last executing test programs: 55.562686113s ago: executing program 0 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 53.959209389s ago: executing program 0 (id=295): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="f60db9be9ce2aaaadcaaaaaa8100000088a8"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main, @local]}}, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x10) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000f70c2285d2aa7c0b8758e767a09d6aca5ef7c95584f221c6d832fe34acd2f0ad83c6bcc9664e6710a666a088c13eee069ef6006a77c6096e298649eda6409c6d7a0dfefb9c8aac4c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 50.129049057s ago: executing program 0 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2400, 0x110, 0x8}, 0x18) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000640)="400f3241d39efbffff7f36460f75510b2ef3420f090f01c5f20f0766260f01734cc74424ed00170000000044240200380000ff2c24410f3065450fa0", 0x3b}], 0x1, 0x1e, &(0x7f0000000140)=[@cr0={0x0, 0x60000001}, @cr4={0x1, 0x464530}], 0x22) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000240)={0x2, 0x6, 0x0, 0x1811155c9beceda3, 0x9, 0x0, 0x70bd2d, 0x0, [@sadb_lifetime={0x4, 0x4, 0x1, 0x7, 0xa53, 0x100000001}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x10000000000002}]}, 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000900), 0x7, 0x4c6, &(0x7f0000000100)="$eJzs3EFsFFUfAPD/bFtaoHzsx8eHgqiLaGw0tlBQOJgYjCYeNDHiQY9NWwhSqKE1EUJkSQweDYl349GrB6/qzXgy8YpHE0NCDBfA05jZnW23292l3W670v5+ybLvzbzZN2/fvDdv3mMbwJZVyv5JIoYj4lZE7I6IQmOCUvXt/t2rkw/uXp2Mcpqe/ivJDot7WTyX5O8788hIIaLwebK4o87c5SvnJ2Zmpi/l8bH5Cx+PzV2+8tK5CxNnp89OXxw/efL4saMnXhl/efWFapJfVq57Bz6bPbj/rQ9vvjPZX9s+lL/Xl6NbSlFqdioVz3U7sx7bVRdO+tulfG39T4YVy67/rLoGKu1/d/RF28oDNpE0TdPB1rvLaaPry7YAj6wken0GQG/UbvTZ82/t1WwgsG19hh89d+dU9QEoK/f9/BXxdGVjbR5koOH5tptKEfFB+e+vs1es0zwEAEC9H0/VRoIN479ixL66dP/J11CKEfHfiNgTEf+LiL0R8f+opn0sIh5v+Py+iEjb5F9qiC8f/xRur62E7WXjv1fzta3F8V/Ur4IV+/LYrojagHn6SP6djMTA4JlzM9NH2+Tx0xu/fdlqX/34L3tl+dfGgvl53O5vmKCbmpif6LjADe5cjzjQ31j+pD8iWVgJSCJif0QcWMXnFuvC51749uBCZGBpuoeXvyJtuo7WhaWK9JuI56v1X44l9b+YY9J+fXJsKGamj4xlV8GRpnn88uuNd1vl/9Dyf/9H4yFvnvjhdN6y1i6r/x1113/U1m8Xy19MIpKF9dq51edx4/cvWj7TdHr9b0ver4Rrz6WfTszPXzoasS15e/n28cVja/HsPcrV8o8cbt7+9+THZN/EExGRXcRPRsRTUX1CLEV67VBEPBMRh9uU/+fXn/2o8/Kvr6z8U037vyX1v7he3yqQlKupm+zqO3/o1oMWncfK6v94JTSSb2ne/yVLuog2Z7oksNbvDwAAAB4FhYgYrptLGo5CYXS0Oge0N3YUZmbn5l88M/vJxanqbwSKMVCozXRV54MHktr8Z7EuPt4QP5bPG3/Vt70SH52cnZnqacmBnZU2nxRGF/qCavvP/NmdKWbg38xPfmDrelj733dzg04E2HDu/7B11bX/coskZf9TBjanldz/zQXC5tSs/V/r4Bjg0ZJqy7Clrab96ytgc+mP9xbChZ6eCbDR3NNhS1rRj+Q7DqSDzXcNxfLEMdT+A/uis9PY3iSvngSykVVPct/eyVG1v6bQMk0UVveBg9GdOj2z9q/l7L6uX/xpvj7W7Rr8bkPaabNA+35jfHj9+iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu+icAAP//KPXcbw==") rmdir(&(0x7f0000000340)='./file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x9c) sendto$inet6(r6, &(0x7f0000000600)="100a1c151defa7884d7e3f1b502532fcb074d756b7686c14b009aec3eeb211c2bfdd8e8655e3bc689352130bfc498df896b156543ee94a6a6d", 0x39, 0x40, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="4dcdc7c6223e00000000ffff8137", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100001000000", @ANYRES32=0x0, @ANYBLOB="04230300000000001400030067656e65766531"], 0x3c}}, 0x0) 49.603087887s ago: executing program 0 (id=309): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a0500000000000000d300e6d602000000000000000000000001"}) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='i', 0x1}]) 49.236555654s ago: executing program 0 (id=310): syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000005c0)={[{@sb={'sb', 0x3d, 0x1}, 0x22}, {@delalloc}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000002}}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@bsdgroups}, {@journal_dev={'journal_dev', 0x3d, 0x8003}}]}, 0x1, 0x5d8, &(0x7f0000000bc0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, 0x0) ppoll(&(0x7f0000000280)=[{r2}, {r1}, {}], 0x3, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 47.853900816s ago: executing program 0 (id=313): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0xbac, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x23, 0x95, 0x3a, 0x8, 0x1bc7, 0x1207, 0x2233, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9a, 0x2, 0x20, 0x92, 0x40, 0x7f, [{{0x9, 0x4, 0x4d, 0x40, 0xc, 0xa5, 0xfa, 0x26, 0x9e, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0e99"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5dd5, 0x2, 0x81}, [@obex={0x5}, @mdlm={0x15, 0x24, 0x12, 0x4d35}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x2, 0x1}]}], [{{0x9, 0x5, 0xd, 0x4, 0x200, 0x40, 0x7d, 0x1f, [@generic={0xd, 0x24, "2006701111d062a981f3bf"}, @generic={0xb5, 0x9, "e64f00b3ca0c28e566d09e3b0d1522c1333f222f8e5fb275af51dfd593dd1a461b74edfb618bb102c2c43a1ce4ec2a0fbbc2cca6009c6dae6c8d0d158826bc2838296063c924874b65e7be368a259379a5fb8c678934a0a1e4d4fae02397533bb82daa4e73d08a96f5cdb5d3569bc6ad8d10bfb66308d9859f6e773b98887d97179c748700c9197056524c7f00d66e66b0f5e90b3ded8018d408e2845afb2bdb7d1d2f8e12684e8415a11f7c14b908f75aa722"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7c, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc6, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x6, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x56, 0x6, 0x1f, [@generic={0xd1, 0xd, "716614785f29ea9897fcaab240d09400f95b8fabdb8f1edf0b12c8086aae12ac9c068ed46293264a7abef59f3393ea4ba7fcc8962901ec2f7b48cf6e500aacd558364458cafbbb737cbc816fd6ca14dcb5b91803e0aa8b3af1a4bbebd00b4ab5043df85fb4eb0e418ffa3452c5ed81a55cb486291e338178952f80d705eec3f97d5fe1aadd3999f143862ffb74e9b531aa332510f39a2541bb97b7688af68d0f2e244859f3dc9d6d15b5b8452e1ed51184bae7d79308c7bfa467cf9c579ea87bfa64ca6fcf1353853e5d6edba0c83d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x4f, 0x6, [@generic={0x7f, 0x30, "29dec15f4a179c3401cd46072a9a3d725f12b6dfb437260365c1da6a8d2ef476fca9bf8dd146e6d9598b04923af70a494206a2d166e083e12fa4f4abcf3a933964001e00c11734b0cd6a4ab67838947f55a522cc5a950fa694cab262fd14615130f3a953def18a1d3e42bc9196bb52cbd303ff4f2219d2216fdb9dcc70"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x3, 0x1, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x72, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xd5, 0x8, 0x3, [@generic={0x37, 0x6, "2e0ae1adbc76145206118fb7b1edab298dc9c0da115f4f739a39e4aa7e0ad9c328aa64a33c5431450b5affa7d298e78a5a63bdbad1"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x1, 0x40, 0x81, [@generic={0x16, 0x21, "e0f63fc39573b4658be53186e37a845f80df8a65"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xc9, 0xf7, 0x5}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x9, 0x4, 0x9, [@generic={0x102, 0x2, "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"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x2, 0x4, [@generic={0xf, 0x6, "9cab973e0cd63797de3ba50061"}, @generic={0x4c, 0x23, "0c5643084eb23871007146acb54626f7149445dc4e32cabd6bc8eecc6377b610a69be1b963a59edca7de4cc08db41e7998fad0798bd443806ad8eb048ad4232210d72c50401a4c888999"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0xff, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}]}}]}}, {{0x9, 0x4, 0x5, 0x20, 0xc, 0x66, 0x30, 0x9c, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "187ee9b75330"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xffffff49, 0x7fff, 0x5, 0x40}, {0x6, 0x24, 0x1a, 0x8, 0x38}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x94, 0x81, 0x81, [@generic={0xa0, 0x31, "ef221049d04039f0fcbd9fb8cfb4359898b5240d0649ac4d62704a19c6359067e6b98c8578ec289bfcf23b137adba0dc174a39a98564f2bc20436000bdbac70e8e7cd3b75db760b2c957af1e2208c5edb1b9f521adfaa0aa80daded9463a82f41bb63053568222a035336a8f20f04c480e3f7d22d848cc071f3bf353d555e2a8523c62fd69f5dc88edc158164293ecc0e6e61bac623cd7437866d0ea599b"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0x9, 0x4, [@generic={0xe2, 0x8, "0e7ac1df4787193b05682197ccf0411088c7dfa2126889c9817ddd667591801cdbe713f53348281c87bca73a22ab1c4489fb0f6bad42c4b37646a63823a0fe533e41c207aa298e34d34661b0351ce422e3f671be4a5ab186cfb6f12b79c3516c84cbc26826f779b035e2a869cd5eac066d4f2a90c7799710d53109868998cf8616aa98e6e540c470c9f4b8229ca5bd1cf738a55e5679c5026d080d5ffdd15a79c65ff765ab68d3f1b53ec5b72c0b10f8eebd0a8293ca0d93c93b17edce34becdf3265a000bd7f7c26502efb57e2719d64d803d40ecd18d17ed5f1a1198318e1b"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xfa, 0x9, 0xff, [@generic={0x97, 0x7, "9cf5500decc67ceb49280b67d7b5f340302647683ed1fba8895f37fd2dfa82ff5f03cc4bbf556736fa3f1813439a165b4c062453f0443b2905fcdd2c5cbc9f033d49d3560fd7abb134d1e2c61b655fabb20a2a1f5bdc5c464f4e78827e2ed836b3d3cb8b97a6ef1165cfd51548e673be79649c6939d7e7296a75829a8dd3255762bf2332243390ba706a4300c131cd23bc4233f994"}, @generic={0xc8, 0xc, "2e97b3b6ff2aa8c52fb206f3117b83056bf51421542589df7d619c78dea7498ffb7ff2a98fbb772a67a9d59be53e6003866fcab4e3a862ef7239ee2764c953f59da3313fe1440e3934a0f77ccd2f4faf4d3faeaad024afa195069c186adbbfe24d14038189afca895b6ed81804c1ea80e7547b03bb314360c11c5f939b646d6441abcfc81ee79f7f8065e8686f4652a990365a43d76a9c3619f1e90922f408c437d0e135ed9082bc43776bad542088af9e1fbed9afec3b0317c6d6bfaf93c20ea27e9bb11a2b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x3, 0x7, [@generic={0xc7, 0x6, "8ce4f32bb36685ee47cf97d8cda8655b56c531e3f9b22c4aabeabf02f703a4e32fb1debc23177dd99248e01d826cf0552188801f8abed4e4aafce5a54903fc8f563e2a6709c709381109928fc8da984201c3372feb467d2545444adf93a89ccbfe943055e65f0a27aa6e63a59e47eea40c0a8e19bddcc594fa17213164e995dcdbada5fe8ad5755e53ad5aa8cdbda09c98be1a3ccc3f5fc1f558df17e006aae7c288dbf2ac13d9a55935cec3bc2838f937b00f815ec3fde697b89086a414a0b968503d400f"}, @generic={0xf0, 0x3, "95e7cb0048136eed1ab22f935e9bbbb429bcd90280020fffca166a7701e3afc1f8836a93e8f4a6cd05155c1618e617a5837c7087685f214b056026655fec5a966a89fc1bc70ef9279093e1abe7d3d522a1fe7533027666b5db7947af0b96710c2223ffbf8bf72e0b9c9afb086b7f93f04ef888fc1199e6ee60d41cca1dba5e0ae56d35673e6794dd8c62960b3660f44feb0dbc75917da8992f473e5613680722c6a230c599d5506101a8f856412119a4c9f0b3d3bf10822b3960ca00f02c42858a72755a3d491edd321f045ad29f03378835cb044194b5220a9f6347642293fa8968995afb7602577566ce42fc67"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x13e43f4e801cf167, 0x73, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8001}, @generic={0x2e, 0x15, "ef0f20b289785269443f0d255d3541214826ed463f9233bc4d47194280cba5ac840fdc028cf9d93615499d87"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3f, 0x6, 0x20, [@generic={0x45, 0xa, "15bdf91a5a691afb637ba965a20f2e9db5466482a775775bc67af22916155f0bc7a9d1e1a355f968deda3a41365fa486951f113b54de9b41ff1d0ac6e59576468119c9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x1, 0x5, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfff7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0x18, 0x20, 0x75, 0xda, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xe860}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x92, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x340}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x3, 0x8, [@generic={0x26, 0x37, "f1e218779c7e679a500ee73d833fd12a35089c0e70a52e26afa9bf56fd439138459b29b1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0xb0, 0x6, 0x6, [@generic={0xdf, 0x11, "df4ba362c5909a76eab17b78dbca9f208ef22f1ddd1d354ff38b99c1efdce0418784cea9da1684a1c20c636847849604cdf7b1ec69555210d358099eea463fd5bd82943761200d7202fa0ff0cc3747ca57da1ee84eb1b1a8c688eaf8bdacd4149100efd030558b63f6633a167b7fd44285cd1f5c73ad5b45f4a36c14bba14e7273e17891bb3d2a8b22477c19314f2805e4c5370b4725fcdd3753c81c6c72301c7a857965b2ce047cdbdf85a9e70298b6b063f618ecf8c7f16dfa2f01e2a32a82821b90a96c1b9214b707f468d613df5433c72430f2d3f68f0d8391b793"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x2, 0x6, 0x7, 0x40}, 0xa3, &(0x7f0000001780)={0x5, 0xf, 0xa3, 0x3, [@generic={0x83, 0x10, 0xa, "e6249272ecb276ee2263af5180cab760b8ba033f791c5bfe7078837ffb1fad1193a93a81af8f41ecf76eff4b984ed897f57df8346b0c8e7c6fdc349d1e7377f2dc8994576e62a9775928814f210fb3b6f06e02db6fb719af3227a35ae67f9f62d40b389cfbde26078a5074a2a422dfe397d4db08ef9d76d1ff9bae88866b2f57"}, @ssp_cap={0x14, 0x10, 0xa, 0x20, 0x2, 0x99f6, 0xf00, 0x99, [0xff0030, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x1}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_ep_write(r0, 0x6, 0x3c, &(0x7f00000018c0)="23a851e17829be9f5481f3683dc84cbab3774e4ac80466d0a826e8de3e98cbd767b1eac8328ea15b3ef0fa38b3fbf1c9380a881f6a554bf7618a3905") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x50}}, 0x0) r8 = dup2(r3, r3) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB]) 12.588193668s ago: executing program 4 (id=361): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 12.365258222s ago: executing program 4 (id=363): open(&(0x7f0000000000)='./file0\x00', 0x8e040, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(r2, 0x0) setreuid(0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000005c0)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000200)={r6}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes128, 0x2, @desc4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={r7, 0x1, r5, 0x3, 0x80000}) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000580)=0xfffffffffffffc5a, 0x80800) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) accept4$inet6(r8, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f0000000080)=r6) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000280)={r7}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b40000004900d96d28bd7000fedbdf250a003800", @ANYRES32=r9, @ANYBLOB="0100000014000100fcf8000000000000000000000000000014000100fe8000000000000000000000000000aa080002"], 0xb4}}, 0x0) 10.093755061s ago: executing program 4 (id=368): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="f60db9be9ce2aaaadcaaaaaa8100000088a8"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main, @local]}}, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000038230000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x10) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000280)=0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000f70c2285d2aa7c0b8758e767a09d6aca5ef7c95584f221c6d832fe34acd2f0ad83c6bcc9664e6710a666a088c13eee069ef6006a77"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.990399247s ago: executing program 3 (id=369): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000180)=ANY=[], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8b, 0x8b, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @datasec={0x4, 0x7, 0x0, 0xf, 0x3, [{0x2, 0xffffff7f, 0x7}, {0x5, 0xc4, 0x4c83}, {0x1, 0x9, 0x1ff}, {0x4, 0x9, 0x8}, {0x3, 0x10000, 0xf6}, {0x3, 0x9, 0x40}, {0x5, 0x5, 0x7}], "cc2f9d"}]}}, 0x0, 0xa6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0xfffffffffffffce7, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="7f8b8f73b786316d5172", 0xa}], 0x1, &(0x7f0000000140)=ANY=[], 0x58}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="4900030007"], 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x8805) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800bac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r11}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x30}}, 0x0) 9.552082614s ago: executing program 3 (id=370): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000161, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c8, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 6.510441461s ago: executing program 3 (id=373): syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000005c0)={[{@sb={'sb', 0x3d, 0x1}, 0x22}, {@delalloc}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000002}}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@bsdgroups}, {@journal_dev={'journal_dev', 0x3d, 0x8003}}]}, 0x1, 0x5d8, &(0x7f0000000bc0)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f0000000280), 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 6.508805391s ago: executing program 4 (id=374): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x7, {0x7, 0x0, "009c16d900"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.348652666s ago: executing program 3 (id=376): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x2031, 0xffffffff, "00207d2000000000241b14700c1ee7c64f000000001200000000080900"}) r5 = socket$packet(0x11, 0x3, 0x300) unshare(0x44000000) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000100)={0x9, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2}, {0x60}, {0x6}]}) setsockopt$packet_int(r5, 0x107, 0x18, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc) 4.138757315s ago: executing program 1 (id=378): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2816c00}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write$FUSE_IOCTL(r2, 0x0, 0x0) ftruncate(r2, 0x0) 4.120199668s ago: executing program 4 (id=380): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0xbad, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x23, 