4wYMH9o899+z4Mx2JM4vr6u4PZ/bseuXtC69NHr7wzs/fZvXdVqxvjqNThrLALy/kWtc90emdddn2pnTS38WKcFv6IiJrrkp+/g9EX9xovIF4+aOuVg5YU9m9adPyq+cXgA0sidVK9DVdK4CNo7zRZ99/y9c6dDvuGpdeaHwByuK+Vrwaa/ojLcpUWr7fdtJQRBye//vL7BVrNA4BANDs08kvDlUj4oPr37ya9T0GFtekcX/+/kf+c0cxhzIYEf+NiP9FxP8jYmdE3BeRl30gIh5ssz639n/Si21uckVZ/+/5Ym5rsf+XD4iVvb8Y7Cty2/P4K8mR6XptX/GZDEdlU5YfW2Ef37/022fLrWvu/2WvbP9lX7AhvdjfMkA3NTE3kXdKO+DS+Yjd/S3x55LFmYAkInZFxO7b2/SOMjH95Nd7liu0evwr6MA808JXWXjzWfzz0RJ/KWmen5y+ZX5ydHPUa/tGy6PiVr/8+skby+2/rfg74FKt8d7U/q1FBpPm+drZzu7/Do//tJq8lc8zV4tllyfm5k6ORVSTQ3m+XH4qWz5+43fL/KmifHb8D+9d6vhP82tcFO3/UERkB/HDEfFIRDxa1P2xiHg8IvauEONPL64ef6Rdav/zEVNN7V9dXLN4/Le0/+0n+o79+N1y+x9K/k37H8hTw8WS/Pq3iqWqk10uWit4xx8cAAAA3EPS/Bn4JB1ZTKfpyEjjGf6d8Z+0PjM799SRmfdOTDWelR+MSlqOdA0U46H16XptLJkvttgYHx0vxorL8dL9xbjx531b8vzI5Ex9qsuxQ6/busz5n/mzr9u1A9bYliWXjlfXvSJAF7TOo6c3Z8+9Hi4GsFH5e23oXauc/+l61QNYf+7/0LuWOv/PteTNBcDG5P4Pvcv5Dz0q/aHbNQC6yP0felI7f9e/QqIa7W1nc4frc08l1qpROpKIKBNpW9spnzptv2KVaDuuSuVu+HjL/8l5F7TysYl6ly9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfJPAAAA///+qNrp") 266.040524ms ago: executing program 1 (id=2221): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b4b, 0x0) r3 = syz_io_uring_setup(0x2bc, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x100, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000000)={r12, 0x2, 0x100, 0x5, 0x2, 0xfff, 0x68, 0x8, {0x0, @in6={{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x231}}, 0xae9, 0x3, 0x9, 0xfffffffe, 0x1}}, &(0x7f00000000c0)=0xb0) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r14, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r13, 0x407, 0x176) vmsplice(r14, 0x0, 0x0, 0x0) write$P9_RSYMLINK(r14, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x0, 0x3}}, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x6a, 0xc8, 0x9f, 0x40, 0xc45, 0x624e, 0xaa6c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x0, 0x89, 0x35, 0xbf}}]}}]}}, 0x0) 247.112455ms ago: executing program 3 (id=2222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0) 0s ago: executing program 3 (id=2223): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x24, 0x0, &(0x7f0000001080)) kernel console output (not intermixed with test programs): 8] usb 1-1: config 0 descriptor?? [ 895.183839][T11375] random: crng reseeded on system resumption [ 895.619800][ T7378] appletouch 1-1:0.85: Failed to request geyser raw mode [ 895.627252][ T7378] appletouch: probe of 1-1:0.85 failed with error -5 [ 895.666121][ T7378] usb 1-1: USB disconnect, device number 31 [ 895.985016][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 898.457370][T11407] fuse: Bad value for 'fd' [ 900.024350][T11421] xt_ecn: cannot match TCP bits for non-tcp packets [ 902.100732][T11435] fuse: Bad value for 'fd' [ 904.269393][T11464] netlink: 'syz.2.1518': attribute type 10 has an invalid length. [ 904.401403][T11468] xt_ecn: cannot match TCP bits for non-tcp packets [ 905.009585][T11479] fuse: Bad value for 'fd' [ 906.139744][T11499] gfs2: not a GFS2 filesystem [ 907.192978][T11504] xt_ecn: cannot match TCP bits for non-tcp packets [ 907.574888][T11505] fuse: Bad value for 'fd' [ 908.842986][T11526] fuse: Bad value for 'fd' [ 909.149518][T11537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.166329][T11537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.184555][T11537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.192445][T11537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.368402][T11219] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 909.558679][T11219] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 909.577788][T11219] usb 4-1: config 0 has no interface number 0 [ 909.598305][T11219] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 909.633254][T11219] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 909.705561][T11219] usb 4-1: config 0 interface 110 has no altsetting 0 [ 909.720012][T11219] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 909.729472][T11219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.737724][T11219] usb 4-1: Product: syz [ 909.744138][T11219] usb 4-1: Manufacturer: syz [ 909.751232][T11219] usb 4-1: SerialNumber: syz [ 909.781395][T11219] usb 4-1: config 0 descriptor?? [ 913.471934][ T5804] usb 4-1: USB disconnect, device number 38 [ 914.827018][ T8064] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 915.026983][ T8064] usb 2-1: Using ep0 maxpacket: 32 [ 915.035447][ T8064] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.050324][ T8064] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.060789][ T8064] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 915.070912][ T8064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.086183][ T8064] usb 2-1: config 0 descriptor?? [ 915.343580][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.395104][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.399018][ T5812] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 915.451411][T11593] syzkaller0: entered promiscuous mode [ 915.460441][T11593] syzkaller0: entered allmulticast mode [ 915.490235][T11593] tipc: Enabled bearer , priority 0 [ 915.508307][T11592] tipc: Resetting bearer [ 915.588173][T11592] tipc: Disabling bearer [ 915.599253][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 915.617021][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 915.650677][ T5812] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 915.666523][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.691038][ T5812] usb 1-1: config 0 descriptor?? [ 915.739973][ T5812] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 916.281305][T11607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.304683][T11607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.751304][ T8064] usbhid 2-1:0.0: can't add hid device: -71 [ 917.770236][ T8064] usbhid: probe of 2-1:0.0 failed with error -71 [ 917.800196][ T8064] usb 2-1: USB disconnect, device number 32 [ 917.857758][ T5804] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 918.060145][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 918.070788][ T5804] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 918.084618][ T5804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.096204][ T5804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.115860][ T5804] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.147557][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.151805][ T8064] usb 1-1: USB disconnect, device number 32 [ 918.208698][ T5804] usb 4-1: Product: syz [ 918.212975][ T5804] usb 4-1: Manufacturer: syz [ 918.234573][ T5804] usb 4-1: SerialNumber: syz [ 918.353665][T11629] syzkaller0: entered promiscuous mode [ 918.361831][T11629] syzkaller0: entered allmulticast mode [ 918.382637][T11629] tipc: Started in network mode [ 918.387977][T11629] tipc: Node identity a6b381240d2, cluster identity 4711 [ 918.397552][T11629] tipc: Enabled bearer , priority 0 [ 918.416498][T11628] tipc: Resetting bearer [ 918.460406][T11628] tipc: Disabling bearer [ 918.680454][ T5804] usb 4-1: 0:2 : does not exist [ 919.724383][ T5804] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 919.809517][ T5804] usb 4-1: USB disconnect, device number 39 [ 919.922983][T11626] udevd[11626]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.937464][ T6004] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 921.145115][ T6004] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 921.156551][T11655] syzkaller0: entered promiscuous mode [ 921.164463][T11655] syzkaller0: entered allmulticast mode [ 921.180138][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.191236][T11655] tipc: Enabled bearer , priority 0 [ 921.197462][ T6004] usb 3-1: Product: syz [ 921.204286][ T6004] usb 3-1: Manufacturer: syz [ 921.211602][T11654] tipc: Resetting bearer [ 921.219403][ T6004] usb 3-1: SerialNumber: syz [ 921.229635][ T6004] usb 3-1: config 0 descriptor?? [ 921.275781][T11654] tipc: Disabling bearer [ 921.446427][ T6004] mos7840 3-1:0.0: required endpoints missing [ 921.653354][ T8064] usb 3-1: USB disconnect, device number 36 [ 921.944663][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 922.577105][ T8064] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 922.641565][T11678] syzkaller0: entered promiscuous mode [ 922.657361][T11678] syzkaller0: entered allmulticast mode [ 922.673629][T11678] tipc: Enabled bearer , priority 0 [ 922.734322][T11677] tipc: Resetting bearer [ 922.807322][T11677] tipc: Disabling bearer [ 922.816962][ T8064] usb 3-1: Using ep0 maxpacket: 8 [ 922.826094][ T8064] usb 3-1: unable to get BOS descriptor or descriptor too short [ 922.852302][ T8064] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1024 [ 922.874535][ T8064] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 922.915057][ T8064] usb 3-1: config 1 interface 0 has no altsetting 0 [ 922.937884][ T8064] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 922.956991][ T8064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.976971][ T8064] usb 3-1: Product: syz [ 922.981294][ T8064] usb 3-1: Manufacturer: syz [ 922.985932][ T8064] usb 3-1: SerialNumber: syz [ 923.048953][T11676] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 923.337369][ T8064] usb 3-1: USB disconnect, device number 37 [ 924.337174][ T788] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 924.365754][T11709] syzkaller0: entered promiscuous mode [ 924.374326][T11709] syzkaller0: entered allmulticast mode [ 924.395399][T11709] tipc: Started in network mode [ 924.403879][T11709] tipc: Node identity 22184b22bf78, cluster identity 4711 [ 924.413359][T11709] tipc: Enabled bearer , priority 0 [ 924.423273][T11708] tipc: Resetting bearer [ 924.447121][ T6004] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 924.470173][T11708] tipc: Disabling bearer [ 924.527165][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 924.563639][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.575395][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.592787][ T788] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 924.632044][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.647217][ T6004] usb 2-1: Using ep0 maxpacket: 32 [ 924.656731][ T788] usb 1-1: config 0 descriptor?? [ 924.660882][ T6004] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 924.674853][ T6004] usb 2-1: config 0 has no interface number 0 [ 924.682261][ T6004] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.700055][ T6004] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 924.712046][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.720536][ T6004] usb 2-1: Product: syz [ 924.725046][ T6004] usb 2-1: Manufacturer: syz [ 924.734215][ T6004] usb 2-1: SerialNumber: syz [ 924.745335][ T6004] usb 2-1: config 0 descriptor?? [ 924.759985][ T6004] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 924.782351][ T6004] em28xx 2-1:0.132: Video interface 132 found: [ 925.172651][ T788] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 925.201839][ T6004] em28xx 2-1:0.132: chip ID is em2884 [ 925.382783][ T788] usb 1-1: USB disconnect, device number 33 [ 925.405680][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.434586][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.550840][ T6004] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 925.564029][ T6004] em28xx 2-1:0.132: board has no eeprom [ 925.640549][ T6004] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 925.649554][ T6004] em28xx 2-1:0.132: analog set to bulk mode. [ 925.656148][ T5812] em28xx 2-1:0.132: Registering V4L2 extension [ 925.690130][ T6004] usb 2-1: USB disconnect, device number 33 [ 925.701214][ T6004] em28xx 2-1:0.132: Disconnecting em28xx [ 926.005700][ T5812] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 926.020934][ T5812] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 926.034021][ T5812] em28xx 2-1:0.132: No AC97 audio processor [ 926.045138][ T5812] usb 2-1: Decoder not found [ 926.052682][ T5812] em28xx 2-1:0.132: failed to create media graph [ 926.064018][ T5812] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 926.081878][ T5812] em28xx 2-1:0.132: Remote control support is not available for this card. [ 926.106195][ T6004] em28xx 2-1:0.132: Closing input extension [ 926.136281][ T6004] em28xx 2-1:0.132: Freeing device [ 926.365143][T11734] syzkaller0: entered promiscuous mode [ 926.375314][T11734] syzkaller0: entered allmulticast mode [ 926.405335][T11739] syzkaller0: entered promiscuous mode [ 926.452628][T11739] syzkaller0: entered allmulticast mode [ 926.784377][ T5773] Bluetooth: hci1: unexpected cc 0x042d length: 1 < 7 [ 926.792576][ T5773] Bluetooth: hci1: unexpected event for opcode 0x042d [ 926.817363][ T5773] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 929.069693][T11748] tipc: Enabled bearer , priority 0 [ 929.078468][T11738] tipc: Resetting bearer [ 929.149645][T11738] tipc: Disabling bearer [ 930.694088][T11804] syzkaller0: entered promiscuous mode [ 930.707605][T11804] syzkaller0: entered allmulticast mode [ 930.850337][ T5773] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 930.860462][ T5773] Bluetooth: hci1: Injecting HCI hardware error event [ 930.869490][ T5773] Bluetooth: hci1: hardware error 0x00 [ 931.805681][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.812872][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.646939][T11806] syzkaller0: entered promiscuous mode [ 932.652463][T11806] syzkaller0: entered allmulticast mode [ 932.678170][T11822] tipc: Enabled bearer , priority 0 [ 932.699062][T11805] tipc: Resetting bearer [ 932.806642][T11805] tipc: Disabling bearer [ 932.920150][ T5773] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 933.428173][T11853] syzkaller0: entered promiscuous mode [ 933.433799][T11853] syzkaller0: entered allmulticast mode [ 936.839377][T11870] tipc: Enabling of bearer rejected, failed to enable media [ 936.860818][T11881] netlink: 'syz.0.1646': attribute type 10 has an invalid length. [ 936.898003][T11881] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.928516][T11881] bond0: (slave team0): Enslaving as an active interface with an up link [ 937.451742][T11903] loop1: detected capacity change from 0 to 1024 [ 937.562790][T11906] syzkaller0: entered promiscuous mode [ 937.577496][T11906] syzkaller0: entered allmulticast mode [ 937.699044][T11912] loop0: detected capacity change from 0 to 512 [ 937.721571][T11912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 937.760930][T11912] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 937.830952][T11912] EXT4-fs (loop0): 1 truncate cleaned up [ 937.838594][T11912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.900081][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 937.900098][ T28] audit: type=1800 audit(1768213249.379:302): pid=11912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1656" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 938.509645][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.137496][T11919] tipc: Enabling of bearer rejected, failed to enable media [ 940.461555][T11937] netdevsim netdevsim1: Direct firmware load for / [ 940.461555][T11937] failed with error -2 [ 940.494125][T11937] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 940.494125][T11937] [ 940.840229][T11946] loop3: detected capacity change from 0 to 32768 [ 940.865888][T11946] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1666 (11946) [ 940.895193][T11946] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 940.905765][T11946] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 940.914914][T11946] BTRFS info (device loop3): setting nodatasum [ 940.921154][T11946] BTRFS info (device loop3): force clearing of disk cache [ 940.928342][T11946] BTRFS info (device loop3): enabling ssd optimizations [ 940.935335][T11946] BTRFS info (device loop3): using spread ssd allocation scheme [ 940.943070][T11946] BTRFS info (device loop3): not using ssd optimizations [ 940.950154][T11946] BTRFS info (device loop3): not using spread ssd allocation scheme [ 940.958310][T11946] BTRFS info (device loop3): using free space tree [ 941.028588][T11946] BTRFS info (device loop3): rebuilding free space tree [ 941.497375][ T5768] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 941.637308][T10478] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 941.729482][T11971] syzkaller0: entered promiscuous mode [ 941.745173][T11971] syzkaller0: entered allmulticast mode [ 941.837932][T10478] usb 2-1: Using ep0 maxpacket: 32 [ 941.852333][T10478] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 941.867421][T10478] usb 2-1: config 0 has no interface number 0 [ 941.881777][T10478] usb 2-1: config 0 interface 12 has no altsetting 0 [ 941.892375][T10478] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 941.902369][T10478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.910778][T10478] usb 2-1: Product: syz [ 941.915173][T10478] usb 2-1: Manufacturer: syz [ 941.923040][T10478] usb 2-1: SerialNumber: syz [ 941.933732][T10478] usb 2-1: config 0 descriptor?? [ 943.418306][T10478] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 943.426711][T10478] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 943.438300][T10478] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 943.445989][T10478] f81534: probe of 2-1:0.12 failed with error -71 [ 943.475152][T10478] usb 2-1: USB disconnect, device number 34 [ 946.702107][T11989] tipc: Enabling of bearer rejected, failed to enable media [ 946.906493][T12000] netdevsim netdevsim0: Direct firmware load for / [ 946.906493][T12000] failed with error -2 [ 946.943592][T12000] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 946.943592][T12000] [ 948.543063][T12032] tipc: Enabled bearer , priority 0 [ 948.582112][T12031] tipc: Disabling bearer [ 948.913860][T12034] loop2: detected capacity change from 0 to 32768 [ 948.938807][T12034] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1687 (12034) [ 948.970666][T12034] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 948.980989][T12034] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 948.989764][T12034] BTRFS info (device loop2): setting nodatasum [ 948.995937][T12034] BTRFS info (device loop2): force clearing of disk cache [ 949.003677][T12034] BTRFS info (device loop2): enabling ssd optimizations [ 949.010674][T12034] BTRFS info (device loop2): using spread ssd allocation scheme [ 949.018383][T12034] BTRFS info (device loop2): not using ssd optimizations [ 949.025419][T12034] BTRFS info (device loop2): not using spread ssd allocation scheme [ 949.033468][T12034] BTRFS info (device loop2): using free space tree [ 949.109920][T12034] BTRFS info (device loop2): rebuilding free space tree [ 949.359814][ T5769] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 949.485377][T12055] loop1: detected capacity change from 0 to 1024 [ 949.594837][T12055] hfsplus: bad catalog entry type [ 949.718829][ T1099] hfsplus: b-tree write err: -5, ino 4 [ 950.589664][ T5812] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 950.787507][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 950.794784][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.805782][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.816156][ T5812] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 950.825348][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.837543][ T5812] usb 1-1: config 0 descriptor?? [ 950.868228][ T28] audit: type=1800 audit(1768213262.339:303): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1692" name="/" dev="fuse" ino=9 res=0 errno=0 [ 951.066047][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.078456][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.227739][T12078] overlayfs: failed to resolve './file2': -2 [ 951.255843][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'. [ 952.602979][T12094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.031016][T12094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.041924][ T5812] usbhid 1-1:0.0: can't add hid device: -32 [ 956.260173][ T5812] usbhid: probe of 1-1:0.0 failed with error -32 [ 956.644079][T12113] gfs2: not a GFS2 filesystem [ 957.451012][ T5812] IPVS: starting estimator thread 0... [ 957.557862][T12123] IPVS: using max 17 ests per chain, 40800 per kthread [ 957.627337][T11219] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 957.641554][ T5812] usb 1-1: USB disconnect, device number 34 [ 957.758871][T12127] loop0: detected capacity change from 0 to 128 [ 957.779849][T12127] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 957.794860][T12127] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.821134][T11219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.835541][T11219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.845577][T11219] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 957.859179][ T5804] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 957.867929][T11219] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 957.877231][T11219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.889031][T11219] usb 4-1: config 0 descriptor?? [ 957.928383][ T5767] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 960.038778][ T5804] usb 3-1: Using ep0 maxpacket: 8 [ 960.075854][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 960.085748][ T5804] usb 3-1: config 6 has an invalid interface number: 4 but max is 1 [ 960.094435][ T5804] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 960.105445][ T5804] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 960.114690][ T5804] usb 3-1: config 6 has no interface number 0 [ 960.121150][ T5804] usb 3-1: config 6 interface 4 altsetting 4 endpoint 0xF has invalid wMaxPacketSize 0 [ 960.131133][ T5804] usb 3-1: config 6 interface 4 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 960.144482][ T5804] usb 3-1: config 6 interface 4 has no altsetting 0 [ 960.155187][ T5804] usb 3-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0 [ 960.165164][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.173722][ T5804] usb 3-1: Product: syz [ 960.179048][ T5804] usb 3-1: Manufacturer: syz [ 960.183763][ T5804] usb 3-1: SerialNumber: syz [ 960.476372][T11219] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 960.491575][ T5804] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 960.522218][T11219] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 961.183594][ T5804] snd-usb-audio: probe of 3-1:6.4 failed with error -2 [ 961.198549][ T5804] usb 3-1: USB disconnect, device number 38 [ 961.391085][T11715] udevd[11715]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 961.445852][T12144] sctp: [Deprecated]: syz.2.1715 (pid 12144) Use of int in max_burst socket option. [ 961.445852][T12144] Use struct sctp_assoc_value instead [ 961.876992][ T5804] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 961.953511][T10478] usb 4-1: USB disconnect, device number 40 [ 962.138986][T12155] loop3: detected capacity change from 0 to 16 [ 962.174468][T12155] erofs: (device loop3): mounted with root inode @ nid 36. [ 965.078717][T12155] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 965.089866][T12155] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 965.230355][T12158] netlink: 'syz.3.1718': attribute type 10 has an invalid length. [ 965.392105][T12160] bond0: (slave batadv0): Releasing backup interface [ 965.657188][ T5804] usb 3-1: device descriptor read/64, error -71 [ 965.782175][T12178] fuse: Bad value for 'group_id' [ 966.754596][T12185] loop3: detected capacity change from 0 to 256 [ 966.768534][T12185] ======================================================= [ 966.768534][T12185] WARNING: The mand mount option has been deprecated and [ 966.768534][T12185] and is ignored by this kernel. Remove the mand [ 966.768534][T12185] option from the mount to silence this warning. [ 966.768534][T12185] ======================================================= [ 966.803448][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.820841][ T5804] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 966.903290][T12185] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 966.926675][T12189] sctp: [Deprecated]: syz.1.1728 (pid 12189) Use of int in max_burst socket option. [ 966.926675][T12189] Use struct sctp_assoc_value instead [ 967.040444][ T5804] usb 3-1: Using ep0 maxpacket: 32 [ 967.050797][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.062405][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.072277][ T5804] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 967.081475][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.092746][ T5804] usb 3-1: config 0 descriptor?? [ 967.132507][T12185] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 967.140410][T12185] exFAT-fs (loop3): Filesystem has been set read-only [ 967.306559][T12162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.308485][ T5812] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 967.317752][T12162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.797037][T12183] Bluetooth: hci0: command 0x0406 tx timeout [ 969.382811][ T5804] usbhid 3-1:0.0: can't add hid device: -71 [ 969.400443][ T5804] usbhid: probe of 3-1:0.0 failed with error -71 [ 969.461488][ T5804] usb 3-1: USB disconnect, device number 40 [ 969.663505][T12206] netlink: 'syz.2.1734': attribute type 10 has an invalid length. [ 969.677296][T11219] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 969.864169][T12213] fuse: Bad value for 'group_id' [ 969.877391][T12212] loop3: detected capacity change from 0 to 256 [ 969.888004][T11219] usb 1-1: Using ep0 maxpacket: 32 [ 969.910216][T11219] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 969.925176][T11219] usb 1-1: config 0 has no interface number 0 [ 969.949321][T12212] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 969.961909][T11219] usb 1-1: config 0 interface 12 has no altsetting 0 [ 969.982818][T11219] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 970.005934][T11219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.023853][T11219] usb 1-1: Product: syz [ 970.036953][T11219] usb 1-1: Manufacturer: syz [ 970.047468][T11219] usb 1-1: SerialNumber: syz [ 970.058511][T11219] usb 1-1: config 0 descriptor?? [ 971.020788][T11219] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 971.046933][T11219] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 971.061184][T11219] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 971.072331][T12225] loop2: detected capacity change from 0 to 2048 [ 971.079290][T11219] f81534: probe of 1-1:0.12 failed with error -71 [ 971.105738][T11219] usb 1-1: USB disconnect, device number 35 [ 971.298141][ T5804] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 971.343721][T12232] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 971.587221][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 971.717493][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.861159][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.996260][ T5804] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 972.058440][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.097770][ T5804] usb 2-1: config 0 descriptor?? [ 972.235650][T12235] overlayfs: upper fs does not support tmpfile. [ 972.258671][T12235] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 972.281055][T12235] overlayfs: failed to set xattr on upper [ 972.297088][T12235] overlayfs: ...falling back to redirect_dir=nofollow. [ 972.311167][T12235] overlayfs: ...falling back to metacopy=off. [ 972.323164][T12235] overlayfs: ...falling back to index=off. [ 972.329130][T12235] overlayfs: ...falling back to uuid=null. [ 972.350733][T12227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.386743][T12227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.394874][T12238] netlink: 'syz.3.1745': attribute type 10 has an invalid length. [ 972.629794][T12232] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 972.671598][T12232] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 972.719632][T12232] Remounting filesystem read-only [ 972.757906][ T12] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 972.768772][T12241] syzkaller0: entered promiscuous mode [ 972.774368][T12241] syzkaller0: entered allmulticast mode [ 972.787110][ T12] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 972.794504][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 972.841252][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 972.867166][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 972.876246][ T12] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 972.929878][ T12] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 972.957784][ T12] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 972.965480][ T12] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 972.972974][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 972.982754][ T12] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 972.989983][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 972.999682][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.008889][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 973.016220][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.025705][ T12] NILFS (loop2): discard dirty page: offset=98304, ino=3 [ 973.048450][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.080256][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.113185][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 973.151664][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.188972][ T12] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 973.196271][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.223639][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.233504][ T12] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 973.243552][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.255603][ T12] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 973.264864][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 