last executing test programs: 11m46.779517262s ago: executing program 0 (id=21): syz_mount_image$bfs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x80, &(0x7f0000000180)=ANY=[], 0xfd, 0xb0, &(0x7f0000000500)="$eJzs1z9KA0EcBeC3i/in0QN4hz2BIB5FrEQ7K0XIiXKVHCFtqhRp00wIky3CErKkWQLfBzPwm1fMFNO8xXb+nMekzJJym73S+/n9+3r/rnsGmuERV6fNZ+6S3Kf+gTbJ+q1mTeq83Px/9CvJzdRvBgAALtOmy+vqaO5y6APnjaoCLw8no/I06hoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACe0CAAD//73NIaI=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, 0xfffffffffffffffd, 0xdb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) 11m43.734781154s ago: executing program 0 (id=25): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0xa10812, &(0x7f0000001a80)=ANY=[@ANYBLOB='discard,utf8,fmask=00000000000000000000267,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,umask=00000000000000000200004,umask=00000000000000000003377,errors=continue,iocharset=iso8859-9,iocharset=iso8859-5,umask=00000000000000000005454,dmask=00000000000000000000015,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=sysadm_u,subj_type=cocharset,dont_measure,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673666c6f6f723d2c726f6f74636fff565ec4a2cba3ca54bf052a8a27986e746578743d73746166665f752c7065726d69745f646972656374696f2c657569643c", @ANYRESDEC, @ANYBLOB=',\x00'], 0x21, 0x1502, &(0x7f0000000540)="$eJzs3AlwVcW2MOBe3b0hYMRjRIZAr14bjhCgiYiIDCIig4iIyEVEZBIBESMiIiIqhBkRAREBGSMiQ0BAZIghYpjnQWYRIyJGREQmmQT6r3i5D+/1vt9337uvqHpZX9Wu9Dr7rN6rz0pl731S5/zYY2Td5vVqNSUi8T8Cf/2RLISIEUIMEULcIIQIhBCV4irF5ezPpyD5f3YQ9u/1SOq1roBdS9z/3I37n7tx/3M37n/uxv3P3bj/uRv3P3fj/jOWm22bXfRG3nLvxu//52Z8/v8/JLv8pG83lL+557+Qwv3P3bj/uRv3P3fj/udu3P/cjfufu3H/czfuP2O52X//vWP+38H/he1a//4xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMsdzvmrtBDib+NrXRdjjDHGGGOMMcb+fXzea10BY4wxxhhjjDHG/veBkEIJLQKRR+QVMflyHrtOxIrrRQFxg4iIG0WcuEkUFDeLQqKwKCKKinhRTBQXRqCwgkQoSoiSIipuEaVEaZEgyoiyopxworxIFLeKCuI2UVHcLiqJO0RlcaeoIqqKaqK6uEvUEHeLmuIeUUvcK2qLOqKuqCfuE/XF/aKBeEA0FA+KRuIh0Vg8LJqIv4im4hHRTDwqmovHRAvxuGgpWonWoo1o+9/Kf0W8Kl4TvUUfkSz6in6ivxggBopBYrAYIl4XQ0XMlddmhBgp3hKjxNtitHhHjBFjxTjxrhgvJoiJYpKYLKaIFPGemCreF9PEB2K6mCFmilkiVcwWc8SHYq6YJ+aLj8QC8bFYKBaJxWKJSBOfiHSxVGSIT8Uy8ZnIFMvFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVbBOfi+1ih9gpdondYo/YK74Q+8SXYr/4SmSJr//F/LP/kN8TBAiQIEGDhjyQB2IgBvJDfoiFWCgABSACEYiDOCjoPRSCQqWLQBGIh3goDsVBAwIBQQkoAVGIQikoBQmQAGWhLDhwkAiJUAFug4pQESpBJagMlaEKVIWqUB2qQw2oATWhJtSCWlAbakNdqAv3wX1wPzSABtAQGkIjaASNoTFkF2sCTaEpNINm0ByaQwtoAS2hJbSG1tAW2kI7aAftoT10hI7QCTpBZ+gMSZAEXaALdIWu0A26QXfoDj2gB/SEl+FleAVegdfgNegDtWVf6Af9YAAMgEEwGAbD6zAU3oA34E0YDiNgJLwFb8HbMBrOwBgYC+NgHNSQE2AiTAKSUyAFUmAqTIVpMA2mwwyYAbMgFWbDHJgDc2EezIOPYAF8DB/DIlgESyAN0iAdlkIGZMAyOAuZsBxWwEpYBathFayFdbAWNsBG2ACbYTNsha3wOXwOO2AH7IJdsAe0EPAFfAlfwnDIgiw4AAfgIByEQ3AIsiEbDsNhOAJH4CgchWNwDI7DCTgJJ+A0nIYzcBbOwTm4ABfgIrwY/32zPWXWDxcyh5Za5pF5ZIyMkfllfhkrY2UBWUBGZETGyThZUBaUhWQhWUQWkfEyXhaX5yVKlCRDWUKWkFEZlaVkKZkgE2RZWVY66WSiTJQVZAVZUVaUleQdsrK8U1aRVWUHV11WlzVkR1dT3iNryVqytqwj68p6sp6sL+vLBrKBbCgbykaykWwsH5ZNZF8YBI/InM40lyOghRwJLWUr2Vq2kW/DE7KdHA3tZQfZUT4lx8IY6CzbuST5rOwiJ0JX+bycBC/I7nIK9JAvyZ7yZdlLviJfle1db9lHToe+sp+cBQPkQDlIDpZzoY7M6Vhd+aYcLkfIkfItuQTelqPlO3KMHCvHyXfleDlBTpST5GQ5RabI9+RU+b6cJj+Q0+UMOVPOkqlytpwjP5Rz5Tw5X34kF8iP5UK5SC6WS2Sa/ESmy6UyQ34ql8nPZKZcLlfIlXKVXC3XyLVynVwvN8iNcpPcLLfIrXKb/FxulzvkTrlL7pZ75F75hdwnv5T75VcyS34tD8hv5EH5rTwkv5PZ8nt5WP4gj8gf5VH5kzwmf5bH5Ql5Up6Sp+Uv8ow8K8/J8/KC/FVelJfkZemlUKCkUkqrQOVReVWMyqfyq+tUrLpeFVA3qIi6UcWpm1RBdbMqpAqrIqqoilfFVHFlFCqrSIWqhCqpouoWVUqVVgmqjCqryimnyqtEdauqoG5TFdXtqpK6Q1VWd6oqqqqqpqqru1QNdbeqqe5RtdS9qraqo+qqeuo+VV/drxqoB1RD9aBqpB5SjdXDqon6i2qqHlHN1KOquXpMtVCPq5aqlWqt2qi26gnVTj2p2qsOqqN6SnVST6vO6hmVpJ5VXdRzqqt6XnVTL6ju6kXVQ72keqqXVS91SV1WXvVWfVSy6qv6qf5qgBqoBqnBaoh6XQ1Vb6hh6k01XI1QI9VbapR6W41W76gxaqwap95V49UENVFNUpPVFJWi3lNT1ftqmvpATVcz1Ew1S6Wq2WrQlZnm/xfy3/8n+cN+O/pWtU19rrarHWqn2qV2qz1qr9qr9ql9ar/ar7JUljqgDqiD6qA6pA6pbJWtDqvD6og6oo6qo+qYOqaOqxPqvDqlTqtf1Bl1Vp1V59UFdUFdvPIaCA1aaqW1DnQenVfH6Hw6v75Ox+rrdQF9g47oG3WcvkkX1DfrQrqwLqKL6nhdTBfXRqO2mnSoS+iSOqpvgSsnTV1Wl9NOl9eJ+tZ/JV+X0qV1gi7zd/l/Vl9b3Va30+10e91ed9QddSfdSXfWnXWSTtJddBfdVXfV3XQ33V131z10D91T99S9dC/9qn5V99a9dbJO1v10fz1AD9SD9GA9RL+uh+qhepgepofr4XqkHqlH6VF6tB6tx+gxepwep8fr8Xqinqgn68k6RafoqXqqnqan6el6up6pZ+pUnarn6Dl6rp6r5+v5eoFeoBfqhXqxXqzTdJpO1+k6Q2foZXqZztTL9XK9Uq/Uq/VqvVav1ev1er1Rb9Sb9WadmXeb3qa36+16p96pd+vdeq/eq/fpfXq/3q+zdJY+oA/og/qgPqQP6WydrQ/rw/qIPqKP6qP6mD6mj+vj+qQ+qU/r0/qMPqPP6XP6gr6gL+qL+rK+nHPZF8hABjrQQZ4gTxATxAT5g/xBbBAbFAgKBJEgEsQFcUHB4OagUFA4KBIUDeKDYkHxwAQY2ICCMCgRlAyiwS1BqaB0kBCUCcoG5QIXlA8Sg1uDCsFtQcXg9qBScEdQObgzqBJUDaoF1YO7ghrB3UHN4J6gVnBvUDuoE9QN6gX3BfWD+4MGwQNBw+DBoFHwUNA4eDhoEvwlaBo8EjQLHg2aB48FLYLHg5ZBq6B10CZo+2+d3/szhZ90vU0fk2z6mn6mvxlgBppBZrAZYl43Q80bZph50ww3I8xI85YZZd42o807ZowZa8aZd814M8FMNJPMZDPFpJj3zFTzvplmPjDTzQwz08wyqWa2mWM+NHPNPDPffGQWmI/NQrPILDZLTJr5xKSbpSbDfGqWmc9MplluVpiVZpVZbdaYtWadWW82mI1mk9lstpitZpv53Gw3O8xOs8vsNnvMXvOF2We+NPvNVybLfG0OmG/MQfOtOWS+M9nme3PY/GCOmB/NUfOTOWZ+NsfNCXPSnDKnzS/mjDlrzpnz5oL51Vw0l8xl43Mu7nNO76hRYx7MgzEYg/kxP8ZiLBbAAhjBCMZhHBbEglgIC2ERLILxGI/FsTjmICQsgSUwilEshaUwAROwLJZFhw4TMRErYAWsiBWxElbCylgZq2AVrIbV8C68C+/Gu/EevAfvxXuxDtbBelgP62N9bIANsCE2xEbYCBtjY2yCTbApNsVm2AybY3NsgS2wJbbE1tga22JbbIftsD22x47YETthJ+yMnTEJk7ALdsGu2BW7YTfsjt2xB/bAntgTe2EvfBVfxd7YG5MxGfthPxyAA3AQDsIhOASH4lAchsNwOA7HkTgSR+EoHI2jcQyOxXH4Lo7HCTgRJ+FknIIpmIJTcSpOw2k4HafjTJyJqZiKc3AOzsW5OB/n4wJcgAtxIS7GxZiGaZiO6ZiBGbgMl2EmZuIKXIGrcBWuwTW4DtfhBtyAm3ATbsEtuA234XbcjjtxJ+7G3bgX9+I+3If7cT9mYRYewAN4EA/iITyE2ZiNh/EwHsEjeBSP4jE8hsfxOJ7Ek3gaT+MZPIPn8BxewF/xIl7Cy+gxxuaz+e11NtZebwvYG+w/xkVsURtvi9ni1thCtvDfxWitTbBlbFlbzjpb3ibaW21Czi3V7+IqtqqtZqvbu2wNe7et+Ye4vr3fNrAP2Ib2QVvP3vd3cSP7kG1sH7NN7OO2qW1lm9k2trl9zLawj9uWtpVtbdvYTvZp29k+Y5Pss7aLfe4PcbpdatfZ9XaD3Wj32S/tOXveHrE/2gv2V9vb9rFD7Ot2qH3DDrNv2uF2xB/icfZdO95OsBPtJDvZTvlDPNPOsql2tp1jP7Rz7bw/xGn2E7vAZtiFdpFdbJf8FufUlGE/tcvsZzbTLrcr7Eq7yq62a+za/6h1pd1st9itdq/9wm63O+xOu8vutnt+i3PWsd9+ZbPs1/aw/cEetN/aQ/aozbbf/xbnrO+o/ckesz/b4/aEPWlP2dP2F3vGnv1t/TlrP2Uv2cvWW0FAkhRpCigP5aUYykf56TqKpeupAN1AEbqR4ugmKkg3UyEqTEWoKMVTMSpOhpAsEYVUgkpSlG6hUlSaEqgMlaVy5Kg8JdKtVIFuo4p0O1WiO6gy3UlVqCpVo+p0F9Wgu6km3UO16F6qTXWoLtWj+6g+3U8N6AFqSA9SI3qIGtPD1IT+Qk3pEWpGj1Jzeoxa0OPUklpRa2pDbekJakdPUnvqQB3pKepET1NneoaS6FnqQs9RV3qeutEL1J1epB70EvWkl6kXvUKv0mvUm/pQMvWlftSfBtBAGkSDaQi9TkPpDRpGb9JwGkEj6S0aRW/TaHqHxtBYGkfv0niaQBNpEk2mKZRC79FUep+m0Qc0nWbQTJpFqTSb5tCHNJfm0Xz6iBbQx7SQFtFiWkJp9Aml01LKoE9pGX1GmbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVt9Dltpx20k3bRbtpDe+kL2kdf0n76irLoazpA39BB+pYO0XeUTd/TYfqBjtCPdJR+omP0Mx2nE3SSTtFp+oXO0Fk6R+fpAv1KF+kSXSZPIoRQhirUYRDmCfOGMWG+MH94XRgbXh8WCG8II+GNYVx4U1gwvDksFBYOi4RFw/iwWFg8NCGGNqQwDEuEJcNoeEtYKiwdJoRlwrJhudCF5cPE8NawQnhbWDG8PawU3hFWDu8Mq4RVw8cerB7eFdYI7w5rhveEtcJ7w9phnbBuWC+8L6wf3h82CB8IG4YPhhXDh8LG4cOhuPJ5lWbho2Hz8LGwRfh42DJsFbYO24RtwyfCduGTYfuwQ9gxfCrsFD4ddg6fCZPCZ8Mu4XN/uj857Bv2C/uH/UPvH1CLo0uiadFPounRpdGM6KfRZdHPopnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a1R7+vlFQ6cdMppF7g8Lq+Lcflcfnedi3XXuwLuBhdxN7o4d5Mr6G52hVxhV8QVdfGumCvujENnHbnQlXAlXdTd4kq50i7BlXFlXTnnXHmX6Nq4tq6ta+eedO1dB9fRPeWeck+7p90z7hn3rOvinnNd3fOum3vBdXcvuhfdS66ne9n1cq+4V91rrrfr45Jdsuvn+rkBboAb5Aa5IW6IG+qGumFumBvuhruRbqQb5Ua50W60G+PGuHFunBvvxruJbqKb7Ca7FJfiprqpbpqb5qa76W6mm+lSXaqb4+a4uW6um+/muwUJC9xCt9Atdotdmktz6S7dZbgMt8wtc5ku061wK9wqt8qtcWvcOrfObXAb3Ca3yW1xW9w2t81td9vdTrfT7Xa73V631+1z+9x+t99luSx3wB1wB91Bd8h957Ld9+6w+8EdcT+6o+4nd8z97I67E+6kO+VOu1/cGXfWnXPn3QX3q7voLrnLzruUyHuRqZH3I9MiH0SmR2ZEZkZmRVIjsyNzIh9G5kbmReZHPoosiHwcWRhZFFkcWRJJi3wSSY8sjWREPo0si3wWyYwsj6yIrIysiqyOeF9se+hL+JI+6m/xpXxpn+DL+LK+nHe+vE/0t/oK/jZf0d/uK/k7fGV/p6/iq/pq/nHf0rfyrX0b39Y/4dv5J31738F39E/5Tv5p39k/45P8s76Lf8539c/7bv4F392/6Hv4l3zPv91x+dd8b9/HJ/u+vp/v7wf4gX6QH+yH+Nf9UP+GH+bf9MP9CD/Sv+VH+bf9aP+OH+PH+nH+XT/eT/AT/SQ/2U/xKf49P9W/76f5D/x0P8PP9LN8qp/t5/gP/Vw/z8/3H/kF/mO/0C/yi/0Sn+Y/8el+qc/wn/pl/jOf6Zf7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+Y/99v9Dr/T7/K7/R6/13/h9/kv/X7/lc/yX/sD/ht/0H/rD/nvfLb/3h/2P/gj/kd/1P/kj/mf/XF/wp/0p/xp/4s/48/6c/68v+B/9Rf9JX+ZP7PGGGOMMfZf0v9P9vf9J49pIYS8Mu4nhLh+R9Hs3+9XQohNhf46HijjO0WEEM/26fHI37batZOTk688N1OJoOQiIUTkHw5wJV4uOoqnRZLoICr80/oGypcv0J/MH71DiPy/y4kRV+Or83/zn8z/xFPj0iuH5+L+P/MvEiKh5NWcfOJqvFx0zFmN6CAq/ifzF273J/Xn+zZFiPa/y4kVV+Or9SeKJ8VzIunvnskYY4wxxhhjjP3VQFmt25/dP+fcn8frqzl5xdX4z+7PGWOMMcYYY4wxdu298HKvZ55ISurQjQc84AEP/mNwrf8yMcYYY4wxxv7drl70X30s37UsiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4V+96Vf+YQQ/ytfJ3at18gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xda/8vAAD//0wrNV8=") openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) truncate(0x0, 0x5) 11m43.563837681s ago: executing program 2 (id=26): socket$inet6(0xa, 0x805, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 11m42.867710569s ago: executing program 2 (id=30): socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = userfaultfd(0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xab02000d) mknodat$null(0xffffffffffffffff, 0x0, 0xc000, 0x103) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11m42.582822385s ago: executing program 0 (id=31): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 11m41.687641557s ago: executing program 0 (id=33): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf256a00000008000300", @ANYRES32=r1, @ANYBLOB="0500d200"], 0x50}, 0x1, 0x0, 0x0, 0x20000813}, 0x4000000) 11m40.902923268s ago: executing program 0 (id=35): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x929402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x4, 0x5, &(0x7f0000000240)={0xa, "a52422ffd60775c221c4031d467d6648a97569b7d49cc4492d050600000000ff00"}}) 11m37.506318842s ago: executing program 2 (id=41): r0 = syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) flock(r4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, r0, &(0x7f0000000080)='./file1\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r7, 0x3b8a, 0x0) 11m37.10555268s ago: executing program 0 (id=42): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ocfs2\x00', 0x200040, &(0x7f0000000100)='barrier') r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000002d40)=[{&(0x7f00000008c0)=""/149, 0x95}], 0x1, 0x57, 0x0) 11m32.786199841s ago: executing program 2 (id=44): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000d40)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x3fff, 0x1, &(0x7f0000000040)='\x00', 0x1}) 11m32.459335333s ago: executing program 2 (id=45): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf256a00000008000300", @ANYRES32=r1, @ANYBLOB="0500d200"], 0x50}, 0x1, 0x0, 0x0, 0x20000813}, 0x4000000) 11m32.025912119s ago: executing program 2 (id=48): memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11m21.481060295s ago: executing program 32 (id=42): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ocfs2\x00', 0x200040, &(0x7f0000000100)='barrier') r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000002d40)=[{&(0x7f00000008c0)=""/149, 0x95}], 0x1, 0x57, 0x0) 11m16.64459106s ago: executing program 33 (id=48): memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8m10.070313082s ago: executing program 1 (id=401): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000), 0x0) 8m9.53354403s ago: executing program 1 (id=405): r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881af, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 8m6.628302387s ago: executing program 1 (id=412): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1f4, 0x0) 8m5.284726785s ago: executing program 1 (id=419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000008a00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000008a40)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000008c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20) 8m4.640305157s ago: executing program 1 (id=423): syz_usb_connect(0x5, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100007c8ad940ab0200000000000000010902120001000000000904280000fae16300"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000f7000000000000000671000000000000"], 0x48) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) msgget$private(0x0, 0x420) creat(0x0, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) 7m49.338265609s ago: executing program 34 (id=423): syz_usb_connect(0x5, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100007c8ad940ab0200000000000000010902120001000000000904280000fae16300"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000f7000000000000000671000000000000"], 0x48) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) msgget$private(0x0, 0x420) creat(0x0, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) 3m29.190730318s ago: executing program 4 (id=1456): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000025c0)="80", 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16], 0x4}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m28.732360612s ago: executing program 4 (id=1459): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 3m28.353934774s ago: executing program 4 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc47, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3m18.305361062s ago: executing program 4 (id=1516): rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x5d6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m17.852275844s ago: executing program 4 (id=1517): socket(0x2b, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020605000000000000000000070000001400078008000840000000980800064020000000050001000600000005000500020000000500"], 0x5c}}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x68000005}) 3m15.93808099s ago: executing program 4 (id=1526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc47, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m59.557544062s ago: executing program 35 (id=1526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc47, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 55.929991394s ago: executing program 8 (id=2034): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000001180), 0x0, &(0x7f0000000d00)=""/4, 0x4}, 0x800}], 0x1, 0x162, 0x0) 54.158137547s ago: executing program 8 (id=2038): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 48.106022523s ago: executing program 5 (id=2052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'batadv_slave_0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) 48.010851606s ago: executing program 8 (id=2053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x3}}) 47.117207686s ago: executing program 5 (id=2056): mkdir(&(0x7f0000000040)='./file0\x00', 0x14) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(0x0) 44.964192899s ago: executing program 8 (id=2060): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 44.871238368s ago: executing program 5 (id=2061): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1) 44.367282327s ago: executing program 8 (id=2065): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x7fbe, &(0x7f0000000300)={0x0, 0x44df, 0x1, 0x3, 0x33f}, &(0x7f0000000280), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000000c0), 0x1) 43.292201882s ago: executing program 5 (id=2066): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)='%', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="ea1747ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115fdffdc08286796f83a316ba76165d3827b631e77dc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3c0a0b030c0d185464d4ba8418d407ef29fc1e4761bcb5a68fcd2317bbfb4eb98caa0d3e2e006a251e095ed496a5552fbf256eb2f6ebdf539bad7e9d72146c7ac03fdba4ce87cb39600feede00400000000000000000000000000616e811ea5c31696a5bc384e7f0005667204385829db5b251fdda2771647c3d533e23bb", 0xcf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}], 0x4, 0x400c0) 42.981783076s ago: executing program 8 (id=2070): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000025e5faa2b9c875acb386555000000290000003b00000000000000000000001800000000000000290000000400000002040000000000"], 0x30}, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000240), 0x169502, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/67, 0x43}], 0x8}, 0x4db}], 0x7, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c3e68f042"}}, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x21c) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x2000000) acct(0x0) 42.86152254s ago: executing program 5 (id=2071): mkdir(&(0x7f0000000040)='./file0\x00', 0x14) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(0x0) 40.476041271s ago: executing program 5 (id=2077): openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x7, 