0x95, 0x3a, 0x8, 0x1bc7, 0x1207, 0x2233, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9b, 0x2, 0x20, 0x92, 0x40, 0x7f, [{{0x9, 0x4, 0x4d, 0x40, 0xc, 0xa5, 0xfa, 0x26, 0x9e, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0e99"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5dd5, 0x2, 0x81}, [@obex={0x5}, @mdlm={0x15, 0x24, 0x12, 0x4d35}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x2, 0x1}]}], [{{0x9, 0x5, 0xd, 0x4, 0x200, 0x40, 0x7d, 0x1f, [@generic={0xe, 0x24, "2006701111d062a981f3bfa2"}, @generic={0xb5, 0x9, "e64f00b3ca0c28e566d09e3b0d1522c1333f222f8e5fb275af51dfd593dd1a461b74edfb618bb102c2c43a1ce4ec2a0fbbc2cca6009c6dae6c8d0d158826bc2838296063c924874b65e7be368a259379a5fb8c678934a0a1e4d4fae02397533bb82daa4e73d08a96f5cdb5d3569bc6ad8d10bfb66308d9859f6e773b98887d97179c748700c9197056524c7f00d66e66b0f5e90b3ded8018d408e2845afb2bdb7d1d2f8e12684e8415a11f7c14b908f75aa722"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7c, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc6, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x6, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x56, 0x6, 0x1f, [@generic={0xd1, 0xd, "716614785f29ea9897fcaab240d09400f95b8fabdb8f1edf0b12c8086aae12ac9c068ed46293264a7abef59f3393ea4ba7fcc8962901ec2f7b48cf6e500aacd558364458cafbbb737cbc816fd6ca14dcb5b91803e0aa8b3af1a4bbebd00b4ab5043df85fb4eb0e418ffa3452c5ed81a55cb486291e338178952f80d705eec3f97d5fe1aadd3999f143862ffb74e9b531aa332510f39a2541bb97b7688af68d0f2e244859f3dc9d6d15b5b8452e1ed51184bae7d79308c7bfa467cf9c579ea87bfa64ca6fcf1353853e5d6edba0c83d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x4f, 0x6, [@generic={0x7f, 0x30, "29dec15f4a179c3401cd46072a9a3d725f12b6dfb437260365c1da6a8d2ef476fca9bf8dd146e6d9598b04923af70a494206a2d166e083e12fa4f4abcf3a933964001e00c11734b0cd6a4ab67838947f55a522cc5a950fa694cab262fd14615130f3a953def18a1d3e42bc9196bb52cbd303ff4f2219d2216fdb9dcc70"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x3, 0x1, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x72, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xd5, 0x8, 0x3, [@generic={0x37, 0x6, "2e0ae1adbc76145206118fb7b1edab298dc9c0da115f4f739a39e4aa7e0ad9c328aa64a33c5431450b5affa7d298e78a5a63bdbad1"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x1, 0x40, 0x81, [@generic={0x16, 0x21, "e0f63fc39573b4658be53186e37a845f80df8a65"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xc9, 0xf7, 0x5}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x9, 0x4, 0x9, [@generic={0x102, 0x2, "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"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x2, 0x4, [@generic={0xf, 0x6, "9cab973e0cd63797de3ba50061"}, @generic={0x4c, 0x23, "0c5643084eb23871007146acb54626f7149445dc4e32cabd6bc8eecc6377b610a69be1b963a59edca7de4cc08db41e7998fad0798bd443806ad8eb048ad4232210d72c50401a4c888999"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0xff, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}]}}]}}, {{0x9, 0x4, 0x5, 0x20, 0xc, 0x66, 0x30, 0x9c, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "187ee9b75330"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xffffff49, 0x7fff, 0x5, 0x40}, {0x6, 0x24, 0x1a, 0x8, 0x38}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x94, 0x81, 0x81, [@generic={0xa0, 0x31, "ef221049d04039f0fcbd9fb8cfb4359898b5240d0649ac4d62704a19c6359067e6b98c8578ec289bfcf23b137adba0dc174a39a98564f2bc20436000bdbac70e8e7cd3b75db760b2c957af1e2208c5edb1b9f521adfaa0aa80daded9463a82f41bb63053568222a035336a8f20f04c480e3f7d22d848cc071f3bf353d555e2a8523c62fd69f5dc88edc158164293ecc0e6e61bac623cd7437866d0ea599b"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0x9, 0x4, [@generic={0xe2, 0x8, "0e7ac1df4787193b05682197ccf0411088c7dfa2126889c9817ddd667591801cdbe713f53348281c87bca73a22ab1c4489fb0f6bad42c4b37646a63823a0fe533e41c207aa298e34d34661b0351ce422e3f671be4a5ab186cfb6f12b79c3516c84cbc26826f779b035e2a869cd5eac066d4f2a90c7799710d53109868998cf8616aa98e6e540c470c9f4b8229ca5bd1cf738a55e5679c5026d080d5ffdd15a79c65ff765ab68d3f1b53ec5b72c0b10f8eebd0a8293ca0d93c93b17edce34becdf3265a000bd7f7c26502efb57e2719d64d803d40ecd18d17ed5f1a1198318e1b"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xfa, 0x9, 0xff, [@generic={0x97, 0x7, "9cf5500decc67ceb49280b67d7b5f340302647683ed1fba8895f37fd2dfa82ff5f03cc4bbf556736fa3f1813439a165b4c062453f0443b2905fcdd2c5cbc9f033d49d3560fd7abb134d1e2c61b655fabb20a2a1f5bdc5c464f4e78827e2ed836b3d3cb8b97a6ef1165cfd51548e673be79649c6939d7e7296a75829a8dd3255762bf2332243390ba706a4300c131cd23bc4233f994"}, @generic={0xc8, 0xc, "2e97b3b6ff2aa8c52fb206f3117b83056bf51421542589df7d619c78dea7498ffb7ff2a98fbb772a67a9d59be53e6003866fcab4e3a862ef7239ee2764c953f59da3313fe1440e3934a0f77ccd2f4faf4d3faeaad024afa195069c186adbbfe24d14038189afca895b6ed81804c1ea80e7547b03bb314360c11c5f939b646d6441abcfc81ee79f7f8065e8686f4652a990365a43d76a9c3619f1e90922f408c437d0e135ed9082bc43776bad542088af9e1fbed9afec3b0317c6d6bfaf93c20ea27e9bb11a2b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x3, 0x7, [@generic={0xc7, 0x6, "8ce4f32bb36685ee47cf97d8cda8655b56c531e3f9b22c4aabeabf02f703a4e32fb1debc23177dd99248e01d826cf0552188801f8abed4e4aafce5a54903fc8f563e2a6709c709381109928fc8da984201c3372feb467d2545444adf93a89ccbfe943055e65f0a27aa6e63a59e47eea40c0a8e19bddcc594fa17213164e995dcdbada5fe8ad5755e53ad5aa8cdbda09c98be1a3ccc3f5fc1f558df17e006aae7c288dbf2ac13d9a55935cec3bc2838f937b00f815ec3fde697b89086a414a0b968503d400f"}, @generic={0xf0, 0x3, "95e7cb0048136eed1ab22f935e9bbbb429bcd90280020fffca166a7701e3afc1f8836a93e8f4a6cd05155c1618e617a5837c7087685f214b056026655fec5a966a89fc1bc70ef9279093e1abe7d3d522a1fe7533027666b5db7947af0b96710c2223ffbf8bf72e0b9c9afb086b7f93f04ef888fc1199e6ee60d41cca1dba5e0ae56d35673e6794dd8c62960b3660f44feb0dbc75917da8992f473e5613680722c6a230c599d5506101a8f856412119a4c9f0b3d3bf10822b3960ca00f02c42858a72755a3d491edd321f045ad29f03378835cb044194b5220a9f6347642293fa8968995afb7602577566ce42fc67"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x13e43f4e801cf167, 0x73, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8001}, @generic={0x2e, 0x15, "ef0f20b289785269443f0d255d3541214826ed463f9233bc4d47194280cba5ac840fdc028cf9d93615499d87"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3f, 0x6, 0x20, [@generic={0x45, 0xa, "15bdf91a5a691afb637ba965a20f2e9db5466482a775775bc67af22916155f0bc7a9d1e1a355f968deda3a41365fa486951f113b54de9b41ff1d0ac6e59576468119c9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x1, 0x5, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfff7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0x18, 0x20, 0x75, 0xda, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xe860}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x92, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x340}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x3, 0x8, [@generic={0x26, 0x37, "f1e218779c7e679a500ee73d833fd12a35089c0e70a52e26afa9bf56fd439138459b29b1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0xb0, 0x6, 0x6, [@generic={0xdf, 0x11, "df4ba362c5909a76eab17b78dbca9f208ef22f1ddd1d354ff38b99c1efdce0418784cea9da1684a1c20c636847849604cdf7b1ec69555210d358099eea463fd5bd82943761200d7202fa0ff0cc3747ca57da1ee84eb1b1a8c688eaf8bdacd4149100efd030558b63f6633a167b7fd44285cd1f5c73ad5b45f4a36c14bba14e7273e17891bb3d2a8b22477c19314f2805e4c5370b4725fcdd3753c81c6c72301c7a857965b2ce047cdbdf85a9e70298b6b063f618ecf8c7f16dfa2f01e2a32a82821b90a96c1b9214b707f468d613df5433c72430f2d3f68f0d8391b793"}]}}]}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0xa3, &(0x7f0000001780)={0x5, 0xf, 0xa3, 0x3, [@generic={0x83, 0x10, 0xa, "e6249272ecb276ee2263af5180cab760b8ba033f791c5bfe7078837ffb1fad1193a93a81af8f41ecf76eff4b984ed897f57df8346b0c8e7c6fdc349d1e7377f2dc8994576e62a9775928814f210fb3b6f06e02db6fb719af3227a35ae67f9f62d40b389cfbde26078a5074a2a422dfe397d4db08ef9d76d1ff9bae88866b2f57"}, @ssp_cap={0x14, 0x10, 0xa, 0x20, 0x2, 0x99f6, 0xf00, 0x99, [0xff0030, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x1}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_ep_write(r0, 0x6, 0x3c, &(0x7f00000018c0)="23a851e17829be9f5481f3683dc84cbab3774e4ac80466d0a826e8de3e98cbd767b1eac8328ea15b3ef0fa38b3fbf1c9380a881f6a554bf7618a3905") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x50}}, 0x0) r8 = dup2(r3, r3) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000140)=ANY=[@ANYBLOB="bc0800600c90297f0000000000000000ac080080a508000038a9d0720cc84514dccdfb1fd2efd73cdcda4463c756f9a639539313b2a2567370b4516a4ae84340116ab0964ca1fad1866f5a0dc87b47f9fb0802c74f68f804fb7670225dc1d6f5ee38f4fc8455668647558e8e6789622a6510c6fcc33c480b8453e6dda9a288d486a66f0494a24352be9c703050188ff8488c5212178aea5f5bb413ce42928cd3f1369243dd93cdbd811493eb646df8799855577411b6d91dc1c67d41a00ee5c9cda43c0bc5b5ee6c8d8cc000b073bc2fb1e27661678696573d23758e21a861dfe1c261b9ab378eca2d43331ccc5fdc5cadc974cb9ef6215faf9d71047cf558eefff1ece60e4b044e40923df6f3c15ed64b84ce8b1e9cf07e5d58031a9827f0589181e9027ee1d11d9a3d62d879e4358ad0b52d8899a34db7bf4d0429498c3a86faead2ee642ff59ac436737bc4185bc1b230c22c8e2be516e5bb2075810415f6d57ad9d419e7da1ccf9663564ed97655b06fcef467eb23593b8041553837253e7bd5f28ece82cf202f90d6d3e2fbd6eec550fd18ce0317f65af14ff56955e436aaa75e938b2e968bc1638bedfd352a3f0dd0c2a9d6d96e6f546993190334e145d2420f23b40dd79a80531364157648fb77a03ccb032a919e6d26318e00fffd1f87dbfee5121846508e86881d75fc2f5607379b3918cbeb15ec4e7f217ac85a140b0d607f1483ef959c2b28ff446ff1fcb810b47aaac1e4cc6b9215fbceabd517efc1a776dac240f1b97d2bdaf3b1e22481aa757fc2d7afd62ad539586fc92990261af89c5e01506ae8775622f3d8ae9537f107fb1b4cbc48108f800a8cba72d2576c8830152ea95cf0238146e8a030832d40603fc1489913c6a009701f93ee5222ac8ea0e43e28ff3380e309ab31de5f910fe9a53124f640d480fa21bc263be75875e64abac9d49d65b4ff1871b14ee03ead6faefb833392023286e9aed32a197801cc46fe3d5fb6c4e2f7faa2655f4655983fd25ffd185ced6631bc079e4bcea2e6a4d16d467c4f3bdd5782a690f745acd9ed156ffd77a105a254cab001cf218d9a7b78cde5896c2a803ae48e7241f36962817136eea0b15c196cc80d2a38bfa1f41c792f982d72592b92c66e8bdb86fa66220ffc71197e152e0b4c825491c3e7e26321b651a2dd195df105b74c25d6599ae597927f600008597bd3174cc6ad8724d715471f9afddb4e8574cceb90bd5625f8a7cd05ac07b4f33e1a6ed9f8c1051643df219365345029798355541ebf085035284331f6e74c37aa2d95e6b8d84a64fe4ed527beba7648fcbe3a17e7ee181aa174769fe0ba588529801d86a8235a18818996d5a003286588d4c32429db8846f6333222969b3606372f32c8a4db1c48270d552f1d47ecc43a13b8dd8c101e9ffe73d4843cd7418bd3c0d78bc6a1ed0b6c794405893804918f5200da41dcf14f4452523b54ddd5bd993d1870b713367985367e0d882104707e813f5625af5fddc01fa4c0379a988bb993c56cab6261f84b352742c2a7049e4c8048b2ab98fb821c7ceca1668f2b997f6cce126031e4b919fa1a8215fc2b3059bf4209487ebe3b9e82d62bec068ff04a541fa102807ffe9bd2690ef76584e0ce32cc51fd7a6b7a9606b6d069900a8a81e84d7ee444d901ed9329949cde5fa3599d06447befca5160199a916fcf49f6528978ace93e5aa04bb6a21ffcd0dddacc12214d09d564ba5843d12fe867a332d6a867b2774b8716e7da725a21c91c1a0fe361102736ea06ee59324b6ff1c8e6e6f73af4c5e48605eab83ca822a18b40a44471266b044e5cb967fd77978b6a8b7b3d262af3badebd96428fb2f219bfccb83ba378b60dac754be533976a7688352d86208b24c79604ae2d6620107378ef0d6023bdb2573c4f0eba329ee4c84a5969fc8218d4393377fbe961750e910f657d0edf0f06ca93662b50e8ba33721698f867ea7ac8e973dbb5cd1b049d453122b7b9e0fb27fde6a20d050000000000000051865d14e45ccf9c4d5759ad83eefc8f393472553edebf987f128a95a438da7770e9ccf20213a266a738358f4b1ecf6a1e74086a4064524719bc4f26b1c41cf53beb1a0e0feca79979d6376339901db52bfc86717f9cbc3f2b0c68426e01c647a5c919e9719ae854c380f106e53ac4a4200e21e2ddff287a60b4c1c1ca194ac61dd0e54f3d9e7bc0f1f35f3e624f067b00d5f1c965254e2820f7fcea034753d356d383a11550df563bc249e664ac9b4367947782b2a3f852fe4cb0e5ecea5f9f62a9c952c0bbd7e959d9ac69d6c3f4c58977c94e25b652e44fa8a3967e96233c43199daa5d71db38e2951a37bd0f2a27c733fb598d529e36d1ebb67d258b5e89f631d734da072a91abe011750332f61067784b88efbee8d81c6d685e4c95a33af8f8b9b3022887c1d4929ab97a314bb03eb2243dd3243b1f3c68238ac07788e93eff25b028b4b4ab91924ec18ce9947a8a82ae504940c86dc4110603aae1ca4a81895069c0a846a2125b634de94409b3c2fb02ef55f0c050dc8c4e1dccf7603c7e4bdf1c8054ed4056f4c6e30ed4efaf817513b77f26051ff3c79bc7f0da9b8d92e8af632486ef6a422fda5dfb2b7d3ed9442cb6ed8442a83d21ba84da29912248524db42bd5458393a290220c57eeaefb1c11c6ca58464274d417d294ca7dd3831fba590117d012b107e4460e35a4d0b28ffed042c7e7636e101c3ac3e2d7c02c7561617a9ec51726de4cda3ad7e29ad904ec0ad3becf74eb15dc938dd76c29876362acfdfe50f73e9a7b476d526037a12448a26d359a9e59cdf98434421bbf8cf37f3f42706a6d41f3210485e7746f8b4b976a33b5c1483bbee3d51ea1cef04926d005aaf6c3b669544b3a75ff20a90a190963f3564d7f7d89cc4c1adb471d5629a23b25e43bdf1f46abc2263637c48fc5649c6ca705b25c4b2fb2fd1de3db561beeeaeee260953ca9f3984d625a374ad214bbcb67f5f0308ad4a477e49c18272e08ada7f36a7c6de241c8a5bc07914ac2b3a6d18e516c3854635b3b561e0c7ee16c4f6446193836d3137a219a467ea874e91f7e4f40f00aadf1e88e6208faa436301421221e2326b7f680e65f263e55a4f8140572f0c463000000859bc155eddb3d8fad8c6d091527a2c2ca21a5e53f9d1b48e56599262c75da201821a0999947afdbaaa04307e32f567ac4f31883188c0fb5f27c7995646263fb3d738a72b74ed8e92f3261dc344d23054562337d908cc94f7629832c9c875565fe5724f28f102fff374972bf81cdd0ddcacf36238b6184"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB]) 3.933081676s ago: executing program 1 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2400, 0x110, 0x8}, 0x18) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000640)="400f3241d39efbffff7f36460f75510b2ef3420f090f01c5f20f0766260f01734cc74424ed00170000000044240200380000ff2c24410f3065450fa0", 0x3b}], 0x1, 0x1e, &(0x7f0000000140)=[@cr0={0x0, 0x60000001}, @cr4={0x1, 0x464530}], 0x22) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000240)={0x2, 0x6, 0x0, 0x1811155c9beceda3, 0x9, 0x0, 0x70bd2d, 0x0, [@sadb_lifetime={0x4, 0x4, 0x1, 0x7, 0xa53, 0x100000001}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x10000000000002}]}, 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000900), 0x7, 0x4c6, &(0x7f0000000100)="$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") rmdir(&(0x7f0000000340)='./file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x9c) sendto$inet6(r6, &(0x7f0000000600)="100a1c151defa7884d7e3f1b502532fcb074d756b7686c14b009aec3eeb211c2bfdd8e8655e3bc689352130bfc498df896b156543ee94a6a6d", 0x39, 0x40, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="4dcdc7c6223e00000000ffff8137", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/18, @ANYRES32=0x0, @ANYBLOB="04230300000000001400030067656e65766531"], 0x3c}}, 0x0) 2.982133563s ago: executing program 2 (id=382): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="3c82bf073aaebbbbbbbbbbbb86dd6001010000101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000001090780200000000"], 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xc3, &(0x7f0000000540)=""/195}]}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaf991bb000000000000aaaaaaaaaabb000000000000000000020000d0"]}, 0x111) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) 557.162555ms ago: executing program 1 (id=383): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 549.963526ms ago: executing program 2 (id=384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 538.521397ms ago: executing program 3 (id=385): syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000005c0)={[{@sb={'sb', 0x3d, 0x1}, 0x22}, {@delalloc}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000002}}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@bsdgroups}, {@journal_dev={'journal_dev', 0x3d, 0x8003}}]}, 0x1, 0x5d8, &(0x7f0000000bc0)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f0000000280), 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 518.69779ms ago: executing program 4 (id=386): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000069111200000000008510000002000000850000000500000095000000000000009500a50500000000a1521c8c818a4f42204ddd2a1763059335b3f9c2188b5aa6aedbf9297a97dfaa154ec665f9cad5153a9ad1"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x0, @remote, 0x0, 0x200000001, 'ovf\x00', 0x0, 0x0, 0x29}, 0x2c) mkdirat(0xffffffffffffff9c, 0x0, 0xc1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) recvfrom$inet(r2, &(0x7f0000000180)=""/85, 0x55, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 393.90379ms ago: executing program 2 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x6b, 0x7fdf, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000700), 0x20000000, 0x2}, 0x20) 379.162842ms ago: executing program 1 (id=388): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81900) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x81901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 350.509156ms ago: executing program 3 (id=389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x7, {0x7, 0x0, "009c16d900"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 283.532897ms ago: executing program 2 (id=390): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2816c00}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4a11ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write$FUSE_IOCTL(r2, 0x0, 0x0) ftruncate(r2, 0x0) 191.57921ms ago: executing program 1 (id=391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 129.87707ms ago: executing program 2 (id=392): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 55.211341ms ago: executing program 1 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2400, 0x110, 0x8}, 0x18) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000640)="400f3241d39efbffff7f36460f75510b2ef3420f090f01c5f20f0766260f01734cc74424ed00170000000044240200380000ff2c24410f3065450fa0", 0x3b}], 0x1, 0x1e, &(0x7f0000000140)=[@cr0={0x0, 0x60000001}, @cr4={0x1, 0x464530}], 0x22) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000240)={0x2, 0x6, 0x0, 0x1811155c9beceda3, 0x9, 0x0, 0x70bd2d, 0x0, [@sadb_lifetime={0x4, 0x4, 0x1, 0x7, 0xa53, 0x100000001}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x10000000000002}]}, 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000900), 0x7, 0x4c6, &(0x7f0000000100)="$eJzs3EFsFFUfAPD/bFtaoHzsx8eHgqiLaGw0tlBQOJgYjCYeNDHiQY9NWwhSqKE1EUJkSQweDYl349GrB6/qzXgy8YpHE0NCDBfA05jZnW23292l3W670v5+ybLvzbzZN2/fvDdv3mMbwJZVyv5JIoYj4lZE7I6IQmOCUvXt/t2rkw/uXp2Mcpqe/ivJDot7WTyX5O8788hIIaLwebK4o87c5SvnJ2Zmpi/l8bH5Cx+PzV2+8tK5CxNnp89OXxw/efL4saMnXhl/efWFapJfVq57Bz6bPbj/rQ9vvjPZX9s+lL/Xl6NbSlFqdioVz3U7sx7bVRdO+tulfG39T4YVy67/rLoGKu1/d/RF28oDNpE0TdPB1rvLaaPry7YAj6wken0GQG/UbvTZ82/t1WwgsG19hh89d+dU9QEoK/f9/BXxdGVjbR5koOH5tptKEfFB+e+vs1es0zwEAEC9H0/VRoIN479ixL66dP/J11CKEfHfiNgTEf+LiL0R8f+opn0sIh5v+Py+iEjb5F9qiC8f/xRur62E7WXjv1fzta3F8V/Ur4IV+/LYrojagHn6SP6djMTA4JlzM9NH2+Tx0xu/fdlqX/34L3tl+dfGgvl53O5vmKCbmpif6LjADe5cjzjQ31j+pD8iWVgJSCJif0QcWMXnFuvC51749uBCZGBpuoeXvyJtuo7WhaWK9JuI56v1X44l9b+YY9J+fXJsKGamj4xlV8GRpnn88uuNd1vl/9Dyf/9H4yFvnvjhdN6y1i6r/x1113/U1m8Xy19MIpKF9dq51edx4/cvWj7TdHr9b0ver4Rrz6WfTszPXzoasS15e/n28cVja/HsPcrV8o8cbt7+9+THZN/EExGRXcRPRsRTUX1CLEV67VBEPBMRh9uU/+fXn/2o8/Kvr6z8U037vyX1v7he3yqQlKupm+zqO3/o1oMWncfK6v94JTSSb2ne/yVLuog2Z7oksNbvDwAAAB4FhYgYrptLGo5CYXS0Oge0N3YUZmbn5l88M/vJxanqbwSKMVCozXRV54MHktr8Z7EuPt4QP5bPG3/Vt70SH52cnZnqacmBnZU2nxRGF/qCavvP/NmdKWbg38xPfmDrelj733dzg04E2HDu/7B11bX/coskZf9TBjanldz/zQXC5tSs/V/r4Bjg0ZJqy7Clrab96ytgc+mP9xbChZ6eCbDR3NNhS1rRj+Q7DqSDzXcNxfLEMdT+A/uis9PY3iSvngSykVVPct/eyVG1v6bQMk0UVveBg9GdOj2z9q/l7L6uX/xpvj7W7Rr8bkPaabNA+35jfHj9+iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu+icAAP//KPXcbw==") rmdir(&(0x7f0000000340)='./file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x9c) sendto$inet6(r6, &(0x7f0000000600)="100a1c151defa7884d7e3f1b502532fcb074d756b7686c14b009aec3eeb211c2bfdd8e8655e3bc689352130bfc498df896b156543ee94a6a6d", 0x39, 0x40, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="4dcdc7c6223e00000000ffff8137", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/19, @ANYRES32=0x0, @ANYBLOB="04230300000000001400030067656e65766531"], 0x3c}}, 0x0) 0s ago: executing program 2 (id=394): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="3c82bf073aaebbbbbbbbbbbb86dd6001010000101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000001090780200000000"], 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xc3, &(0x7f0000000540)=""/195}]}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaf991bb000000000000aaaaaaaaaabb000000000000000000020000d0"]}, 0x111) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) kernel console output (not intermixed with test programs): e hsr_slave_1 left promiscuous mode [ 110.652721][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.684667][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 110.692057][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.696503][ T3602] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 110.740189][ T3602] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input9 [ 110.771253][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.784283][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.798842][ T33] device bridge_slave_1 left promiscuous mode [ 110.808862][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.887713][ T3602] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 110.963405][ T33] device bridge_slave_0 left promiscuous mode [ 110.984363][ T3602] usb 3-1: USB disconnect, device number 4 [ 111.004816][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.136432][ T33] device veth1_macvtap left promiscuous mode [ 111.181443][ T33] device veth0_macvtap left promiscuous mode [ 111.212332][ T33] device veth1_vlan left promiscuous mode [ 111.231527][ T33] device veth0_vlan left promiscuous mode [ 111.444220][ T3601] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.684215][ T3601] usb 4-1: Using ep0 maxpacket: 8 [ 112.489943][ T27] audit: type=1804 audit(1719475646.492:12): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.152" name="/root/syzkaller.4ivAvm/7/cgroup.controllers" dev="sda1" ino=1993 res=1 errno=0 [ 112.528606][ T48] Bluetooth: hci1: command tx timeout [ 112.539974][ T33] team0 (unregistering): Port device team_slave_1 removed [ 112.569233][ T33] team0 (unregistering): Port device team_slave_0 removed [ 112.594499][ T48] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 112.604211][ T48] Bluetooth: hci4: Injecting HCI hardware error event [ 112.613500][ T3550] Bluetooth: hci4: hardware error 0x00 [ 112.644517][ T3601] usb 4-1: config 32 has an invalid interface number: 77 but max is 1 [ 112.652874][ T3601] usb 4-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 112.670700][ T4344] loop1: detected capacity change from 0 to 16 [ 112.674406][ T3601] usb 4-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 112.684099][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.687682][ T3601] usb 4-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 112.706551][ T3601] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 112.715617][ T3601] usb 4-1: config 32 has no interface number 0 [ 112.721929][ T3601] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 112.733125][ T3601] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 112.744304][ T3601] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 112.755573][ T3601] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 112.767470][ T3601] usb 4-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 112.778337][ T3601] usb 4-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 112.786562][ T4344] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 112.796168][ T3601] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 112.808259][ T3601] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 112.837012][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.864214][ T3601] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 112.897902][ T3601] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 112.909687][ T4348] syz.4.155[4348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.909791][ T4348] syz.4.155[4348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.931599][ T3601] usb 4-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 112.968960][ T3601] usb 4-1: config 32 interface 77 has no altsetting 0 [ 112.979593][ T4350] loop2: detected capacity change from 0 to 1024 [ 112.987965][ T4350] ext3: Bad value for 'sb' [ 113.095001][ T33] bond0 (unregistering): Released all slaves [ 113.134864][ T3601] usb 4-1: Dual-Role OTG device on HNP port [ 113.154348][ T3601] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 113.163463][ T3601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.194436][ T4241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.215410][ T3601] usb 4-1: Product: syz [ 113.219659][ T3601] usb 4-1: Manufacturer: syz [ 113.231519][ T3601] usb 4-1: SerialNumber: syz [ 113.500358][ T4241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.500489][ T4359] 9pnet_fd: Insufficient options for proto=fd [ 113.592040][ T27] audit: type=1326 audit(1719475647.592:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561e975ae9 code=0x7ffc0000 [ 113.599097][ T4365] loop1: detected capacity change from 0 to 256 [ 113.626834][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.639259][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.669706][ T27] audit: type=1326 audit(1719475647.592:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f561e975ae9 code=0x7ffc0000 [ 113.676475][ T3601] option 4-1:32.77: GSM modem (1-port) converter detected [ 113.703805][ T4241] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.723422][ T3601] usb 4-1: USB disconnect, device number 5 [ 113.753763][ T3601] option 4-1:32.77: device disconnected [ 113.771637][ T27] audit: type=1326 audit(1719475647.592:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f561e975b23 code=0x7ffc0000 [ 113.800426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.810914][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.820632][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.827916][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.850314][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.859964][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.871582][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.883258][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.890489][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.923980][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.933795][ T4365] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 113.957056][ T27] audit: type=1326 audit(1719475647.592:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f561e97469f code=0x7ffc0000 [ 113.984523][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.014056][ T27] audit: type=1326 audit(1719475647.592:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f561e975b77 code=0x7ffc0000 [ 114.039074][ T27] audit: type=1326 audit(1719475647.592:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f561e974550 code=0x7ffc0000 [ 114.069600][ T27] audit: type=1326 audit(1719475647.592:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f561e9756eb code=0x7ffc0000 [ 114.093203][ T27] audit: type=1326 audit(1719475647.742:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f561e97484a code=0x7ffc0000 [ 114.117481][ T27] audit: type=1326 audit(1719475647.742:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f561e97484a code=0x7ffc0000 [ 114.154953][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.171630][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.197713][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.220041][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.256704][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.298508][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.355229][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.416402][ T4371] loop2: detected capacity change from 0 to 2048 [ 114.567446][ T4241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.596636][ T4371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.749610][ T3550] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 115.603675][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.741223][ T4069] EXT4-fs (loop2): unmounting filesystem. [ 115.796113][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.817754][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.294499][ T3595] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.383728][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.883425][ T4399] 9pnet: Could not find request transport: f [ 117.235285][ T3595] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 117.250917][ T4406] loop2: detected capacity change from 0 to 1024 [ 117.257917][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.263658][ T3595] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 117.281899][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.321659][ T3595] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 117.349603][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.351208][ T4406] ext3: Bad value for 'sb' [ 117.371946][ T26] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 117.431708][ T4241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.438912][ T4392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.450492][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.509092][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.520235][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.528737][ T26] usb 2-1: config 0 descriptor?? [ 117.601325][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.614082][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.658010][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.668171][ T4408] loop2: detected capacity change from 0 to 128 [ 117.682089][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.699172][ T4241] device veth0_vlan entered promiscuous mode [ 117.713965][ T4408] EXT4-fs: Ignoring removed nobh option [ 117.724445][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.733232][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.803577][ T4241] device veth1_vlan entered promiscuous mode [ 117.816895][ T4408] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.832821][ T4408] ext4 filesystem being mounted at /root/syzkaller.4ivAvm/13/mnt supports timestamps until 2038 (0x7fffffff) [ 117.963860][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 117.963875][ T27] audit: type=1804 audit(1719475651.962:45): pid=4408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.168" name="/root/syzkaller.4ivAvm/13/mnt/bus" dev="loop2" ino=13 res=1 errno=0 [ 118.020465][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.043326][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.061123][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.071980][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 118.083423][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 118.121547][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.131576][ T26] usb 2-1: USB disconnect, device number 4 [ 118.159086][ T4241] device veth0_macvtap entered promiscuous mode [ 118.170168][ T4069] EXT4-fs (loop2): unmounting filesystem. [ 118.201102][ T4241] device veth1_macvtap entered promiscuous mode [ 118.344517][ T3595] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 118.359794][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.380957][ T3595] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input10 [ 118.406716][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.418724][ T4413] loop2: detected capacity change from 0 to 16 [ 118.438329][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.445394][ T4413] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 118.467642][ T3595] usb 4-1: USB disconnect, device number 6 [ 118.474235][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 118.490170][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.510077][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.601855][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.640704][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.693913][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.751125][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.780027][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.817686][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.873645][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.902239][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.943134][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.978962][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.024223][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.054218][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.116653][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.134695][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.153829][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.221456][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.255075][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.305033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.361070][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.397651][ T4241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.442847][ T4241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.493721][ T4241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.528776][ T4241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.805456][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.820174][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.894037][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.894249][ T3595] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.923596][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.951262][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.999867][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.174255][ T3595] usb 3-1: Using ep0 maxpacket: 16 [ 120.294507][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.324229][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.354358][ T3595] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.387842][ T3595] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.418285][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.460541][ T3595] usb 3-1: config 0 descriptor?? [ 120.534396][ T936] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.915172][ T936] usb 1-1: config 184 has an invalid interface number: 90 but max is 0 [ 120.930928][ T4428] loop2: detected capacity change from 0 to 512 [ 120.939622][ T936] usb 1-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config [ 120.967815][ T4428] EXT4-fs: old and new quota format mixing [ 120.974161][ T936] usb 1-1: config 184 has no interface number 0 [ 120.980482][ T936] usb 1-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 121.026551][ T936] usb 1-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 121.064283][ T936] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24 [ 121.093462][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.133998][ T3595] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input11 [ 121.136821][ C1] sd 0:0:1:0: [sda] tag#6058 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 121.155975][ C1] sd 0:0:1:0: [sda] tag#6058 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 121.229649][ T4436] binder: 4435:4436 unknown command 0 [ 121.263043][ T4436] binder: 4435:4436 ioctl c0306201 20000280 returned -22 [ 121.373665][ T4445] loop3: detected capacity change from 0 to 128 [ 121.381656][ T4445] EXT4-fs: Ignoring removed nobh option [ 121.393675][ T4445] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.405266][ T4445] ext4 filesystem being mounted at /root/syzkaller.49qArc/31/mnt supports timestamps until 2038 (0x7fffffff) [ 121.425320][ T27] audit: type=1804 audit(1719475655.432:46): pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.178" name="/root/syzkaller.49qArc/31/mnt/bus" dev="loop3" ino=13 res=1 errno=0 [ 121.635259][ T27] audit: type=1326 audit(1719475655.642:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3245d75ae9 code=0x7ffc0000 [ 121.684362][ T27] audit: type=1326 audit(1719475655.642:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3245d75ae9 code=0x7ffc0000 [ 121.709985][ T3595] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 121.722146][ T27] audit: type=1326 audit(1719475655.642:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3245d75ae9 code=0x7ffc0000 [ 121.722191][ T27] audit: type=1326 audit(1719475655.642:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f3245d75ae9 code=0x7ffc0000 [ 121.722228][ T27] audit: type=1326 audit(1719475655.642:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3245d75ae9 code=0x7ffc0000 [ 121.722264][ T27] audit: type=1326 audit(1719475655.642:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f3245d75ae9 code=0x7ffc0000 [ 121.722301][ T27] audit: type=1326 audit(1719475655.642:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3245d75ae9 code=0x7ffc0000 [ 121.722336][ T27] audit: type=1326 audit(1719475655.642:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f3245d75ae9 code=0x7ffc0000 [ 121.754381][ T3595] usb 3-1: USB disconnect, device number 5 [ 121.901025][ T152] usb 1-1: USB disconnect, device number 5 [ 121.924093][ T3668] EXT4-fs (loop3): unmounting filesystem. [ 122.850120][ T4477] fuse: Bad value for 'fd' [ 123.637738][ T4479] loop0: detected capacity change from 0 to 128 [ 123.683048][ T4479] EXT4-fs: Ignoring removed nobh option [ 123.786716][ T4479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.848572][ T4479] ext4 filesystem being mounted at /root/syzkaller.yCRMP7/2/mnt supports timestamps until 2038 (0x7fffffff) [ 123.953643][ C1] sd 0:0:1:0: [sda] tag#6075 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 123.964167][ C1] sd 0:0:1:0: [sda] tag#6075 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 123.989897][ T4484] binder: 4481:4484 unknown command 0 [ 124.002432][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 124.002443][ T27] audit: type=1804 audit(1719475658.002:57): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.190" name="/root/syzkaller.yCRMP7/2/mnt/bus" dev="loop0" ino=13 res=1 errno=0 [ 124.037343][ T4484] binder: 4481:4484 ioctl c0306201 20000280 returned -22 [ 124.259707][ T4241] EXT4-fs (loop0): unmounting filesystem. [ 125.204241][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.274447][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.275480][ T4497] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 125.444474][ T4497] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 125.654424][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 125.774974][ T22] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 125.796858][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 126.036386][ T22] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 126.086645][ T22] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 126.160322][ T22] usb 3-1: Product: syz [ 126.178590][ T22] usb 3-1: Manufacturer: syz [ 126.224756][ T22] usb 3-1: SerialNumber: syz [ 126.263452][ T22] usb 3-1: config 0 descriptor?? [ 126.321810][ T22] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 126.363692][ T22] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 126.449160][ T27] audit: type=1804 audit(1719475660.392:58): pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.197" name="/root/syzkaller.2IZ8Hc/55/cgroup.controllers" dev="sda1" ino=1998 res=1 errno=0 [ 126.614576][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.634957][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.664259][ T14] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 126.683868][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.725764][ T14] usb 1-1: config 0 descriptor?? [ 126.896824][ T4516] loop3: detected capacity change from 0 to 256 [ 126.910008][ T4516] exfat: Deprecated parameter 'codepage' [ 126.916747][ T4516] exfat: Bad value for 'codepage' [ 127.170232][ T27] audit: type=1800 audit(1719475661.172:59): pid=4509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.200" name="bus" dev="sda1" ino=2000 res=0 errno=0 [ 127.260084][ T3593] usb 3-1: USB disconnect, device number 6 [ 127.322374][ T4509] loop1: detected capacity change from 0 to 256 [ 127.476364][ T3593] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 127.726233][ T14] hid (null): bogus close delimiter [ 127.794545][ T3602] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.829705][ T4522] loop2: detected capacity change from 0 to 128 [ 127.837959][ T4522] EXT4-fs: Ignoring removed nobh option [ 127.885147][ T4522] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.934390][ T14] usb 1-1: language id specifier not provided by device, defaulting to English [ 127.953757][ T4522] ext4 filesystem being mounted at /root/syzkaller.4ivAvm/18/mnt supports timestamps until 2038 (0x7fffffff) [ 128.058639][ T27] audit: type=1804 audit(1719475662.062:60): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.203" name="/root/syzkaller.4ivAvm/18/mnt/bus" dev="loop2" ino=13 res=1 errno=0 [ 128.174665][ T3602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.186136][ T3602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.196543][ T3602] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 128.213871][ T3602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.242653][ T4069] EXT4-fs (loop2): unmounting filesystem. [ 128.256294][ T3602] usb 5-1: config 0 descriptor?? [ 128.369143][ T14] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input13 [ 128.783132][ T14] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input14 [ 128.820525][ T14] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input15 [ 128.835112][ T4512] netlink: 'syz.4.201': attribute type 4 has an invalid length. [ 128.895737][ T14] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input16 [ 128.935147][ T14] uclogic 0003:256C:006D.0004: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 128.992566][ T4537] netlink: 'syz.4.201': attribute type 4 has an invalid length. [ 129.011293][ T14] usb 1-1: USB disconnect, device number 6 [ 129.544403][ T3602] usbhid 5-1:0.0: can't add hid device: -71 [ 129.552354][ T3602] usbhid: probe of 5-1:0.0 failed with error -71 [ 129.740097][ T3602] usb 5-1: USB disconnect, device number 5 [ 129.884271][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.144281][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 130.270183][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.319725][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.350331][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.383929][ T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.409449][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.450586][ T14] usb 1-1: config 0 descriptor?? [ 130.935110][ T4546] loop0: detected capacity change from 0 to 512 [ 130.980411][ T4546] EXT4-fs: old and new quota format mixing [ 130.991999][ T27] audit: type=1804 audit(1719475664.992:61): pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.211" name="/root/syzkaller.q6vtf8/22/cgroup.controllers" dev="sda1" ino=1995 res=1 errno=0 [ 131.160306][ T14] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input17 [ 131.726104][ T14] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 131.745580][ T14] usb 1-1: USB disconnect, device number 7 [ 131.824172][ T27] audit: type=1326 audit(1719475665.822:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4568 comm="syz.1.214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f561e975ae9 code=0x0 [ 132.234447][ T4576] random: crng reseeded on system resumption [ 132.983233][ T4579] loop0: detected capacity change from 0 to 256 [ 133.051604][ T4579] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 133.119963][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.126477][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.184359][ T3595] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.424218][ T3595] usb 5-1: Using ep0 maxpacket: 32 [ 133.554626][ T3595] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 133.590935][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.647706][ T3595] usb 5-1: config 0 descriptor?? [ 133.729857][ T3595] gspca_main: sunplus-2.14.0 probing 041e:400b [ 133.752776][ T4587] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.194996][ T3593] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.552426][ T27] audit: type=1326 audit(1719475668.552:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4570 comm="syz.4.215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3245d75ae9 code=0x0 [ 134.594506][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.648569][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.704271][ T3595] gspca_sunplus: reg_r err -110 [ 134.709509][ T3595] sunplus: probe of 5-1:0.0 failed with error -110 [ 134.761354][ T3593] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 134.847483][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.926081][ T3593] usb 4-1: config 0 descriptor?? [ 135.508863][ T3593] usbhid 4-1:0.0: can't add hid device: -71 [ 135.517362][ T3593] usbhid: probe of 4-1:0.0 failed with error -71 [ 135.561904][ T3593] usb 4-1: USB disconnect, device number 7 [ 136.032338][ T27] audit: type=1326 audit(1719475670.032:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 136.099923][ T27] audit: type=1326 audit(1719475670.082:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 136.180814][ T27] audit: type=1326 audit(1719475670.092:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 136.263638][ T27] audit: type=1326 audit(1719475670.092:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 136.287106][ T27] audit: type=1326 audit(1719475670.092:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 136.312544][ T27] audit: type=1326 audit(1719475670.092:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 136.339314][ T27] audit: type=1326 audit(1719475670.092:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 136.344593][ T3593] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.394758][ T27] audit: type=1326 audit(1719475670.092:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 136.438728][ T27] audit: type=1326 audit(1719475670.102:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 136.462000][ T27] audit: type=1326 audit(1719475670.102:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.2.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 136.472859][ T26] usb 5-1: USB disconnect, device number 6 [ 136.528198][ T4621] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.564517][ T3596] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.631562][ T4625] loop4: detected capacity change from 0 to 2048 [ 136.661839][ T4625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 136.722506][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.792237][ T3864] EXT4-fs (loop4): unmounting filesystem. [ 136.798533][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.817260][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.833467][ T3593] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 136.846729][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.880345][ T3593] usb 2-1: config 0 descriptor?? [ 136.994754][ T3596] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 137.012679][ T3596] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 137.025128][ T3596] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 137.041079][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.086822][ T4617] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 137.147352][ T4634] loop4: detected capacity change from 0 to 1024 [ 137.274219][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 137.295174][ T4634] EXT4-fs: Ignoring removed orlov option [ 137.303909][ T4634] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.346207][ T4634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.391303][ T3593] wacom 0003:056A:0331.0006: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 137.394351][ T14] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 137.431121][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 137.544412][ T3596] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 137.556132][ T3596] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input19 [ 137.571910][ T3596] usb 4-1: USB disconnect, device number 8 [ 137.584212][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 137.620821][ T3593] usb 2-1: USB disconnect, device number 5 [ 137.624584][ T14] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 137.666377][ T14] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 137.724251][ T14] usb 3-1: Product: syz [ 137.728535][ T14] usb 3-1: Manufacturer: syz [ 137.733224][ T14] usb 3-1: SerialNumber: syz [ 137.775804][ T14] usb 3-1: config 0 descriptor?? [ 137.796691][ T936] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 137.827515][ T14] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 137.853481][ T14] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 138.254477][ T936] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 138.271910][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.296348][ T4647] IPv6: sit1: Disabled Multicast RS [ 138.331884][ T936] usb 5-1: config 0 descriptor?? [ 139.001481][ T48] Bluetooth: hci5: sending frame failed (-49) [ 139.009032][ T3550] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 139.052746][ T3596] usb 3-1: USB disconnect, device number 7 [ 139.062823][ T3596] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 140.417279][ T4634] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 140.503005][ T3596] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.697733][ T936] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 140.712700][ T936] asix: probe of 5-1:0.0 failed with error -71 [ 140.723516][ T936] usb 5-1: USB disconnect, device number 7 [ 140.791658][ T3864] EXT4-fs (loop4): unmounting filesystem. [ 140.971132][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.553125][ T4673] IPv6: sit1: Disabled Multicast RS [ 141.785388][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.798511][ T3596] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 141.808320][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.819258][ T3596] usb 3-1: config 0 descriptor?? [ 141.863453][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 141.863470][ T27] audit: type=1326 audit(1719475675.862:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42575ae9 code=0x7ffc0000 [ 142.099511][ T4678] loop1: detected