973.273590][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.287823][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.300418][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.311325][ T12] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 973.322405][ T12] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 973.329810][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.339331][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.363539][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.386004][ T12] NILFS (loop2): discard dirty page: offset=0, ino=19 [ 973.396674][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 973.404103][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.417433][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.426408][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.594462][ T12] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 973.621722][T12250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.630868][T12250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.709926][ T12] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 973.773387][ T5769] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 973.794043][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.856144][ T5769] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 973.883751][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.915928][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 973.949170][ T12] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 973.983877][ T12] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 974.006067][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 974.035296][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 974.053941][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 974.182458][T12254] fuse: Bad value for 'group_id' [ 976.964714][ T5804] usbhid 2-1:0.0: can't add hid device: -71 [ 976.997238][ T5804] usbhid: probe of 2-1:0.0 failed with error -71 [ 977.011403][T12260] netdevsim netdevsim0: Direct firmware load for / [ 977.011403][T12260] failed with error -2 [ 977.029399][ T5804] usb 2-1: USB disconnect, device number 36 [ 977.069050][T12260] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 977.069050][T12260] [ 977.111589][ T5769] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 979.384167][ T5769] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 979.404102][ T5769] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 979.424937][ T5769] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 979.453218][ T5769] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 979.463564][ T1113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.474393][ T5769] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 979.640964][ T1113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.667036][ T5804] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 979.764743][ T1113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.867847][ T5804] usb 4-1: Using ep0 maxpacket: 8 [ 979.878702][ T5804] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 979.891405][ T1113] team0: Port device netdevsim0 removed [ 979.897401][ T5804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 979.909969][ T1113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.920645][ T5804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 979.935475][ T5804] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.949203][ T5804] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 979.958632][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.180789][ T1113] tipc: Left network mode [ 980.194743][T12277] loop1: detected capacity change from 0 to 1764 [ 980.206221][ T5804] usb 4-1: GET_CAPABILITIES returned 0 [ 980.216701][ T5804] usbtmc 4-1:16.0: can't read capabilities [ 980.470056][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.497302][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.506460][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.515585][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.707968][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.717094][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.731988][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.744872][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.758812][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.771771][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.803999][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.813474][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.826975][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.836497][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.847170][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.856292][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 981.212779][ T8709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 981.227120][ T8709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 981.238006][ T8709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 981.252810][ T8709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 981.297164][ T8709] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 981.307209][ T8709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 981.320255][ T7378] usb 4-1: USB disconnect, device number 41 [ 982.083124][T12283] chnl_net:caif_netlink_parms(): no params data found [ 982.095609][T12306] loop1: detected capacity change from 0 to 256 [ 982.112120][T12306] exfat: Deprecated parameter 'namecase' [ 982.166298][T12306] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001015b, chksum : 0x2a76561a, utbl_chksum : 0xe619d30d) [ 983.397074][T12183] Bluetooth: hci3: command tx timeout [ 983.431888][T12316] loop1: detected capacity change from 0 to 64 [ 983.721576][T12323] loop3: detected capacity change from 0 to 64 [ 983.750045][T12320] netdevsim netdevsim0: Direct firmware load for / [ 983.750045][T12320] failed with error -2 [ 983.760885][T12320] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 983.760885][T12320] [ 983.874609][ T1113] hsr_slave_0: left promiscuous mode [ 983.900511][ T1113] bridge_slave_1: left allmulticast mode [ 983.918423][ T1113] bridge_slave_1: left promiscuous mode [ 983.926357][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.945971][ T1113] bridge_slave_0: left allmulticast mode [ 983.951874][ T1113] bridge_slave_0: left promiscuous mode [ 983.959780][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.042029][ T1113] veth1_macvtap: left promiscuous mode [ 984.050880][ T1113] veth0_macvtap: left promiscuous mode [ 984.058857][ T1113] veth1_vlan: left promiscuous mode [ 984.064443][ T1113] veth0_vlan: left promiscuous mode [ 984.236295][ T1113] bond4 (unregistering): (slave vlan2): Releasing active interface [ 984.386146][ T1113] bond4 (unregistering): Released all slaves [ 984.581401][ T1113] bond3 (unregistering): Released all slaves [ 984.790097][ T1113] bond2 (unregistering): Released all slaves [ 985.135195][ T1113] bond1 (unregistering): Released all slaves [ 985.493238][T12183] Bluetooth: hci3: command tx timeout [ 985.863897][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 985.916747][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 985.962831][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.015059][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.500832][ T1113] bond0 (unregistering): Released all slaves [ 986.593674][T12326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 986.601473][T12326] IPv6: NLM_F_CREATE should be set when creating new route [ 986.610348][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1772'. [ 986.628151][T12331] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 986.642511][T12332] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 986.687524][T12283] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.705402][T12283] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.735989][T12283] bridge_slave_0: entered allmulticast mode [ 986.751313][T12283] bridge_slave_0: entered promiscuous mode [ 986.769953][T12283] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.792426][T12283] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.812664][T12283] bridge_slave_1: entered allmulticast mode [ 986.841315][T12283] bridge_slave_1: entered promiscuous mode [ 986.990950][T12283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.067943][T12283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.153753][T12360] loop3: detected capacity change from 0 to 512 [ 987.285307][T12360] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.1777: bg 0: block 16: invalid block bitmap [ 987.311751][T12283] team0: Port device team_slave_0 added [ 987.322379][T12360] EXT4-fs (loop3): Remounting filesystem read-only [ 987.339044][T12360] EXT4-fs (loop3): 1 truncate cleaned up [ 987.346501][T12360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.379987][T12283] team0: Port device team_slave_1 added [ 987.441802][ T1113] IPVS: stop unused estimator thread 0... [ 987.493610][T12283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.509524][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.540664][T12283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.553999][T12283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.567935][T12183] Bluetooth: hci3: command tx timeout [ 987.570425][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.610271][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.747340][T12283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.985554][T12283] hsr_slave_0: entered promiscuous mode [ 988.042693][T12283] hsr_slave_1: entered promiscuous mode [ 988.097783][T12283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 988.130771][T12283] Cannot create hsr debugfs directory [ 989.023700][T12283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 989.064633][T12283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 989.115585][T12283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 989.131648][T12419] loop0: detected capacity change from 0 to 64 [ 989.143011][T12283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 989.160347][T12420] loop1: detected capacity change from 0 to 512 [ 989.229959][T12420] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.1791: casefold flag without casefold feature [ 989.333981][T12420] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1791: couldn't read orphan inode 15 (err -117) [ 989.367676][T12420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.504960][T12283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.593319][T12283] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.657027][T12183] Bluetooth: hci3: command tx timeout [ 989.713987][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.721236][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.776632][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.810667][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.817916][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.062381][T12283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.113252][T12471] loop0: detected capacity change from 0 to 64 [ 991.784479][T12488] loop0: detected capacity change from 0 to 512 [ 991.956289][T12283] veth0_vlan: entered promiscuous mode [ 992.091572][T12283] veth1_vlan: entered promiscuous mode [ 992.686278][T12283] veth0_macvtap: entered promiscuous mode [ 992.741243][T12283] veth1_macvtap: entered promiscuous mode [ 992.773113][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.817281][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.861735][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.887077][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.914162][T12283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.954509][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.970722][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.982025][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.047532][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.068577][T12283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.092253][T12283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.123029][T12283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.134755][T12283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.144266][T12283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.167133][ T6004] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 993.242092][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.250795][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.356991][ T6004] usb 2-1: Using ep0 maxpacket: 32 [ 993.371090][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.401299][T12506] syzkaller0: entered promiscuous mode [ 993.407118][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.417882][ T6004] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 993.429240][T12506] syzkaller0: entered allmulticast mode [ 993.436173][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.465960][ T6004] usb 2-1: config 0 descriptor?? [ 993.715690][T12496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.725245][T12496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.051546][T12520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.060473][T12520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.533523][T12526] loop3: detected capacity change from 0 to 64 [ 998.001593][ T6004] usbhid 2-1:0.0: can't add hid device: -71 [ 998.017440][ T6004] usbhid: probe of 2-1:0.0 failed with error -71 [ 998.046582][ T6004] usb 2-1: USB disconnect, device number 37 [ 998.139881][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.154714][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 998.176391][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.253884][ T7236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.274703][ T7236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.254473][T12563] tipc: Enabled bearer , priority 0 [ 999.327706][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 999.417723][T12563] syzkaller0: entered promiscuous mode [ 999.423353][T12563] syzkaller0: entered allmulticast mode [ 999.447857][T12563] tipc: Resetting bearer [ 999.502689][T12562] tipc: Resetting bearer [ 999.534086][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 999.578294][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.616952][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.652610][ T8] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 999.677811][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.713282][ T8] usb 5-1: config 0 descriptor?? [ 999.936340][T12564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.987798][T12564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.053774][T12584] loop3: detected capacity change from 0 to 4096 [ 1000.344568][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.357258][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.713015][T12584] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1000.762256][T12584] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 