last executing test programs: 16.300286608s ago: executing program 0 (id=1029): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet6_udp(0xa, 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r1) tee(r0, r3, 0x4e, 0x0) 13.081357558s ago: executing program 0 (id=1037): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 11.681942885s ago: executing program 4 (id=1039): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x27) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r4 = syz_open_dev$loop(0x0, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500242864220"], 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x600, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x20, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 9.092216627s ago: executing program 1 (id=1047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x400, &(0x7f0000001080)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000004c0)={0x10000000}) shutdown(r0, 0x1) 8.85499731s ago: executing program 1 (id=1048): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 8.419780836s ago: executing program 4 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000007ac0)=""/4107, 0x100b) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000c40)="28515f2403", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f00000001c0)=""/60, 0x3c) 7.956300092s ago: executing program 1 (id=1051): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="20000000ff000000ffcd0b004000000004000000", @ANYRES32, @ANYBLOB="0500"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2300000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="ff0000feffffffffffffffefffff"], 0x48) 7.767273034s ago: executing program 0 (id=1053): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000e80000fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 7.749996964s ago: executing program 1 (id=1054): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, 0x0, 0x0, 0x4eb) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="006e1a1e6134913470dc5da8fd4fb37e15af1abafe4f2767c5019691f553403559cf1c5e03c42bbdf376d43cc48274a930effe3b144afec156f2add8935d1ff0784348d9d4b23f834e36c3c20a7cee5beae3f2c3700c96170edf6c"], 0x1, 0x2b0, &(0x7f0000001780)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 6.818050306s ago: executing program 4 (id=1055): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) prlimit64(0x0, 0xc, &(0x7f00000001c0)={0xa8, 0x101}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 6.409109671s ago: executing program 0 (id=1057): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5500, &(0x7f000000ad00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303337372c757466382c696f636861727365743d6d616363656c26e207df7469632c6572726f72733d636f6e74696e75652c6e616d6563617365"], 0x1, 0x14f7, &(0x7f0000001580)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 5.565813071s ago: executing program 3 (id=1058): syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x143, &(0x7f0000000400)="$eJzszr1LelEcx/HP+d2rvyjNAgMLMqHlkvR0hZqCNJIMKihcmgQ9UaAoCuVoRFtbq0MlNIn/gj0tSUG09C+0uAWNxbkPRdDS/nlt532+93vu8sKjgQjwHoBlqVgolWWlInORzY215NZrux1X3Qugx7pfLZWlqMicPX8VB3bxH/Dgy60f2NnLy6lsMa/GunHAAJDow6LqM6odAr2qBe3ZWacZ48DNkN3MX1rMaSM6kAjYTe37OAd0tW/we98bgGo92mp21h/uU5MTl6MajlPRMfdX3R6WJ2ZyuOELaUjLuwu8iI7PnniabjWfAWEdYqY5J4Cac0TNC33Ftw9si5/veBEK62ngSACn1l33WvjVFwAK/fNnzvu1Ay0CiGo9mwl5GpngwD9ohrudiIiIiIiIiIiIiIiIiIjoDz4DAAD//+7/VYE=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 5.521101782s ago: executing program 3 (id=1059): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x27) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r4 = syz_open_dev$loop(0x0, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500242864220"], 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x600, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x20, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 5.367245754s ago: executing program 1 (id=1060): r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setattr(r0, &(0x7f00000010c0)={0x38, 0x0, 0x0, 0x1, 0x3, 0xda4, 0x800, 0xaee, 0xe69, 0x5}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x85, 0x3, "4b1d81"}}) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") socket$inet6_sctp(0xa, 0x5, 0x84) 5.295473705s ago: executing program 4 (id=1062): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x51, 0x0}}], 0x34000, 0x0) 5.127060326s ago: executing program 4 (id=1064): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="20000000ff000000ffcd0b004000000004000000", @ANYRES32, @ANYBLOB="0500"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2300000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="ff0000feffffffffffffffefffff"], 0x48) 5.015739448s ago: executing program 2 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000007ac0)=""/4107, 0x100b) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000c40)="28515f2403", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f00000001c0)=""/60, 0x3c) 4.931299459s ago: executing program 4 (id=1066): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$eJzslbFrFEEUxr+Z3du7BA1YaGFzKQJGMHu7G5U0FrEXhETU8jCTcLrJhcsVSUBIsBHEWvwD7KwtUlnYaWVtoYJgYUobBUdmdvZ2Nrt78bhgk/eDm/vmzbyZN7Nv34IgiFPL1y8/Pz+/ubB8BcAZzKBu7N+dbA635n966dSMfLcx9fjAGmqohgGQMjO6x+zvAXi76AB7ybJSZt6vzb9acxkcM6Z/BxyXjb4LBj+NVWbeAgz3jfnhphycpjthRCzYg268stqJRaCaUDXRaudVLRefiv9wn2HFHFDtwKzxrZ3dR+0Y6CUiFqmoyXSfwlAqkpMBJUM5Mez+dHyLHDesK1DP697TJ/uq7xt7YN1fCI7Q6HkwLBm9gDp832+argit8190s/Wd5LEl7FXHXRSNUSaPL87N5SzTUEJl+HD3iVio055YGH/kkDn1kRdkJqu8XAqOEeGz8U+q4hjdizeLXl5xnYY5qLaIY16Sf9idHbUwOyUuHB68L3p9+29Je/IC5gLtoRfqoj5OxvGtUq/zOct0xSvj4awuCZUpkdQP5gKXrPrkWl+FVn99s7W1szvXWW+viTWxEUXz14OrQXAtaunanLR2uTtS/xq6Pk1a69cqaqXHPGy3+/1euA30e+GgHyWtlUxLb7o/tA/X9Y9j9reU6edFv3jph5Ll92Dmx/W/UrNObgKvCI4gCIIgCIIgCIIgCIIgCKKUX5ZuguHD1KAry3Gj23r4bwAAAP//c8NPrw==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x800) open$dir(&(0x7f0000000140)='./file0\x00', 0x181840, 0x18d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r1, 0xfcff, 0x20000, 0x3) 4.04733528s ago: executing program 2 (id=1067): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000e80000fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 4.03211699s ago: executing program 3 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.054545252s ago: executing program 2 (id=1069): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="01000100000000000000100001", 0xd, 0xfffffffffffffffd) pread64(r1, &(0x7f0000000180), 0x0, 0x7fff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r5, &(0x7f00000000c0)='uid_map\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) 2.543723379s ago: executing program 3 (id=1070): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, 0x0, 0x0, 0x4eb) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="006e1a1e6134913470dc5da8fd4fb37e15af1abafe4f2767c5019691f553403559cf1c5e03c42bbdf376d43cc48274a930effe3b144afec156f2add8935d1ff0784348d9d4b23f834e36c3c20a7cee5beae3f2c3700c96170edf6c"], 0x1, 0x2b0, &(0x7f0000001780)="$eJzs3M1qE10cx/Ffk+bp29Mmz6NW240H3ehm0HoFobQgRpTaiG8IUzLVkJiUTMBEBOvWlTfhprgSd4J4A8UrcOdCKIJ01VVHMpM0aZJC1baT2O+Hwjkz/2Y45/xPJicwJxt3Xj/JLbvWsl1WZMBoUFrVlpRQRFEFBuplxK//o1aruvgms/nq1t1715Kp1NyCMfPJxSszxpiJsx+fPn977lN57Pb7iQ9DWk883Pgx83V9cn1qY3vxcdY1WdcUimVjm6VisWwv5R2Tybo5y5ibecd2HZMtuE5pV3w5X1xZqRq7kBkfXSk5rmvsQtXknKopF025VDX2IztbMJZlmfHRegtHdOxE9vVfjYFJHmpbELpSKWnPSppW+9xIr4XWKAAAEJqu6//aX4v+Xv/vyXtxsEPZh9JrCws26/+/UqxePvDX//e7fi1k/Q8AAAAAAAAAAAAAAAAAAAAAQD/Y8ry45zV2+nvxmOTv8PH88158RNKopDFJ/0oalzQhKS4pIen6mPS/pBOSTko6JWlS0mlJZyRNtVwr5K6ii616bhrlr+b/P5H/fvbH+Y82r7Xv/L+LhdNZdOD9f7y1bNwdlr6vVtKVdFAG8fmrqblLxpdovmqzUklHd+KXg7jZHR/y500tPtM1PqwL54N4LTZ7I9UWn1Zm53jbO8wxOM4ss6Nrfi1rr3hQa86PIe2OD2p6MDj6fCQ9we9wq89ydj7vlHquEuzOr02h3mhPa2VEHaHhgxnMaOeV+7cS641mdFa+qSea0V5pfMqF1YzGLdw/E9otCUeomf39/mwgAAAAAAAAAAAAAAAAAKAXHNbjhC+/NJ/bDbuPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0+xkAAP//Caf2bg==") syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2.507859409s ago: executing program 0 (id=1071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x2, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x0, 0x78, 0xb, 0x5, 0x6, 0x8, 0x0, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x2, 0xfffffff4, 0x15a0, 0xffffff7f, 0x8, 0x5d, 0x800, 0xf94, 0xff, 0x1ff, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x3, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0xd0d, 0x2, 0x1000, 0xb98, 0x3, 0x6d, 0x0, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x8, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x542, 0xe5f9, 0x0, 0x4, 0xd4, 0xffffffff, 0x0, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffd, 0x8, 0xffffffff, 0x1, 0x7, 0x3, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x3, 0x3, 0x800, 0x5, 0xffffffff, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xb5, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x81, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x5, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe00, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fca, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd52, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x2, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x4d, 0x2, 0x5f4, 0x400, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x4, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x4, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x80000001, 0xe, 0xfffff6d2, 0x0, 0x0, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x7, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x9, 0x4, 0x6, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0x9, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x7, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x1, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x9, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0xfff, 0x76, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x3, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0xc, 0x0, 0x9, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x1, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x7fff, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10001, 0x9, 0xffffff81, 0xa, 0x7, 0x627, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x2, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x0, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x4, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x3, 0x8, 0x3, 0x2, 0x9, 0x101, 0x1, 0x8, 0xfff, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x5, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x9, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000000, 0x7, 0x8, 0x80, 0x8, 0x3, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x2, 0x8000, 0x4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x401, 0xffffff48, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0x4153, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x5, 0xfffffff9, 0xfffeffff, 0x10, 0xfffffff7, 0x1ff, 0x8, 0x7fff, 0x9, 0x3, 0xfffffff8, 0x6, 0x434, 0x8, 0x3ab, 0x8, 0x6, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x2, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xd, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0xfff, 0xfb, 0xc8, 0x400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x9, 0xd64, 0x8, 0xc, 0x7, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x1, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x2, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a4, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xee18, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0xed, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdc000000, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x9015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x3, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x5, 0x4, 