0x81, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) setxattr$security_evm(&(0x7f0000000240)='./bus\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) 25.818163243s ago: executing program 36 (id=2070): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000025e5faa2b9c875acb386555000000290000003b00000000000000000000001800000000000000290000000400000002040000000000"], 0x30}, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000240), 0x169502, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/67, 0x43}], 0x8}, 0x4db}], 0x7, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c3e68f042"}}, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x21c) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x2000000) acct(0x0) 25.2622744s ago: executing program 37 (id=2077): openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x7, 0x81, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) setxattr$security_evm(&(0x7f0000000240)='./bus\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) 11.587541972s ago: executing program 7 (id=2136): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000400)=[{0xffffffffffffffff, 0x1, {0x2, 0xf0, 0x2}, {0x2, 0xf0}, 0x0, 0x1}, {0x2, 0x2, {0x0, 0x0, 0x2}, {0x0, 0xff, 0x1}, 0x1, 0x1}, {0x2, 0x3, {0x2, 0x0, 0x5}, {0x2, 0x1, 0x1}, 0x0, 0xfe}], 0x60) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) 7.918555403s ago: executing program 7 (id=2141): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a03000000000000000000070000001c000000090a010400000000000000000000000008000a40000000001410000010000100"], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x1, 0x0, &(0x7f0000000240)) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886f", 0x18, r6) close(0x3) 5.141586724s ago: executing program 7 (id=2145): recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=""/165, 0xa5}, 0x8}], 0x1, 0x140, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000005c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000740), 0x0, 0x40000023, 0x0) 4.837871638s ago: executing program 6 (id=2147): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0xfffffffffffffebc, 0xfa00, {0x0}}, 0x18) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f353895809949f488d256a67fe", 0xb5}, {&(0x7f00000024c0)="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", 0x1001}], 0x3) 4.344427382s ago: executing program 7 (id=2149): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000400)=[{0xffffffffffffffff, 0x1, {0x2, 0xf0, 0x2}, {0x2, 0xf0}, 0x0, 0x1}, {0x2, 0x2, {0x0, 0x0, 0x2}, {0x0, 0xff, 0x1}, 0x1, 0x1}, {0x2, 0x3, {0x2, 0x0, 0x5}, {0x2, 0x1, 0x1}, 0x0, 0xfe}], 0x60) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) 4.202937167s ago: executing program 6 (id=2150): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x239, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7800, 0x18, 0x5, 0x5, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0x3, 0xc1}]}}}}}) pipe(&(0x7f0000000600)) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4020054) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f741"], 0x7) 3.7003003s ago: executing program 6 (id=2152): setuid(0xee01) r0 = semget$private(0x0, 0x6, 0x3b1) semop(r0, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f8", 0x4}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0) 3.500472881s ago: executing program 3 (id=2153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xa47, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffd38, 0x0, 0x0}, &(0x7f0000000100)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 3.141374572s ago: executing program 3 (id=2154): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xf, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7723, 0x16, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x100000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0x2, 0x6, 0xfffa}, 0x2f, [0x7ffc, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x80009, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x7, 0x4, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x5f, 0xffffffff, 0x1ff, 0x629, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x2, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x1, 0x5, 0x6, 0x7, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x8, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x2005f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8b1, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x1, 0x1ef, 0x5, 0x8, 0x86, 0x44904785, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x1, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x401, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xbb, 0x40, 0x1ff, 0x2, 0x53, 0x5, 0x3, 0x901, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x5, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xb0, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.929677067s ago: executing program 3 (id=2155): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005"], 0x48}}, 0x4000) 2.452558419s ago: executing program 6 (id=2156): syz_clone3(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) 2.303721917s ago: executing program 3 (id=2157): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000f40)=""/4075, 0x18, 0xfeb, 0x8, 0xfffffffa}, 0x28) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xe6c, 0x2, 0xffff1980, 0xa, 0x6, "d8ad0e98c775e49ce1c41b6500a138b8ccdb17"}) syz_usb_control_io$printer(r0, 0x0, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x4d) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401000000000000", @ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.336096271s ago: executing program 6 (id=2158): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0xfffffffffffffebc, 0xfa00, {0x0}}, 0x18) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f353895809949f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf35844", 0xd3}, {&(0x7f00000024c0)="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", 0x1001}], 0x3) 949.541654ms ago: executing program 3 (id=2159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x1000, 0x0, 0x20d}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x351e, 0x483, 0x0, 0x0, 0x0) 820.749842ms ago: executing program 7 (id=2160): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x239, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7800, 0x18, 0x5, 0x5, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0x3, 0xc1}]}}}}}) pipe(&(0x7f0000000600)) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4020054) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f741"], 0x7) 309.193467ms ago: executing program 7 (id=2161): socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) pipe2(&(0x7f0000000200), 0x84000) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 308.931775ms ago: executing program 6 (id=2162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xa47, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d11867", 0x7f, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffd38, 0x0, 0x0}, &(0x7f0000000100)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 0s ago: executing program 3 (id=2163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69298b01e49419567b443803cf578f00", "6d02cd81", "066580bf1e00"}, 0x38) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000080)="74c00d1cac0e6768da", 0x9}], 0x1) kernel console output (not intermixed with test programs): [ T6476] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 296.432606][ T6498] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.439354][ T6498] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 296.502152][ T6498] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.509009][ T6498] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 296.612973][ T6498] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.619829][ T6498] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 296.639634][ T6498] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.646505][ T6498] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 296.786717][ T6498] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.793625][ T6498] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 298.197519][ T6511] loop1: detected capacity change from 0 to 4096 [ 298.655635][ T3951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.663886][ T3951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.985831][ T3882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.994140][ T3882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.914618][ T6533] loop1: detected capacity change from 0 to 64 [ 302.733743][ T6552] syz.4.147 uses obsolete (PF_INET,SOCK_PACKET) [ 302.910243][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.919211][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.076742][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.085329][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.219028][ T6560] loop3: detected capacity change from 0 to 256 [ 308.302305][ T6612] loop5: detected capacity change from 0 to 128 [ 308.435707][ T6612] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.481577][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 308.487804][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 308.494450][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 308.617504][ T6612] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.896364][ T6172] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.363223][ T6624] kvm: Disabled LAPIC found during irq injection [ 313.229265][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 313.514740][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.514916][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.515117][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 313.515262][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.520658][ T9] usb 6-1: config 0 descriptor?? [ 313.991414][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 313.991730][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 313.991903][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 313.992072][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 313.992241][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 313.992413][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 313.992584][ T9] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 314.038953][ T9] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 314.211503][ T9] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 314.301657][ T6655] loop3: detected capacity change from 0 to 1024 [ 314.335047][ T6655] EXT4-fs: Ignoring removed orlov option [ 314.584507][ T6655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.851773][ T9] cp2112 0003:10C4:EA90.0003: error reading lock byte: -32 [ 314.891496][ T9] usb 6-1: USB disconnect, device number 2 [ 315.186023][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.040321][ T6673] loop5: detected capacity change from 0 to 128 [ 316.281090][ T6673] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.331793][ T6673] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 316.454908][ T6670] loop6: detected capacity change from 0 to 4096 [ 316.586054][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 316.586129][ T30] audit: type=1800 audit(1760960070.707:27): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.178" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 317.537975][ T6670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.134197][ T6172] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.246606][ T6196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.788453][ T6700] loop4: detected capacity change from 0 to 8 [ 321.839072][ T6699] loop3: detected capacity change from 0 to 512 [ 322.067276][ T6699] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 322.354397][ T6699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.396841][ T6702] loop5: detected capacity change from 0 to 256 [ 322.515673][ T6702] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 322.526790][ T6702] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 322.935619][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 323.237347][ T6702] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 323.264657][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.276158][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.288827][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 323.299244][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.335482][ T6702] exFAT-fs (loop5): failed to load alloc-bitmap [ 323.342617][ T6702] exFAT-fs (loop5): failed to recognize exfat type [ 323.379114][ T6700] SQUASHFS error: zlib decompression failed, data probably corrupt [ 323.392443][ T6700] SQUASHFS error: Failed to read block 0x4e8: -5 [ 323.425708][ T30] audit: type=1800 audit(1760960077.517:28): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 323.480305][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.632128][ T9] usb 2-1: config 0 descriptor?? [ 325.797252][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 325.804739][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 325.812129][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 325.819332][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 325.826816][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 325.834115][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 325.845585][ T9] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 327.815512][ T9] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 328.104736][ T9] cp2112 0003:10C4:EA90.0004: error requesting version [ 328.167845][ T9] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -71 [ 328.312885][ T9] usb 2-1: USB disconnect, device number 3 [ 329.159538][ T6727] fido_id[6727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 330.641769][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 330.820211][ T6759] loop3: detected capacity change from 0 to 16 [ 331.606317][ T6761] loop5: detected capacity change from 0 to 256 [ 331.749601][ T6759] erofs (device loop3): mounted with root inode @ nid 36. [ 331.844763][ T6761] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.856018][ T6761] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 331.896996][ T6759] erofs (device loop3): readahead error at folio 87 @ nid 36 [ 331.904796][ T6759] erofs (device loop3): readahead error at folio 86 @ nid 36 [ 331.912974][ T6759] erofs (device loop3): bogus lookback distance 363 @ lcn 82 of nid 36 [ 331.921543][ T6759] erofs (device loop3): readahead error at folio 83 @ nid 36 [ 331.929208][ T6759] erofs (device loop3): bogus lookback distance 363 @ lcn 82 of nid 36 [ 331.937725][ T6759] erofs (device loop3): readahead error at folio 82 @ nid 36 [ 331.945677][ T6759] erofs (device loop3): readahead error at folio 79 @ nid 36 [ 331.953353][ T6759] erofs (device loop3): readahead error at folio 78 @ nid 36 [ 331.961079][ T6759] erofs (device loop3): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 331.969606][ T6759] erofs (device loop3): readahead error at folio 76 @ nid 36 [ 331.977406][ T6759] erofs (device loop3): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 331.992103][ T6759] erofs (device loop3): readahead error at folio 75 @ nid 36 [ 331.999811][ T6759] erofs (device loop3): readahead error at folio 74 @ nid 36 [ 332.016439][ T6759] erofs (device loop3): readahead error at folio 72 @ nid 36 [ 332.026459][ T6759] erofs (device loop3): readahead error at folio 71 @ nid 36 [ 332.034309][ T6759] erofs (device loop3): readahead error at folio 70 @ nid 36 [ 332.042881][ T6759] erofs (device loop3): readahead error at folio 63 @ nid 36 [ 332.050646][ T6759] erofs (device loop3): readahead error at folio 61 @ nid 36 [ 332.058373][ T6759] erofs (device loop3): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 332.067028][ T6759] erofs (device loop3): readahead error at folio 59 @ nid 36 [ 332.074694][ T6759] erofs (device loop3): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 332.083303][ T6759] erofs (device loop3): readahead error at folio 58 @ nid 36 [ 332.097040][ T6759] erofs (device loop3): readahead error at folio 56 @ nid 36 [ 332.106533][ T6759] erofs (device loop3): readahead error at folio 54 @ nid 36 [ 332.114492][ T6759] erofs (device loop3): readahead error at folio 50 @ nid 36 [ 332.122315][ T6759] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 332.130941][ T6759] erofs (device loop3): readahead error at folio 47 @ nid 36 [ 332.138510][ T6759] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 