1000.770680][T12584] System zones: 0-5 [ 1000.794793][T12584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.200347][T12584] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1001.348715][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.554278][T12562] tipc: Disabling bearer [ 1003.665140][ T8064] tipc: Node number set to 2878570788 [ 1003.675135][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 1003.691885][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 1003.730242][ T8] usb 5-1: USB disconnect, device number 2 [ 1004.977132][T11219] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1004.993725][T12645] sctp: [Deprecated]: syz.0.1836 (pid 12645) Use of int in max_burst socket option. [ 1004.993725][T12645] Use struct sctp_assoc_value instead [ 1005.177586][T11219] usb 5-1: Using ep0 maxpacket: 32 [ 1005.224420][T11219] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1005.273307][T11219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.303165][T11219] usb 5-1: Product: syz [ 1005.310806][T11219] usb 5-1: Manufacturer: syz [ 1005.315940][T11219] usb 5-1: SerialNumber: syz [ 1005.336935][ T8064] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1005.359211][T11219] usb 5-1: config 0 descriptor?? [ 1005.517017][ T8] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1005.706768][T11219] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 003 [ 1005.727208][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1005.737820][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.749060][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.758974][ T8] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1005.771898][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.782284][ T8] usb 4-1: config 0 descriptor?? [ 1005.816499][T12662] loop1: detected capacity change from 0 to 1024 [ 1006.005375][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.016694][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.364583][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.373840][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.449056][T12638] i2c i2c-1: failure reading status [ 1006.688219][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 1006.698065][ T6004] usb 5-1: USB disconnect, device number 3 [ 1006.705246][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 1006.733665][ T8] usb 4-1: USB disconnect, device number 42 [ 1008.765760][T12699] loop0: detected capacity change from 0 to 4096 [ 1008.796322][T12704] loop3: detected capacity change from 0 to 1024 [ 1009.267298][T12719] tipc: Started in network mode [ 1009.272460][T12719] tipc: Node identity 92896896c0e7, cluster identity 4711 [ 1009.283635][T12719] tipc: Enabled bearer , priority 0 [ 1009.292428][T12719] syzkaller0: entered promiscuous mode [ 1009.302695][T12719] syzkaller0: entered allmulticast mode [ 1009.356493][T12719] tipc: Resetting bearer [ 1009.373398][T12718] tipc: Resetting bearer [ 1009.397115][ T8064] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1009.414640][T12718] tipc: Disabling bearer [ 1009.588019][ T8064] usb 1-1: Using ep0 maxpacket: 32 [ 1009.599306][ T8064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.612570][ T8064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.622888][ T8064] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1009.632221][ T8064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.647320][ T8064] usb 1-1: config 0 descriptor?? [ 1009.689259][T12733] sctp: [Deprecated]: syz.4.1856 (pid 12733) Use of int in max_burst socket option. [ 1009.689259][T12733] Use struct sctp_assoc_value instead [ 1009.873168][T12710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.887667][T12710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.135065][T12738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.143931][T12738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.217033][ T6004] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1012.022056][ T8064] usbhid 1-1:0.0: can't add hid device: -71 [ 1012.033926][ T8064] usbhid: probe of 1-1:0.0 failed with error -71 [ 1012.043232][ T8064] usb 1-1: USB disconnect, device number 37 [ 1012.131915][T12769] loop1: detected capacity change from 0 to 1024 [ 1012.725626][T12792] loop3: detected capacity change from 0 to 64 [ 1013.442730][T12801] overlayfs: failed to resolve './file2': -2 [ 1013.717054][ T6004] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1013.917111][ T6004] usb 4-1: Using ep0 maxpacket: 32 [ 1014.007877][ T6004] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.703871][ T6004] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.772447][ T6004] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1014.827225][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.849462][ T6004] usb 4-1: config 0 descriptor?? [ 1015.063317][T12818] loop0: detected capacity change from 0 to 1024 [ 1015.073808][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.098207][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.429627][T12819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.438543][T12819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.823335][T12828] loop4: detected capacity change from 0 to 64 [ 1016.263529][ T7378] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1016.267865][ T1193] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1016.322973][T12841] loop4: detected capacity change from 0 to 1024 [ 1016.466966][ T7378] usb 1-1: Using ep0 maxpacket: 32 [ 1016.483213][ T7378] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1016.492750][ T7378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.503502][ T7378] usb 1-1: Product: syz [ 1016.511609][ T7378] usb 1-1: Manufacturer: syz [ 1016.516419][ T7378] usb 1-1: SerialNumber: syz [ 1016.532511][ T7378] usb 1-1: config 0 descriptor?? [ 1016.592198][ T6004] usbhid 4-1:0.0: can't add hid device: -71 [ 1016.598996][ T6004] usbhid: probe of 4-1:0.0 failed with error -71 [ 1016.607847][ T6004] usb 4-1: USB disconnect, device number 43 [ 1016.621755][ T1193] usb 2-1: Using ep0 maxpacket: 32 [ 1016.648736][ T1193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.687828][ T1193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.716237][ T1193] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1016.745523][ T1193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.770564][ T7378] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 038 [ 1016.795557][ T1193] usb 2-1: config 0 descriptor?? [ 1016.846454][T12845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.974275][T12845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1017.072641][T12834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.104938][T12834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.407660][T12856] gfs2: not a GFS2 filesystem [ 1017.697556][T12861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.708035][T12861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.249026][ T1193] usbhid 2-1:0.0: can't add hid device: -71 [ 1018.255087][ T1193] usbhid: probe of 2-1:0.0 failed with error -71 [ 1018.265979][ T1193] usb 2-1: USB disconnect, device number 38 [ 1018.556189][T12880] loop3: detected capacity change from 0 to 1024 [ 1018.704613][T12883] loop3: detected capacity change from 0 to 128 [ 1018.724920][T12883] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1018.741554][ T6004] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1018.845111][T12883] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1018.957756][ T28] audit: type=1800 audit(1768213330.429:304): pid=12883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1894" name="file2" dev="loop3" ino=1048597 res=0 errno=0 [ 1019.012171][T12885] loop1: detected capacity change from 0 to 4096 [ 1019.053742][ T6004] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1019.077616][T12832] i2c i2c-1: failure reading data [ 1019.085012][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.115053][ T6004] usb 5-1: Product: syz [ 1019.137229][ T6004] usb 5-1: Manufacturer: syz [ 1019.153074][ T6004] usb 5-1: SerialNumber: syz [ 1019.159756][T11219] usb 1-1: USB disconnect, device number 38 [ 1019.960196][ T6004] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1020.256211][ T6004] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1020.266295][ T6004] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1020.281818][T12890] syzkaller0: entered promiscuous mode [ 1020.296570][ T6004] lan78xx: probe of 5-1:1.0 failed with error -32 [ 1020.309658][ T6004] usb 5-1: USB disconnect, device number 5 [ 1020.315891][T12890] syzkaller0: entered allmulticast mode [ 1020.366215][T12898] overlayfs: failed to resolve './file2': -2 [ 1022.430906][T12910] fuse: Bad value for 'fd' [ 1022.503390][ T6004] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1022.559210][T12912] loop0: detected capacity change from 0 to 1024 [ 1022.655055][T12915] loop3: detected capacity change from 0 to 256 [ 1022.727159][ T6004] usb 5-1: Using ep0 maxpacket: 32 [ 1022.741918][ T6004] usb 5-1: config 0 has an invalid interface number: 195 but max is 0 [ 1022.759123][ T6004] usb 5-1: config 0 has no interface number 0 [ 1022.789622][T12915] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1022.814575][ T6004] usb 5-1: New USB device found, idVendor=0f11, idProduct=1042, bcdDevice=6d.e1 [ 1022.831269][T12919] sctp: [Deprecated]: syz.1.1904 (pid 12919) Use of int in max_burst socket option. [ 1022.831269][T12919] Use struct sctp_assoc_value instead [ 1022.857544][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.865704][ T6004] usb 5-1: Product: syz [ 1022.870051][ T6004] usb 5-1: Manufacturer: syz [ 1022.874687][ T6004] usb 5-1: SerialNumber: syz [ 1022.886597][ T6004] usb 5-1: config 0 descriptor?? [ 1022.964311][ T28] audit: type=1800 audit(1768213334.439:305): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1903" name="bus" dev="loop3" ino=1048598 res=0 errno=0 [ 1023.100170][ T28] audit: type=1804 audit(1768213334.479:306): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1903" name="/newroot/491/file0/bus" dev="loop3" ino=1048598 res=1 errno=0 [ 1023.173272][ T1193] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1023.192685][ T6004] ldusb 5-1:0.195: Interrupt in endpoint not found [ 1023.259064][ T6004] usb 5-1: USB disconnect, device number 6 [ 1023.402098][ T7378] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1023.495132][T12932] loop3: detected capacity change from 0 to 256 [ 1023.533370][T12932] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 1023.586926][ T7378] usb 1-1: Using ep0 maxpacket: 32 [ 1023.600580][ T7378] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1023.609982][ T7378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.618458][ T7378] usb 1-1: Product: syz [ 1023.622790][ T7378] usb 1-1: Manufacturer: syz [ 1023.627830][ T7378] usb 1-1: SerialNumber: syz [ 1023.636086][ T7378] usb 1-1: config 0 descriptor?? [ 1023.851588][ T7378] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 039 [ 1024.202722][T12941] fuse: Unknown parameter 'default_p' [ 1024.296956][ T7378] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1024.521623][ T7378] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.581196][ T7378] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1024.621605][T12950] loop3: detected capacity change from 0 to 1024 [ 1024.634565][ T7378] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1024.680126][ T7378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.701328][T12950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.862744][ T7378] usb 5-1: config 0 descriptor?? [ 1024.919027][ T7378] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1024.925831][ T7378] dvb-usb: bulk message failed: -22 (3/0) [ 1024.961005][ T28] audit: type=1800 audit(1768213336.439:307): pid=12950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1909" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1025.002205][ T7378] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1025.061544][ T7378] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1025.077256][ T7378] usb 5-1: media controller created [ 1025.093468][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.103324][ T7378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1025.178448][ T7378] dvb-usb: bulk message failed: -22 (6/0) [ 1025.184457][ T7378] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1025.270093][ T7378] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input53 [ 1025.298294][ T7378] dvb-usb: schedule remote query interval to 150 msecs. [ 1025.305436][ T7378] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1025.354979][T12963] overlayfs: failed to resolve './file2': -2 [ 1026.128273][T12927] i2c i2c-1: failure reading data [ 1026.134901][T11219] dvb-usb: bulk message failed: -22 (1/0) [ 1026.179725][T12937] i2c i2c-1: failure writing data [ 1026.198217][T11219] dvb-usb: error while querying for an remote control event. [ 1027.773833][ T1193] usb 1-1: USB disconnect, device number 39 [ 1027.812815][ T8] usb 5-1: USB disconnect, device number 7 [ 1027.970927][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1028.010368][T12971] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 1028.124877][T12971] team0: Port device dummy0 added [ 1028.148371][T12974] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 1028.206695][T12974] team0: Port device dummy0 removed [ 1028.229979][T12974] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1028.367730][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1028.543894][T12991] loop1: detected capacity change from 0 to 4096 [ 1028.577460][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1028.586659][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.627236][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.661462][ T8] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1028.679343][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.715180][ T8] usb 5-1: config 0 descriptor?? [ 1028.737807][T12998] fuse: Unknown parameter 'default_permis' [ 1028.852307][T13002] loop1: detected capacity change from 0 to 2048 [ 1028.946620][T13002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.961117][T13002] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.999535][T12973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.012731][T13002] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1918: bg 0: block 345: padding at end of block bitmap is not set [ 1029.034787][T13002] EXT4-fs (loop1): Remounting filesystem read-only [ 1029.042627][T13002] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1606: inode #18: comm syz.1.1918: cleanup dec ref error -117 [ 1029.057483][T12973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.336417][T13015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.345375][T13015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.633611][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 