0x9, 0xffffffff, 0xda, 0xd, 0x8001000, 0x7b, 0x2, 0x10001, 0x6, 0x136, 0x6, 0x3a12, 0x9, 0x7, 0x4, 0x8], 0x1, 0x400, 0x3ff}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008ee70241760000000000000027050000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000100), 0x0}, 0x20) 1.544702322s ago: executing program 2 (id=1072): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 1.497202982s ago: executing program 3 (id=1073): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 1.351890864s ago: executing program 2 (id=1074): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0x3, 0x1c4, &(0x7f0000000380)="$eJzs282K02AUxvHnTdLOZPx2dOOqoKAbJ04HPwY3unMztyAMM3EopirWTYtQBMHr8Iq8AS/Bgm4VjCRNU5qm1H6k0fb/W52TMy85meZtTxYRgI1VU01GRlaSd3dNRb/CfmKV2RmAokU7/XcIYDPZ38vuAEA5ek+jKcD0hwG7MjYffDXSE0nffrw/kVUdq/c+SDfcpG62tJ2dLz5LtwfrjZu7fiet7+TW79wcnP+czuuCLuqSLuuKrib103T99QUmIWDzGO1l85EDll40Av9emlfifD/Nq3Fez+QHab4V53snr4PToi4BwJysKfvfzux/J7P/Afy/Wu3Oy+Mg8N/OHDz+GYazr4oDW1JOKXkKySstLwhtKbdULfCkMwUfzYQOFw9qWtVVRE+K46XoiXPCXbedd0M+07/xoTgTdoozZXlXUueLpKW04S7tv+Fq+t+U950EYDW8d803XqvdudtoHp/5Z/6r+qP64YOD+/sPD7148vdG538A62P4o192JwAAAAAAAAAAAAAAYF67upZEzvDgp7K6AQAAAFCkv3pn6OjW0fMFXjkq+xoBAAAAAAAAAAAAAAAAAACAdfEnAAD//wweEbY=") 336.533946ms ago: executing program 2 (id=1075): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 313.282697ms ago: executing program 3 (id=1076): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="20000000ff000000ffcd0b004000000004000000", @ANYRES32, @ANYBLOB="0500"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2300000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="ff0000feffffffffffffffefffff"], 0x48) 74.614639ms ago: executing program 1 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000007ac0)=""/4107, 0x100b) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000c40)="28515f2403", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f00000001c0)=""/60, 0x3c) 0s ago: executing program 0 (id=1078): getitimer(0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 56.971926][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.984576][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.006671][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.025097][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.033749][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.045808][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.063418][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.071719][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.080655][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.092482][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.101436][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.111772][ T4169] device veth0_vlan entered promiscuous mode [ 57.123992][ T4181] device veth0_macvtap entered promiscuous mode [ 57.139582][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.151256][ T4169] device veth1_vlan entered promiscuous mode [ 57.169186][ T4181] device veth1_macvtap entered promiscuous mode [ 57.191664][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.224970][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.235448][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.243912][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.253130][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.261034][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.269626][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.283455][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.293486][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.305021][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.324928][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.334035][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.345253][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.354883][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.364197][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.379974][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.389700][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.399930][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.410065][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.419060][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.428310][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.440113][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.452993][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.463876][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.495679][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.504570][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.516152][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.526890][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.535974][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.545912][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.570861][ T4175] device veth0_vlan entered promiscuous mode [ 57.584130][ T4175] device veth1_vlan entered promiscuous mode [ 57.594082][ T4169] device veth0_macvtap entered promiscuous mode [ 57.604699][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.614677][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.626011][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.634499][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.643286][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.651426][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.660622][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.669329][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.677343][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.685391][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.724167][ T4169] device veth1_macvtap entered promiscuous mode [ 57.749586][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.759021][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.800561][ T4175] device veth0_macvtap entered promiscuous mode [ 57.808263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.817887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.818517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.834401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.842977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.862087][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.872786][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.883244][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.893768][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.905187][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.913976][ T4170] device veth0_vlan entered promiscuous mode [ 57.938882][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.947708][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.964189][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.974883][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.985194][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.996704][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.009506][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.019284][ T4175] device veth1_macvtap entered promiscuous mode [ 58.033520][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.043663][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.051277][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.055225][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.067181][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.080999][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.093089][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.102605][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.111494][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.120428][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.151037][ T4170] device veth1_vlan entered promiscuous mode [ 58.207349][ T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.216662][ T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.220103][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.241422][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.251510][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.262250][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.272246][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.282904][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.293829][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.313664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.321830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.333428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.341933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.351048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.376069][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.388224][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.398324][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.409525][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.418256][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 58.419471][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.425700][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 58.437012][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.448260][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 58.454286][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.465778][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 58.472691][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 58.477681][ T4170] device veth0_macvtap entered promiscuous mode [ 58.485996][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.497433][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.510017][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.522188][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.531724][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.541486][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.549882][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.557613][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.575054][ T4170] device veth1_macvtap entered promiscuous mode [ 58.585133][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.595628][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.614111][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.625992][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.635514][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.644541][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.662222][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.680107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.688493][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.695109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.704633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.776098][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.796409][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.807630][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.820896][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.836911][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.854404][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.864613][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.883094][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.899141][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.929159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.953704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.004978][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.018304][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.026373][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.045951][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.064922][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.087248][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.106511][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.120625][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.131711][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.142671][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.155082][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.198046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.206027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.242094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.303936][ T4170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.312961][ T4170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.324209][ T4170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.333171][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.485414][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.499905][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.544605][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.552660][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.577941][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.591295][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.633027][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.654806][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.677152][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.695150][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.721080][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.763090][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.974604][ T4269] device wg2 entered promiscuous mode [ 60.489899][ T4212] Bluetooth: hci3: command 0x0419 tx timeout [ 60.498034][ T4212] Bluetooth: hci2: command 0x0419 tx timeout [ 60.517283][ T4212] Bluetooth: hci1: command 0x0419 tx timeout [ 60.552625][ T4212] Bluetooth: hci4: command 0x0419 tx timeout [ 60.562772][ T4212] Bluetooth: hci0: command 0x0419 tx timeout [ 60.839343][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.934373][ T4210] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.048365][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.057410][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 61.066512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #188!!! [ 61.075597][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.084701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.093795][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.102832][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.111906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.121004][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.130114][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 61.747981][ T4210] usb 1-1: Using ep0 maxpacket: 8 [ 61.912584][ T4210] usb 1-1: unable to get BOS descriptor or descriptor too short [ 62.033254][ T4210] usb 1-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.098262][ T4210] usb 1-1: config 1 interface 0 has no altsetting 0 [ 62.268102][ T4210] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 62.277198][ T4210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.327613][ T4210] usb 1-1: Product: syz [ 62.356805][ T4210] usb 1-1: Manufacturer: syz [ 62.367531][ T4210] usb 1-1: SerialNumber: syz [ 63.365926][ T4210] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 63.467933][ T3532] bcm5974 1-1:1.0: could not read from device [ 63.514415][ T4346] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 63.518801][ T4210] usb 1-1: USB disconnect, device number 2 [ 63.525283][ T3532] bcm5974 1-1:1.0: could not read from device [ 63.558075][ T3532] bcm5974 1-1:1.0: could not read from device [ 63.609895][ T4350] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET) [ 63.674607][ T4342] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 63.774186][ T4342] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 63.798260][ T4342] Zero length message leads to an empty skb [ 64.198030][ T4214] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.294728][ T4369] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 64.301559][ T4369] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.350838][ T4374] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 64.357402][ T4374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.375542][ T4369] vhci_hcd vhci_hcd.0: Device attached [ 64.393965][ T4214] usb 5-1: device descriptor read/64, error -71 [ 64.418526][ T4374] vhci_hcd vhci_hcd.0: Device attached [ 64.490632][ T4369] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 64.497190][ T4369] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.543422][ T4374] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.568293][ T2367] vhci_hcd: vhci_device speed not set [ 64.621877][ T4369] vhci_hcd vhci_hcd.0: Device attached [ 64.630874][ T4382] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 64.637512][ T4382] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.651755][ T4369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.675472][ T4382] vhci_hcd vhci_hcd.0: Device attached [ 64.717855][ T2367] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 64.753076][ T4214] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.988135][ T4214] usb 5-1: device descriptor read/64, error -71 [ 65.494132][ T4214] usb usb5-port1: attempt power cycle [ 65.517298][ T4382] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(12) [ 65.523937][ T4382] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.563309][ T4382] vhci_hcd vhci_hcd.0: Device attached [ 65.628082][ T4390] vhci_hcd: connection closed [ 65.628260][ T4384] vhci_hcd: connection closed [ 65.631711][ T4396] vhci_hcd: connection closed [ 65.633858][ T4376] vhci_hcd: connection closed [ 65.637904][ T304] vhci_hcd: stop threads [ 65.642809][ T4370] vhci_hcd: connection reset by peer [ 65.661672][ T304] vhci_hcd: release socket [ 65.688024][ T304] vhci_hcd: disconnect device [ 65.704468][ T304] vhci_hcd: stop threads [ 65.716208][ T304] vhci_hcd: release socket [ 65.734020][ T304] vhci_hcd: disconnect device [ 65.750118][ T304] vhci_hcd: stop threads [ 65.773834][ T304] vhci_hcd: release socket [ 65.783884][ T304] vhci_hcd: disconnect device [ 65.799101][ T304] vhci_hcd: stop threads [ 65.803393][ T304] vhci_hcd: release socket [ 65.825387][ T304] vhci_hcd: disconnect device [ 65.840984][ T304] vhci_hcd: stop threads [ 65.845306][ T304] vhci_hcd: release socket [ 65.875939][ T304] vhci_hcd: disconnect device [ 65.957883][ T4214] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.088300][ T4214] usb 5-1: device descriptor read/8, error -71 [ 66.378034][ T4214] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 66.497954][ T4214] usb 5-1: device descriptor read/8, error -71 [ 66.642274][ T4214] usb usb5-port1: unable to enumerate USB device [ 66.796531][ T4449] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 68.053742][ T4465] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 68.060315][ T4465] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.078185][ T4465] vhci_hcd vhci_hcd.0: Device attached [ 68.088084][ T4469] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 68.094629][ T4469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.141833][ T4472] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 68.148397][ T4472] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.206334][ T4472] vhci_hcd vhci_hcd.0: Device attached [ 68.248114][ T4482] tipc: Started in network mode [ 68.279667][ T4482] tipc: Node identity 9eb0fc1e49fd, cluster identity 4711 [ 68.308284][ T4482] tipc: Enabled bearer , priority 0 [ 68.318161][ T1108] vhci_hcd: vhci_device speed not set [ 68.328800][ T4472] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.474675][ T4465] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 68.481334][ T4465] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 68.508254][ T4487] device syzkaller0 entered promiscuous mode [ 68.508361][ T1108] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 68.578425][ T4469] vhci_hcd vhci_hcd.0: Device attached [ 68.605495][ T4465] vhci_hcd vhci_hcd.0: Device attached [ 68.613598][ T4479] tipc: Resetting bearer [ 68.628604][ T4492] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 68.698800][ T4469] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 68.705453][ T4469] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.737315][ T4469] vhci_hcd vhci_hcd.0: Device attached [ 68.749178][ T4479] tipc: Disabling bearer [ 68.754212][ T4493] vhci_hcd: connection closed [ 68.755142][ T4488] vhci_hcd: connection closed [ 68.760124][ T4476] vhci_hcd: connection closed [ 68.764922][ T4471] vhci_hcd: connection closed [ 68.769768][ T4466] vhci_hcd: connection reset by peer [ 68.783782][ T304] vhci_hcd: stop threads [ 68.800831][ T304] vhci_hcd: release socket [ 68.815639][ T304] vhci_hcd: disconnect device [ 68.821218][ T304] vhci_hcd: stop threads [ 68.829130][ T304] vhci_hcd: release socket [ 68.835868][ T304] vhci_hcd: disconnect device [ 68.846439][ T304] vhci_hcd: stop threads [ 68.852815][ T304] vhci_hcd: release socket [ 68.860681][ T304] vhci_hcd: disconnect device [ 68.876378][ T4463] capability: warning: `syz.2.72' uses 32-bit capabilities (legacy support in use) [ 68.889079][ T304] vhci_hcd: stop threads [ 68.893357][ T304] vhci_hcd: release socket [ 68.904927][ T304] vhci_hcd: disconnect device [ 68.928658][ T304] vhci_hcd: stop threads [ 68.932961][ T304] vhci_hcd: release socket [ 69.063847][ T304] vhci_hcd: disconnect device [ 69.269160][ T4502] loop4: detected capacity change from 0 to 128 [ 69.470822][ T4502] ======================================================= [ 69.470822][ T4502] WARNING: The mand mount option has been deprecated and [ 69.470822][ T4502] and is ignored by this kernel. Remove the mand [ 69.470822][ T4502] option from the mount to silence this warning. [ 69.470822][ T4502] ======================================================= [ 69.532110][ T4502] FAT-fs (loop4): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 69.546404][ T4502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 69.555772][ T4502] FAT-fs (loop4): Filesystem has been set read-only [ 69.977940][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.187864][ T7] usb 1-1: device descriptor read/64, error -71 [ 70.468102][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.647959][ T2367] vhci_hcd: vhci_device speed not set [ 70.677948][ T7] usb 1-1: device descriptor read/64, error -71 [ 70.798793][ T7] usb usb1-port1: attempt power cycle [ 71.131390][ T4535] loop2: detected capacity change from 0 to 128 [ 71.140415][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.146956][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.888025][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 71.950399][ T4535] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 71.976177][ T4535] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 71.984923][ T4535] FAT-fs (loop2): Filesystem has been set read-only [ 71.998089][ T7] usb 1-1: device descriptor read/8, error -71 [ 73.688447][ T1108] vhci_hcd: vhci_device speed not set [ 74.920952][ T4219] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.012448][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 76.013405][ T4219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.068435][ T4219] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.077682][ T4219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.173059][ T4603] loop2: detected capacity change from 0 to 128 [ 76.308013][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 76.438368][ T21] usb 1-1: config 0 has no interfaces? [ 76.618901][ T21] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 76.658545][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.721003][ T21] usb 1-1: Product: syz [ 76.762017][ T21] usb 1-1: Manufacturer: syz [ 