capacity change from 0 to 2048 [ 142.384727][ T3596] usbhid 3-1:0.0: can't add hid device: -71 [ 142.395638][ T3596] usbhid: probe of 3-1:0.0 failed with error -71 [ 142.544581][ T27] audit: type=1326 audit(1719475675.862:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6f42575ae9 code=0x7ffc0000 [ 142.568498][ T27] audit: type=1326 audit(1719475675.862:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42575ae9 code=0x7ffc0000 [ 142.683369][ T27] audit: type=1326 audit(1719475675.862:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f6f42575ae9 code=0x7ffc0000 [ 142.717934][ T3596] usb 3-1: USB disconnect, device number 8 [ 142.783046][ T27] audit: type=1326 audit(1719475675.862:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42575ae9 code=0x7ffc0000 [ 142.818448][ T27] audit: type=1326 audit(1719475675.862:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f6f42575ae9 code=0x7ffc0000 [ 142.867130][ T3550] Bluetooth: hci1: unexpected event 0x33 length: 9 < 10 [ 142.885663][ T4678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.897067][ T27] audit: type=1326 audit(1719475675.862:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f42575ae9 code=0x7ffc0000 [ 143.120650][ T3558] EXT4-fs (loop1): unmounting filesystem. [ 143.260034][ T4695] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.374389][ T3602] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.457713][ T27] audit: type=1326 audit(1719475677.462:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 143.523908][ T27] audit: type=1326 audit(1719475677.492:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 143.574343][ T3595] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.584377][ T3601] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.634660][ T3602] usb 4-1: Using ep0 maxpacket: 8 [ 143.641204][ T27] audit: type=1326 audit(1719475677.492:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f385e375ae9 code=0x7ffc0000 [ 143.722735][ T4702] loop2: detected capacity change from 0 to 1024 [ 143.730754][ T4702] EXT4-fs: Ignoring removed orlov option [ 143.738130][ T4702] EXT4-fs (loop2): Test dummy encryption mode enabled [ 143.754541][ T3602] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 143.774245][ T3602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.788263][ T4702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.795939][ T3602] usb 4-1: config 0 descriptor?? [ 143.848692][ T3595] usb 1-1: Using ep0 maxpacket: 32 [ 143.975353][ T3595] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 143.983790][ T3595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 143.995928][ T3601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.008576][ T3601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.019307][ T3601] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 144.028724][ T3601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.063076][ T3601] usb 2-1: config 0 descriptor?? [ 144.114369][ T152] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.175268][ T3595] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 144.185044][ T3595] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 144.193550][ T3595] usb 1-1: Product: syz [ 144.198396][ T3595] usb 1-1: Manufacturer: syz [ 144.203669][ T3595] usb 1-1: SerialNumber: syz [ 144.227545][ T3595] usb 1-1: config 0 descriptor?? [ 144.317729][ T4698] netlink: 'syz.1.252': attribute type 4 has an invalid length. [ 144.699846][ T3595] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 144.709428][ T3602] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 144.788299][ T3602] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 144.796399][ T4710] netlink: 'syz.1.252': attribute type 4 has an invalid length. [ 144.802509][ T3602] asix: probe of 4-1:0.0 failed with error -71 [ 144.812848][ T3595] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 144.825269][ T3602] usb 4-1: USB disconnect, device number 9 [ 144.840490][ T3595] usb 1-1: USB disconnect, device number 8 [ 144.866222][ T3595] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 144.875120][ T3601] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 144.881971][ T3601] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 144.925496][ T3601] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 144.984959][ T4714] IPv6: sit1: Disabled Multicast RS [ 145.034470][ T152] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 145.049764][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.067810][ T152] usb 3-1: config 0 descriptor?? [ 145.164639][ T3601] arvo 0003:1E7D:30D4.0007: couldn't init struct arvo_device [ 145.172127][ T3601] arvo 0003:1E7D:30D4.0007: couldn't install keyboard [ 146.395203][ T3601] arvo: probe of 0003:1E7D:30D4.0007 failed with error -71 [ 146.405154][ T3601] usb 2-1: USB disconnect, device number 6 [ 146.431636][ T4721] loop0: detected capacity change from 0 to 1024 [ 146.461695][ T4721] ext3: Bad value for 'sb' [ 146.513954][ T3814] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.747508][ T48] Bluetooth: hci2: unexpected event 0x33 length: 9 < 10 [ 146.832963][ T4732] loop1: detected capacity change from 0 to 2048 [ 146.909946][ T4732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.984523][ T3601] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.032041][ T3558] EXT4-fs (loop1): unmounting filesystem. [ 147.048472][ T4702] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 147.087328][ T4741] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.344669][ T3601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.366349][ T3601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.409339][ T3601] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 147.434771][ T3601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.455361][ T3601] usb 1-1: config 0 descriptor?? [ 148.771979][ T3550] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.775313][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 148.779010][ T3591] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.794387][ T3601] usbhid 1-1:0.0: can't add hid device: -71 [ 148.800420][ T3601] usbhid: probe of 1-1:0.0 failed with error -71 [ 148.816378][ T3601] usb 1-1: USB disconnect, device number 9 [ 148.835054][ T152] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 148.854690][ T152] asix: probe of 3-1:0.0 failed with error -71 [ 148.874527][ T152] usb 3-1: USB disconnect, device number 9 [ 148.989131][ T4069] EXT4-fs (loop2): unmounting filesystem. [ 149.174440][ T3591] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.276152][ T3591] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.307300][ T3591] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 150.096385][ T3591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.133809][ T3591] usb 2-1: config 0 descriptor?? [ 150.159598][ T4768] loop2: detected capacity change from 0 to 1024 [ 150.205457][ T4768] ext3: Bad value for 'sb' [ 150.243155][ T3550] Bluetooth: hci1: unexpected event 0x33 length: 9 < 10 [ 150.513890][ T152] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.563590][ T4776] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.944433][ T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.491943][ T3591] wacom 0003:056A:0331.0008: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 151.510819][ T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.551387][ T152] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 151.571602][ T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.611637][ T152] usb 4-1: config 0 descriptor?? [ 151.690283][ T26] usb 2-1: USB disconnect, device number 7 [ 151.860976][ T4770] netlink: 'syz.3.274': attribute type 4 has an invalid length. [ 151.913978][ T4788] netlink: 'syz.3.274': attribute type 4 has an invalid length. [ 151.997193][ T3618] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 152.195698][ T152] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 152.214275][ T152] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 152.260077][ T3618] usb 1-1: Using ep0 maxpacket: 8 [ 152.277989][ T152] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 152.363000][ C1] sd 0:0:1:0: [sda] tag#6034 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 152.373495][ C1] sd 0:0:1:0: [sda] tag#6034 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 152.384321][ T4796] binder: 4795:4796 unknown command 0 [ 152.389805][ T4796] binder: 4795:4796 ioctl c0306201 20000280 returned -22 [ 152.424308][ T152] arvo 0003:1E7D:30D4.0009: couldn't init struct arvo_device [ 152.431807][ T152] arvo 0003:1E7D:30D4.0009: couldn't install keyboard [ 152.431864][ T3618] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 152.469581][ T152] arvo: probe of 0003:1E7D:30D4.0009 failed with error -71 [ 152.473773][ T3618] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.524361][ T152] usb 4-1: USB disconnect, device number 10 [ 152.586725][ T3618] usb 1-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 152.611636][ T3618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 152.627904][ T3618] usb 1-1: SerialNumber: syz [ 152.685297][ T3618] hub 1-1:1.0: bad descriptor, ignoring hub [ 152.691282][ T3618] hub: probe of 1-1:1.0 failed with error -5 [ 152.713407][ T3618] usb 1-1: bad CDC descriptors [ 152.848733][ T3596] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.026925][ T3618] usb 1-1: USB disconnect, device number 10 [ 153.224377][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.244367][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.271146][ T3596] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 153.291018][ T3596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.322408][ T3596] usb 2-1: config 0 descriptor?? [ 153.934665][ T3596] usbhid 2-1:0.0: can't add hid device: -71 [ 154.249965][ T3596] usbhid: probe of 2-1:0.0 failed with error -71 [ 154.687309][ T3596] usb 2-1: USB disconnect, device number 8 [ 155.061456][ T4810] loop0: detected capacity change from 0 to 1024 [ 155.114339][ T4810] ext3: Bad value for 'sb' [ 158.223107][ T4834] loop3: detected capacity change from 0 to 128 [ 158.295973][ T4834] EXT4-fs: Ignoring removed nobh option [ 158.371495][ T4834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.459878][ T4834] ext4 filesystem being mounted at /root/syzkaller.49qArc/59/mnt supports timestamps until 2038 (0x7fffffff) [ 158.534411][ T3602] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 158.708144][ T3668] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.49qArc/59/mnt/lost+found: directory fails checksum at offset 1024 [ 158.760734][ T3668] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 158.794749][ T3668] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.49qArc/59/mnt/lost+found: directory fails checksum at offset 1024 [ 158.816264][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.826130][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.835196][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.836162][ T3668] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 158.858548][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.867586][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.875856][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.934350][ T3602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.967710][ T3668] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.49qArc/59/mnt/lost+found: directory fails checksum at offset 1024 [ 158.976247][ T3602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.014262][ T152] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.042896][ T3668] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 159.052449][ T3602] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 159.085510][ T3602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.101896][ T3668] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.49qArc/59/mnt/lost+found: directory fails checksum at offset 1024 [ 159.113814][ T3602] usb 1-1: config 0 descriptor?? [ 159.129664][ T4847] loop1: detected capacity change from 0 to 1024 [ 159.145819][ T4847] ext3: Bad value for 'sb' [ 159.193448][ T3668] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 159.265589][ T3668] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.49qArc/59/mnt/lost+found: directory fails checksum at offset 1024 [ 159.315963][ T3668] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 159.368074][ T4850] IPv6: sit1: Disabled Multicast RS [ 159.394865][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.567702][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.616187][ T152] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 159.631431][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.878166][ T152] usb 3-1: config 0 descriptor?? [ 160.015388][ T4853] netlink: 'syz.0.295': attribute type 4 has an invalid length. [ 160.197472][ T3602] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 160.215439][ T3602] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 160.236882][ T3602] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 160.264154][ T4854] netlink: 'syz.0.295': attribute type 4 has an invalid length. [ 160.424389][ T3602] arvo 0003:1E7D:30D4.000A: couldn't init struct arvo_device [ 160.431852][ T3602] arvo 0003:1E7D:30D4.000A: couldn't install keyboard [ 160.457943][ T3602] arvo: probe of 0003:1E7D:30D4.000A failed with error -71 [ 160.471890][ T4844] chnl_net:caif_netlink_parms(): no params data found [ 160.474346][ T152] usbhid 3-1:0.0: can't add hid device: -71 [ 160.487453][ T152] usbhid: probe of 3-1:0.0 failed with error -71 [ 160.506658][ T3602] usb 1-1: USB disconnect, device number 11 [ 160.516740][ T152] usb 3-1: USB disconnect, device number 10 [ 160.916957][ T3550] Bluetooth: hci5: command tx timeout [ 161.883201][ T3668] EXT4-fs (loop3): unmounting filesystem. [ 161.930115][ T4868] loop0: detected capacity change from 0 to 16 [ 161.939420][ T4868] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 162.029392][ T4844] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.098375][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 162.098396][ T27] audit: type=1804 audit(1719475696.102:110): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.304" name="/root/syzkaller.4ivAvm/36/cgroup.controllers" dev="sda1" ino=2000 res=1 errno=0 [ 162.112063][ T4844] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.229755][ T4844] device bridge_slave_0 entered promiscuous mode [ 162.310476][ T4873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.305'. [ 162.335493][ T4844] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.342618][ T4844] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.399587][ T4844] device bridge_slave_1 entered promiscuous mode [ 162.534073][ T4879] loop0: detected capacity change from 0 to 128 [ 162.579832][ T4879] EXT4-fs: Ignoring removed nobh option [ 162.601171][ T4879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 162.612817][ T4879] ext4 filesystem being mounted at /root/syzkaller.yCRMP7/31/mnt supports timestamps until 2038 (0x7fffffff) [ 162.707072][ T4844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.719403][ T4844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.777355][ T4844] team0: Port device team_slave_0 added [ 162.813753][ T4241] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.yCRMP7/31/mnt/lost+found: directory fails checksum at offset 1024 [ 162.832996][ T4844] team0: Port device team_slave_1 added [ 162.891959][ T4241] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 162.942876][ T4241] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.yCRMP7/31/mnt/lost+found: directory fails checksum at offset 1024 [ 162.970481][ T3550] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.983869][ T3550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.992352][ T3550] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.999828][ T3550] Bluetooth: hci5: command tx timeout [ 163.007325][ T3550] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.015022][ T3550] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.022483][ T3550] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.077356][ T4241] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 163.106176][ T4844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.120663][ T4844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.151302][ T4241] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.yCRMP7/31/mnt/lost+found: directory fails checksum at offset 1024 [ 163.177709][ T4241] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 163.194488][ T4844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.216283][ T4241] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.yCRMP7/31/mnt/lost+found: directory fails checksum at offset 1024 [ 163.257687][ T4844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.300504][ T4844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.340035][ T4241] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 163.423324][ T4241] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /root/syzkaller.yCRMP7/31/mnt/lost+found: directory fails checksum at offset 1024 [ 163.448289][ T4844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.452732][ T4241] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 163.582160][ T4844] device hsr_slave_0 entered promiscuous mode [ 163.589949][ T4844] device hsr_slave_1 entered promiscuous mode [ 163.598041][ T4844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.607129][ T4844] Cannot create hsr debugfs directory [ 163.784323][ T3602] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.834437][ T3601] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 163.989218][ T4844] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.013523][ T4883] chnl_net:caif_netlink_parms(): no params data found [ 164.024252][ T3602] usb 2-1: Using ep0 maxpacket: 32 [ 164.070265][ T4241] EXT4-fs (loop0): unmounting filesystem. [ 164.128121][ T4844] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.144711][ T3602] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 164.163181][ T3602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 164.193805][ T4883] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.214489][ T3601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.234158][ T3601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.244227][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.254252][ T3601] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 164.263335][ T3601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.270972][ T4883] device bridge_slave_0 entered promiscuous mode [ 164.301250][ T3601] usb 3-1: config 0 descriptor?? [ 164.308926][ T4844] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.340607][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.346997][ T3602] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 164.369022][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.376895][ T3602] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 164.376924][ T3602] usb 2-1: Product: syz [ 164.376940][ T3602] usb 2-1: Manufacturer: syz [ 164.376955][ T3602] usb 2-1: SerialNumber: syz [ 164.388231][ T3602] usb 2-1: config 0 descriptor?? [ 164.413394][ T4883] device bridge_slave_1 entered promiscuous mode [ 164.443967][ T4844] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.479623][ T3602] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 164.508279][ T3602] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 164.568481][ T4883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.601035][ T4883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.702092][ T4883] team0: Port device team_slave_0 added [ 164.728317][ T4883] team0: Port device team_slave_1 added [ 164.814360][ T3601] wacom 0003:056A:0331.000B: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 164.833844][ T4883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.854202][ T4883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.904246][ T4883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.951019][ T4883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.964234][ T4883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.000958][ T3601] usb 3-1: USB disconnect, device number 11 [ 165.053256][ T4883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.074374][ T3562] Bluetooth: hci0: command tx timeout [ 165.080368][ T3562] Bluetooth: hci5: command tx timeout [ 165.100519][ T4844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.190629][ T4844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.228786][ T4883] device hsr_slave_0 entered promiscuous mode [ 165.246830][ T4883] device hsr_slave_1 entered promiscuous mode [ 165.268630][ T4883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.286888][ T4883] Cannot create hsr debugfs directory [ 165.292914][ T4844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.308372][ T3601] usb 2-1: USB disconnect, device number 9 [ 165.346989][ T4844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.351184][ T3601] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 165.497252][ T4900] IPv6: sit1: Disabled Multicast RS [ 166.206752][ T4904] IPv6: sit1: Disabled Multicast RS [ 166.559352][ T4883] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.747521][ T4883] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.911266][ T4883] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.007141][ T4883] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.099989][ T3861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.155046][ T3562] Bluetooth: hci5: command tx timeout [ 167.160504][ T3562] Bluetooth: hci0: command tx timeout [ 167.179533][ T4844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.496450][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.528510][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.559663][ T3861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.618482][ T4844] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.700876][ T3861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.763450][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.779741][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.809101][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.816280][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.847474][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.865576][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.880381][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.887595][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.963101][ T3861] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.994644][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.007584][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.024600][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.105794][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.143006][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.191021][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.210874][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.234951][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.273709][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.314586][ T4844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.364837][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.413444][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.435435][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.487583][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.526350][ T4883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.593650][ T4883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.666883][ T4883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.723734][ T4883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.244797][ T3562] Bluetooth: hci0: command tx timeout [ 169.374643][ T4883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.455119][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.463199][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.541925][ T4883] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.785912][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.812098][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.854753][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.861927][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.039806][ T4844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.076429][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.114725][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.165081][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.214746][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.221900][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.312263][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.335301][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.342895][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.505101][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.513812][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.566649][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.605109][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.654521][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.868657][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.883133][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.905000][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.913534][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.965089][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.996033][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.324361][ T3562] Bluetooth: hci0: command tx timeout [ 171.516036][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.525949][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.699775][ T4844] device veth0_vlan entered promiscuous mode [ 171.747296][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.757098][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.894484][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.902438][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.934619][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.942158][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.971915][ T4883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.038281][ T4844] device veth1_vlan entered promiscuous mode [ 172.135504][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.145289][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.162778][ T4883] device veth0_vlan entered promiscuous mode [ 172.182663][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.203222][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.239508][ T4883] device veth1_vlan entered promiscuous mode [ 172.266864][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.290264][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.299052][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.308446][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.317131][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.326715][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.341137][ T4844] device veth0_macvtap entered promiscuous mode [ 172.448058][ T4844] device veth1_macvtap entered promiscuous mode [ 172.473109][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.483771][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.546247][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.564914][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.579282][ T4883] device veth0_macvtap entered promiscuous mode [ 172.664487][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.675819][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.687697][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.700067][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.711236][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.724486][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.737178][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.749608][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.793173][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.804308][ T936] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 172.818564][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.842794][ T4844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.853500][ T4883] device veth1_macvtap entered promiscuous mode [ 172.889577][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.906415][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.946335][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.976316][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.005738][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.020935][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.036625][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.051251][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.064166][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.074711][ T936] usb 2-1: Using ep0 maxpacket: 32 [ 173.100357][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.131523][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.153535][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.204409][ T936] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 173.213907][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.225082][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.237852][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.265727][ T936] usb 2-1: config 0 descriptor?? [ 173.282952][ T4844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.317473][ T936] gspca_main: sunplus-2.14.0 probing 041e:400b [ 173.344510][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.353214][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.377632][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.408108][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.421690][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.433221][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.443498][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.454548][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.464953][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.476030][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.486709][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.498145][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.508429][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.522937][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.558181][ T4883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.578929][ T4844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.604246][ T4844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.613316][ T4844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.623495][ T4844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.638472][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.657721][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.671541][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.690080][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.701386][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.712031][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.723538][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.734878][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.745204][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.756018][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.775917][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.793895][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.808532][ T4883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.824206][ T4883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.836596][ T4883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.874557][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.897292][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.984727][ T4883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.001586][ T4883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.020466][ T4883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.033616][ T4883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.134443][ T3861] device hsr_slave_0 left promiscuous mode [ 174.158594][ T27] audit: type=1326 audit(1719475708.162:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4954 comm="syz.1.317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f561e975ae9 code=0x0 [ 174.180634][ T3861] device hsr_slave_1 left promiscuous mode [ 174.216825][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.257602][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.296319][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.334264][ T936] gspca_sunplus: reg_r err -110 [ 174.334379][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.339428][ T936] sunplus: probe of 2-1:0.0 failed with error -110 [ 174.391750][ T3861] device bridge_slave_1 left promiscuous mode [ 174.424491][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.494783][ T3861] device bridge_slave_0 left promiscuous mode [ 174.514508][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.606082][ T3861] device hsr_slave_0 left promiscuous mode [ 174.624263][ T3861] device hsr_slave_1 left promiscuous mode [ 174.646817][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.667241][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.689303][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.704169][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.723634][ T3861] device bridge_slave_1 left promiscuous mode [ 174.741901][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.753345][ T3861] device bridge_slave_0 left promiscuous mode [ 174.768724][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.794902][ T3861] device hsr_slave_0 left promiscuous mode [ 174.811722][ T3861] device hsr_slave_1 left promiscuous mode [ 174.828377][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.847868][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.876769][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.897744][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.907577][ T3861] device bridge_slave_1 left promiscuous mode [ 174.921175][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.934204][ T3596] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.948957][ T3861] device bridge_slave_0 left promiscuous mode [ 174.956763][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.001970][ T3861] device veth1_macvtap left promiscuous mode [ 175.013145][ T3861] device veth0_macvtap left promiscuous mode [ 175.024003][ T3861] device veth1_vlan left promiscuous mode [ 175.038936][ T3861] device veth0_vlan left promiscuous mode [ 175.049137][ T3861] device veth1_macvtap left promiscuous mode [ 175.061582][ T3861] device veth0_macvtap left promiscuous mode [ 175.071347][ T3861] device veth1_vlan left promiscuous mode [ 175.088205][ T3861] device veth0_vlan left promiscuous mode [ 175.100122][ T3861] device veth1_macvtap left promiscuous mode [ 175.111427][ T3861] device veth0_macvtap left promiscuous mode [ 175.121261][ T3861] device veth1_vlan left promiscuous mode [ 175.133166][ T3861] device veth0_vlan left promiscuous mode [ 175.324538][ T3596] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 175.345598][ T3596] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 175.363940][ T3596] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 175.374519][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.414530][ T4973] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 175.553625][ T3861] team0 (unregistering): Port device team_slave_1 removed [ 175.568860][ T3861] team0 (unregistering): Port device team_slave_0 removed [ 175.588328][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.602443][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.679619][ T3861] bond0 (unregistering): Released all slaves [ 175.859486][ T3596] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 175.885501][ T3861] team0 (unregistering): Port device team_slave_1 removed [ 175.894937][ T3596] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input30 [ 175.938008][ T3596] usb 3-1: USB disconnect, device number 12 [ 175.953742][ T3861] team0 (unregistering): Port device team_slave_0 removed [ 176.004976][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.031472][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.126126][ T3861] bond0 (unregistering): Released all slaves [ 176.288244][ T3861] team0 (unregistering): Port device team_slave_1 removed [ 176.305315][ T3861] team0 (unregistering): Port device team_slave_0 removed [ 176.319328][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.333312][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.421400][ T3861] bond0 (unregistering): Released all slaves [ 176.655106][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.662830][ T3652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.663141][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.686163][ T3652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.694620][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.716518][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.790667][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.800615][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.811141][ T3612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.821192][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.859307][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.875724][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.222171][ T4999] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.774504][ T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.775458][ T5008] loop2: detected capacity change from 0 to 2048 [ 177.878043][ T5008] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 178.082386][ T4069] EXT4-fs (loop2): unmounting filesystem. [ 178.184704][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.227432][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.286084][ T26] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 178.323177][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.338333][ T5016] IPv6: sit1: Disabled Multicast RS [ 178.360992][ T26] usb 5-1: config 0 descriptor?? [ 178.806428][ T936] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 178.986136][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 178.993429][ T26] usbhid: probe of 5-1:0.0 failed with error -71 [ 179.021755][ T26] usb 5-1: USB disconnect, device number 8 [ 179.114356][ T936] usb 3-1: Using ep0 maxpacket: 32 [ 179.268936][ T936] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 179.284164][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 179.488897][ T936] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 179.521174][ T936] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 179.544429][ T936] usb 3-1: Product: syz [ 179.550585][ T936] usb 3-1: Manufacturer: syz [ 179.560731][ T936] usb 3-1: SerialNumber: syz [ 179.581746][ T936] usb 3-1: config 0 descriptor?? [ 179.629464][ T936] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 179.671666][ T936] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 180.537142][ T3591] usb 3-1: USB disconnect, device number 13 [ 181.375290][ T3591] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 181.774293][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 181.794241][ T3591] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 182.036475][ T3591] usb 3-1: Using ep0 maxpacket: 8 [ 182.144879][ T26] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 182.166396][ T26] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 182.194852][ T26] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 182.213933][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.228876][ T3602] usb 2-1: USB disconnect, device number 10 [ 182.277431][ T5047] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 182.334307][ T3591] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.396638][ T3591] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 182.416463][ T3591] usb 3-1: can't read configurations, error -71 [ 182.734443][ T26] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 182.742828][ T26] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input31 [ 182.807029][ T26] usb 4-1: USB disconnect, device number 11 [ 182.824147][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 183.456561][ T3562] Bluetooth: hci0: unexpected event 0x33 length: 9 < 10 [ 183.924429][ T26] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 184.364530][ T26] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 184.384154][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.441453][ T26] usb 3-1: config 0 descriptor?? [ 184.580414][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.590298][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.601886][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.610471][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.622660][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 184.630475][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.143353][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 185.394508][ T26] usb 3-1: Cannot set autoneg [ 185.409679][ T26] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 185.446622][ T26] usb 3-1: USB disconnect, device number 16 [ 185.503525][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.519968][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.548396][ T5092] device bridge_slave_0 entered promiscuous mode [ 185.575584][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.584535][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.598213][ T5092] device bridge_slave_1 entered promiscuous mode [ 185.670633][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.707420][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.770339][ T5092] team0: Port device team_slave_0 added [ 185.800135][ T5092] team0: Port device team_slave_1 added [ 185.845018][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.862263][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.890038][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.928724][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.952049][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.024576][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.116009][ T5092] device hsr_slave_0 entered promiscuous mode [ 186.130862][ T5092] device hsr_slave_1 entered promiscuous mode [ 186.283064][ T5123] IPv6: sit1: Disabled Multicast RS [ 186.675304][ T3562] Bluetooth: hci1: command tx timeout [ 186.993488][ T5128] IPv6: sit1: Disabled Multicast RS [ 187.274369][ T26] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 187.554442][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 187.704385][ T26] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 187.713495][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.837746][ T26] usb 3-1: config 0 descriptor?? [ 187.873881][ T5092] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.897206][ T26] gspca_main: sunplus-2.14.0 probing 041e:400b [ 188.042483][ T5092] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.177939][ T5092] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.243217][ T5092] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.304418][ T3618] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.498757][ T5092] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.509085][ T5092] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.520028][ T5092] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.531695][ T5092] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.564230][ T3618] usb 5-1: Using ep0 maxpacket: 8 [ 188.681827][ T27] audit: type=1326 audit(1719475722.682:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5126 comm="syz.2.338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385e375ae9 code=0x0 [ 188.724427][ T3618] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.754370][ T3562] Bluetooth: hci1: command tx timeout [ 188.760487][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.791430][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.804369][ T3618] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 188.814208][ T3618] usb 5-1: can't read configurations, error -71 [ 188.832333][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.840761][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.889003][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.898403][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.904786][ T26] gspca_sunplus: reg_r err -110 [ 188.907899][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.911446][ T26] sunplus: probe of 3-1:0.0 failed with error -110 [ 188.918605][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.965932][ T3861] device hsr_slave_0 left promiscuous mode [ 188.972503][ T3861] device hsr_slave_1 left promiscuous mode [ 188.979715][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.988230][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.997905][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.005478][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.014996][ T3861] device bridge_slave_1 left promiscuous mode [ 189.022102][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.031253][ T3861] device bridge_slave_0 left promiscuous mode [ 189.037790][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.051794][ T3861] device veth1_macvtap left promiscuous mode [ 189.058046][ T3861] device veth0_macvtap left promiscuous mode [ 189.066317][ T3861] device veth1_vlan left promiscuous mode [ 189.072223][ T3861] device veth0_vlan left promiscuous mode [ 189.303544][ T3861] team0 (unregistering): Port device team_slave_1 removed [ 189.320878][ T3861] team0 (unregistering): Port device team_slave_0 removed [ 189.336653][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.352174][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.425422][ T3861] bond0 (unregistering): Released all slaves [ 189.477431][ T3562] Bluetooth: hci5: unexpected event 0x33 length: 9 < 10 [ 189.500272][ T5151] loop3: detected capacity change from 0 to 1024 [ 189.508727][ T5151] ext3: Bad value for 'sb' [ 189.552033][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.571637][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.619364][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.648774][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.656145][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.695554][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.186193][ T3562] Bluetooth: hci1: command tx timeout [ 191.269769][ T5092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.310088][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.434606][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.445406][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.456589][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.466391][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.475532][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.484574][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.493230][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.502287][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.511481][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.522464][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.531311][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.145856][ T3594] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.205916][ T3601] usb 3-1: USB disconnect, device number 17 [ 192.370600][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.386170][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.409952][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.457025][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.466599][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.491236][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.500573][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.512003][ T5092] device veth0_vlan entered promiscuous mode [ 192.518919][ T3594] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 192.528372][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.550374][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.559101][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.575438][ T3594] usb 5-1: config 0 descriptor?? [ 192.576568][ T5092] device veth1_vlan entered promiscuous mode [ 192.625137][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.634403][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.643314][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.652910][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.664983][ T5092] device veth0_macvtap entered promiscuous mode [ 192.683195][ T5092] device veth1_macvtap entered promiscuous mode [ 192.706650][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.718481][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.728877][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.740738][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.751153][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.762387][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.775036][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.783454][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.793107][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.802093][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.811496][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.826523][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.841647][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.852409][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.863370][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.874595][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.885773][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.897618][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.907270][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.917602][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.930511][ T5092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.941005][ T5092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.954492][ T5092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.963233][ T5092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.042047][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.060670][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.080685][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.101807][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.110825][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.127253][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.244295][ T3550] Bluetooth: hci1: command tx timeout [ 193.494515][ T3594] usb 5-1: Cannot set autoneg [ 193.499385][ T3594] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 193.527408][ T3594] usb 5-1: USB disconnect, device number 11 [ 194.025659][ T26] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 194.276562][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.282976][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.364606][ T5194] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 194.370299][ T5203] loop2: detected capacity change from 0 to 1024 [ 194.404403][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.405670][ T5203] ext3: Bad value for 'sb' [ 194.425811][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.455188][ T26] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 194.468082][ T3822] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.484134][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.524355][ T26] usb 4-1: config 0 descriptor?? [ 194.634523][ T5194] usb 5-1: Using ep0 maxpacket: 8 [ 194.844879][ T5194] usb 5-1: config 32 has an invalid interface number: 77 but max is 1 [ 194.853439][ T5194] usb 5-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 194.863336][ T5194] usb 5-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 194.873963][ T5194] usb 5-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 194.884870][ T5194] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 194.895416][ T5194] usb 5-1: config 32 has no interface number 0 [ 194.901655][ T5194] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 194.913326][ T5194] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 194.925701][ T5194] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 194.937695][ T5194] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 194.949194][ T5194] usb 5-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 194.960611][ T5194] usb 5-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 194.977606][ T5194] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 194.991858][ T5194] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 195.003806][ T5194] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 195.024443][ T5194] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 195.035176][ T26] wacom 0003:056A:0331.000C: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 195.046716][ T5194] usb 5-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 195.060169][ T5194] usb 5-1: config 32 interface 77 has no altsetting 0 [ 195.226362][ T936] usb 4-1: USB disconnect, device number 12 [ 195.240134][ T5194] usb 5-1: Dual-Role OTG device on HNP port [ 195.264295][ T5194] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 195.273732][ T5194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.282770][ T5194] usb 5-1: Product: syz [ 195.287413][ T5194] usb 5-1: Manufacturer: syz [ 195.292093][ T5194] usb 5-1: SerialNumber: syz [ 195.638051][ T5194] option 5-1:32.77: GSM modem (1-port) converter detected [ 195.656546][ T5194] usb 5-1: USB disconnect, device number 12 [ 195.675498][ T5194] option 5-1:32.77: device disconnected [ 196.530078][ T5227] loop1: detected capacity change from 0 to 512 [ 196.571287][ T5227] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 196.752991][ T5227] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 196.771400][ T5227] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.352: invalid indirect mapped block 1 (level 1) [ 196.795268][ T5227] EXT4-fs (loop1): 1 truncate cleaned up [ 196.801414][ T5227] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.074219][ T26] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 197.166220][ T5092] EXT4-fs (loop1): unmounting filesystem. [ 197.384370][ T5194] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 197.454451][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.485396][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.501743][ T5240] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.524887][ T26] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 197.552738][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.598728][ T26] usb 5-1: config 0 descriptor?? [ 197.654350][ T5194] usb 4-1: Using ep0 maxpacket: 32 [ 197.790608][ T5194] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 197.807393][ T5194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.832538][ T5194] usb 4-1: config 0 descriptor?? [ 197.889465][ T5194] gspca_main: sunplus-2.14.0 probing 041e:400b [ 197.903973][ T5226] netlink: 'syz.4.355': attribute type 4 has an invalid length. [ 197.979214][ T5246] netlink: 'syz.4.355': attribute type 4 has an invalid length. [ 198.247015][ T26] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0 [ 198.262062][ T26] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0 [ 198.282391][ T26] arvo 0003:1E7D:30D4.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 198.469101][ T26] arvo 0003:1E7D:30D4.000D: couldn't init struct arvo_device [ 198.484337][ T26] arvo 0003:1E7D:30D4.000D: couldn't install keyboard [ 198.496490][ T26] arvo: probe of 0003:1E7D:30D4.000D failed with error -71 [ 198.516797][ T26] usb 5-1: USB disconnect, device number 13 [ 198.682443][ T27] audit: type=1326 audit(1719475732.682:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.3.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f182cb75ae9 code=0x0 [ 198.864425][ T5194] gspca_sunplus: reg_r err -110 [ 198.870365][ T5194] sunplus: probe of 4-1:0.0 failed with error -110 [ 199.496122][ T5295] device pim6reg1 entered promiscuous mode [ 199.605875][ T5299] loop1: detected capacity change from 0 to 1024 [ 199.628574][ T5299] ext3: Bad value for 'sb' [ 199.754273][ T3602] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 199.775199][ T27] audit: type=1800 audit(1719475733.782:114): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.363" name="file0" dev="sda1" ino=2010 res=0 errno=0 [ 199.926823][ T5306] netlink: 104 bytes leftover after parsing attributes in process `syz.4.363'. [ 199.928493][ T27] audit: type=1326 audit(1719475733.932:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d0b75ae9 code=0x7fc00000 [ 199.998171][ T27] audit: type=1326 audit(1719475733.952:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83d0b75ae9 code=0x7fc00000 [ 200.094739][ T3595] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.113660][ T27] audit: type=1326 audit(1719475733.952:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83d0b75ae9 code=0x7fc00000 [ 200.134488][ T3602] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 200.176365][ T3602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.221160][ T3602] usb 3-1: config 0 descriptor?? [ 200.299113][ T5194] usb 4-1: USB disconnect, device number 13 [ 200.464787][ T3595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.476234][ T3595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.486736][ T3595] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 200.496830][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.513433][ T3595] usb 2-1: config 0 descriptor?? [ 201.018802][ T3595] wacom 0003:056A:0331.000E: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 201.145421][ T3602] usb 3-1: Cannot set autoneg [ 201.150296][ T3602] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 201.180625][ T3602] usb 3-1: USB disconnect, device number 18 [ 201.199812][ T5194] usb 2-1: USB disconnect, device number 11 [ 202.224155][ T5194] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 202.284248][ T26] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.310946][ T5355] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.484341][ T5194] usb 2-1: Using ep0 maxpacket: 8 [ 202.864604][ T5194] usb 2-1: config 32 has an invalid interface number: 77 but max is 1 [ 202.873136][ T5194] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 202.873181][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.894901][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.047125][ T26] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 203.231469][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.252527][ T5194] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 203.584622][ T5194] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 203.638036][ T5194] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 203.648838][ T26] usb 5-1: config 0 descriptor?? [ 203.706201][ T5194] usb 2-1: config 32 has no interface number 0 [ 203.712676][ T5194] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 203.729914][ T5194] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 203.741488][ T5194] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 203.757487][ T5194] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 203.769031][ T5194] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 203.785139][ T5194] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 203.801466][ T5194] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 203.814305][ T5194] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 203.829369][ T5194] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 203.842249][ T5194] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 203.856241][ T5194] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 203.872358][ T5194] usb 2-1: config 32 interface 77 has no altsetting 0 [ 203.919648][ T5349] netlink: 'syz.4.368': attribute type 4 has an invalid length. [ 203.959655][ T5349] netlink: 'syz.4.368': attribute type 4 has an invalid length. [ 204.054397][ T5194] usb 2-1: Dual-Role OTG device on HNP port [ 204.081228][ T5194] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 204.090528][ T5194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.099111][ T5194] usb 2-1: Product: syz [ 204.105172][ T5194] usb 2-1: Manufacturer: syz [ 204.109932][ T5194] usb 2-1: SerialNumber: syz [ 204.217093][ T26] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 204.224418][ T26] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 204.232399][ T26] arvo 0003:1E7D:30D4.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 204.444427][ T26] arvo 0003:1E7D:30D4.000F: couldn't init struct arvo_device [ 204.451942][ T26] arvo 0003:1E7D:30D4.000F: couldn't install keyboard [ 204.461502][ T26] arvo: probe of 0003:1E7D:30D4.000F failed with error -71 [ 204.471925][ T26] usb 5-1: USB disconnect, device number 14 [ 204.505946][ T5194] option 2-1:32.77: GSM modem (1-port) converter detected [ 204.520650][ T5194] usb 2-1: USB disconnect, device number 12 [ 204.542303][ T5194] option 2-1:32.77: device disconnected [ 205.579781][ T5385] loop3: detected capacity change from 0 to 1024 [ 205.610836][ T5385] ext3: Bad value for 'sb' [ 205.814424][ T5194] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 205.814424][ T3594] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 205.994241][ T3602] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 206.184367][ T3594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.195616][ T3594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.204478][ T5194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.206364][ T3594] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 206.221748][ T5194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.226286][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.240777][ T5194] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 206.253010][ T5194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.261988][ T3602] usb 4-1: Using ep0 maxpacket: 32 [ 206.268200][ T3594] usb 3-1: config 0 descriptor?? [ 206.274548][ T5194] usb 5-1: config 0 descriptor?? [ 206.386288][ T3602] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 206.395703][ T3602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.410830][ T3602] usb 4-1: config 0 descriptor?? [ 206.456464][ T3602] gspca_main: sunplus-2.14.0 probing 041e:400b [ 206.511977][ T5383] netlink: 'syz.2.372': attribute type 4 has an invalid length. [ 206.545551][ T5383] netlink: 'syz.2.372': attribute type 4 has an invalid length. [ 206.777783][ T5194] wacom 0003:056A:0331.0010: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 206.786741][ T3594] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 206.796184][ T3594] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 206.806569][ T3594] arvo 0003:1E7D:30D4.0011: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 206.978066][ T3601] usb 5-1: USB disconnect, device number 15 [ 206.994403][ T3594] arvo 0003:1E7D:30D4.0011: couldn't init struct arvo_device [ 207.001898][ T3594] arvo 0003:1E7D:30D4.0011: couldn't install keyboard [ 207.016294][ T3594] arvo: probe of 0003:1E7D:30D4.0011 failed with error -71 [ 207.025955][ T3594] usb 3-1: USB disconnect, device number 19 [ 207.200598][ T27] audit: type=1326 audit(1719475741.202:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f182cb75ae9 code=0x0 [ 207.414269][ T3602] gspca_sunplus: reg_r err -110 [ 207.419319][ T3602] sunplus: probe of 4-1:0.0 failed with error -110 [ 208.179258][ T5405] loop1: detected capacity change from 0 to 16 [ 208.209953][ T5405] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 208.284313][ T26] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 208.455416][ T5406] loop2: detected capacity change from 0 to 512 [ 208.628533][ T5406] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 208.645966][ T5406] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.379: invalid indirect mapped block 1 (level 1) [ 208.669185][ T5406] EXT4-fs (loop2): 1 truncate cleaned up [ 208.675248][ T5406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 208.964306][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 209.073369][ T4069] EXT4-fs (loop2): unmounting filesystem. [ 209.137186][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.381'. [ 209.195683][ T26] usb 5-1: config 32 has an invalid interface number: 77 but max is 1 [ 209.214007][ T26] usb 5-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 209.246613][ T26] usb 5-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 209.256998][ T26] usb 5-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 209.268174][ T26] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 209.282427][ T26] usb 5-1: config 32 has no interface number 0 [ 209.289451][ T26] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 209.306562][ T26] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 209.382646][ T26] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 209.399591][ T26] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 209.427643][ T26] usb 5-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 209.459931][ T26] usb 5-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 209.472802][ T26] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 209.490408][ T26] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 209.506696][ T26] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 209.519282][ T26] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 209.537212][ T26] usb 5-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 209.559391][ T26] usb 5-1: config 32 interface 77 has no altsetting 0 [ 209.571460][ T3618] usb 4-1: USB disconnect, device number 14 [ 209.775227][ T26] usb 5-1: Dual-Role OTG device on HNP port [ 209.814298][ T26] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 209.833790][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.857195][ T26] usb 5-1: Product: syz [ 209.867834][ T26] usb 5-1: Manufacturer: syz [ 209.883669][ T26] usb 5-1: SerialNumber: syz [ 210.236430][ T26] option 5-1:32.77: GSM modem (1-port) converter detected [ 210.256598][ T26] usb 5-1: USB disconnect, device number 16 [ 210.267169][ T26] option 5-1:32.77: device disconnected [ 211.545548][ T5421] loop3: detected capacity change from 0 to 1024 [ 211.556411][ T27] audit: type=1326 audit(1719475745.562:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5422 comm="syz.4.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83d0b75ae9 code=0x0 [ 211.565662][ T5421] ext3: Bad value for 'sb' [ 212.064446][ T3601] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 212.069578][ T5441] loop1: detected capacity change from 0 to 16 [ 212.109045][ T5441] MTD: Attempt to mount non-MTD device "/dev/loop1" remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=0 req=314 state=1 status=1 (errno 9: Bad file descriptor) [ 212.212044][ T5441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'.