1029.788101][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 1030.054655][ T8] usb 5-1: USB disconnect, device number 8 [ 1030.339440][T13017] sctp: [Deprecated]: syz.3.1920 (pid 13017) Use of int in max_burst socket option. [ 1030.339440][T13017] Use struct sctp_assoc_value instead [ 1030.366400][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.571100][T13021] loop4: detected capacity change from 0 to 64 [ 1030.657062][ T6004] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1030.781956][T13021] syz.4.1921: attempt to access beyond end of device [ 1030.781956][T13021] loop4: rw=2049, sector=145, nr_sectors = 16 limit=64 [ 1030.806008][T13021] syz.4.1921: attempt to access beyond end of device [ 1030.806008][T13021] loop4: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 1030.828383][T13021] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 1030.843621][T13028] overlayfs: failed to resolve './file2': -2 [ 1030.859369][T13021] syz.4.1921: attempt to access beyond end of device [ 1030.859369][T13021] loop4: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 1030.876953][ T6004] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 1030.989650][T13021] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 1031.134088][ T6004] usb 4-1: config 0 has no interface number 0 [ 1031.987572][T13021] syz.4.1921: attempt to access beyond end of device [ 1031.987572][T13021] loop4: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 1032.001589][ T6004] usb 4-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c [ 1032.050561][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.063476][T13021] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 1032.076395][ T6004] usb 4-1: config 0 descriptor?? [ 1032.085951][ T6004] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 1032.120279][T13021] syz.4.1921: attempt to access beyond end of device [ 1032.120279][T13021] loop4: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 1032.133963][T13021] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 1032.142651][T13021] syz.4.1921: attempt to access beyond end of device [ 1032.142651][T13021] loop4: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 1032.166193][T13021] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 1032.240363][T13021] syz.4.1921: attempt to access beyond end of device [ 1032.240363][T13021] loop4: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 1032.276070][ T6004] gspca_sn9c20x: Write register 1000 failed -71 [ 1032.299386][ T6004] gspca_sn9c20x: Device initialization failed [ 1032.326058][ T6004] gspca_sn9c20x: probe of 4-1:0.47 failed with error -71 [ 1032.331564][T13021] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 1032.364547][ T6004] usb 4-1: USB disconnect, device number 44 [ 1032.382660][T13021] syz.4.1921: attempt to access beyond end of device [ 1032.382660][T13021] loop4: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 1032.428261][T13021] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 1032.520217][T13035] syzkaller0: entered promiscuous mode [ 1032.544978][T13035] syzkaller0: entered allmulticast mode [ 1032.602105][T13042] loop1: detected capacity change from 0 to 128 [ 1032.676636][T13044] fuse: Unknown parameter 'default_permis' [ 1032.708806][ T9998] kworker/u4:17: attempt to access beyond end of device [ 1032.708806][ T9998] loop4: rw=1, sector=173, nr_sectors = 1 limit=64 [ 1032.742714][ T9998] Buffer I/O error on dev loop4, logical block 173, lost async page write [ 1032.763722][ T9998] kworker/u4:17: attempt to access beyond end of device [ 1032.763722][ T9998] loop4: rw=1, sector=174, nr_sectors = 1 limit=64 [ 1032.786742][ T9998] Buffer I/O error on dev loop4, logical block 174, lost async page write [ 1032.806309][ T9998] Buffer I/O error on dev loop4, logical block 175, lost async page write [ 1033.404435][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1033.466927][ T788] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1033.677016][ T788] usb 2-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.692177][ T788] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1033.692987][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1033.708008][ T788] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1033.719274][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.762528][ T788] usb 2-1: Product: syz [ 1033.777188][ T788] usb 2-1: Manufacturer: syz [ 1033.785158][ T788] usb 2-1: SerialNumber: syz [ 1033.798606][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.910267][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.932892][ T8] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1033.960177][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.982301][ T8] usb 5-1: config 0 descriptor?? [ 1034.242296][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.287929][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.411439][T13075] loop3: detected capacity change from 0 to 1024 [ 1034.432597][T13075] EXT4-fs: Ignoring removed orlov option [ 1034.535894][T13075] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 1034.573891][T13075] System zones: 0-1, 3-12 [ 1034.615972][T13075] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.754655][T13075] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 1034.831458][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.840579][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.638373][T13087] sctp: [Deprecated]: syz.3.1934 (pid 13087) Use of int in max_burst socket option. [ 1035.638373][T13087] Use struct sctp_assoc_value instead [ 1035.936985][ T1193] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1038.691774][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 1038.711656][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 1038.720853][ T8] usb 5-1: USB disconnect, device number 9 [ 1038.930283][ T788] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 15 proto 1 vid 0x04B8 pid 0x0202 [ 1039.220682][T13109] fuse: Unknown parameter 'default_permis' [ 1039.441942][ T8] usb 2-1: USB disconnect, device number 40 [ 1039.489235][ T8] usblp0: removed [ 1040.006956][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1040.220076][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1040.239282][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.272774][ T8] usb 2-1: config 0 descriptor?? [ 1040.301722][ T8] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1041.407248][ T8] gspca_stv06xx: I2C: Read error writing address: -71 [ 1041.451315][ T8] usb 2-1: USB disconnect, device number 41 [ 1041.476667][T13151] syzkaller0: entered promiscuous mode [ 1041.511643][T13151] syzkaller0: entered allmulticast mode [ 1041.611578][T13166] fuse: Unknown parameter 'default_permissio' [ 1041.876082][T13165] loop4: detected capacity change from 0 to 32768 [ 1041.941274][T13165] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1950 (13165) [ 1042.058658][T13165] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1042.068892][T13165] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1042.077653][T13165] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1042.085864][T13165] BTRFS info (device loop4): force clearing of disk cache [ 1042.093077][T13165] BTRFS info (device loop4): enabling ssd optimizations [ 1042.100102][T13165] BTRFS info (device loop4): using spread ssd allocation scheme [ 1042.107807][T13165] BTRFS info (device loop4): turning off barriers [ 1042.114281][T13165] BTRFS info (device loop4): disabling free space tree [ 1042.121444][T13165] BTRFS info (device loop4): not using ssd optimizations [ 1042.128554][T13165] BTRFS info (device loop4): not using spread ssd allocation scheme [ 1042.718798][T13165] BTRFS info (device loop4): rebuilding free space tree [ 1042.737629][T13165] BTRFS info (device loop4): disabling free space tree [ 1042.744699][T13165] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1042.754860][T13165] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1043.549840][T12283] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1044.241080][T13219] fuse: Unknown parameter 'default_permissio' [ 1045.321941][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 1045.738634][T12508] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1045.928641][T12508] usb 4-1: Using ep0 maxpacket: 32 [ 1045.944095][T12508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.964426][T12508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.974893][T12508] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1045.984306][T12508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.996730][T12508] usb 4-1: config 0 descriptor?? [ 1046.224919][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.238304][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.661451][T13234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.672456][T13234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.494104][T12508] usbhid 4-1:0.0: can't add hid device: -71 [ 1048.506329][T12508] usbhid: probe of 4-1:0.0 failed with error -71 [ 1048.526750][T12508] usb 4-1: USB disconnect, device number 46 [ 1048.682798][T13212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1049.017487][T12508] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1049.149190][T13256] fuse: Unknown parameter 'default_permissio' [ 1049.226719][T12508] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1049.315051][T12508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.440941][T12508] usb 4-1: Product: syz [ 1049.505508][T12508] usb 4-1: Manufacturer: syz [ 1049.569346][T12508] usb 4-1: SerialNumber: syz [ 1050.214894][T12508] rtl8150 4-1:1.0: couldn't reset the device [ 1050.231575][T12508] rtl8150: probe of 4-1:1.0 failed with error -5 [ 1050.294299][T12508] usb 4-1: USB disconnect, device number 47 [ 1050.437370][T13251] syz.1.1967 (13251): drop_caches: 2 [ 1050.502616][T13272] loop4: detected capacity change from 0 to 256 [ 1050.545884][T13272] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1050.603257][T13272] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1050.736928][ T8] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1050.946924][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1050.958465][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.986976][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.009144][ T28] audit: type=1804 audit(1768213362.479:308): pid=13286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1976" name="/newroot/43/file1" dev="fuse" ino=1 res=1 errno=0 [ 1051.039134][ T8] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1051.059208][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.068488][ T8] usb 1-1: config 0 descriptor?? [ 1051.208390][T13296] fuse: Unknown parameter 'default_permission' [ 1051.277511][T13270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.286437][T13270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.857395][T13304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.868276][T13304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.907837][T13317] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.917863][T13317] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.926610][T13317] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.961840][T13320] loop1: detected capacity change from 0 to 256 [ 1052.978361][T13320] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1052.990207][T13317] team0: Port device vxlan0 added [ 1053.006979][ T7378] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1053.022759][T13320] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1053.249698][ T7378] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1053.258434][ T7378] usb 5-1: config 0 has no interface number 0 [ 1053.267640][ T7378] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1053.286902][ T7378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.300928][ T7378] usb 5-1: Product: syz [ 1053.310216][ T7378] usb 5-1: Manufacturer: syz [ 1053.314868][ T7378] usb 5-1: SerialNumber: syz [ 1053.329572][ T28] audit: type=1804 audit(1768213364.809:309): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1987" name="/newroot/502/file1" dev="fuse" ino=1 res=1 errno=0 [ 1053.363517][ T7378] usb 5-1: config 0 descriptor?? [ 1053.385943][ T7378] smsc95xx v2.0.0 [ 1053.396901][ T7378] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1053.409424][ T7378] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 1053.614086][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 1053.622826][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 1053.630082][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 1053.635899][ T8] usb 1-1: USB disconnect, device number 40 [ 1053.755678][T13343] binder: 13337:13343 ioctl c0306201 0 returned -14 [ 1053.778960][T13343] binder: 13337:13343 ioctl 4018620d 0 returned -22 [ 1054.082602][T13351] fuse: Unknown parameter 'default_permission' [ 1054.094061][T13342] syzkaller0: entered promiscuous mode [ 1054.100521][T13342] syzkaller0: entered allmulticast mode [ 1054.109256][T13353] netlink: 'syz.3.1992': attribute type 10 has an invalid length. [ 1054.279466][T13357] loop1: detected capacity change from 0 to 64 [ 1054.678721][T11219] usb 5-1: USB disconnect, device number 10 [ 1054.686695][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.693480][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.186880][ T28] audit: type=1804 audit(1768213368.659:310): pid=13392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1997" name="/newroot/522/file1" dev="fuse" ino=1 res=1 errno=0 [ 1057.224156][T13394] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1057.341865][T13398] loop3: detected capacity change from 0 to 164 [ 1057.566088][T13363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.573374][T13363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.189002][T13363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.239813][T13363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.692302][T13363] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.706202][T13363] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.715275][T13363] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.724247][T13363] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.847240][T13366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1995'. [ 1058.858212][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 1059.037567][T13416] fuse: Unknown parameter 'default_permission' [ 1059.107529][T13422] loop4: detected capacity change from 0 to 64 [ 1059.544856][T13438] loop1: detected capacity change from 0 to 256 [ 1059.603861][T13438] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1059.619532][T11219] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1059.632694][T13431] syzkaller0: entered promiscuous mode [ 1059.642055][T13431] syzkaller0: entered allmulticast mode [ 1059.649730][T13443] loop4: detected capacity change from 0 to 64 [ 1059.665135][T13438] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1059.820106][T11219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.850166][T11219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.887864][T11219] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1059.932166][T11219] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1059.959798][T11219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.991189][T11219] usb 4-1: config 0 descriptor?? [ 1060.418159][T11219] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1060.488080][T11219] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1062.144843][T11219] usb 4-1: reset high-speed USB device number 48 using dummy_hcd [ 1062.374679][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2012'. [ 1062.648473][T13462] fuse: Bad value for 'group_id' [ 1062.900084][T13471] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 1062.911849][T13471] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 1062.939337][ T788] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1063.132480][T13480] loop1: detected capacity change from 0 to 1024 [ 1063.147251][ T788] usb 5-1: Using ep0 maxpacket: 32 [ 1063.173313][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.184897][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.197133][T13480] EXT4-fs: Ignoring removed bh option [ 1063.211210][ T788] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1063.222161][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.269852][T13480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.302386][ T788] usb 5-1: config 0 descriptor?? [ 1063.348345][T11219] usb 4-1: device descriptor read/64, error -32 [ 1063.379159][T13489] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.2019: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1063.441470][T13489] EXT4-fs (loop1): Remounting filesystem read-only [ 1063.457264][T13480] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null. [ 1063.478720][T13480] overlayfs: failed to get origin (-5) [ 1063.491947][T13480] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 1063.509393][T13480] overlayfs: failed to verify upper root origin [ 1063.533225][T13464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.573882][T13464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.665873][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.679745][T13488] syzkaller0: entered promiscuous mode [ 1063.698204][T13488] syzkaller0: entered allmulticast mode [ 1063.882897][T11219] usb 4-1: reset high-speed USB device number 48 using dummy_hcd [ 1063.892715][T11219] usb 4-1: device reset changed ep0 maxpacket size! [ 1063.906860][ T27] usb 4-1: USB disconnect, device number 48 [ 1064.111523][T13505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.121819][ T27] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1064.129948][T13505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.338008][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 1064.349864][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.371727][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.396470][ T27] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1064.426404][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.464817][ T27] usb 4-1: config 0 descriptor?? [ 1064.703343][T13470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.720179][T13470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.171754][T13517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.181318][T13517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.498487][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 1067.504618][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 1067.515003][ T788] usbhid 5-1:0.0: can't add hid device: -71 [ 1067.521174][ T788] usbhid: probe of 5-1:0.0 failed with error -71 [ 1067.532722][ T27] usb 4-1: USB disconnect, device number 49 [ 1067.540743][ T788] usb 5-1: USB disconnect, device number 11 [ 1067.623967][T13521] fuse: Bad value for 'group_id' [ 1067.689592][T13524] loop3: detected capacity change from 0 to 256 [ 1067.866213][T13532] binder: binder_mmap: 13531 200000000000-200000200000 bad vm_flags failed -1 [ 1068.000825][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2024'. [ 1068.418909][T13547] loop3: detected capacity change from 0 to 2048 [ 1068.464839][T13547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1068.552221][T13555] fuse: Bad value for 'group_id' [ 1068.637398][ T27] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1068.667347][ T788] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1068.777591][T13558] syzkaller0: entered promiscuous mode [ 1068.783678][T13558] syzkaller0: entered allmulticast mode [ 1068.847156][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1068.855518][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.876046][ T788] usb 5-1: Using ep0 maxpacket: 32 [ 1068.888491][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.907462][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.931310][ T27] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1068.940969][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.951701][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.960121][ T788] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1068.970903][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.980256][ T27] usb 1-1: config 0 descriptor?? [ 1068.998807][ T788] usb 5-1: config 0 descriptor?? [ 1069.192939][T13549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.202381][T13549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.216220][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.262638][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.634884][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.643790][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.890724][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.901403][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.587982][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 1072.594190][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 1072.606490][ T788] usbhid 5-1:0.0: can't add hid device: -71 [ 1072.612997][ T788] usbhid: probe of 5-1:0.0 failed with error -71 [ 1072.631947][ T788] usb 5-1: USB disconnect, device number 12 [ 1072.638401][ T27] usb 1-1: USB disconnect, device number 41 [ 1073.098937][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2043'. [ 1073.562167][T13616] loop4: detected capacity change from 0 to 512 [ 1073.589925][T13616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1073.633111][T13616] EXT4-fs (loop4): 1 truncate cleaned up [ 1073.669537][T13616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1073.732750][ T28] audit: type=1800 audit(1768213385.209:311): pid=13616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2053" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1074.363650][T12283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.919154][T13662] loop0: detected capacity change from 0 to 4096 [ 1075.026654][T13668] loop4: detected capacity change from 0 to 4096 [ 1075.068426][T13668] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1075.083625][ T28] audit: type=1800 audit(1768213386.559:312): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2068" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 1075.126517][T13668] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 1075.146952][T13668] System zones: 0-5 [ 1075.161865][T13668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.200587][ T28] audit: type=1800 audit(1768213386.569:313): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2068" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 1075.378504][T13677] loop1: detected capacity change from 0 to 256 [ 1075.398913][T12283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.448230][T13677] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1075.514054][T13677] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1075.555732][T13680] loop3: detected capacity change from 0 to 8 [ 1075.671676][T13680] SQUASHFS error: xz decompression failed, data probably corrupt [ 1075.695404][T13680] SQUASHFS error: Failed to read block 0x108: -5 [ 1075.704641][T13680] SQUASHFS error: Unable to read metadata cache entry [106] [ 1075.757119][T13680] SQUASHFS error: Unable to read inode 0x11f [ 1075.976976][ T8064] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1076.197174][ T8064] usb 5-1: Using ep0 maxpacket: 8 [ 1076.214634][ T8064] usb 5-1: config index 0 descriptor too short (expected 55314, got 18) [ 1076.228804][ T8064] usb 5-1: config 30 has too many interfaces: 140, using maximum allowed: 32 [ 1076.252713][ T8064] usb 5-1: config 30 has an invalid descriptor of length 11, skipping remainder of the config [ 1076.277915][ T8064] usb 5-1: config 30 has 0 interfaces, different from the descriptor's value: 140 [ 1076.305148][ T8064] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1076.321427][T13692] loop3: detected capacity change from 0 to 4096 [ 1076.328788][ T8064] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.350580][ T8064] usb 5-1: Product: syz [ 1076.354809][ T8064] usb 5-1: Manufacturer: syz [ 1076.381985][ T8064] usb 5-1: SerialNumber: syz [ 1076.476293][T13692] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1076.563444][T13692] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1076.652988][T13703] loop1: detected capacity change from 0 to 2048 [ 1076.667265][ T8064] usb 5-1: USB disconnect, device number 13 [ 1076.711852][T13703] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1076.903829][T13705] loop0: detected capacity change from 0 to 128 [ 1077.008191][ T28] audit: type=1800 audit(1768213388.479:314): pid=13705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2085" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 1077.204541][T13712] loop1: detected capacity change from 0 to 256 [ 1077.248598][T13712] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1077.305055][T13712] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1077.351570][T13716] loop0: detected capacity change from 0 to 128 [ 1077.826148][T13729] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1078.013842][T13730] syzkaller0: entered promiscuous mode [ 1078.027866][T13730] syzkaller0: entered allmulticast mode [ 1078.077833][T13741] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1078.131273][T13741] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1078.196643][T13745] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1078.229790][T13745] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1078.247454][T13741] EXT4-fs (loop1): 1 truncate cleaned up [ 1078.272742][T13741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.340159][ T28] audit: type=1800 audit(1768213389.819:315): pid=13741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2100" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1078.486625][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.970574][T13762] set_capacity_and_notify: 3 callbacks suppressed [ 1078.970592][T13762] loop1: detected capacity change from 0 to 2048 [ 1079.037497][T13762] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1081.085438][T13767] loop1: detected capacity change from 0 to 256 [ 1081.105027][T13767] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 256) [ 1081.240835][T13771] loop0: detected capacity change from 0 to 256 [ 1081.321488][T13771] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1081.395770][T13771] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1081.505500][T13780] fuse: Unknown parameter 'grou00000000000000000000' [ 1081.832198][T13789] loop0: detected capacity change from 0 to 512 [ 1081.869024][T13789] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1081.884363][T13789] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1081.912784][T13789] EXT4-fs (loop0): mount failed [ 1081.976916][ T27] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1082.051045][T13795] sctp: [Deprecated]: syz.1.2121 (pid 13795) Use of int in max_burst socket option. [ 1082.051045][T13795] Use struct sctp_assoc_value instead [ 1082.170603][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.204679][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.260442][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1082.312930][ T27] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1082.348503][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.387489][ T5827] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1082.402330][ T27] usb 5-1: config 0 descriptor?? [ 1082.443504][T13798] syzkaller0: entered promiscuous mode [ 1082.449651][T13798] syzkaller0: entered allmulticast mode [ 1082.605983][T13802] loop3: detected capacity change from 0 to 2048 [ 1082.618487][ T5827] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 1082.649317][ T5827] usb 2-1: config 0 has no interface number 0 [ 1082.688086][ T5827] usb 2-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c [ 1082.755925][T13802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.780945][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.796033][ T5827] usb 2-1: config 0 descriptor?? [ 1082.815805][ T5827] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 1082.845929][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 1082.852189][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 1082.910796][ T27] usb 5-1: USB disconnect, device number 14 [ 1083.013917][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.333194][ T5827] gspca_sn9c20x: Write register 1000 failed -110 [ 1083.357206][ T5827] gspca_sn9c20x: Device initialization failed [ 1083.364221][ T5827] gspca_sn9c20x: probe of 2-1:0.47 failed with error -110 [ 1083.933090][ T1193] usb 2-1: USB disconnect, device number 42 [ 1084.185321][T13819] loop4: detected capacity change from 0 to 256 [ 1084.195263][T13819] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1084.238925][T13819] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1084.716371][T13823] loop1: detected capacity change from 0 to 4096 [ 1084.741548][T13823] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1084.821341][T13823] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1086.699379][T13834] loop0: detected capacity change from 0 to 2048 [ 1086.734938][T13829] loop4: detected capacity change from 0 to 4096 [ 1086.794603][T13829] ntfs3: Unknown parameter 'ÿ' [ 1086.801645][T13837] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1086.855254][T13836] loop3: detected capacity change from 0 to 2048 [ 1086.914180][T13834] overlayfs: upper fs does not support tmpfile. [ 1086.941053][T13836] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1086.959472][T13834] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1086.987193][T13834] overlayfs: failed to set xattr on upper [ 1087.013396][T13834] overlayfs: ...falling back to redirect_dir=nofollow. [ 1087.059284][T13834] overlayfs: ...falling back to metacopy=off. [ 1087.099759][T13834] overlayfs: ...falling back to index=off. [ 1087.105651][T13834] overlayfs: ...falling back to uuid=null. [ 1087.279552][T13837] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1087.298497][T13837] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1087.315473][T13837] Remounting filesystem read-only [ 1087.323727][ T7236] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1087.347411][ T7236] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1087.354758][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.369410][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.379881][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.393321][T13843] syzkaller0: entered promiscuous mode [ 1087.397213][ T7236] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1087.401715][T13843] syzkaller0: entered allmulticast mode [ 1087.405486][ T7236] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 1087.405508][ T7236] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 1087.405526][ T7236] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1087.440348][T13844] syzkaller0: entered promiscuous mode [ 1087.445850][T13844] syzkaller0: entered allmulticast mode [ 1087.447130][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.460963][ T7236] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 1087.477265][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.486257][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.496679][ T7236] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 1087.504292][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.513700][ T7236] NILFS (loop0): discard dirty page: offset=98304, ino=3 [ 1087.521164][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.530484][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.539848][ T7236] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 1087.547525][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.556436][ T7236] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 1087.564276][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.573518][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.582889][ T7236] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 1087.590500][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.601745][ T7236] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 1087.610051][ T7236] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 1087.619999][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.630677][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.642479][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.652982][ T7236] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 1087.662620][ T7236] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 1087.672768][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.685411][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.694761][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.704186][ T7236] NILFS (loop0): discard dirty page: offset=0, ino=19 [ 1087.713205][ T7236] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 1087.720949][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.730385][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.739903][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.749133][ T7236] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 1087.756067][ T7236] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 1087.763834][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.773136][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.783600][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.797716][ T7236] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 1087.804487][ T7236] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 1087.814744][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.826257][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.835800][ T7236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1087.869486][ T5767] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1087.881043][ T5767] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1090.293773][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.352437][T13847] syz.4.2140 (13847): drop_caches: 2 [ 1090.361982][ T5767] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1090.375629][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 1090.387996][ T5767] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 1090.395421][ T5767] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 1090.406466][ T5767] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 1090.413926][ T5767] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 1090.479421][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.678463][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.791630][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.095738][ T11] tipc: Left network mode [ 1091.166934][ T1193] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1091.188864][ T5827] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1091.378381][ T1193] usb 2-1: Using ep0 maxpacket: 16 [ 1091.385787][ T1193] usb 2-1: config 6 has an invalid interface number: 178 but max is 0 [ 1091.407054][ T1193] usb 2-1: config 6 has no interface number 0 [ 1091.418821][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 1091.433667][T13863] syzkaller0: entered promiscuous mode [ 1091.441708][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.453592][T13863] syzkaller0: entered allmulticast mode [ 1091.459529][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.469510][ T1193] usb 2-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=d4.e0 [ 1091.475743][ T5827] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1091.487054][ T1193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.495822][ T1193] usb 2-1: Product: syz [ 1091.521370][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.527810][ T1193] usb 2-1: Manufacturer: syz [ 1091.534033][ T1193] usb 2-1: SerialNumber: syz [ 1091.542511][ T5827] usb 5-1: config 0 descriptor?? [ 1091.642803][ T8709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1091.657966][ T8709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1091.667740][ T8709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1091.676397][ T8709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1091.688565][ T8709] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1091.696159][ T8709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1091.786250][T13857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.812556][ T1193] gspca_main: etoms-2.14.0 probing 102c:6251 [ 1091.817785][T13857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.949247][ T1193] usb 2-1: USB disconnect, device number 43 [ 1092.300652][T13877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.313339][T13877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.798435][ T8709] Bluetooth: hci0: command tx timeout [ 1093.911283][ T5827] usbhid 5-1:0.0: can't add hid device: -71 [ 1093.925681][ T5827] usbhid: probe of 5-1:0.0 failed with error -71 [ 1093.939811][ T5827] usb 5-1: USB disconnect, device number 15 [ 1094.562047][ T788] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1094.780545][ T788] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1094.789764][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.798487][ T788] usb 5-1: Product: syz [ 1094.802785][ T788] usb 5-1: Manufacturer: syz [ 1094.807839][ T788] usb 5-1: SerialNumber: syz [ 1094.815146][ T788] usb 5-1: config 0 descriptor?? [ 1095.072944][ T788] hso 5-1:0.0: Failed to find BULK IN ep [ 1095.090717][ T788] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1095.242099][ T27] usb 5-1: USB disconnect, device number 16 [ 1095.877205][ T8709] Bluetooth: hci0: command tx timeout [ 1096.924328][T13906] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2156'. [ 1096.955310][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2154'. [ 1097.254118][T13925] x_tables: ip_tables: state.0 match: invalid size 8 (kernel) != (user) 16 [ 1097.451052][T13935] loop3: detected capacity change from 0 to 1024 [ 1097.459274][T13935] EXT4-fs: inline encryption not supported [ 1097.473493][T13935] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1097.520726][T13935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.607672][ T6004] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1097.810475][ T6004] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1097.826960][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.842265][ T6004] usb 2-1: Product: syz [ 1097.846562][ T6004] usb 2-1: Manufacturer: syz [ 1097.861657][T13868] chnl_net:caif_netlink_parms(): no params data found [ 1097.871957][ T6004] usb 2-1: SerialNumber: syz [ 1097.884891][ T6004] usb 2-1: config 0 descriptor?? [ 1097.924242][ T6004] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 044 [ 1097.962688][ T8709] Bluetooth: hci0: command tx timeout [ 1098.083536][ T11] hsr_slave_0: left promiscuous mode [ 1098.097719][ T11] hsr_slave_1: left promiscuous mode [ 1098.104051][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.117601][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.148555][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.176961][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.193860][ T11] bridge_slave_1: left allmulticast mode [ 1098.240194][ T11] bridge_slave_1: left promiscuous mode [ 1098.246113][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.291329][ T11] bridge_slave_0: left allmulticast mode [ 1098.323730][ T11] bridge_slave_0: left promiscuous mode [ 1098.329998][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.377265][ T6004] (null): failure reading functionality [ 1098.411131][ T11] veth1: left promiscuous mode [ 1098.424230][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.437948][ T11] veth1_macvtap: left promiscuous mode [ 1098.447276][ T11] veth0_macvtap: left promiscuous mode [ 1098.460071][ T11] veth1_vlan: left promiscuous mode [ 1098.475657][ T11] veth0_vlan: left promiscuous mode [ 1098.577178][ T6004] i2c i2c-1: failure reading functionality [ 1098.603747][ T6004] i2c i2c-1: connected i2c-tiny-usb device [ 1098.656638][T13958] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2164'. [ 1098.874248][ T11] bond4 (unregistering): (slave vlan2): Releasing active interface [ 1098.944095][ T11] bond4 (unregistering): (slave veth3): Releasing active interface [ 1099.027805][T13933] i2c i2c-1: failure reading status [ 1099.136730][ T11] bond4 (unregistering): Released all slaves [ 1099.239603][T13933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.255453][T13933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.273401][ T27] usb 2-1: USB disconnect, device number 44 [ 1099.328788][ T11] bond3 (unregistering): Released all slaves [ 1099.494718][ T11] bond2 (unregistering): Released all slaves [ 1099.672439][T13969] loop4: detected capacity change from 0 to 512 [ 1099.686401][T13969] EXT4-fs: Ignoring removed oldalloc option [ 1099.724317][T13969] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1099.736315][ T11] bond1 (unregistering): Released all slaves [ 1099.758494][T13969] EXT4-fs (loop4): 1 truncate cleaned up [ 1099.765603][T13969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.853433][T12283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.047339][ T8709] Bluetooth: hci0: command tx timeout [ 1100.139380][ T28] audit: type=1326 audit(1768213411.609:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.4.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0f8f749 code=0x7ffc0000 [ 1100.196938][ T28] audit: type=1326 audit(1768213411.639:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.4.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0f8f749 code=0x7ffc0000 [ 1100.226775][ T28] audit: type=1326 audit(1768213411.649:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.4.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9a0f8f749 code=0x7ffc0000 [ 1100.251413][ T28] audit: type=1326 audit(1768213411.649:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.4.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0f8f749 code=0x7ffc0000 [ 1100.315103][ T28] audit: type=1326 audit(1768213411.649:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.4.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0f8f749 code=0x7ffc0000 [ 1100.820224][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1100.937923][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1100.989002][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.052471][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.511001][ T11] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1101.694141][ T11] bond0 (unregistering): (slave team0): Releasing backup interface [ 1101.865202][ T11] bond0 (unregistering): Released all slaves [ 1102.022438][T13997] netlink: 'syz.4.2180': attribute type 10 has an invalid length. [ 1102.135719][T14009] binfmt_misc: register: failed to install interpreter file ./file1 [ 1102.138861][T13997] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1102.291888][T13868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.325317][T13868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.344951][T13868] bridge_slave_0: entered allmulticast mode [ 1102.380824][T13868] bridge_slave_0: entered promiscuous mode [ 1102.403020][T13868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.420955][T13868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.442308][T13868] bridge_slave_1: entered allmulticast mode [ 1102.463058][T13868] bridge_slave_1: entered promiscuous mode [ 1102.742926][T13868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.786950][T13868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.592615][T13868] team0: Port device team_slave_0 added [ 1103.616229][T14030] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2187'. [ 1103.659217][T13868] team0: Port device team_slave_1 added [ 1103.775592][T13868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.815139][T13868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.918021][T13868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.950847][T13868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.982286][T13868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.037950][T13868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.239087][T13868] hsr_slave_0: entered promiscuous mode [ 1104.253548][T13868] hsr_slave_1: entered promiscuous mode [ 1105.486059][ T5827] IPVS: starting estimator thread 0... [ 1105.587272][T14075] IPVS: using max 21 ests per chain, 50400 per kthread [ 1105.611771][T13868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1105.675920][T13868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1105.713827][T14079] loop3: detected capacity change from 0 to 2048 [ 