76.796476][ T21] usb 1-1: SerialNumber: syz [ 76.831314][ T13] cfg80211: failed to load regulatory.db [ 76.842494][ T4219] usb 4-1: config 0 descriptor?? [ 76.857928][ T4603] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 76.867641][ T4603] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 76.876376][ T4603] FAT-fs (loop2): Filesystem has been set read-only [ 76.889436][ T21] usb 1-1: config 0 descriptor?? [ 76.907976][ T4219] usb 4-1: can't set config #0, error -71 [ 76.922849][ T4219] usb 4-1: USB disconnect, device number 2 [ 77.180253][ T21] usb 1-1: USB disconnect, device number 7 [ 77.520312][ T4617] netlink: 'syz.2.117': attribute type 39 has an invalid length. [ 79.097813][ T4211] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.468069][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.508053][ T4211] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.556495][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.670330][ T4657] loop0: detected capacity change from 0 to 128 [ 79.758050][ T4657] FAT-fs (loop0): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 79.771428][ T4657] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 79.780155][ T4657] FAT-fs (loop0): Filesystem has been set read-only [ 80.426561][ T4211] usb 3-1: config 0 descriptor?? [ 80.678061][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.911278][ T4211] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 80.922868][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 80.978538][ T4211] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input6 [ 81.978008][ T13] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 81.989579][ T4211] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 82.017872][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.026790][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 82.085012][ T4681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 82.280374][ T13] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.302136][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.332536][ T13] usb 5-1: Product: 깹잩酞ꠒ敞ퟱ䫑炲₷׋蘈㾨媑퉨꩕᧕蓘陭൝짜㋩⻊뮺힐杕䁥眾蓩崈⯠澊ྰ㰅ṥ刦⚋㟛煭흯晲ꊡ嘴츗燶ᾪܖᦑ쎢ɂ醞们☔솛ꕢࠋ噔߻⒍ꈍ䠮朡֟⼡䵮셙쩦ﶍ打㲘偃쾽漊潊蛾螎髼ⵀ쿭튂逝퀡 [ 82.484019][ T13] usb 5-1: Manufacturer: 㰅韛Ἲ㸑빘獾檯䘆沣딅ᑎ朸ꜥఫᢒ纜ᚒ藹嚦ὤ哏䋜㛤﹦奮었齧鋴ᷭ줼⣡삸᳛⥐幝슐‒钯䏏콳둖ᅤ诊໢짆謯 [ 82.542995][ T4690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.137'. [ 82.578287][ T13] usb 5-1: can't set config #1, error -71 [ 82.588234][ T13] usb 5-1: USB disconnect, device number 6 [ 83.198155][ T4701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 83.354690][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 83.975820][ T4214] usb 3-1: USB disconnect, device number 2 [ 85.213916][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 85.517974][ T4214] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.710614][ T4756] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 85.826608][ T4760] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 85.847555][ T4756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.847853][ T4656] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 85.866083][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 85.917048][ T4756] device veth3 entered promiscuous mode [ 85.925600][ T4756] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 85.948089][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.975623][ T4214] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.992200][ T9] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 85.997928][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.039375][ T4214] usb 3-1: config 0 descriptor?? [ 86.051867][ T4768] device veth3 entered promiscuous mode [ 86.058874][ T4770] netlink: 64 bytes leftover after parsing attributes in process `syz.3.168'. [ 86.225728][ T4780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 86.519213][ T4214] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 86.533476][ T4214] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input7 [ 86.641626][ T4214] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 86.912099][ T4813] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.343881][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 88.165526][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 88.215613][ T4853] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.364717][ T4213] usb 3-1: USB disconnect, device number 3 [ 88.386219][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 88.407485][ T4859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 88.644422][ T4863] loop3: detected capacity change from 0 to 2048 [ 90.073238][ T4876] loop1: detected capacity change from 0 to 40427 [ 90.260581][ T4876] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.618841][ T4895] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 90.840725][ T4876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.164831][ T4168] attempt to access beyond end of device [ 92.164831][ T4168] loop1: rw=2049, want=45104, limit=40427 [ 94.555767][ T4939] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 95.412833][ T4938] sched: RT throttling activated [ 96.131110][ T4941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.224'. [ 96.860626][ T4947] netlink: 'syz.2.226': attribute type 4 has an invalid length. [ 96.871681][ T26] audit: type=1326 audit(1748303783.700:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 96.948173][ T26] audit: type=1326 audit(1748303783.730:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 96.983187][ T4950] netlink: 'syz.2.226': attribute type 4 has an invalid length. [ 97.026821][ T26] audit: type=1326 audit(1748303783.730:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 97.076423][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 97.116200][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 97.146670][ T26] audit: type=1326 audit(1748303783.730:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 97.199766][ T26] audit: type=1326 audit(1748303783.730:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 97.222546][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.522522][ T4950] syz.2.226 (4950) used greatest stack depth: 20768 bytes left [ 97.578153][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 97.697375][ T4943] IPv6: Can't replace route, no match found [ 97.982041][ T4955] loop3: detected capacity change from 0 to 2048 [ 97.998073][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.011475][ T21] usb 5-1: too many configurations: 105, using maximum allowed: 8 [ 98.838142][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 99.422497][ T4966] loop0: detected capacity change from 0 to 512 [ 99.469418][ T21] usb 5-1: can't read configurations, error -71 [ 99.662643][ T4966] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000100,nodiscard,,errors=continue. Quota mode: writeback. [ 99.838707][ T4966] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.109682][ T4984] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 101.215770][ T4990] loop2: detected capacity change from 0 to 256 [ 101.348897][ T4990] exfat: Unknown parameter '0xffffffffffffffff' [ 102.197495][ T5005] binder: 5000:5005 ioctl 4018620d 0 returned -22 [ 103.157614][ T5009] netlink: 'syz.3.244': attribute type 4 has an invalid length. [ 103.235660][ T5010] netlink: 'syz.3.244': attribute type 4 has an invalid length. [ 103.797838][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.887946][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 104.949619][ T5016] IPv6: Can't replace route, no match found [ 105.027978][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.035709][ T7] usb 1-1: too many configurations: 105, using maximum allowed: 8 [ 105.133571][ T7] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 105.147942][ T7] usb 1-1: can't read configurations, error -71 [ 106.927145][ T5053] tipc: Started in network mode [ 106.947937][ T5053] tipc: Node identity ac141412, cluster identity 4711 [ 107.008773][ T5053] tipc: New replicast peer: 255.255.255.255 [ 107.152904][ T26] audit: type=1326 audit(1748303793.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bda86969 code=0x7ffc0000 [ 107.314952][ T5053] tipc: Enabled bearer , priority 10 [ 107.976600][ T26] audit: type=1326 audit(1748303793.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bda86969 code=0x7ffc0000 [ 108.048175][ T26] audit: type=1326 audit(1748303793.850:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f97bda86969 code=0x7ffc0000 [ 108.127141][ T5064] IPv6: Can't replace route, no match found [ 108.243715][ T26] audit: type=1326 audit(1748303793.850:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bda86969 code=0x7ffc0000 [ 108.284433][ T26] audit: type=1326 audit(1748303793.850:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bda86969 code=0x7ffc0000 [ 108.314025][ T4210] tipc: Node number set to 2886997010 [ 108.320962][ T26] audit: type=1326 audit(1748303793.850:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f97bda86969 code=0x7ffc0000 [ 108.356858][ T26] audit: type=1326 audit(1748303793.970:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bda86969 code=0x7ffc0000 [ 108.389490][ T26] audit: type=1326 audit(1748303793.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bda86969 code=0x7ffc0000 [ 108.787827][ T4210] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.078004][ T4210] usb 2-1: Using ep0 maxpacket: 8 [ 109.099157][ T5090] loop0: detected capacity change from 0 to 256 [ 109.117620][ T5091] xt_hashlimit: size too large, truncated to 1048576 [ 109.137129][ T5090] exfat: Unknown parameter '0xffffffffffffffff' [ 109.373742][ T4210] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.478110][ T4210] usb 2-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.512083][ T4210] usb 2-1: config 1 interface 0 has no altsetting 0 [ 109.713983][ T4210] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 109.726556][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.752700][ T4210] usb 2-1: Product: syz [ 109.761460][ T4210] usb 2-1: Manufacturer: syz [ 109.777121][ T4210] usb 2-1: SerialNumber: syz [ 110.150302][ T4210] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 110.187952][ T3532] bcm5974 2-1:1.0: could not read from device [ 110.188610][ T4210] usb 2-1: USB disconnect, device number 2 [ 111.087961][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.254693][ T4210] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.478100][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.494368][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.517827][ T4210] usb 2-1: Using ep0 maxpacket: 16 [ 111.618378][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.631753][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.649561][ T21] usb 3-1: SerialNumber: syz [ 111.668088][ T4210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.684651][ T4210] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.720463][ T21] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 111.729612][ T21] usb 3-1: bad CDC descriptors [ 111.927978][ T4210] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 111.937068][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.968932][ T4210] usb 2-1: Product: syz [ 111.973145][ T4210] usb 2-1: Manufacturer: syz [ 111.985472][ T4210] usb 2-1: SerialNumber: syz [ 112.000811][ T4210] usb 2-1: config 0 descriptor?? [ 112.009622][ T1108] usb 3-1: USB disconnect, device number 4 [ 112.059424][ T4210] kobil_sct 2-1:0.0: required endpoints missing [ 112.269748][ T1108] usb 2-1: USB disconnect, device number 3 [ 112.713488][ T5127] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 112.766543][ T5127] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 112.781570][ T5127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.782071][ T4561] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.801039][ T5127] device veth3 entered promiscuous mode [ 112.807692][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 112.977902][ T4503] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 113.237909][ T4219] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.247976][ T4219] usb 2-1: Using ep0 maxpacket: 8 [ 114.408087][ T4219] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.488185][ T4219] usb 2-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.504015][ T4219] usb 2-1: config 1 interface 0 has no altsetting 0 [ 114.678150][ T4219] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 114.696956][ T4219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.710003][ T4219] usb 2-1: Product: syz [ 114.718043][ T4219] usb 2-1: Manufacturer: syz [ 114.723627][ T4219] usb 2-1: SerialNumber: syz [ 114.732578][ T4211] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.857094][ T4211] usb 3-1: Using ep0 maxpacket: 32 [ 115.920590][ T4219] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 115.967971][ T3532] bcm5974 2-1:1.0: could not read from device [ 116.046882][ T4219] usb 2-1: USB disconnect, device number 4 [ 116.058203][ T4211] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 116.066989][ T4211] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 116.074047][ T5165] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 116.134289][ T4211] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.175429][ T5165] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 116.188657][ T4562] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 116.204088][ T5165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.220349][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 116.295286][ T5165] device veth5 entered promiscuous mode [ 116.328081][ T4562] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 116.350263][ T4211] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.417846][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.475112][ T4211] usb 3-1: Product: 깹잩酞ꠒ敞ퟱ䫑炲₷׋蘈㾨媑퉨꩕᧕蓘陭൝짜㋩⻊뮺힐杕䁥眾蓩崈⯠澊ྰ㰅ṥ刦⚋㟛煭흯晲ꊡ嘴츗燶ᾪܖᦑ쎢ɂ醞们☔솛ꕢࠋ噔߻⒍ꈍ䠮朡֟⼡䵮셙쩦ﶍ打㲘偃쾽漊潊蛾螎髼ⵀ쿭튂逝퀡 [ 116.533160][ T4211] usb 3-1: Manufacturer: 㰅韛Ἲ㸑빘獾檯䘆沣딅ᑎ朸ꜥఫᢒ纜ᚒ藹嚦ὤ哏䋜㛤﹦奮었齧鋴ᷭ줼⣡삸᳛⥐幝슐‒钯䏏콳둖ᅤ诊໢짆謯 [ 116.574607][ T5174] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 117.408705][ T4211] usb 3-1: 0:2 : does not exist [ 117.490027][ T4211] usb 3-1: USB disconnect, device number 5 [ 117.741020][ T4814] udevd[4814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.968123][ T4214] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.344653][ T4214] usb 2-1: Using ep0 maxpacket: 8 [ 118.693407][ T4214] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.839675][ T4214] usb 2-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.007889][ T4214] usb 2-1: config 1 interface 0 has no altsetting 0 [ 119.057894][ T4245] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.367921][ T4214] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 119.377098][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.404506][ T4214] usb 2-1: Product: syz [ 119.423873][ T4214] usb 2-1: Manufacturer: syz [ 119.459802][ T4214] usb 2-1: SerialNumber: syz [ 120.160508][ T4214] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10 [ 120.206663][ T4245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.208392][ T3532] bcm5974 2-1:1.0: could not read from device [ 120.219980][ T4245] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.233293][ T4245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.250946][ T4245] usb 1-1: config 0 descriptor?? [ 120.448967][ T5221] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 120.488152][ T3532] bcm5974 2-1:1.0: could not read from device [ 120.518015][ T3532] bcm5974 2-1:1.0: could not read from device [ 120.558287][ T4214] usb 2-1: USB disconnect, device number 5 [ 120.558611][ T3532] bcm5974 2-1:1.0: could not read from device [ 120.755211][ T4245] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 120.773874][ T4245] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input11 [ 120.892160][ T4245] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 121.258536][ T4214] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.042068][ T4214] usb 2-1: Using ep0 maxpacket: 32 [ 122.279870][ T5254] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 122.647962][ T4214] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 122.656718][ T4214] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 122.680139][ T4214] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.824158][ T5269] tipc: Can't bind to reserved service type 0 [ 122.889116][ T4214] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.912729][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.941383][ T4214] usb 2-1: Product: 깹잩酞ꠒ敞ퟱ䫑炲₷׋蘈㾨媑퉨꩕᧕蓘陭൝짜㋩⻊뮺힐杕䁥眾蓩崈⯠澊ྰ㰅ṥ刦⚋㟛煭흯晲ꊡ嘴츗燶ᾪܖᦑ쎢ɂ醞们☔솛ꕢࠋ噔߻⒍ꈍ䠮朡֟⼡䵮셙쩦ﶍ打㲘偃쾽漊潊蛾螎髼ⵀ쿭튂逝퀡 [ 123.001297][ T4245] usb 1-1: USB disconnect, device number 10 [ 123.014754][ T4214] usb 2-1: Manufacturer: 㰅韛Ἲ㸑빘獾檯䘆沣딅ᑎ朸ꜥఫᢒ纜ᚒ藹嚦ὤ哏䋜㛤﹦奮었齧鋴ᷭ줼⣡삸᳛⥐幝슐‒钯䏏콳둖ᅤ诊໢짆謯 [ 123.188009][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.228934][ T5281] loop0: detected capacity change from 0 to 2048 [ 123.279201][ T5281] EXT4-fs (loop0): inline encryption not supported [ 123.324051][ T5281] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 123.349378][ T5281] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 123.359106][ T5281] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 123.427852][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 123.438114][ T4214] usb 2-1: 0:2 : does not exist [ 123.498305][ T4214] usb 2-1: USB disconnect, device number 6 [ 123.553165][ T5289] loop2: detected capacity change from 0 to 1024 [ 123.588121][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 123.614292][ T5289] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.677977][ T7] usb 5-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.700400][ T7] usb 5-1: config 1 interface 0 has no altsetting 0 [ 123.764751][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.924934][ T5298] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 123.998052][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 124.017554][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.032221][ T7] usb 5-1: Product: syz [ 124.035489][ T5300] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 124.040859][ T7] usb 5-1: Manufacturer: syz [ 124.795966][ T7] usb 5-1: SerialNumber: syz [ 124.839234][ T9] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 124.853249][ T5298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.868759][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 124.955854][ T5298] device veth3 entered promiscuous mode [ 125.017824][ T4503] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 125.060611][ T5307] netlink: 5 bytes leftover after parsing attributes in process `syz.2.344'. [ 125.128857][ T5310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 125.182598][ T5310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.202094][ T5318] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 125.211568][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 125.230528][ T7] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input12 [ 125.258453][ T3532] bcm5974 5-1:1.0: could not read from device [ 125.300584][ T3532] bcm5974 5-1:1.0: could not read from device [ 125.342082][ T7] usb 5-1: USB disconnect, device number 9 [ 125.347269][ T3532] bcm5974 5-1:1.0: could not read from device [ 125.361041][ T3532] bcm5974 5-1:1.0: could not read from device [ 125.374106][ T5324] loop1: detected capacity change from 0 to 1024 [ 125.580026][ T5324] EXT4-fs (loop1): Test dummy encryption mode enabled [ 125.586945][ T5324] EXT4-fs (loop1): inline encryption not supported [ 125.620739][ T5324] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 125.737138][ T5341] bridge0: port 3(vlan3) entered blocking state [ 125.750185][ T5341] bridge0: port 3(vlan3) entered disabled state [ 125.804214][ T5339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 125.924219][ T5324] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 126.125591][ T5349] netlink: 9 bytes leftover after parsing attributes in process `syz.4.359'. [ 126.139199][ T5349] device gretap0 entered promiscuous mode [ 126.172136][ T5352] netlink: 5 bytes leftover after parsing attributes in process `syz.4.359'. [ 126.188546][ T5352] 0{X: renamed from gretap0 [ 126.202668][ T5352] device 30{X left promiscuous mode [ 126.210559][ T5352] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 126.587648][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 126.778100][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.821581][ T5389] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 126.913658][ T5395] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 126.989769][ T5402] netlink: 'syz.3.380': attribute type 10 has an invalid length. [ 127.018111][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 127.035663][ T5389] device veth3 entered promiscuous mode [ 127.049414][ T5389] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 127.138391][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 127.318147][ T7] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 127.327243][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.342488][ T7] usb 2-1: Product: syz [ 127.352180][ T7] usb 2-1: Manufacturer: syz [ 127.362176][ T7] usb 2-1: SerialNumber: syz [ 127.392474][ T7] usb 2-1: config 0 descriptor?? [ 127.415254][ T5422] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.388'. [ 127.433111][ T7] kobil_sct 2-1:0.0: required endpoints missing [ 127.635280][ T13] usb 2-1: USB disconnect, device number 7 [ 127.705212][ T5432] syz.0.391 sent an empty control message without MSG_MORE. [ 128.683230][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 128.719677][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 129.369967][ T5465] netlink: 'syz.4.405': attribute type 10 has an invalid length. [ 129.395493][ T5459] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 129.424762][ T5459] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 129.534179][ T5465] team0: Port device wlan1 added [ 129.656654][ T5465] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.405'. [ 129.985749][ T5442] loop0: detected capacity change from 0 to 40427 [ 130.774650][ T5442] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.859617][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 130.944393][ T5442] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.965353][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'. [ 131.863508][ T4169] attempt to access beyond end of device [ 131.863508][ T4169] loop0: rw=2049, want=45104, limit=40427 [ 131.947861][ T4213] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.955299][ T5505] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 131.990817][ T5505] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 132.198060][ T4213] usb 5-1: Using ep0 maxpacket: 16 [ 132.217124][ T5520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.423'. [ 132.263976][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 132.276954][ T5520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.423'. [ 132.296716][ T5523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 132.320191][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 132.351076][ T5521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.423'. [ 132.503315][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.509702][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.523909][ T4213] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.546256][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.559816][ T4213] usb 5-1: Product: syz [ 132.564379][ T4213] usb 5-1: Manufacturer: syz [ 132.569547][ T4213] usb 