332.147116][ T6759] erofs (device loop3): readahead error at folio 46 @ nid 36 [ 332.155370][ T6759] erofs (device loop3): readahead error at folio 45 @ nid 36 [ 332.163103][ T6759] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 332.171703][ T6759] erofs (device loop3): readahead error at folio 43 @ nid 36 [ 332.179278][ T6759] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 332.194092][ T6759] erofs (device loop3): readahead error at folio 42 @ nid 36 [ 332.203557][ T6759] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 332.212108][ T6759] erofs (device loop3): readahead error at folio 41 @ nid 36 [ 332.219677][ T6759] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36 [ 332.228205][ T6759] erofs (device loop3): readahead error at folio 40 @ nid 36 [ 332.235932][ T6759] erofs (device loop3): readahead error at folio 39 @ nid 36 [ 332.244200][ T6759] erofs (device loop3): readahead error at folio 38 @ nid 36 [ 332.252136][ T6759] erofs (device loop3): readahead error at folio 36 @ nid 36 [ 332.260295][ T6759] erofs (device loop3): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 332.268931][ T6759] erofs (device loop3): readahead error at folio 31 @ nid 36 [ 332.277540][ T6759] erofs (device loop3): readahead error at folio 25 @ nid 36 [ 332.285234][ T6759] erofs (device loop3): readahead error at folio 24 @ nid 36 [ 332.299101][ T6759] erofs (device loop3): readahead error at folio 19 @ nid 36 [ 332.309798][ T6759] syz.3.201: attempt to access beyond end of device [ 332.309798][ T6759] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 332.324835][ T6759] syz.3.201: attempt to access beyond end of device [ 332.324835][ T6759] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 332.339738][ T6759] syz.3.201: attempt to access beyond end of device [ 332.339738][ T6759] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 332.354904][ T6759] syz.3.201: attempt to access beyond end of device [ 332.354904][ T6759] loop3: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 332.368938][ T6759] syz.3.201: attempt to access beyond end of device [ 332.368938][ T6759] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 332.382836][ T6759] syz.3.201: attempt to access beyond end of device [ 332.382836][ T6759] loop3: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 332.461079][ T6759] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 332.592468][ T6759] erofs (device loop3): failed to decompress -44 in[46, 4050] out[1851] [ 332.608571][ T6759] erofs (device loop3): read error -117 @ 43 of nid 36 [ 332.619132][ T6762] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 332.628037][ T6762] erofs (device loop3): failed to decompress -44 in[46, 4050] out[1851] [ 332.638700][ T6762] erofs (device loop3): read error -117 @ 43 of nid 36 [ 332.676238][ T6763] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 332.685189][ T6763] erofs (device loop3): failed to decompress -44 in[46, 4050] out[1851] [ 332.694025][ T6763] erofs (device loop3): read error -117 @ 43 of nid 36 [ 332.793527][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.804359][ T9] usb 7-1: config 0 has no interface number 0 [ 332.810699][ T9] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 332.822391][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.842205][ T9] usb 7-1: config 0 descriptor?? [ 332.922212][ T9] usb 7-1: selecting invalid altsetting 1 [ 332.928665][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 332.935280][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 333.379384][ T6761] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 333.601544][ T6761] exFAT-fs (loop5): failed to load alloc-bitmap [ 333.607967][ T6761] exFAT-fs (loop5): failed to recognize exfat type [ 334.196025][ T6769] lo speed is unknown, defaulting to 1000 [ 334.203022][ T6769] lo speed is unknown, defaulting to 1000 [ 334.210072][ T6769] lo speed is unknown, defaulting to 1000 [ 334.228537][ T6769] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 334.272543][ T6769] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 335.217414][ T6769] lo speed is unknown, defaulting to 1000 [ 335.231588][ T6769] lo speed is unknown, defaulting to 1000 [ 335.240138][ T6769] lo speed is unknown, defaulting to 1000 [ 335.249669][ T6769] lo speed is unknown, defaulting to 1000 [ 335.258268][ T6769] lo speed is unknown, defaulting to 1000 [ 335.608920][ T9] DVB: Unable to find symbol cx22700_attach() [ 336.878973][ T9] DVB: Unable to find symbol tda10046_attach() [ 336.885667][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 336.920045][ T9] usb 7-1: USB disconnect, device number 2 [ 339.502182][ T6820] loop6: detected capacity change from 0 to 256 [ 339.578782][ T6820] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 339.589912][ T6820] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 339.769928][ T6820] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 339.829763][ T6820] exFAT-fs (loop6): failed to load alloc-bitmap [ 339.836962][ T6820] exFAT-fs (loop6): failed to recognize exfat type [ 341.821229][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 342.002394][ T6836] lo speed is unknown, defaulting to 1000 [ 342.008651][ T6836] lo speed is unknown, defaulting to 1000 [ 342.015919][ T6836] lo speed is unknown, defaulting to 1000 [ 342.069283][ T6836] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 342.167029][ T9] usb 5-1: config 1 has an invalid interface number: 224 but max is 0 [ 342.175563][ T9] usb 5-1: config 1 has no interface number 0 [ 342.182139][ T9] usb 5-1: config 1 interface 224 has no altsetting 0 [ 342.342437][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0620, bcdDevice=2c.26 [ 342.352581][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.361011][ T9] usb 5-1: Product: syz [ 342.365348][ T9] usb 5-1: Manufacturer: syz [ 342.370126][ T9] usb 5-1: SerialNumber: syz [ 342.925033][ T9] qmi_wwan 5-1:1.224: bogus CDC Union: master=0, slave=1 [ 343.016488][ T9] qmi_wwan 5-1:1.224: probe with driver qmi_wwan failed with error -22 [ 343.211794][ T1656] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 343.259911][ T9] usb 5-1: USB disconnect, device number 3 [ 343.431424][ T1656] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.442072][ T1656] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 343.457736][ T1656] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.467745][ T1656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.890016][ T1656] usb 2-1: config 0 descriptor?? [ 343.909390][ T1656] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 343.960010][ T6836] lo speed is unknown, defaulting to 1000 [ 344.026957][ T6836] lo speed is unknown, defaulting to 1000 [ 344.035802][ T6836] lo speed is unknown, defaulting to 1000 [ 344.051091][ T6836] lo speed is unknown, defaulting to 1000 [ 344.059593][ T6836] lo speed is unknown, defaulting to 1000 [ 344.447235][ T6851] netlink: 'syz.5.228': attribute type 10 has an invalid length. [ 344.473409][ T6851] team0: Port device netdevsim3 added [ 345.248205][ T6860] loop6: detected capacity change from 0 to 1024 [ 345.277957][ T6860] EXT4-fs: Ignoring removed oldalloc option [ 345.284673][ T6860] EXT4-fs: Ignoring removed bh option [ 345.426918][ T6860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.279813][ T6870] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 347.283489][ T6869] loop5: detected capacity change from 0 to 4096 [ 347.416595][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.423417][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.431334][ T1656] usb 2-1: USB disconnect, device number 4 [ 350.689050][ T6888] loop4: detected capacity change from 0 to 256 [ 350.799418][ T6888] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.811193][ T6888] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 351.110668][ T6196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.183072][ T6888] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 351.218523][ T6888] exFAT-fs (loop4): failed to load alloc-bitmap [ 351.225345][ T6888] exFAT-fs (loop4): failed to recognize exfat type [ 353.593604][ T6896] loop1: detected capacity change from 0 to 4096 [ 353.746423][ T6896] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 354.351535][ T6911] sg_write: data in/out 197376/144 bytes for SCSI command 0x7-- guessing data in; [ 354.351535][ T6911] program syz.5.243 not setting count and/or reply_len properly [ 354.533848][ T6896] ntfs3(loop1): Failed to read $UpCase (-4). [ 355.180063][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 355.451551][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 355.465473][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.474926][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.590282][ T24] usb 7-1: config 0 descriptor?? [ 355.654592][ T24] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 356.300168][ T6929] loop4: detected capacity change from 0 to 512 [ 356.347871][ T6929] EXT4-fs (loop4): #blocks per group too big: 466944 [ 358.011640][ T1656] usb 7-1: USB disconnect, device number 3 [ 358.809569][ T6950] loop3: detected capacity change from 0 to 512 [ 358.860357][ T1656] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 359.046888][ T6950] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 359.164321][ T1656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.176024][ T1656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.186368][ T1656] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 359.195773][ T1656] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.398911][ T6950] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #17: comm syz.3.256: inode has both inline data and extents flags [ 359.456091][ T6950] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.256: couldn't read orphan inode 17 (err -117) [ 359.486012][ T1656] usb 7-1: config 0 descriptor?? [ 359.539783][ T6950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.893894][ T6961] siw: device registration error -23 [ 359.936822][ T1656] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 359.948614][ T1656] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 359.956049][ T1656] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 359.961390][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 359.963431][ T1656] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 359.977877][ T1656] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 359.985164][ T1656] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 359.992556][ T1656] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 360.220669][ T1656] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 360.233791][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 360.338189][ T1656] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 360.365169][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.376603][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.386739][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 360.400036][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 360.409979][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.604632][ T24] usb 4-1: config 0 descriptor?? [ 360.851580][ T6960] loop1: detected capacity change from 0 to 4096 [ 360.879811][ T1656] cp2112 0003:10C4:EA90.0005: error setting SMBus config [ 360.954969][ T1656] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 361.081369][ T6960] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 361.097298][ T1656] usb 7-1: USB disconnect, device number 4 [ 361.104296][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 361.214289][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 361.232233][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input6 [ 361.348903][ T6950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.427216][ T6950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.442486][ T24] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 361.457578][ T6967] fido_id[6967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 361.691296][ T24] usb 4-1: USB disconnect, device number 3 [ 362.523569][ T6975] fido_id[6975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 362.529551][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.629578][ T1656] IPVS: starting estimator thread 0... [ 362.727035][ T6982] IPVS: using max 192 ests per chain, 9600 per kthread [ 362.902237][ T1656] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 363.114798][ T5853] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 363.150334][ T1656] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.162041][ T1656] usb 6-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00 [ 363.171504][ T1656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.223717][ T1656] usb 6-1: config 0 descriptor?? [ 363.261663][ T6992] loop1: detected capacity change from 0 to 256 [ 363.304923][ T1656] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 363.377401][ T5853] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 363.391243][ T5853] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.400723][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.457007][ T6980] net_ratelimit: 66 callbacks suppressed [ 363.457090][ T6980] IPVS: sh: TCP [::]:0 - no destination available [ 363.508680][ T5139] bcm5974 6-1:0.0: could not read from device [ 363.532352][ T5139] bcm5974 6-1:0.0: could not read from device [ 363.566525][ T5853] usb 7-1: config 0 descriptor?? [ 363.593606][ T5139] bcm5974 6-1:0.0: could not read from device [ 363.649533][ T1656] usb 6-1: USB disconnect, device number 3 [ 363.662766][ T5139] bcm5974 6-1:0.0: could not read from device [ 363.689950][ T5853] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 363.801396][ T6996] loop4: detected capacity change from 0 to 512 [ 363.837995][ T6996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.167066][ T7003] siw: device registration error -23 [ 364.175992][ T6996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.189625][ T6996] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.723855][ T7013] EXT4-fs warning (device loop4): ext4_group_extend:1886: will only finish group (16384 blocks, 16256 new) [ 364.736109][ T7013] EXT4-fs warning (device loop4): ext4_group_extend:1891: can't read last block, resize aborted [ 364.840705][ T7012] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 367.120600][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.177102][ T24] usb 7-1: USB disconnect, device number 5 [ 369.059065][ T7033] loop1: detected capacity change from 0 to 512 [ 369.179366][ T7033] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 369.519965][ T7033] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.277: inode has both inline data and extents flags [ 369.570554][ T7033] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.277: couldn't read orphan inode 17 (err -117) [ 369.686682][ T7033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.912356][ T5799] Bluetooth: hci5: command 0x0406 tx timeout [ 370.108262][ T7026] loop5: detected capacity change from 0 to 4096 [ 370.169424][ T7026] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 370.335717][ T7037] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 370.401385][ T1578] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 370.611520][ T1578] usb 2-1: Using ep0 maxpacket: 16 [ 370.671518][ T1578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.682867][ T1578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.697796][ T1578] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 370.713502][ T1578] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 370.722910][ T1578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.047488][ T1578] usb 2-1: config 0 descriptor?? [ 371.377306][ T7050] loop4: detected capacity change from 0 to 256 [ 371.506479][ T1578] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 371.619981][ T1578] HID 045e:07da: Invalid code 65791 type 1 [ 371.635698][ T1578] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input8 [ 371.734554][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.744638][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.825265][ T1578] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 371.988563][ T1578] usb 2-1: USB disconnect, device number 5 [ 372.333857][ T7062] loop3: detected capacity change from 0 to 128 [ 372.482496][ T7062] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.539140][ T7066] siw: device registration