1105.743573][T13868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1105.754082][T14079] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1105.810492][T13868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1105.829853][T14084] sctp: [Deprecated]: syz.1.2201 (pid 14084) Use of int in max_burst socket option. [ 1105.829853][T14084] Use struct sctp_assoc_value instead [ 1105.939317][T14078] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1346: i_size: 7484 lbcount: 8192 extent 6+4608 [ 1106.136947][ T5827] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1106.151479][T13868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.271699][T13868] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.318568][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.325723][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.378455][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.385623][ T7236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.405459][ T5827] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 1106.426910][ T5827] usb 2-1: config 0 has no interface number 0 [ 1106.433082][ T5827] usb 2-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c [ 1106.457037][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.468566][ T5827] usb 2-1: config 0 descriptor?? [ 1106.477784][ T5827] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 1106.628716][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2206'. [ 1106.643078][T13868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1106.684023][T13868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1107.007235][ T5827] gspca_sn9c20x: Write register 1000 failed -110 [ 1107.017332][ T5827] gspca_sn9c20x: Device initialization failed [ 1107.027325][ T5827] gspca_sn9c20x: probe of 2-1:0.47 failed with error -110 [ 1108.007282][T12183] Bluetooth: hci3: command 0x0406 tx timeout [ 1108.343314][ T5827] usb 2-1: USB disconnect, device number 45 [ 1108.457680][T14123] loop3: detected capacity change from 0 to 512 [ 1108.515604][T14123] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1108.578347][T14123] EXT4-fs (loop3): 1 orphan inode deleted [ 1108.602638][T14123] EXT4-fs (loop3): 1 truncate cleaned up [ 1108.613152][T14123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.634805][T14123] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1422: inode #12: block 7: comm syz.3.2209: path /582/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1108.663948][T14123] EXT4-fs (loop3): Remounting filesystem read-only [ 1108.692974][T13868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.712142][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.364002][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 1110.495245][T14165] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1110.502419][T14165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1110.513522][T14165] vhci_hcd vhci_hcd.0: Device attached [ 1110.733362][T14166] vhci_hcd: connection closed [ 1110.862132][ T11] vhci_hcd: stop threads [ 1110.930826][ T1193] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1111.050576][ T11] vhci_hcd: release socket [ 1111.120806][T14171] loop3: detected capacity change from 0 to 128 [ 1111.131071][ T11] vhci_hcd: disconnect device [ 1111.254547][T13868] veth0_vlan: entered promiscuous mode [ 1111.329729][T14175] loop4: detected capacity change from 0 to 1764 [ 1111.369916][T13868] veth1_vlan: entered promiscuous mode [ 1111.480401][T13868] veth0_macvtap: entered promiscuous mode [ 1111.510021][T14176] loop4: detected capacity change from 0 to 512 [ 1111.519893][T13868] veth1_macvtap: entered promiscuous mode [ 1111.540124][T14179] sctp: [Deprecated]: syz.1.2221 (pid 14179) Use of int in max_burst socket option. [ 1111.540124][T14179] Use struct sctp_assoc_value instead [ 1111.622678][T13868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.656909][T13868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.698488][T13868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.718632][T14176] ------------[ cut here ]------------ [ 1111.724641][T14176] EA inode 11 i_nlink=2 [ 1111.726718][T14176] WARNING: CPU: 0 PID: 14176 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 1111.742856][T14176] Modules linked in: [ 1111.747245][T14176] CPU: 0 PID: 14176 Comm: syz.4.2220 Not tainted syzkaller #0 [ 1111.754766][T14176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1111.765384][T14176] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 1111.772607][T14176] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f6 20 9a ff 49 8b 37 48 c7 c7 60 c7 be 8a 89 da e8 c5 12 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 0f 0c 25 08 [ 1111.792995][T14176] RSP: 0018:ffffc90003f8f1a0 EFLAGS: 00010246 [ 1111.799723][T14176] RAX: 98d6223d6a21ad00 RBX: 0000000000000002 RCX: 0000000000080000 [ 1111.808271][T14176] RDX: ffffc900195d6000 RSI: 0000000000038f0f RDI: 0000000000038f10 [ 1111.816310][T14176] RBP: ffffc90003f8f290 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 1111.824838][T14176] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 1111.833294][T14176] R13: ffff88805da4a2a8 R14: ffff88805da4a0b0 R15: ffff88805da4a100 [ 1111.841824][T14176] FS: 00007fd9a1d436c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1111.851065][T14176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1111.852579][T13868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.857750][T14176] CR2: 00007f8f04c82000 CR3: 000000006abb4000 CR4: 00000000003506f0 [ 1111.876409][T14176] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1111.884586][T14176] DR3: 0000000000000030 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1111.892688][T14176] Call Trace: [ 1111.893548][T13868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.895988][T14176] [ 1111.906370][ T5827] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1111.908873][T14176] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1111.908918][T14176] ? ext4_xattr_inode_iget+0x3df/0x600 [ 1111.927788][T14176] ? __might_sleep+0xe0/0xe0 [ 1111.932455][T14176] ext4_xattr_set_entry+0xcda/0x1e90 [ 1111.937887][T14176] ext4_xattr_ibody_set+0x254/0x6a0 [ 1111.943156][T14176] ext4_expand_extra_isize_ea+0x13a3/0x1e90 [ 1111.949356][T14176] __ext4_expand_extra_isize+0x306/0x400 [ 1111.955144][T14176] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 1111.960841][T14176] ext4_evict_inode+0x7ed/0xea0 [ 1111.965769][T14176] ? _raw_spin_unlock+0x28/0x40 [ 1111.970787][T14176] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1111.976745][T14176] ? do_raw_spin_unlock+0x121/0x230 [ 1111.982324][T14176] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1111.988356][T14176] evict+0x486/0x870 [ 1111.992296][T14176] ? __lock_acquire+0x7c80/0x7c80 [ 1111.997456][T14176] ? proc_nr_inodes+0x230/0x230 [ 1112.002359][T14176] ? do_raw_spin_unlock+0x121/0x230 [ 1112.007665][T14176] ? _raw_spin_unlock+0x28/0x40 [ 1112.012579][T14176] ? iput+0x70a/0x920 [ 1112.016581][T14176] ext4_orphan_cleanup+0xbd4/0x1400 [ 1112.021869][T14176] ? do_raw_spin_unlock+0x121/0x230 [ 1112.027242][T14176] ? ext4_orphan_del+0xba0/0xba0 [ 1112.032252][T14176] ? ext4_register_li_request+0x183/0x940 [ 1112.038147][T14176] ? errseq_check_and_advance+0x66/0x120 [ 1112.043850][T14176] ext4_fill_super+0x5e29/0x66f0 [ 1112.048989][T14176] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1112.055282][T14176] ? __might_sleep+0xe0/0xe0 [ 1112.059997][T14176] ? read_lock_is_recursive+0x20/0x20 [ 1112.065418][T14176] ? snprintf+0xdb/0x120 [ 1112.069806][T14176] ? vscnprintf+0x80/0x80 [ 1112.074218][T14176] ? down_read_killable+0x340/0x340 [ 1112.074937][T13868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.079522][T14176] ? setup_bdev_super+0x56b/0x660 [ 1112.079553][T14176] get_tree_bdev+0x3e4/0x510 [ 1112.079578][T14176] ? vfs_parse_fs_string+0x160/0x160 [ 1112.102068][T14176] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1112.108422][T14176] ? setup_bdev_super+0x660/0x660 [ 1112.113499][T14176] ? apparmor_capable+0x137/0x1a0 [ 1112.118787][T14176] ? bpf_lsm_capable+0x9/0x10 [ 1112.123526][T14176] ? security_capable+0x89/0xb0 [ 1112.128492][T14176] vfs_get_tree+0x8c/0x280 [ 1112.132973][T14176] do_new_mount+0x24b/0xa40 [ 1112.137739][T14176] __se_sys_mount+0x2da/0x3c0 [ 1112.142484][T14176] ? __x64_sys_mount+0xc0/0xc0 [ 1112.147349][T14176] ? lockdep_hardirqs_on+0x98/0x150 [ 1112.152602][T14176] ? __x64_sys_mount+0x20/0xc0 [ 1112.157526][T14176] do_syscall_64+0x55/0xb0 [ 1112.161992][T14176] ? clear_bhb_loop+0x40/0x90 [ 1112.166714][T14176] ? clear_bhb_loop+0x40/0x90 [ 1112.171503][T14176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1112.177533][T14176] RIP: 0033:0x7fd9a0f90eea [ 1112.182008][T14176] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.201849][T14176] RSP: 002b:00007fd9a1d42e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.210391][T14176] RAX: ffffffffffffffda RBX: 00007fd9a1d42ef0 RCX: 00007fd9a0f90eea [ 1112.218724][T14176] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd9a1d42eb0 [ 1112.226747][T14176] RBP: 0000200000000180 R08: 00007fd9a1d42ef0 R09: 0000000000800700 [ 1112.234829][T14176] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1112.242911][T14176] R13: 00007fd9a1d42eb0 R14: 000000000000049b R15: 000000000000002c [ 1112.251002][T14176] [ 1112.254071][T14176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1112.254574][T13868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.258407][T13868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.258575][T13868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.258735][T13868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.296102][T14176] CPU: 0 PID: 14176 Comm: syz.4.2220 Not tainted syzkaller #0 [ 1112.303581][T14176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1112.313660][T14176] Call Trace: [ 1112.316964][T14176] [ 1112.319917][T14176] dump_stack_lvl+0x16c/0x230 [ 1112.324652][T14176] ? show_regs_print_info+0x20/0x20 [ 1112.329876][T14176] ? load_image+0x3b0/0x3b0 [ 1112.334425][T14176] panic+0x2c0/0x710 [ 1112.338382][T14176] ? bpf_jit_dump+0xd0/0xd0 [ 1112.342923][T14176] __warn+0x2e0/0x470 [ 1112.346942][T14176] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 1112.353009][T14176] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 1112.359026][T14176] report_bug+0x2be/0x4f0 [ 1112.363404][T14176] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 1112.369427][T14176] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 1112.375449][T14176] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 1112.381468][T14176] handle_bug+0xcf/0x120 [ 1112.385750][T14176] exc_invalid_op+0x1a/0x50 [ 1112.390281][T14176] asm_exc_invalid_op+0x1a/0x20 [ 1112.395171][T14176] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 1112.401791][T14176] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 f6 20 9a ff 49 8b 37 48 c7 c7 60 c7 be 8a 89 da e8 c5 12 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 0f 0c 25 08 [ 1112.421433][T14176] RSP: 0018:ffffc90003f8f1a0 EFLAGS: 00010246 [ 1112.427525][T14176] RAX: 98d6223d6a21ad00 RBX: 0000000000000002 RCX: 0000000000080000 [ 1112.435514][T14176] RDX: ffffc900195d6000 RSI: 0000000000038f0f RDI: 0000000000038f10 [ 1112.443513][T14176] RBP: ffffc90003f8f290 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 1112.451511][T14176] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 1112.459508][T14176] R13: ffff88805da4a2a8 R14: ffff88805da4a0b0 R15: ffff88805da4a100 [ 1112.467524][T14176] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1112.473240][T14176] ? ext4_xattr_inode_iget+0x3df/0x600 [ 1112.478743][T14176] ? __might_sleep+0xe0/0xe0 [ 1112.483368][T14176] ext4_xattr_set_entry+0xcda/0x1e90 [ 1112.488812][T14176] ext4_xattr_ibody_set+0x254/0x6a0 [ 1112.494152][T14176] ext4_expand_extra_isize_ea+0x13a3/0x1e90 [ 1112.500124][T14176] __ext4_expand_extra_isize+0x306/0x400 [ 1112.505810][T14176] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 1112.511326][T14176] ext4_evict_inode+0x7ed/0xea0 [ 1112.516238][T14176] ? _raw_spin_unlock+0x28/0x40 [ 1112.521174][T14176] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1112.527117][T14176] ? do_raw_spin_unlock+0x121/0x230 [ 1112.532387][T14176] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1112.538327][T14176] evict+0x486/0x870 [ 1112.542259][T14176] ? __lock_acquire+0x7c80/0x7c80 [ 1112.547326][T14176] ? proc_nr_inodes+0x230/0x230 [ 1112.552221][T14176] ? do_raw_spin_unlock+0x121/0x230 [ 1112.557450][T14176] ? _raw_spin_unlock+0x28/0x40 [ 1112.562325][T14176] ? iput+0x70a/0x920 [ 1112.566347][T14176] ext4_orphan_cleanup+0xbd4/0x1400 [ 1112.571582][T14176] ? do_raw_spin_unlock+0x121/0x230 [ 1112.576824][T14176] ? ext4_orphan_del+0xba0/0xba0 [ 1112.581793][T14176] ? ext4_register_li_request+0x183/0x940 [ 1112.587544][T14176] ? errseq_check_and_advance+0x66/0x120 [ 1112.593213][T14176] ext4_fill_super+0x5e29/0x66f0 [ 1112.598260][T14176] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1112.604555][T14176] ? __might_sleep+0xe0/0xe0 [ 1112.609182][T14176] ? read_lock_is_recursive+0x20/0x20 [ 1112.614616][T14176] ? snprintf+0xdb/0x120 [ 1112.618894][T14176] ? vscnprintf+0x80/0x80 [ 1112.623260][T14176] ? down_read_killable+0x340/0x340 [ 1112.628487][T14176] ? setup_bdev_super+0x56b/0x660 [ 1112.633539][T14176] get_tree_bdev+0x3e4/0x510 [ 1112.638161][T14176] ? vfs_parse_fs_string+0x160/0x160 [ 1112.643483][T14176] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1112.649756][T14176] ? setup_bdev_super+0x660/0x660 [ 1112.654807][T14176] ? apparmor_capable+0x137/0x1a0 [ 1112.659857][T14176] ? bpf_lsm_capable+0x9/0x10 [ 1112.664582][T14176] ? security_capable+0x89/0xb0 [ 1112.669467][T14176] vfs_get_tree+0x8c/0x280 [ 1112.673909][T14176] do_new_mount+0x24b/0xa40 [ 1112.678458][T14176] __se_sys_mount+0x2da/0x3c0 [ 1112.683192][T14176] ? __x64_sys_mount+0xc0/0xc0 [ 1112.688003][T14176] ? lockdep_hardirqs_on+0x98/0x150 [ 1112.693233][T14176] ? __x64_sys_mount+0x20/0xc0 [ 1112.698021][T14176] do_syscall_64+0x55/0xb0 [ 1112.702500][T14176] ? clear_bhb_loop+0x40/0x90 [ 1112.707203][T14176] ? clear_bhb_loop+0x40/0x90 [ 1112.711915][T14176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1112.717842][T14176] RIP: 0033:0x7fd9a0f90eea [ 1112.722290][T14176] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.741922][T14176] RSP: 002b:00007fd9a1d42e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.750547][T14176] RAX: ffffffffffffffda RBX: 00007fd9a1d42ef0 RCX: 00007fd9a0f90eea [ 1112.758539][T14176] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd9a1d42eb0 [ 1112.766531][T14176] RBP: 0000200000000180 R08: 00007fd9a1d42ef0 R09: 0000000000800700 [ 1112.774531][T14176] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 1112.782536][T14176] R13: 00007fd9a1d42eb0 R14: 000000000000049b R15: 000000000000002c [ 1112.790552][T14176] [ 1112.794157][T14176] Kernel Offset: disabled [ 1112.798663][T14176] Rebooting in 86400 seconds..