5-1: SerialNumber: syz [ 132.577529][ T4213] usb 5-1: config 0 descriptor?? [ 132.626514][ T4213] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 132.658241][ T4213] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 133.283822][ T4213] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 133.767101][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 135.168267][ T4213] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 135.176768][ T4213] em28xx 5-1:0.0: board has no eeprom [ 135.414511][ T4213] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 135.441736][ T4213] em28xx 5-1:0.0: dvb set to bulk mode. [ 135.476355][ T4213] usb 5-1: USB disconnect, device number 10 [ 135.499242][ T5558] em28xx 5-1:0.0: Binding DVB extension [ 135.526447][ T4213] em28xx 5-1:0.0: Disconnecting em28xx [ 135.668396][ T5558] em28xx 5-1:0.0: Registering input extension [ 135.687315][ T4213] em28xx 5-1:0.0: Closing input extension [ 135.753365][ T4213] em28xx 5-1:0.0: Freeing device [ 135.962979][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 136.339750][ T5610] netlink: 'syz.1.459': attribute type 29 has an invalid length. [ 136.385506][ T5610] netlink: 'syz.1.459': attribute type 29 has an invalid length. [ 136.399636][ T5614] netlink: 'syz.1.459': attribute type 29 has an invalid length. [ 136.413442][ T5610] netlink: 'syz.1.459': attribute type 29 has an invalid length. [ 136.425412][ T5610] netlink: 'syz.1.459': attribute type 29 has an invalid length. [ 136.436253][ T5616] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 136.444529][ T5616] netlink: 152 bytes leftover after parsing attributes in process `syz.4.462'. [ 136.456507][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 136.648155][ T4211] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.973475][ T5629] netlink: 'syz.4.467': attribute type 29 has an invalid length. [ 137.175585][ T5629] netlink: 'syz.4.467': attribute type 29 has an invalid length. [ 137.446670][ T5633] netlink: 'syz.4.467': attribute type 29 has an invalid length. [ 137.468603][ T5634] netlink: 'syz.4.467': attribute type 29 has an invalid length. [ 137.603628][ T5644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 137.667795][ T4211] usb 3-1: Using ep0 maxpacket: 16 [ 137.708698][ T5650] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.477'. [ 137.788077][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 137.824201][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 138.078974][ T4211] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 138.088248][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.096221][ T4211] usb 3-1: Product: syz [ 138.105667][ T4211] usb 3-1: Manufacturer: syz [ 138.111608][ T4211] usb 3-1: SerialNumber: syz [ 138.132053][ T4211] usb 3-1: config 0 descriptor?? [ 138.166035][ T5667] 9pnet: Insufficient options for proto=fd [ 138.279485][ T4211] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 138.506527][ T4211] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 138.870366][ T4211] usb 3-1: USB disconnect, device number 6 [ 138.988516][ T4211] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 139.079340][ T4211] kobil_sct 3-1:0.0: device disconnected [ 139.443952][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 139.521235][ T5673] loop4: detected capacity change from 0 to 4096 [ 141.808596][ T5706] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 141.898367][ T5711] process 'syz.1.499' launched './file0' with NULL argv: empty string added [ 141.922108][ T5713] xt_hashlimit: size too large, truncated to 1048576 [ 142.067042][ T5709] device veth5 entered promiscuous mode [ 142.168776][ T5709] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 142.483653][ T5726] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 142.510065][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 143.181425][ T5738] loop0: detected capacity change from 0 to 8 [ 143.275915][ T5738] Major/Minor mismatch, trying to mount newer 9.0 filesystem [ 143.317327][ T5738] Please update your kernel [ 144.130690][ T5742] input: syz0 as /devices/virtual/input/input14 [ 144.770750][ T5749] loop0: detected capacity change from 0 to 8 [ 145.097160][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 145.674169][ T5781] loop1: detected capacity change from 0 to 512 [ 145.742476][ T5781] EXT4-fs (loop1): Ignoring removed nobh option [ 145.795642][ T5781] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.522: invalid indirect mapped block 256 (level 2) [ 145.822295][ T5781] EXT4-fs (loop1): 2 truncates cleaned up [ 145.845043][ T5781] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 147.830553][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 147.858000][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.860431][ T5807] loop0: detected capacity change from 0 to 1024 [ 147.923876][ T5807] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.218069][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.254089][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 148.281738][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.324642][ T23] usb 3-1: config 0 descriptor?? [ 148.346602][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 149.967904][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 149.974069][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 150.033942][ T23] usb 3-1: USB disconnect, device number 7 [ 150.306029][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 151.724361][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 151.916152][ T5871] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 152.779479][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 153.078116][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.118647][ T13] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 153.147834][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.185457][ T13] usb 3-1: config 0 descriptor?? [ 153.704134][ T13] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 153.882753][ T13] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input15 [ 154.057198][ T4184] Bluetooth: Wrong link type (-71) [ 154.167548][ T13] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 154.456965][ T5884] loop0: detected capacity change from 0 to 40427 [ 154.584894][ T5884] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.697469][ T5884] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 154.957904][ T5917] loop4: detected capacity change from 0 to 128 [ 155.352539][ T5917] EXT4-fs (loop4): inline encryption not supported [ 155.427166][ T5917] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,block_validity,inlinecrypt,init_itable,stripe=0x0000000000000009,,errors=continue. Quota mode: none. [ 155.592051][ T5917] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.643678][ T4169] attempt to access beyond end of device [ 155.643678][ T4169] loop0: rw=2049, want=45104, limit=40427 [ 155.735085][ T23] usb 3-1: USB disconnect, device number 8 [ 156.610396][ T5905] loop1: detected capacity change from 0 to 32768 [ 157.631154][ T5905] XFS (loop1): Mounting V5 Filesystem [ 157.779817][ T5905] XFS (loop1): log mount failed [ 161.095430][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.104109][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.258354][ T5989] loop4: detected capacity change from 0 to 512 [ 161.295398][ T5989] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.333027][ T5989] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.373013][ T5989] EXT4-fs (loop4): 1 truncate cleaned up [ 161.390096][ T5989] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 161.451780][ T5989] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.555842][ T5983] loop0: detected capacity change from 0 to 40427 [ 161.649155][ T5983] F2FS-fs (loop0): Found nat_bits in checkpoint [ 161.753517][ T5983] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.019539][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.156792][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.423946][ T4169] attempt to access beyond end of device [ 162.423946][ T4169] loop0: rw=2049, want=45104, limit=40427 [ 162.773571][ T5968] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.783006][ T5968] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.792341][ T5968] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.801644][ T5968] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.892122][ T5968] device veth3 left promiscuous mode [ 162.974267][ T5978] IPv6: Can't replace route, no match found [ 163.105275][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 163.115205][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 164.180889][ T6020] loop0: detected capacity change from 0 to 4096 [ 164.216697][ T6020] ntfs3: Unknown parameter 'windows_names' [ 165.217990][ T4245] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 165.477844][ T4245] usb 3-1: Using ep0 maxpacket: 16 [ 165.649127][ T4245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 165.661493][ T6038] loop0: detected capacity change from 0 to 128 [ 165.717639][ T6038] FAT-fs (loop0): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 165.727377][ T6038] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 165.736126][ T6038] FAT-fs (loop0): Filesystem has been set read-only [ 165.918009][ T4245] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.927135][ T4245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.958037][ T4245] usb 3-1: Product: syz [ 165.962250][ T4245] usb 3-1: Manufacturer: syz [ 165.972249][ T4245] usb 3-1: SerialNumber: syz [ 166.002912][ T4245] usb 3-1: config 0 descriptor?? [ 166.057286][ T4245] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 166.082861][ T4245] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 166.274890][ T6036] loop4: detected capacity change from 0 to 40427 [ 166.758020][ T4245] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 166.794730][ T6036] F2FS-fs (loop4): Found nat_bits in checkpoint [ 166.923366][ T4184] Bluetooth: min 6 > max 0 [ 166.942702][ T6036] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 167.593129][ T4170] attempt to access beyond end of device [ 167.593129][ T4170] loop4: rw=2049, want=45104, limit=40427 [ 167.647891][ T4245] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 167.668571][ T4245] em28xx 3-1:0.0: board has no eeprom [ 167.709316][ T6018] em28xx 3-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 168.047803][ T4245] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 168.055707][ T4245] em28xx 3-1:0.0: dvb set to bulk mode. [ 168.090526][ T7] em28xx 3-1:0.0: Binding DVB extension [ 168.127302][ T4245] usb 3-1: USB disconnect, device number 9 [ 168.158672][ T4245] em28xx 3-1:0.0: Disconnecting em28xx [ 168.271799][ T7] em28xx 3-1:0.0: Registering input extension [ 168.303802][ T4245] em28xx 3-1:0.0: Closing input extension [ 168.325980][ T4245] em28xx 3-1:0.0: Freeing device [ 168.716563][ T6088] loop4: detected capacity change from 0 to 128 [ 168.806129][ T6088] FAT-fs (loop4): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 168.837914][ T6088] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 168.846574][ T6088] FAT-fs (loop4): Filesystem has been set read-only [ 168.946073][ T6092] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 169.718047][ T4219] Bluetooth: hci1: command 0x2021 tx timeout [ 169.893242][ T6097] loop1: detected capacity change from 0 to 2048 [ 170.064760][ T6097] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.370028][ T26] audit: type=1800 audit(1748303857.870:15): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.616" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 171.435033][ T6117] loop4: detected capacity change from 0 to 512 [ 171.799958][ T6117] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,barrier=0x0000000000001000,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 171.881954][ T6117] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.271837][ T4215] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 175.098712][ T6139] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 175.739791][ T6123] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 175.757957][ T4215] usb 3-1: Using ep0 maxpacket: 16 [ 175.917933][ T4215] usb 3-1: device descriptor read/all, error -71 [ 176.244495][ T6160] device wireguard0 entered promiscuous mode [ 176.823652][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 177.141746][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 177.297791][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 178.355222][ T4219] Bluetooth: hci3: command 0x0406 tx timeout [ 178.361441][ T4219] Bluetooth: hci2: command 0x0406 tx timeout [ 178.367547][ T4219] Bluetooth: hci1: command 0x0406 tx timeout [ 178.374098][ T4219] Bluetooth: hci0: command 0x0406 tx timeout [ 178.402467][ T4219] Bluetooth: hci4: command 0x0406 tx timeout [ 178.528329][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.887908][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.988361][ T6206] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 180.435040][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.458581][ T7] usb 5-1: config 0 descriptor?? [ 180.478209][ T7] usb 5-1: can't set config #0, error -71 [ 180.485186][ T7] usb 5-1: USB disconnect, device number 11 [ 180.787877][ T4219] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.914344][ T6229] loop2: detected capacity change from 0 to 128 [ 180.985257][ T6229] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 181.008094][ T6229] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 181.016964][ T6229] FAT-fs (loop2): Filesystem has been set read-only [ 181.037932][ T4219] usb 2-1: Using ep0 maxpacket: 32 [ 181.120284][ T6209] IPv6: Can't replace route, no match found [ 181.178016][ T4219] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.196946][ T4219] usb 2-1: too many configurations: 105, using maximum allowed: 8 [ 181.318251][ T4219] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 181.336991][ T4219] usb 2-1: can't read configurations, error -71 [ 182.999105][ T6253] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 183.686640][ T4219] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 183.713795][ T6254] loop4: detected capacity change from 0 to 256 [ 183.778973][ T6254] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 183.944179][ T6252] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 183.950742][ T6252] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.959059][ T6252] vhci_hcd vhci_hcd.0: Device attached [ 184.111582][ T6255] vhci_hcd: connection closed [ 184.113487][ T4960] vhci_hcd: stop threads [ 184.203242][ T4960] vhci_hcd: release socket [ 184.296168][ T4960] vhci_hcd: disconnect device [ 184.357946][ T23] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 184.871350][ T26] audit: type=1326 audit(1748303871.700:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 184.918041][ T4245] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 184.962347][ T26] audit: type=1326 audit(1748303871.700:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 184.992408][ T26] audit: type=1326 audit(1748303871.740:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 185.014957][ T6264] loop0: detected capacity change from 0 to 256 [ 185.047906][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.069319][ T26] audit: type=1326 audit(1748303871.790:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 185.122383][ T4219] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 185.145233][ T26] audit: type=1326 audit(1748303871.830:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 185.164268][ T4219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.167897][ T26] audit: type=1326 audit(1748303871.830:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 185.208279][ T26] audit: type=1326 audit(1748303871.830:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 185.215439][ T4219] usb 2-1: config 0 descriptor?? [ 185.245928][ T26] audit: type=1326 audit(1748303871.840:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa4c2c04969 code=0x7ffc0000 [ 185.275794][ T4245] usb 5-1: Using ep0 maxpacket: 16 [ 185.281411][ T26] audit: type=1326 audit(1748303871.840:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4c2c049a3 code=0x7ffc0000 [ 185.310770][ T6274] loop2: detected capacity change from 0 to 128 [ 185.326750][ T26] audit: type=1326 audit(1748303871.840:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4c2c0341f code=0x7ffc0000 [ 185.359288][ T6264] FAT-fs (loop0): Unrecognized mount option "shorname=mixed" or missing value [ 185.429985][ T4245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 185.618420][ T4219] usbhid 2-1:0.0: can't add hid device: -71 [ 185.624851][ T4219] usbhid: probe of 2-1:0.0 failed with error -71 [ 185.638476][ T4245] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 185.648584][ T6274] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 185.661686][ T6274] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 185.670427][ T6274] FAT-fs (loop2): Filesystem has been set read-only [ 185.679022][ T4245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.687045][ T4245] usb 5-1: Product: syz [ 185.733485][ T4219] usb 2-1: USB disconnect, device number 9 [ 185.743940][ T4245] usb 5-1: Manufacturer: syz [ 185.751700][ T4245] usb 5-1: SerialNumber: syz [ 185.758636][ T4245] usb 5-1: config 0 descriptor?? [ 185.812380][ T4245] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 185.849303][ T4245] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 186.972131][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 187.172011][ T6297] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 187.943030][ T4245] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 188.313830][ T4245] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 188.358383][ T4245] em28xx 5-1:0.0: board has no eeprom [ 188.491360][ T6262] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 189.338823][ T6312] loop1: detected capacity change from 0 to 4096 [ 189.358534][ T6312] ntfs3: Unknown parameter 'windows_names' [ 189.384026][ T6318] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 189.403352][ T6318] binder: 6317:6318 ioctl 4018620d 200000000040 returned -1 [ 189.557813][ T4245] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 189.576194][ T4245] em28xx 5-1:0.0: dvb set to bulk mode. [ 189.642969][ T4245] usb 5-1: USB disconnect, device number 12 [ 189.647126][ T23] vhci_hcd: vhci_device speed not set [ 189.691485][ T4245] em28xx 5-1:0.0: Disconnecting em28xx [ 189.715127][ T6323] loop1: detected capacity change from 0 to 128 [ 189.737614][ T6323] FAT-fs (loop1): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 189.747669][ T6323] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 189.756508][ T6323] FAT-fs (loop1): Filesystem has been set read-only [ 189.777644][ T4219] em28xx 5-1:0.0: Binding DVB extension [ 189.861501][ T4219] em28xx 5-1:0.0: Registering input extension [ 190.772305][ T4245] em28xx 5-1:0.0: Closing input extension [ 190.799873][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 190.833767][ T4245] em28xx 5-1:0.0: Freeing device [ 193.784455][ T6371] loop1: detected capacity change from 0 to 128 [ 193.868359][ T21] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 193.914785][ T6371] FAT-fs (loop1): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 193.924526][ T6371] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 193.931860][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.936196][ T6371] FAT-fs (loop1): Filesystem has been set read-only [ 193.939481][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.108438][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 194.228755][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 194.418074][ T21] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.478287][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.505681][ T21] usb 5-1: Product: syz [ 194.521635][ T21] usb 5-1: Manufacturer: syz [ 194.526276][ T21] usb 5-1: SerialNumber: syz [ 194.561830][ T21] usb 5-1: config 0 descriptor?? [ 194.602598][ T21] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 194.627305][ T21] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 195.263184][ T21] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 195.877931][ T21] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 195.886012][ T21] em28xx 5-1:0.0: board has no eeprom [ 196.583686][ T6404] syz.0.703 (6404) used greatest stack depth: 16576 bytes left [ 196.886074][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 197.176773][ T6420] loop2: detected capacity change from 0 to 164 [ 197.273414][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 197.457910][ T6363] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 197.547833][ T21] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 198.007803][ T21] em28xx 5-1:0.0: dvb set to bulk mode. [ 198.017181][ T21] usb 5-1: USB disconnect, device number 13 [ 198.023883][ T21] em28xx 5-1:0.0: Disconnecting em28xx [ 198.039701][ T23] em28xx 5-1:0.0: Binding DVB extension [ 198.133338][ T23] em28xx 5-1:0.0: Registering input extension [ 198.162989][ T21] em28xx 5-1:0.0: Closing input extension [ 198.200588][ T21] em28xx 5-1:0.0: Freeing device [ 198.310098][ T6406] loop1: detected capacity change from 0 to 32768 [ 198.895146][ T6406] XFS (loop1): Mounting V5 Filesystem [ 199.376162][ T6406] XFS (loop1): log mount failed [ 199.507329][ T6449] loop2: detected capacity change from 0 to 512 [ 199.661213][ T6449] EXT4-fs (loop2): Ignoring removed nobh option [ 199.761674][ T6449] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.718: inode #15: comm syz.2.718: iget: illegal inode # [ 199.784039][ T6449] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.718: couldn't read orphan inode 15 (err -117) [ 199.898577][ T6449] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,nolazytime,user_xattr,minixdf,bsddf,nobh,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: none. [ 200.014873][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 200.653991][ T6467] loop4: detected capacity change from 0 to 128 [ 201.230482][ T6467] FAT-fs (loop4): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 201.240767][ T6467] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 201.249463][ T6467] FAT-fs (loop4): Filesystem has been set read-only [ 203.812995][ T6504] loop0: detected capacity change from 0 to 4096 [ 204.066040][ T6504] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 205.767945][ T6512] loop1: detected capacity change from 0 to 128 [ 205.798103][ T6512] FAT-fs (loop1): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 205.807773][ T6512] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 205.816323][ T6512] FAT-fs (loop1): Filesystem has been set read-only [ 209.220026][ T6557] loop2: detected capacity change from 0 to 64 [ 209.429320][ T6557] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 210.048672][ T6561] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 210.272181][ T6564] loop4: detected capacity change from 0 to 128 [ 210.373530][ T6564] FAT-fs (loop4): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 210.384136][ T6564] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 210.392904][ T6564] FAT-fs (loop4): Filesystem has been set read-only [ 211.216749][ T6571] Invalid ELF header type: 3 != 1 [ 212.711001][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 213.351557][ T6605] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 