error -23 [ 372.570440][ T7070] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 372.644188][ T7062] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 372.645148][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.260418][ T7058] fido_id[7058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 375.111841][ T5799] Bluetooth: hci6: command 0x0406 tx timeout [ 375.230607][ T5798] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 377.996804][ T7091] loop1: detected capacity change from 0 to 1024 [ 378.617435][ T7095] loop6: detected capacity change from 0 to 4096 [ 378.706270][ T7095] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 379.143491][ T7109] loop1: detected capacity change from 0 to 256 [ 379.246373][ T7112] loop5: detected capacity change from 0 to 512 [ 379.355172][ T7112] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 379.651348][ T7112] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #17: comm syz.5.299: inode has both inline data and extents flags [ 379.728428][ T7112] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.299: couldn't read orphan inode 17 (err -117) [ 379.859115][ T7112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.026024][ T7122] siw: device registration error -23 [ 380.220333][ T1656] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 380.441295][ T1656] usb 6-1: Using ep0 maxpacket: 16 [ 380.509028][ T1656] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.523169][ T1656] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.534099][ T1656] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.547371][ T1656] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.556784][ T1656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.025302][ T1656] usb 6-1: config 0 descriptor?? [ 381.454298][ T1656] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 381.614153][ T7134] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 381.798232][ T1656] HID 045e:07da: Invalid code 65791 type 1 [ 381.812073][ T1656] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0008/input/input9 [ 382.242343][ T1656] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 382.352681][ T1656] usb 6-1: USB disconnect, device number 4 [ 383.740038][ T6172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.335933][ T7154] loop5: detected capacity change from 0 to 64 [ 384.369762][ T7145] fido_id[7145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 384.801647][ T7161] loop6: detected capacity change from 0 to 256 [ 386.047296][ T7177] loop3: detected capacity change from 0 to 512 [ 386.107878][ T7177] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 386.219008][ T7183] siw: device registration error -23 [ 386.796832][ T7177] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #17: comm syz.3.317: inode has both inline data and extents flags [ 386.833599][ T7177] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.317: couldn't read orphan inode 17 (err -117) [ 386.848707][ T7191] loop6: detected capacity change from 0 to 1024 [ 386.985583][ T7177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.179972][ T7195] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 387.219085][ T7190] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 387.481227][ T1578] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 388.061257][ T1578] usb 4-1: Using ep0 maxpacket: 16 [ 388.353267][ T1578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.364721][ T1578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.374875][ T1578] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.388098][ T1578] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 388.397573][ T1578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.722099][ T1578] usb 4-1: config 0 descriptor?? [ 389.248128][ T1578] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 389.361377][ T1578] HID 045e:07da: Invalid code 65791 type 1 [ 389.374800][ T1578] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input10 [ 389.675887][ T1578] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 389.953125][ T1578] usb 4-1: USB disconnect, device number 4 [ 391.448639][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.023733][ T7202] fido_id[7202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 392.902027][ T1578] IPVS: starting estimator thread 0... [ 392.991510][ T7213] IPVS: using max 192 ests per chain, 9600 per kthread [ 393.036491][ T7215] loop6: detected capacity change from 0 to 512 [ 393.066790][ T7219] loop5: detected capacity change from 0 to 8 [ 393.111278][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 393.202378][ T7215] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 393.210536][ T7215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 393.302355][ T7215] System zones: 1-12 [ 393.338365][ T7215] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 393.348506][ T7215] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 393.359708][ T7215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 393.405178][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.416629][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00 [ 393.433785][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.604140][ T24] usb 4-1: config 0 descriptor?? [ 393.679750][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 393.888996][ T7222] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 393.931015][ T5139] bcm5974 4-1:0.0: could not read from device [ 394.051623][ T5139] bcm5974 4-1:0.0: could not read from device [ 394.090133][ T5139] bcm5974 4-1:0.0: could not read from device [ 394.129198][ T5139] bcm5974 4-1:0.0: could not read from device [ 394.179840][ T24] usb 4-1: USB disconnect, device number 5 [ 394.244519][ T7222] ALSA: mixer_oss: invalid OSS volume '' [ 394.323269][ T7222] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 3: comm syz.6.325: lblock 0 mapped to illegal pblock 3 (length 1) [ 394.721768][ T7222] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.325: error -117 reading directory block [ 398.945855][ T6196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.060447][ T7246] siw: device registration error -23 [ 399.187239][ T7249] loop5: detected capacity change from 0 to 512 [ 399.312971][ T7249] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 399.413820][ T7249] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #17: comm syz.5.334: inode has both inline data and extents flags [ 399.425711][ T7252] loop6: detected capacity change from 0 to 256 [ 399.556457][ T7249] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.334: couldn't read orphan inode 17 (err -117) [ 399.599186][ T7260] loop3: detected capacity change from 0 to 8 [ 399.738559][ T7249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.792672][ T7252] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d) [ 400.371910][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 400.571593][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 400.641103][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.652713][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.662949][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.676240][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.685759][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.914245][ T24] usb 6-1: config 0 descriptor?? [ 401.376896][ T24] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 401.458077][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 401.474054][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000A/input/input12 [ 401.860661][ T24] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 402.047096][ T24] usb 6-1: USB disconnect, device number 5 [ 403.120021][ T7255] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 403.473369][ T7279] fido_id[7279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 404.150380][ T6172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.623121][ T7291] loop5: detected capacity change from 0 to 256 [ 406.665670][ T7291] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 406.676982][ T7291] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 406.969277][ T7291] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 407.047846][ T7291] exFAT-fs (loop5): failed to load alloc-bitmap [ 407.054741][ T7291] exFAT-fs (loop5): failed to recognize exfat type [ 407.144236][ T7300] loop3: detected capacity change from 0 to 256 [ 407.252836][ T5154] udevd[5154]: worker [6387] terminated by signal 33 (Unknown signal 33) [ 407.302190][ T5154] udevd[5154]: worker [6387] failed while handling '/devices/virtual/block/loop5' [ 407.639420][ T7300] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d) [ 408.211436][ T7303] siw: device registration error -23 [ 408.828724][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.835986][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.797890][ T7319] loop5: detected capacity change from 0 to 1024 [ 410.903465][ T7319] EXT4-fs: Ignoring removed orlov option [ 411.068922][ T7321] fuse: Bad value for 'fd' [ 411.134358][ T7319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.128437][ T6172] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.545168][ T7332] input: syz1 as /devices/virtual/input/input13 [ 414.625334][ T7347] loop1: detected capacity change from 0 to 256 [ 414.781517][ T7347] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d) [ 414.821658][ T7351] loop3: detected capacity change from 0 to 256 [ 414.886185][ T7351] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 414.897253][ T7351] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 414.959306][ T7354] siw: device registration error -23 [ 415.095805][ T7351] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 415.139290][ T7351] exFAT-fs (loop3): failed to load alloc-bitmap [ 415.145882][ T7351] exFAT-fs (loop3): failed to recognize exfat type [ 415.772215][ T7355] loop6: detected capacity change from 0 to 4096 [ 416.084837][ T7355] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 416.710007][ T7364] loop1: detected capacity change from 0 to 1024 [ 416.813066][ T7364] EXT4-fs: Ignoring removed orlov option [ 417.429213][ T7364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.504828][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.523790][ T7400] xt_l2tp: missing protocol rule (udp|l2tpip) [ 422.889058][ T7404] loop1: detected capacity change from 0 to 256 [ 423.368181][ T7404] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d) [ 423.491278][ T7408] siw: device registration error -23 [ 424.929054][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 425.033597][ T7423] loop4: detected capacity change from 0 to 256 [ 425.325564][ T7423] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 425.336636][ T7423] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 425.491561][ T7423] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 425.566351][ T7423] exFAT-fs (loop4): failed to load alloc-bitmap [ 425.573178][ T7423] exFAT-fs (loop4): failed to recognize exfat type [ 429.649232][ T7459] loop4: detected capacity change from 0 to 256 [ 430.090033][ T7459] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d) [ 437.526506][ T7517] capability: warning: `syz.1.412' uses deprecated v2 capabilities in a way that may be insecure [ 438.169275][ T7533] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 439.901643][ T5853] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 441.067941][ T5853] usb 2-1: config 0 has an invalid interface number: 40 but max is 0 [ 441.076400][ T5853] usb 2-1: config 0 has no interface number 0 [ 441.082965][ T5853] usb 2-1: New USB device found, idVendor=02ab, idProduct=0000, bcdDevice= 0.00 [ 441.092350][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.109912][ T5853] usb 2-1: config 0 descriptor?? [ 441.330795][ C1] hrtimer: interrupt took 246452 ns [ 442.762277][ T7574] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 443.739406][ T7588] fuse: Bad value for 'fd' [ 447.033925][ T7608] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 449.146695][ T7626] fuse: Bad value for 'fd' [ 452.872989][ T7650] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 456.198240][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 456.234972][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 456.244554][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 456.258365][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 456.277271][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.671293][ T7673] lo speed is unknown, defaulting to 1000 [ 456.955557][ T7681] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 457.089007][ T7688] fuse: Bad value for 'fd' [ 458.126827][ T7673] chnl_net:caif_netlink_parms(): no params data found [ 458.391205][ T5799] Bluetooth: hci1: command tx timeout [ 459.617101][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.624976][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.632854][ T7673] bridge_slave_0: entered allmulticast mode [ 459.642552][ T7673] bridge_slave_0: entered promiscuous mode [ 459.724129][ T7718] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 459.884105][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.892545][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.900257][ T7673] bridge_slave_1: entered allmulticast mode [ 459.909989][ T7673] bridge_slave_1: entered promiscuous mode [ 460.250871][ T1578] usb 2-1: USB disconnect, device number 6 [ 460.387982][ T3796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.471452][ T5799] Bluetooth: hci1: command tx timeout [ 460.472088][ T7673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.529981][ T7673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.626017][ T3796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.886462][ T7730] siw: device registration error -23 [ 460.998368][ T3796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.073181][ T7673] team0: Port device team_slave_0 added [ 461.134451][ T7673] team0: Port device team_slave_1 added [ 461.235360][ T3796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.757999][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.765753][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.792896][ T7673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.992453][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.999585][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.026994][ T7673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.388739][ T3796] bridge_slave_1: left allmulticast mode [ 462.395291][ T3796] bridge_slave_1: left promiscuous mode [ 462.402432][ T3796] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.591552][ T5799] Bluetooth: hci1: command tx timeout [ 463.120983][ T3796] bridge_slave_0: left allmulticast mode [ 463.127021][ T3796] bridge_slave_0: left promiscuous mode [ 463.133796][ T3796] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.651806][ T5799] Bluetooth: hci1: command tx timeout [ 464.801321][ T7747] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 466.005906][ T3796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.102402][ T3796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.187152][ T3796] bond0 (unregistering): Released all slaves [ 466.715987][ T7673] hsr_slave_0: entered promiscuous mode [ 466.726177][ T7673] hsr_slave_1: entered promiscuous mode [ 466.946320][ T7762] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 467.158976][ T3796] hsr_slave_0: left promiscuous mode [ 467.211534][ T3796] hsr_slave_1: left promiscuous mode [ 467.219472][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.227355][ T3796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.239676][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.247402][ T3796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.341428][ T3796] veth1_macvtap: left promiscuous mode [ 467.347156][ T3796] veth0_macvtap: left promiscuous mode [ 467.353554][ T3796] veth1_vlan: left promiscuous mode [ 467.360439][ T3796] veth0_vlan: left promiscuous mode [ 468.602894][ T3796] team0 (unregistering): Port device team_slave_1 removed [ 468.675091][ T3796] team0 (unregistering): Port device team_slave_0 removed [ 470.949392][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.956443][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 472.806245][ T7673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 473.428438][ T7673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 473.589913][ T7673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 473.643573][ T7801] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 473.745372][ T7673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 474.745164][ T7673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.923989][ T7673] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.021700][ T3796] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.029166][ T3796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.141833][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.149320][ T3796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.532887][ T7820] fuse: Bad value for 'fd' [ 477.057834][ T7673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.096964][ T7673] veth0_vlan: entered promiscuous mode [ 479.209543][ T7673] veth1_vlan: entered promiscuous mode [ 479.307277][ T7857] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 479.508090][ T7673] veth0_macvtap: entered promiscuous mode [ 479.586012][ T7673] veth1_macvtap: entered promiscuous mode [ 479.740490][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.824532][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.895756][ T35] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.919550][ T35] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.982293][ T35] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.021490][ T35] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.060410][ T7902] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 485.871143][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.879155][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.987254][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.996377][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.031496][ T7944] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 486.698541][ T7954] fuse: Bad value for 'fd' [ 487.760675][ T7961] loop7: detected capacity change from 0 to 4096 [ 487.899807][ T7961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.394090][ T7673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.726109][ T7981] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 489.732467][ T7989] loop7: detected capacity change from 0 to 4096 [ 490.007574][ T7999] 9pnet_fd: Insufficient options for proto=fd [ 490.142066][ T30] audit: type=1800 audit(1760960244.247:29): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.553" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 491.546518][ T8024] IPVS: sh: TCP [::]:0 - no destination available [ 492.662291][ T8041] loop7: detected capacity change from 0 to 256 [ 492.773246][ T8041] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 497.643849][ T11] IPVS: starting estimator thread 0... [ 497.697395][ T8070] IPVS: sh: TCP [::]:0 - no destination available [ 497.751877][ T8072] IPVS: using max 192 ests per chain, 9600 per kthread [ 499.074113][ T8085] input: syz0 as /devices/virtual/input/input14 [ 502.223077][ T8105] IPVS: sh: TCP [::]:0 - no destination available [ 504.108813][ T30] audit: type=1326 audit(1760960258.217:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bc58efc9 code=0x7ffc0000 [ 504.132208][ T30] audit: type=1326 audit(1760960258.227:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bc58efc9 code=0x7ffc0000 [ 504.358307][ T30] audit: type=1326 audit(1760960258.277:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa4bc58efc9 code=0x7ffc0000 [ 504.381265][ T30] audit: type=1326 audit(1760960258.287:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bc58efc9 code=0x7ffc0000 [ 504.404940][ T30] audit: type=1326 audit(1760960258.297:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa4bc58efc9 code=0x7ffc0000 [ 504.428288][ T30] audit: type=1326 audit(1760960258.297:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bc58efc9 code=0x7ffc0000 [ 504.450630][ T30] audit: type=1326 audit(1760960258.317:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa4bc58efc9 code=0x7ffc0000 [ 504.474301][ T30] audit: type=1326 audit(1760960258.327:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bc58efc9 code=0x7ffc0000 [ 504.496765][ T30] audit: type=1326 audit(1760960258.327:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa4bc58efc9 code=0x7ffc0000 [ 504.519254][ T30] audit: type=1326 audit(1760960258.327:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bc58efc9 code=0x7ffc0000 [ 513.786397][ T8204] netlink: 'syz.5.628': attribute type 10 has an invalid length. [ 515.063172][ T8230] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 518.363813][ T8255] warning: `syz.4.645' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 519.952864][ T8277] loop7: detected capacity change from 0 to 4096 [ 520.017175][ T8277] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 520.943335][ T8302] 9pnet_fd: Insufficient options for proto=fd [ 524.473091][ T8347] loop7: detected capacity change from 0 to 4096 [ 524.486982][ T8347] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 524.812197][ T1578] libceph: connect (1)[c::]:6789 error -101 [ 524.818645][ T1578] libceph: mon0 (1)[c::]:6789 connect error [ 525.063738][ T8358] ceph: No mds server is up or the cluster is laggy [ 525.134123][ T1578] libceph: connect (1)[c::]:6789 error -101 [ 525.140541][ T1578] libceph: mon0 (1)[c::]:6789 connect error [ 525.990414][ T8372] loop7: detected capacity change from 0 to 4096 [ 526.154042][ T8372] EXT4-fs: Ignoring removed mblk_io_submit option [ 526.216935][ T8372] EXT4-fs (loop7): Test dummy encryption mode enabled [ 526.307679][ T8372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.759477][ T7673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.829103][ T8389] loop7: detected capacity change from 0 to 4096 [ 528.150261][ T8395] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 531.096619][ T8418] netlink: 64 bytes leftover after parsing attributes in process `syz.7.703'. [ 531.132851][ T8418] Zero length message leads to an empty skb [ 531.716943][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.724540][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.660000][ T8437] sg_write: data in/out 197376/28 bytes for SCSI command 0x7-- guessing data in; [ 535.660000][ T8437] program syz.7.709 not setting count and/or reply_len properly [ 550.483312][ T8558] fuse: Bad value for 'fd' [ 550.670212][ T8561] netlink: 16 bytes leftover after parsing attributes in process `syz.5.763'. [ 554.982544][ T8611] rdma_rxe: rxe_newlink: failed to add lo [ 557.028398][ T8642] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 559.557454][ T8660] process 'syz.7.806' launched '/dev/fd/4' with NULL argv: empty string added [ 562.682405][ T8702] 9pnet_fd: Insufficient options for proto=fd [ 563.322799][ T8715] IPVS: sh: TCP [::]:0 - no destination available [ 563.746626][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.6.834'. [ 566.686714][ T8750] IPVS: sh: TCP [::]:0 - no destination available [ 567.751200][ C0] IPVS: sh: TCP [::]:0 - no destination available [ 569.113588][ T8773] fuse: Bad value for 'group_id' [ 569.118829][ T8773] fuse: Bad value for 'group_id' [ 573.664006][ T30] audit: type=1326 audit(1760960327.787:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.6.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 573.809355][ T30] audit: type=1326 audit(1760960327.817:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.6.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 573.833173][ T30] audit: type=1326 audit(1760960327.827:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.6.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 573.857229][ T30] audit: type=1326 audit(1760960327.827:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.6.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 573.879766][ T30] audit: type=1326 audit(1760960327.827:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.6.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 573.902471][ T30] audit: type=1326 audit(1760960327.827:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.6.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 573.925527][ T30] audit: type=1326 audit(1760960327.837:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.6.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 573.948018][ T30] audit: type=1326 audit(1760960327.837:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.6.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 574.122663][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.6.870'. [ 575.890484][ T8853] overlayfs: failed to clone upperpath [ 576.695856][ T3796] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.716278][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 576.727245][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.889'. [ 576.753483][ T8865] geneve2: entered promiscuous mode [ 576.758877][ T8865] geneve2: entered allmulticast mode [ 576.777722][ T3796] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 47299 - 0 [ 576.830086][ T3796] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 47299 - 0 [ 576.856206][ T3796] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 47299 - 0 [ 578.237625][ T8887] lo speed is unknown, defaulting to 1000 [ 578.697514][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 579.388397][ T8902] kvm: pic: non byte write [ 579.834628][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 580.178705][ T30] audit: type=1326 audit(1760960334.287:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 580.203377][ T30] audit: type=1326 audit(1760960334.287:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 580.409093][ T30] audit: type=1326 audit(1760960334.377:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 580.432626][ T30] audit: type=1326 audit(1760960334.377:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 580.455125][ T30] audit: type=1326 audit(1760960334.377:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 580.477513][ T30] audit: type=1326 audit(1760960334.377:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 580.500051][ T30] audit: type=1326 audit(1760960334.377:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 580.523315][ T30] audit: type=1326 audit(1760960334.377:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 580.545649][ T30] audit: type=1326 audit(1760960334.377:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 580.568231][ T30] audit: type=1326 audit(1760960334.377:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.6.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 582.316382][ T8966] kvm: apic: phys broadcast and lowest prio [ 587.129486][ T9012] netlink: 28 bytes leftover after parsing attributes in process `syz.5.943'. [ 590.833017][ T9032] fuse: Unknown parameter 'grou00000000000000000000' [ 593.164062][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.171104][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.581941][ T9049] netlink: 28 bytes leftover after parsing attributes in process `syz.7.955'. [ 596.886857][ T9071] fuse: Unknown parameter 'grou00000000000000000000' [ 597.375254][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 597.375330][ T30] audit: type=1326 audit(1760960351.487:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.7.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 597.405680][ T30] audit: type=1326 audit(1760960351.487:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.7.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 597.489515][ T30] audit: type=1326 audit(1760960351.567:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.7.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 597.513741][ T30] audit: type=1326 audit(1760960351.567:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.7.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 597.536396][ T30] audit: type=1326 audit(1760960351.567:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.7.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 598.032002][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.972'. [ 600.698461][ T9104] loop7: detected capacity change from 0 to 128 [ 600.872663][ T9104] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 600.928721][ T9104] hpfs: filesystem error: improperly stopped [ 600.935541][ T9104] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 600.943580][ T9104] hpfs: You really don't want any checks? You are crazy... [ 601.021896][ T9104] hpfs: hpfs_map_sector(): read error [ 601.027471][ T9104] hpfs: code page support is disabled [ 601.501362][ T9104] hpfs: hpfs_map_4sectors(): unaligned read [ 601.507575][ T9104] hpfs: hpfs_map_4sectors(): unaligned read [ 601.513856][ T9104] hpfs: filesystem error: unable to find root dir [ 603.118095][ T9108] hpfs: hpfs_map_4sectors(): unaligned read [ 604.565596][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.6.991'. [ 606.803291][ T9157] 9pnet_fd: Insufficient options for proto=fd [ 606.813247][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.5.996'. [ 606.822412][ T9157] netlink: 40 bytes leftover after parsing attributes in process `syz.5.996'. [ 607.527704][ T9164] loop7: detected capacity change from 0 to 128 [ 607.581730][ T9164] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 607.647953][ T9164] hpfs: filesystem error: improperly stopped [ 607.654449][ T9164] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 607.662669][ T9164] hpfs: You really don't want any checks? You are crazy... [ 608.219302][ T9164] hpfs: hpfs_map_sector(): read error [ 608.224893][ T9164] hpfs: code page support is disabled [ 608.232344][ T9164] hpfs: hpfs_map_4sectors(): unaligned read [ 609.213331][ T9164] hpfs: hpfs_map_4sectors(): unaligned read [ 609.219350][ T9164] hpfs: filesystem error: unable to find root dir [ 609.933231][ T9178] hpfs: hpfs_map_4sectors(): unaligned read [ 611.197055][ T9190] trusted_key: encrypted_key: insufficient parameters specified [ 611.822055][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 612.019664][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 612.069354][ T24] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 612.079110][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.116545][ T24] usb 8-1: config 0 descriptor?? [ 612.165361][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 615.708810][ T11] usb 8-1: USB disconnect, device number 2 [ 620.832424][ T9259] loop7: detected capacity change from 0 to 128 [ 620.929635][ T9259] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 620.971635][ T9259] hpfs: filesystem error: improperly stopped [ 620.977837][ T9259] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 620.986047][ T9259] hpfs: You really don't want any checks? You are crazy... [ 621.082779][ T9259] hpfs: hpfs_map_sector(): read error [ 621.088276][ T9259] hpfs: code page support is disabled [ 621.167116][ T9259] hpfs: hpfs_map_4sectors(): unaligned read [ 621.201402][ T9259] hpfs: hpfs_map_4sectors(): unaligned read [ 621.207469][ T9259] hpfs: filesystem error: unable to find root dir [ 621.318255][ T9261] hpfs: hpfs_map_4sectors(): unaligned read [ 625.890992][ T11] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 626.101646][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.112986][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.123325][ T11] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 626.136499][ T11] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 626.145730][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.323039][ T11] usb 8-1: config 0 descriptor?? [ 627.034233][ T11] usbhid 8-1:0.0: can't add hid device: -71 [ 627.040606][ T11] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 627.096872][ T11] usb 8-1: USB disconnect, device number 3 [ 628.182013][ T9323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1054'. [ 628.191549][ T9323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1054'. [ 632.432133][ T9353] overlayfs: missing 'lowerdir' [ 634.871114][ T11] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 635.081383][ T11] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.094292][ T11] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 635.119214][ T11] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 635.129219][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.137633][ T11] usb 8-1: Product: syz [ 635.142228][ T11] usb 8-1: Manufacturer: syz [ 635.146995][ T11] usb 8-1: SerialNumber: syz [ 635.161102][ T11] usb 8-1: config 0 descriptor?? [ 635.392160][ T1578] usb 8-1: USB disconnect, device number 4 [ 639.952874][ T1578] libceph: connect (1)[c::]:6789 error -101 [ 639.959363][ T1578] libceph: mon0 (1)[c::]:6789 connect error [ 640.302330][ T1578] libceph: connect (1)[c::]:6789 error -101 [ 640.310324][ T1578] libceph: mon0 (1)[c::]:6789 connect error [ 640.404152][ T9448] ceph: No mds server is up or the cluster is laggy [ 642.218474][ T9480] trusted_key: encrypted_key: master key parameter 'de' is invalid [ 642.611538][ T9486] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1117'. [ 645.183570][ T9520] trusted_key: encrypted_key: master key parameter 'de' is invalid [ 646.005117][ T9533] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1134'. [ 646.018550][ T9533] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1134'. [ 646.726945][ T58] tipc: Subscription rejected, illegal request [ 646.933128][ T9546] trusted_key: encrypted_key: master key parameter 'defau' is invalid [ 651.701371][ T1578] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 652.491181][ T1578] usb 8-1: device descriptor read/64, error -71 [ 653.571071][ T1578] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 654.579925][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.586810][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.632089][ T1578] usb 8-1: device descriptor read/64, error -71 [ 654.776790][ T1578] usb usb8-port1: attempt power cycle [ 655.575364][ T9643] overlayfs: failed to resolve './file1': -2 [ 656.483002][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1181'. [ 657.531426][ T11] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 657.722574][ T11] usb 8-1: device descriptor read/64, error -71 [ 657.981283][ T11] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 658.161190][ T11] usb 8-1: device descriptor read/64, error -71 [ 658.701768][ T11] usb usb8-port1: attempt power cycle [ 658.927789][ T9681] overlayfs: failed to clone upperpath [ 659.123706][ T11] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 659.164388][ T11] usb 8-1: device descriptor read/8, error -71 [ 659.415713][ T11] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 659.475534][ T11] usb 8-1: device descriptor read/8, error -71 [ 659.607404][ T11] usb usb8-port1: unable to enumerate USB device [ 663.334826][ T11] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 663.541020][ T11] usb 8-1: Using ep0 maxpacket: 32 [ 663.568875][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.580472][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.591689][ T11] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 663.601106][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.713700][ T11] usb 8-1: config 0 descriptor?? [ 664.205339][ T11] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 664.212706][ T11] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 664.219750][ T11] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 664.226943][ T11] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 664.234091][ T11] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 664.241495][ T11] savu 0003:1E7D:2D5A.000B: unbalanced collection at end of report description [ 664.355930][ T11] savu 0003:1E7D:2D5A.000B: parse failed [ 664.363427][ T11] savu 0003:1E7D:2D5A.000B: probe with driver savu failed with error -22 [ 664.505994][ T11] usb 8-1: USB disconnect, device number 12 [ 670.905528][ T30] audit: type=1326 audit(1760960425.017:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 670.928834][ T30] audit: type=1326 audit(1760960425.037:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 670.952144][ T30] audit: type=1326 audit(1760960425.037:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 670.974780][ T30] audit: type=1326 audit(1760960425.087:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 670.997256][ T30] audit: type=1326 audit(1760960425.097:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 671.019877][ T30] audit: type=1326 audit(1760960425.097:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 671.043827][ T30] audit: type=1326 audit(1760960425.097:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 671.066409][ T30] audit: type=1326 audit(1760960425.097:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 671.089112][ T30] audit: type=1326 audit(1760960425.097:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 671.111993][ T30] audit: type=1326 audit(1760960425.097:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5378efc9 code=0x7ffc0000 [ 671.724693][ T9863] 9pnet_fd: Insufficient options for proto=fd [ 677.501387][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 677.501463][ T30] audit: type=1326 audit(1760960431.537:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab2f8efc9 code=0x7ffc0000 [ 677.530977][ T30] audit: type=1326 audit(1760960431.537:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab2f8efc9 code=0x7ffc0000 [ 677.553902][ T30] audit: type=1326 audit(1760960431.577:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7faab2f8efc9 code=0x7ffc0000 [ 677.576754][ T30] audit: type=1326 audit(1760960431.587:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab2f8efc9 code=0x7ffc0000 [ 677.601484][ T30] audit: type=1326 audit(1760960431.587:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab2f8efc9 code=0x7ffc0000 [ 677.627697][ T30] audit: type=1326 audit(1760960431.597:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7faab2f8efc9 code=0x7ffc0000 [ 677.650343][ T30] audit: type=1326 audit(1760960431.607:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab2f8efc9 code=0x7ffc0000 [ 677.673778][ T30] audit: type=1326 audit(1760960431.607:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faab2f8efc9 code=0x7ffc0000 [ 677.698357][ T30] audit: type=1326 audit(1760960431.607:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab2f8efc9 code=0x7ffc0000 [ 677.721746][ T30] audit: type=1326 audit(1760960431.757:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faab2f8efc9 code=0x7ffc0000 [ 677.943649][ T9955] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1294'. [ 688.725779][T10057] netlink: 'syz.7.1333': attribute type 21 has an invalid length. [ 691.019914][T10069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.967956][T10094] loop7: detected capacity change from 0 to 128 [ 693.037284][T10094] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 693.099339][T10094] hpfs: filesystem error: improperly stopped [ 693.105871][T10094] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 693.114730][T10094] hpfs: You really don't want any checks? You are crazy... [ 693.161201][T10094] hpfs: hpfs_map_sector(): read error [ 693.167011][T10094] hpfs: code page support is disabled [ 693.221037][T10094] hpfs: hpfs_map_4sectors(): unaligned read [ 693.227421][T10094] hpfs: hpfs_map_4sectors(): unaligned read [ 693.233922][T10094] hpfs: filesystem error: unable to find root dir [ 693.411158][T10098] hpfs: hpfs_map_4sectors(): unaligned read [ 694.162110][T10104] loop7: detected capacity change from 0 to 64 [ 697.461653][ T5853] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 697.650542][ T5853] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 697.661793][ T5853] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.672939][ T5853] usb 8-1: config 0 has no interface number 0 [ 697.679227][ T5853] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 697.689758][ T5853] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.836281][ T5853] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 697.845751][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.854202][ T5853] usb 8-1: Product: syz [ 697.861395][ T5853] usb 8-1: Manufacturer: syz [ 697.866199][ T5853] usb 8-1: SerialNumber: syz [ 697.970055][ T5853] usb 8-1: config 0 descriptor?? [ 698.451160][ T5853] usb 8-1: USB disconnect, device number 13 [ 706.361337][ T1578] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 706.567624][ T1578] usb 8-1: Using ep0 maxpacket: 16 [ 706.584168][ T1578] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 706.594982][ T1578] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.605353][ T1578] usb 8-1: config 0 has no interface number 0 [ 706.611584][ T1578] usb 8-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 706.712807][ T1578] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 706.722175][ T1578] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 706.730449][ T1578] usb 8-1: Product: syz [ 706.735135][ T1578] usb 8-1: SerialNumber: syz [ 706.811675][ T1578] usb 8-1: config 0 descriptor?? [ 706.881474][T10256] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1412'. [ 707.056096][ T1578] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 707.097647][ T1578] usb 8-1: USB disconnect, device number 14 [ 708.575031][T10277] overlayfs: failed to resolve './file1': -2 [ 712.258463][T10313] overlayfs: failed to resolve './file1': -2 [ 716.166851][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.173774][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 717.202071][ T5802] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 719.590497][ T5802] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 723.824756][T10464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1503'. [ 724.094787][T10467] loop9: detected capacity change from 0 to 7 [ 724.149819][T10467] Dev loop9: unable to read RDB block 7 [ 724.155868][T10467] loop9: unable to read partition table [ 724.202492][T10467] loop9: partition table beyond EOD, truncated [ 724.208979][T10467] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 726.344063][T10496] bridge1: entered promiscuous mode [ 726.349496][T10496] bridge1: entered allmulticast mode [ 726.388718][T10500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1517'. [ 740.117574][ T5802] Bluetooth: hci5: unexpected event 0x04 length: 4 < 10 [ 740.837504][T10606] bridge2: entered promiscuous mode [ 740.843173][T10606] bridge2: entered allmulticast mode [ 746.014095][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 746.024385][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 746.035503][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 746.095848][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 746.107263][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 746.233469][T10647] lo speed is unknown, defaulting to 1000 [ 747.142122][T10647] chnl_net:caif_netlink_parms(): no params data found [ 747.477776][T10673] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 748.151781][ T5802] Bluetooth: hci3: command tx timeout [ 748.431903][T10683] netlink: 'syz.6.1585': attribute type 13 has an invalid length. [ 748.440076][T10683] netlink: 'syz.6.1585': attribute type 17 has an invalid length. [ 748.448523][T10683] netlink: 'syz.6.1585': attribute type 27 has an invalid length. [ 749.587075][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.596134][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.604055][T10647] bridge_slave_0: entered allmulticast mode [ 749.613913][T10647] bridge_slave_0: entered promiscuous mode [ 749.693486][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.701120][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.708923][T10647] bridge_slave_1: entered allmulticast mode [ 749.718586][T10647] bridge_slave_1: entered promiscuous mode [ 750.089495][T10647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.200188][T10647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.241562][ T5802] Bluetooth: hci3: command tx timeout [ 750.434737][T10647] team0: Port device team_slave_0 added [ 750.481584][T10647] team0: Port device team_slave_1 added [ 750.766879][T10647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.774464][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.804016][T10647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.842379][T10647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.849610][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.877512][T10647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.129944][T10713] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 752.351061][ T5802] Bluetooth: hci3: command tx timeout [ 752.504532][T10647] hsr_slave_0: entered promiscuous mode [ 752.515589][T10647] hsr_slave_1: entered promiscuous mode [ 752.524603][T10647] debugfs: 'hsr0' already exists in 'hsr' [ 752.530492][T10647] Cannot create hsr debugfs directory [ 753.726713][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.058318][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.327183][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.405932][ T5802] Bluetooth: hci3: command tx timeout [ 754.730529][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.588764][ T58] bridge_slave_1: left allmulticast mode [ 755.594829][ T58] bridge_slave_1: left promiscuous mode [ 755.601943][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.682598][ T58] bridge_slave_0: left allmulticast mode [ 755.688448][ T58] bridge_slave_0: left promiscuous mode [ 755.699105][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.457556][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.475067][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.565545][ T58] bond0 (unregistering): Released all slaves [ 758.585810][T10775] 9pnet_fd: Insufficient options for proto=fd [ 759.588220][T10647] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 760.595567][T10647] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 760.857381][ T5802] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 760.908145][ T58] hsr_slave_0: left promiscuous mode [ 760.961147][ T58] hsr_slave_1: left promiscuous mode [ 760.969068][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.976895][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.086130][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.093802][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.793252][ T58] veth1_macvtap: left promiscuous mode [ 761.798989][ T58] veth0_macvtap: left promiscuous mode [ 761.805107][ T58] veth1_vlan: left promiscuous mode [ 761.810820][ T58] veth0_vlan: left promiscuous mode [ 765.310313][ T58] team0 (unregistering): Port device team_slave_1 removed [ 765.488773][ T58] team0 (unregistering): Port device team_slave_0 removed [ 766.612629][T10818] overlayfs: failed to resolve './file0': -2 [ 767.906459][T10647] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 768.452436][T10647] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 768.866638][T10837] IPVS: sh: TCP [::]:0 - no destination available [ 769.519826][T10647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.729196][T10647] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.806188][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.813814][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.900693][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.908222][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.782715][T10867] 9pnet_fd: Insufficient options for proto=fd [ 772.168763][T10647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.478192][T10647] veth0_vlan: entered promiscuous mode [ 775.547659][T10647] veth1_vlan: entered promiscuous mode [ 775.773038][T10647] veth0_macvtap: entered promiscuous mode [ 775.854166][T10647] veth1_macvtap: entered promiscuous mode [ 775.971359][T10647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.076210][T10647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.166741][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.193008][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.266510][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.305501][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.458979][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.466164][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 779.512184][T10990] mmap: syz.3.1676 (10990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 783.785019][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.793755][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.116912][ T3882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.125214][ T3882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.725758][T11109] IPVS: sh: TCP [::]:0 - no destination available [ 787.869427][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1706'. [ 787.879044][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1706'. [ 788.482330][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 788.748632][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.759976][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.770260][ T24] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 788.779686][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.906502][ T24] usb 8-1: config 0 descriptor?? [ 789.355105][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 789.362438][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 789.369524][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 789.377078][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 789.384255][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 789.391466][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 789.398542][ T24] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 789.633314][ T24] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 789.732703][ T24] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 790.328165][ T24] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 790.349060][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1719'. [ 790.419655][ T24] usb 8-1: USB disconnect, device number 15 [ 790.541949][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1719'. [ 790.725530][T11151] IPVS: sh: TCP [::]:0 - no destination available [ 793.059853][T11186] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 793.070215][T11186] block device autoloading is deprecated and will be removed. [ 793.307613][T11187] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 793.317667][T11187] block device autoloading is deprecated and will be removed. [ 794.263731][T11196] IPVS: sh: TCP [::]:0 - no destination available [ 794.637430][T11153] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 794.916389][T11153] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.927946][T11153] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.941833][T11153] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 794.952149][T11153] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.254496][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1738'. [ 795.414879][T11153] usb 8-1: config 0 descriptor?? [ 795.947094][T11153] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 795.961742][T11153] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 795.974614][T11153] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 795.983159][T11153] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 795.990378][T11153] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 795.999085][T11153] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 796.007279][T11153] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 796.157510][T11153] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 796.186440][T11211] tipc: Can't bind to reserved service type 0 [ 796.261562][T11153] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00 [ 796.870309][T11153] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 796.942540][T11153] usb 8-1: USB disconnect, device number 16 [ 797.169779][T11225] fuse: Bad value for 'fd' [ 797.818506][T11232] tipc: Started in network mode [ 797.824021][T11232] tipc: Node identity 06f0e3f76682, cluster identity 4711 [ 797.832614][T11232] tipc: Enabled bearer , priority 0 [ 797.919380][T11235] syzkaller0: entered promiscuous mode [ 797.925932][T11235] syzkaller0: entered allmulticast mode [ 797.999740][T11232] tipc: Resetting bearer [ 798.079787][T11230] tipc: Resetting bearer [ 798.163114][T11230] tipc: Disabling bearer [ 803.112266][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1775'. [ 806.221754][ T5802] Bluetooth: hci6: unexpected event for opcode 0x2041 [ 806.370493][ T3882] tipc: Subscription rejected, illegal request [ 809.318704][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 812.206103][ T4393] tipc: Subscription rejected, illegal request [ 812.772522][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1802'. [ 814.851372][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 815.049850][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 815.064074][ T24] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 815.072737][ T24] usb 9-1: config 0 has no interface number 0 [ 815.079026][ T24] usb 9-1: config 0 interface 12 has no altsetting 0 [ 815.165842][ T24] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 815.175255][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.183651][ T24] usb 9-1: Product: syz [ 815.187982][ T24] usb 9-1: Manufacturer: syz [ 815.194619][ T24] usb 9-1: SerialNumber: syz [ 815.272088][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1815'. [ 815.362042][ T24] usb 9-1: config 0 descriptor?? [ 815.948810][T11443] overlayfs: failed to clone lowerpath [ 817.842366][ T24] f81534 9-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 817.851356][ T24] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 817.858847][ T24] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 817.867164][ T24] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 818.383364][ T24] usb 9-1: USB disconnect, device number 2 [ 822.421194][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 822.634578][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 822.680495][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.692979][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.703440][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 822.716733][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 822.726133][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.144303][ T24] usb 8-1: config 0 descriptor?? [ 823.698471][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 823.706103][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 823.715572][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 823.723224][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 823.730858][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 823.738303][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 823.746025][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 823.753633][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 823.761632][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 823.769105][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 824.006196][T11484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.019922][T11484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.110294][ T24] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 824.123579][ T24] microsoft 0003:045E:07DA.000E: no inputs found [ 824.130098][ T24] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 824.256699][ T24] usb 8-1: USB disconnect, device number 17 [ 824.743449][T11511] loop8: detected capacity change from 0 to 256 [ 824.746128][T11506] fido_id[11506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 824.826598][T11511] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 824.841313][T11511] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 825.000773][T11511] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 825.054430][T11511] exFAT-fs (loop8): failed to load alloc-bitmap [ 825.061120][T11511] exFAT-fs (loop8): failed to recognize exfat type [ 825.832745][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1841'. [ 827.133544][T11550] 9pnet_fd: Insufficient options for proto=fd [ 829.648935][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1856'. [ 830.736471][T11580] capability: warning: `syz.5.1862' uses 32-bit capabilities (legacy support in use) [ 831.520251][T11594] macvlan1: entered promiscuous mode [ 831.532953][T11594] ipvlan0: entered promiscuous mode [ 831.542942][T11594] ipvlan0: left promiscuous mode [ 831.581083][T11594] macvlan1: left promiscuous mode [ 838.909084][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.916504][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.402327][T11691] 9pnet_fd: Insufficient options for proto=fd [ 843.513417][T11738] overlayfs: missing 'workdir' [ 846.005105][T11775] overlayfs: failed to clone upperpath [ 846.391705][ T24] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 846.571009][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 846.639782][ T24] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 846.649310][ T24] usb 8-1: config 0 has no interface number 0 [ 846.656223][ T24] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 846.667478][ T24] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 846.696600][ T24] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 846.706444][ T24] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 846.714948][ T24] usb 8-1: Product: syz [ 846.719282][ T24] usb 8-1: SerialNumber: syz [ 846.824399][ T24] usb 8-1: config 0 descriptor?? [ 846.857633][ T24] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 846.867136][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input16 [ 847.182510][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.183094][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.190498][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.191348][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.191765][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.192209][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.192722][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.193198][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.193678][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.194148][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 847.302018][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 847.365050][ T24] usb 8-1: USB disconnect, device number 18 [ 847.376227][ T24] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 848.881714][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1951'. [ 851.501529][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 851.501605][ T30] audit: type=1326 audit(1760960605.597:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 851.530883][ T30] audit: type=1326 audit(1760960605.607:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 851.553762][ T30] audit: type=1326 audit(1760960605.617:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 851.577430][ T30] audit: type=1326 audit(1760960605.617:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 851.600727][ T30] audit: type=1326 audit(1760960605.617:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.6.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675458efc9 code=0x7ffc0000 [ 852.134863][ T5802] Bluetooth: hci1: unexpected event for opcode 0x0041 [ 852.974424][T11866] netlink: 'syz.8.1974': attribute type 10 has an invalid length. [ 853.011080][T11866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.026794][T11866] team0: Port device bond0 added [ 853.623219][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1980'. [ 856.450471][T11896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1988'. [ 859.179726][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1995'. [ 859.195952][T11918] netlink: 'syz.6.1994': attribute type 4 has an invalid length. [ 865.471904][T11986] overlayfs: failed to clone upperpath [ 867.360476][T11999] lo speed is unknown, defaulting to 1000 [ 869.826168][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 869.836416][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'. [ 871.024647][T12007] geneve2: entered promiscuous mode [ 871.030055][T12007] geneve2: entered allmulticast mode [ 871.650885][T10653] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 871.685651][T12009] Bluetooth: hci3: command 0x0406 tx timeout [ 871.866221][T10653] usb 9-1: Using ep0 maxpacket: 8 [ 871.931941][T10653] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 871.944863][T10653] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.953994][T10653] usb 9-1: Product: syz [ 871.958324][T10653] usb 9-1: Manufacturer: syz [ 871.963221][T10653] usb 9-1: SerialNumber: syz [ 871.998442][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2042'. [ 872.007894][T12030] netlink: 'syz.5.2042': attribute type 30 has an invalid length. [ 872.043453][ T4085] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.057490][T10653] usb 9-1: config 0 descriptor?? [ 872.078176][T10653] gspca_main: sq930x-2.14.0 probing 2770:930c [ 872.110479][ T4085] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.125302][ T58] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.912153][T10653] gspca_sq930x: ucbus_write failed -71 [ 873.161279][T10653] gspca_sq930x: Sensor ov9630 not yet treated [ 873.173006][T10653] sq930x 9-1:0.0: probe with driver sq930x failed with error -22 [ 873.259347][T10653] usb 9-1: USB disconnect, device number 3 [ 876.074873][ T58] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.123107][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2051'. [ 876.133634][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2051'. [ 876.159671][T12052] geneve2: entered promiscuous mode [ 876.165506][T12052] geneve2: entered allmulticast mode [ 877.464296][T12064] overlayfs: failed to clone upperpath [ 880.816206][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2067'. [ 880.825706][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2067'. [ 881.323994][T12101] overlayfs: failed to clone upperpath [ 884.713644][T12108] syz.8.2070 (12108): drop_caches: 2 [ 885.391832][ T2973] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.413126][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2082'. [ 885.422980][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2082'. [ 885.442077][T12138] geneve2: entered promiscuous mode [ 885.447397][T12138] geneve2: entered allmulticast mode [ 886.791445][T12151] IPVS: nq: FWM 3 0x00000003 - no destination available [ 887.615857][T12154] overlayfs: failed to clone upperpath [ 893.639948][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2096'. [ 893.650358][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2096'. [ 900.532147][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.538863][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 901.411338][T12009] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 901.443320][T12009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 901.490337][T12009] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 901.495936][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2107'. [ 901.507471][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2107'. [ 901.543103][T12009] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 901.554421][T12009] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 901.826773][T10648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 901.851608][T10648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 901.876491][T10648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 901.889822][T10648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 901.904586][T10648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 901.982030][T12213] lo speed is unknown, defaulting to 1000 [ 902.111748][T12208] lo speed is unknown, defaulting to 1000 [ 903.780350][T12009] Bluetooth: hci0: command tx timeout [ 903.962447][T12208] chnl_net:caif_netlink_parms(): no params data found [ 903.992578][T12009] Bluetooth: hci4: command tx timeout [ 904.061837][T12213] chnl_net:caif_netlink_parms(): no params data found [ 905.837097][T12009] Bluetooth: hci0: command tx timeout [ 905.899928][ T3882] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.957311][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'. [ 906.100297][T12009] Bluetooth: hci4: command tx timeout [ 906.112060][ T1578] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 906.218661][T12213] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.227397][T12213] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.236320][T12213] bridge_slave_0: entered allmulticast mode [ 906.251691][T12213] bridge_slave_0: entered promiscuous mode [ 906.386067][ T3882] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.404034][ T1578] usb 8-1: Using ep0 maxpacket: 32 [ 906.470986][ T1578] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 906.479575][ T1578] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 906.488862][ T1578] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 906.498136][ T1578] usb 8-1: config 1 has no interface number 0 [ 906.504587][ T1578] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 906.515775][ T1578] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 906.529102][ T1578] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 906.538565][ T1578] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.627758][T12213] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.635488][T12213] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.641845][ T1578] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 906.643945][T12213] bridge_slave_1: entered allmulticast mode [ 906.664230][T12213] bridge_slave_1: entered promiscuous mode [ 906.950640][ T3882] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.105611][T12208] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.113870][T12208] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.122085][T12208] bridge_slave_0: entered allmulticast mode [ 907.133731][T12208] bridge_slave_0: entered promiscuous mode [ 907.351103][ T3882] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.931622][T12009] Bluetooth: hci0: command tx timeout [ 907.956589][T12208] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.964897][T12208] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.973163][T12208] bridge_slave_1: entered allmulticast mode [ 907.988323][T12208] bridge_slave_1: entered promiscuous mode [ 908.073819][ T3882] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.162004][T12009] Bluetooth: hci4: command tx timeout [ 908.670863][T12213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.716009][T12273] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2125'. [ 910.047990][T12009] Bluetooth: hci0: command tx timeout [ 910.075704][T12208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.153355][T12213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.242071][T12009] Bluetooth: hci4: command tx timeout [ 910.251545][ T3882] bridge_slave_1: left allmulticast mode [ 910.257404][ T3882] bridge_slave_1: left promiscuous mode [ 910.270902][ T3882] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.297060][ T3882] bridge_slave_0: left allmulticast mode [ 910.303456][ T3882] bridge_slave_0: left promiscuous mode [ 910.310060][ T3882] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.571701][ T1578] snd_usb_pod 8-1:1.1: set_interface failed [ 910.578163][ T1578] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 910.586651][ T1578] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 910.679455][ T1578] usb 8-1: USB disconnect, device number 19 [ 911.015024][ T3882] team0: Port device bond0 removed [ 911.047799][ T3882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.084341][ T3882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.109489][ T3882] bond0 (unregistering): Released all slaves [ 911.164203][T12208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.577793][T12009] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 911.689946][ T3882] tipc: Left network mode [ 911.829680][T12208] team0: Port device team_slave_0 added [ 911.845549][T12213] team0: Port device team_slave_0 added [ 911.874719][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 911.965322][T12213] team0: Port device team_slave_1 added [ 911.998264][T12208] team0: Port device team_slave_1 added [ 912.379792][T12208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.391103][T12208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.419012][T12208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.458901][T12213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.466235][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.496050][T12213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.611367][ T3882] hsr_slave_0: left promiscuous mode [ 912.637405][ T3882] hsr_slave_1: left promiscuous mode [ 912.645906][ T3882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.656907][ T3882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.733341][ T3882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.743613][ T3882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.801022][T10653] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 912.824409][ T3882] veth1_macvtap: left promiscuous mode [ 912.830131][ T3882] veth0_macvtap: left promiscuous mode [ 912.836179][ T3882] veth1_vlan: left promiscuous mode [ 912.841815][ T3882] veth0_vlan: left promiscuous mode [ 912.991359][T10653] usb 8-1: Using ep0 maxpacket: 32 [ 913.044374][T10653] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 913.053228][T10653] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 913.062690][T10653] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 913.072022][T10653] usb 8-1: config 1 has no interface number 0 [ 913.078664][T10653] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 913.089953][T10653] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 913.106210][T10653] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 913.116203][T10653] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.619848][ T3882] team0 (unregistering): Port device team_slave_1 removed [ 913.642029][T10653] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 913.702915][ T3882] team0 (unregistering): Port device team_slave_0 removed [ 914.057130][T12208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.064742][T12208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.091355][T12208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.123747][T12213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.131541][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.158128][T12213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.880962][T12213] hsr_slave_0: entered promiscuous mode [ 914.893900][T12213] hsr_slave_1: entered promiscuous mode [ 914.904447][T12213] debugfs: 'hsr0' already exists in 'hsr' [ 914.910462][T12213] Cannot create hsr debugfs directory [ 914.934051][T12208] hsr_slave_0: entered promiscuous mode [ 914.944403][T12208] hsr_slave_1: entered promiscuous mode [ 914.953396][T12208] debugfs: 'hsr0' already exists in 'hsr' [ 914.959287][T12208] Cannot create hsr debugfs directory [ 915.863926][T10653] snd_usb_pod 8-1:1.1: set_interface failed [ 915.874489][T10653] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 915.883712][T10653] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 915.958193][T12009] Bluetooth: hci6: unexpected event for opcode 0x2041 [ 915.985868][T10653] usb 8-1: USB disconnect, device number 20 [ 916.034091][ T3882] team0: Port device netdevsim3 removed [ 916.047088][ T3882] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.057780][ T3882] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.068548][ T3882] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47299 - 0 [ 916.512712][ T3882] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.523356][ T3882] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.534119][ T3882] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47299 - 0 [ 916.949081][ T3882] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.959926][ T3882] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.970933][ T3882] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47299 - 0 [ 917.682433][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2143'. [ 919.000221][T12208] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 919.168027][T12208] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 919.282742][T12208] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 919.448162][T12208] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 919.885092][ T3882] bridge_slave_1: left allmulticast mode [ 919.891163][ T3882] bridge_slave_1: left promiscuous mode [ 919.897817][ T3882] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.964090][T12009] Bluetooth: hci6: unexpected event for opcode 0x2041 [ 920.003003][ T42] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 920.021365][ T3882] bridge_slave_0: left allmulticast mode [ 920.027309][ T3882] bridge_slave_0: left promiscuous mode [ 920.034125][ T3882] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.171145][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 920.184707][ T42] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 920.194548][ T42] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 920.203654][ T42] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 920.212941][ T42] usb 8-1: config 1 has no interface number 0 [ 920.219237][ T42] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 920.230682][ T42] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 920.243963][ T42] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 920.253314][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.422544][ T42] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 920.890961][ T3882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.937731][ T3882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.968894][ T3882] bond0 (unregistering): Released all slaves [ 921.985647][ T3882] hsr_slave_0: left promiscuous mode [ 922.014327][ T3882] hsr_slave_1: left promiscuous mode [ 922.022828][ T3882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.030400][ T3882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.062587][ T3882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.070279][ T3882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.132799][ T3882] veth1_macvtap: left promiscuous mode [ 922.138625][ T3882] veth0_macvtap: left promiscuous mode [ 922.144834][ T3882] veth1_vlan: left promiscuous mode [ 922.150359][ T3882] veth0_vlan: left promiscuous mode [ 922.887396][ T42] snd_usb_pod 8-1:1.1: set_interface failed [ 922.893982][ T42] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 922.902400][ T42] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 923.097274][ T42] usb 8-1: USB disconnect, device number 21 [ 923.185726][ T3882] team0 (unregistering): Port device team_slave_1 removed [ 923.201542][T12009] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 923.267725][ T3882] team0 (unregistering): Port device team_slave_0 removed [ 923.959626][ T3882] IPVS: stop unused estimator thread 0... [ 924.091444][T12379] ===================================================== [ 924.098784][T12379] BUG: KMSAN: uninit-value in poly1305_blocks+0x1a9/0x5f0 [ 924.106659][T12379] poly1305_blocks+0x1a9/0x5f0 [ 924.111823][T12379] poly1305_update+0x169/0x400 [ 924.116784][T12379] poly_hash+0x9f3/0x1a00 [ 924.121554][T12379] poly_genkey+0x3b6/0x450 [ 924.126120][T12379] chachapoly_encrypt+0x48a/0x5c0 [ 924.131486][T12379] crypto_aead_encrypt+0xe2/0x160 [ 924.136727][T12379] tls_push_record+0x38c7/0x5810 [ 924.142054][T12379] bpf_exec_tx_verdict+0x1a0c/0x26a0 [ 924.147545][T12379] tls_sw_sendmsg+0x3401/0x4560 [ 924.152933][T12379] inet6_sendmsg+0x26c/0x2a0 [ 924.157689][T12379] __sock_sendmsg+0x145/0x3d0 [ 924.166543][T12379] sock_write_iter+0x3a6/0x420 [ 924.172358][T12379] do_iter_readv_writev+0x9e1/0xc20 [ 924.177722][T12379] vfs_writev+0x52a/0x1500 [ 924.182493][T12379] do_writev+0x1b5/0x580 [ 924.186889][T12379] __x64_sys_writev+0x99/0xf0 [ 924.192006][T12379] x64_sys_call+0x24b1/0x3e30 [ 924.196867][T12379] do_syscall_64+0xd9/0xfa0 [ 924.201692][T12379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.207740][T12379] [ 924.210128][T12379] Local variable desc created at: [ 924.215413][T12379] poly_hash+0x11d/0x1a00 [ 924.219898][T12379] poly_genkey+0x3b6/0x450 [ 924.224677][T12379] [ 924.227108][T12379] CPU: 0 UID: 0 PID: 12379 Comm: syz.3.2163 Not tainted syzkaller #0 PREEMPT(none) [ 924.236927][T12379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 924.247286][T12379] ===================================================== [ 924.254978][T12379] Disabling lock debugging due to kernel taint [ 924.261381][T12379] Kernel panic - not syncing: kmsan.panic set ... [ 924.267953][T12379] CPU: 0 UID: 0 PID: 12379 Comm: syz.3.2163 Tainted: G B syzkaller #0 PREEMPT(none) [ 924.279065][T12379] Tainted: [B]=BAD_PAGE [ 924.283295][T12379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 924.293474][T12379] Call Trace: [ 924.296833][T12379] [ 924.299842][T12379] __dump_stack+0x26/0x30 [ 924.304338][T12379] dump_stack_lvl+0x53/0x270 [ 924.309097][T12379] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 924.315070][T12379] dump_stack+0x1e/0x25 [ 924.319381][T12379] vpanic+0x435/0xd30 [ 924.323548][T12379] panic+0x15d/0x160 [ 924.327656][T12379] kmsan_report+0x31c/0x320 [ 924.332304][T12379] ? __msan_warning+0x1b/0x30 [ 924.337114][T12379] ? poly1305_blocks+0x1a9/0x5f0 [ 924.342220][T12379] ? poly1305_update+0x169/0x400 [ 924.347353][T12379] ? poly_hash+0x9f3/0x1a00 [ 924.351985][T12379] ? poly_genkey+0x3b6/0x450 [ 924.356701][T12379] ? chachapoly_encrypt+0x48a/0x5c0 [ 924.362031][T12379] ? crypto_aead_encrypt+0xe2/0x160 [ 924.367425][T12379] ? tls_push_record+0x38c7/0x5810 [ 924.372812][T12379] ? bpf_exec_tx_verdict+0x1a0c/0x26a0 [ 924.378467][T12379] ? tls_sw_sendmsg+0x3401/0x4560 [ 924.383683][T12379] ? inet6_sendmsg+0x26c/0x2a0 [ 924.388611][T12379] ? __sock_sendmsg+0x145/0x3d0 [ 924.393648][T12379] ? sock_write_iter+0x3a6/0x420 [ 924.398758][T12379] ? do_iter_readv_writev+0x9e1/0xc20 [ 924.404275][T12379] ? vfs_writev+0x52a/0x1500 [ 924.409022][T12379] ? do_writev+0x1b5/0x580 [ 924.413586][T12379] ? __x64_sys_writev+0x99/0xf0 [ 924.418567][T12379] ? x64_sys_call+0x24b1/0x3e30 [ 924.423601][T12379] ? do_syscall_64+0xd9/0xfa0 [ 924.428460][T12379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.434702][T12379] ? kmsan_get_metadata+0xfb/0x160 [ 924.439973][T12379] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 924.446512][T12379] ? kmsan_get_metadata+0xfb/0x160 [ 924.451770][T12379] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 924.457825][T12379] ? kmsan_get_metadata+0xfb/0x160 [ 924.463087][T12379] ? kmsan_get_metadata+0xfb/0x160 [ 924.468357][T12379] __msan_warning+0x1b/0x30 [ 924.472999][T12379] poly1305_blocks+0x1a9/0x5f0 [ 924.477933][T12379] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 924.484416][T12379] poly1305_update+0x169/0x400 [ 924.489354][T12379] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 924.495327][T12379] poly_hash+0x9f3/0x1a00 [ 924.499840][T12379] ? chacha_stream_xor+0x5e1/0x710 [ 924.505205][T12379] ? crypto_chacha_crypt+0x79/0xc0 [ 924.510531][T12379] ? __pfx_crypto_chacha_crypt+0x10/0x10 [ 924.516363][T12379] ? crypto_skcipher_decrypt+0x18a/0x1e0 [ 924.522163][T12379] poly_genkey+0x3b6/0x450 [ 924.526740][T12379] chachapoly_encrypt+0x48a/0x5c0 [ 924.531929][T12379] ? __pfx_chachapoly_encrypt+0x10/0x10 [ 924.537616][T12379] crypto_aead_encrypt+0xe2/0x160 [ 924.542829][T12379] tls_push_record+0x38c7/0x5810 [ 924.547959][T12379] ? kmsan_get_metadata+0xfb/0x160 [ 924.553225][T12379] ? kmsan_get_metadata+0xfb/0x160 [ 924.558571][T12379] bpf_exec_tx_verdict+0x1a0c/0x26a0 [ 924.564224][T12379] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 924.570356][T12379] tls_sw_sendmsg+0x3401/0x4560 [ 924.575401][T12379] ? filter_irq_stacks+0x49/0x190 [ 924.580725][T12379] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 924.586102][T12379] inet6_sendmsg+0x26c/0x2a0 [ 924.590875][T12379] __sock_sendmsg+0x145/0x3d0 [ 924.595745][T12379] sock_write_iter+0x3a6/0x420 [ 924.600718][T12379] ? __pfx_sock_write_iter+0x10/0x10 [ 924.606183][T12379] do_iter_readv_writev+0x9e1/0xc20 [ 924.611555][T12379] ? __pfx_sock_write_iter+0x10/0x10 [ 924.617013][T12379] vfs_writev+0x52a/0x1500 [ 924.621610][T12379] ? stack_depot_save_flags+0x35/0x7b0 [ 924.627234][T12379] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 924.633779][T12379] ? kmsan_get_metadata+0xfb/0x160 [ 924.639041][T12379] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 924.645023][T12379] do_writev+0x1b5/0x580 [ 924.649423][T12379] ? kmsan_get_metadata+0xfb/0x160 [ 924.654710][T12379] __x64_sys_writev+0x99/0xf0 [ 924.659531][T12379] x64_sys_call+0x24b1/0x3e30 [ 924.664388][T12379] do_syscall_64+0xd9/0xfa0 [ 924.669078][T12379] ? irqentry_exit+0x16/0x60 [ 924.673838][T12379] ? clear_bhb_loop+0x40/0x90 [ 924.678668][T12379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.684719][T12379] RIP: 0033:0x7faab2f8efc9 [ 924.689249][T12379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.709015][T12379] RSP: 002b:00007faab3e63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 924.717579][T12379] RAX: ffffffffffffffda RBX: 00007faab31e5fa0 RCX: 00007faab2f8efc9 [ 924.725668][T12379] RDX: 0000000000000001 RSI: 0000200000001580 RDI: 0000000000000003 [ 924.733749][T12379] RBP: 00007faab3011f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.741825][T12379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.749894][T12379] R13: 00007faab31e6038 R14: 00007faab31e5fa0 R15: 00007ffd90784888 [ 924.758023][T12379] [ 924.761399][T12379] Kernel Offset: disabled [ 924.765766][T12379] Rebooting in 86400 seconds..