215.205642][ T6621] input: syz1 as /devices/virtual/input/input19 [ 215.471196][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 216.414332][ T6614] loop4: detected capacity change from 0 to 128 [ 216.508583][ T6614] FAT-fs (loop4): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 216.568051][ T6614] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 216.654319][ T6614] FAT-fs (loop4): Filesystem has been set read-only [ 217.016444][ T6650] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 219.040850][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 220.974940][ T6702] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 221.830960][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 222.757778][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 222.757798][ T26] audit: type=1326 audit(1748303909.490:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f12709969 code=0x7ffc0000 [ 222.828419][ T26] audit: type=1326 audit(1748303909.500:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f12709969 code=0x7ffc0000 [ 222.868335][ T26] audit: type=1326 audit(1748303909.500:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f12709969 code=0x7ffc0000 [ 223.036771][ T26] audit: type=1326 audit(1748303909.500:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f12709969 code=0x7ffc0000 [ 223.216108][ T26] audit: type=1326 audit(1748303909.500:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f12709969 code=0x7ffc0000 [ 223.497797][ T26] audit: type=1326 audit(1748303909.500:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6f12709969 code=0x7ffc0000 [ 223.537797][ T26] audit: type=1326 audit(1748303909.500:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f127099a3 code=0x7ffc0000 [ 223.641623][ T26] audit: type=1326 audit(1748303909.500:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f1270841f code=0x7ffc0000 [ 223.717778][ T26] audit: type=1326 audit(1748303909.510:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6f127099f7 code=0x7ffc0000 [ 223.803252][ T6731] loop1: detected capacity change from 0 to 128 [ 223.855313][ T6731] FAT-fs (loop1): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 223.865808][ T6731] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 223.875406][ T6731] FAT-fs (loop1): Filesystem has been set read-only [ 223.918469][ T26] audit: type=1326 audit(1748303909.520:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f127082d0 code=0x7ffc0000 [ 225.891336][ T6748] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 226.563938][ T6756] fuse: Bad value for 'fd' [ 226.806416][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 227.042638][ T13] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 227.118016][ T4213] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 227.172465][ T6777] netlink: 'syz.4.824': attribute type 1 has an invalid length. [ 227.286438][ T6777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.297805][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 227.376884][ T6777] device veth7 entered promiscuous mode [ 227.396499][ T6777] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 227.411587][ T6762] IPv6: Can't replace route, no match found [ 227.497862][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 227.517827][ T13] usb 3-1: too many configurations: 105, using maximum allowed: 8 [ 227.607968][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 227.617628][ T13] usb 3-1: can't read configurations, error -71 [ 227.777864][ T4219] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.243836][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.268711][ T4213] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.280416][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.295702][ T4213] usb 1-1: config 0 descriptor?? [ 228.497825][ T4219] usb 2-1: Using ep0 maxpacket: 16 [ 228.618537][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 228.788160][ T4219] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 228.801622][ T4219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.268592][ T4213] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 229.500514][ T4213] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input20 [ 229.606413][ T4219] usb 2-1: Product: syz [ 229.610704][ T4219] usb 2-1: Manufacturer: syz [ 229.615320][ T4219] usb 2-1: SerialNumber: syz [ 229.621965][ T4219] usb 2-1: config 0 descriptor?? [ 229.660214][ T4219] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 229.723982][ T4219] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 230.588544][ T6813] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 231.165815][ T6815] loop4: detected capacity change from 0 to 128 [ 231.555477][ T4213] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 231.673834][ T4213] usb 1-1: USB disconnect, device number 11 [ 231.972603][ T6815] FAT-fs (loop4): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 231.982435][ T6815] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 231.991707][ T6815] FAT-fs (loop4): Filesystem has been set read-only [ 232.018057][ T4219] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 232.198208][ T4219] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 232.206841][ T4219] em28xx 2-1:0.0: board has no eeprom [ 232.377824][ T4219] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 232.718066][ T4213] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 233.209097][ T4219] em28xx 2-1:0.0: dvb set to bulk mode. [ 233.237350][ T4219] usb 2-1: USB disconnect, device number 10 [ 233.244869][ T4219] em28xx 2-1:0.0: Disconnecting em28xx [ 233.270165][ T4211] em28xx 2-1:0.0: Binding DVB extension [ 233.504078][ T4213] usb 1-1: Using ep0 maxpacket: 32 [ 233.529173][ T4211] em28xx 2-1:0.0: Registering input extension [ 233.536833][ T4219] em28xx 2-1:0.0: Closing input extension [ 233.543126][ T13] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 233.600815][ T6830] IPv6: Can't replace route, no match found [ 233.738851][ T4213] usb 1-1: unable to get BOS descriptor or descriptor too short [ 233.797103][ T4213] usb 1-1: too many configurations: 105, using maximum allowed: 8 [ 234.059153][ T4213] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 234.265647][ T4213] usb 1-1: can't read configurations, error -71 [ 234.387193][ T4219] em28xx 2-1:0.0: Freeing device [ 234.577781][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 234.640709][ T6833] loop2: detected capacity change from 0 to 40427 [ 236.128373][ T6858] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 236.677950][ T13] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 236.685577][ T13] usb 5-1: can't read configurations, error -71 [ 236.880137][ T6864] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 236.893646][ T6864] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 236.903893][ T4219] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 237.100481][ T13] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 237.158154][ T4219] usb 2-1: Using ep0 maxpacket: 16 [ 237.586297][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 239.556967][ T6887] netlink: 'syz.2.857': attribute type 1 has an invalid length. [ 239.570142][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.600932][ T13] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 239.667914][ T4219] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.714754][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.734087][ T4219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.798169][ T4219] usb 2-1: Product: syz [ 239.823939][ T6893] fido_id[6893]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 239.830432][ T13] usb 5-1: config 0 descriptor?? [ 240.655597][ T6899] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 240.907313][ T6892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.207512][ T4219] usb 2-1: config 0 descriptor?? [ 241.227938][ T13] usb 5-1: can't set config #0, error -71 [ 241.235010][ T4219] usb 2-1: can't set config #0, error -71 [ 241.242819][ T13] usb 5-1: USB disconnect, device number 15 [ 241.249902][ T4219] usb 2-1: USB disconnect, device number 11 [ 241.462875][ T4215] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 241.739348][ T4215] usb 1-1: Using ep0 maxpacket: 32 [ 241.823150][ T6904] IPv6: Can't replace route, no match found [ 242.028269][ T4215] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.081255][ T4215] usb 1-1: too many configurations: 105, using maximum allowed: 8 [ 242.397981][ T4215] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 242.405801][ T4215] usb 1-1: can't read configurations, error -71 [ 242.603497][ T6901] loop4: detected capacity change from 0 to 40427 [ 243.011168][ T6901] F2FS-fs (loop4): Found nat_bits in checkpoint [ 243.490662][ T6901] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 246.001235][ T4215] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 246.049438][ T6949] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 246.157333][ T6949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.284970][ T6949] device veth5 entered promiscuous mode [ 246.334652][ T6949] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 247.337773][ T4211] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 249.408651][ T4211] usb 3-1: Using ep0 maxpacket: 32 [ 249.427966][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 249.487850][ T4211] usb 3-1: device descriptor read/all, error -71 [ 249.771932][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 250.104373][ T6964] IPv6: Can't replace route, no match found [ 250.387817][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 250.399093][ T21] usb 2-1: too many configurations: 105, using maximum allowed: 8 [ 250.681391][ T21] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 250.701177][ T21] usb 2-1: can't read configurations, error -71 [ 251.494758][ T6982] loop0: detected capacity change from 0 to 40427 [ 251.617092][ T7000] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 251.631450][ T6982] F2FS-fs (loop0): Found nat_bits in checkpoint [ 251.703567][ T7010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.726240][ T6982] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 251.867820][ T4211] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 251.893831][ T7000] device veth7 entered promiscuous mode [ 251.927832][ T7000] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 252.882804][ T7022] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 254.008365][ T4169] attempt to access beyond end of device [ 254.008365][ T4169] loop0: rw=2049, want=45104, limit=40427 [ 254.138286][ T4215] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 254.735394][ T7035] loop2: detected capacity change from 0 to 128 [ 254.887982][ T4215] usb 2-1: Using ep0 maxpacket: 32 [ 254.895170][ T7035] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 254.913461][ T7035] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 254.922359][ T7035] FAT-fs (loop2): Filesystem has been set read-only [ 255.167052][ T4215] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 255.379260][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.385591][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.413216][ T4215] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 255.461811][ T4215] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.847982][ T23] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 255.918866][ T4215] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.090427][ T4215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.119367][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 256.198918][ T7039] IPv6: Can't replace route, no match found [ 256.285738][ T4215] usb 2-1: Product: 깹잩酞ꠒ敞ퟱ䫑炲₷׋蘈㾨媑퉨꩕᧕蓘陭൝짜㋩⻊뮺힐杕䁥眾蓩崈⯠澊ྰ㰅ṥ刦⚋㟛煭흯晲ꊡ嘴츗燶ᾪܖᦑ쎢ɂ醞们☔솛ꕢࠋ噔߻⒍ꈍ䠮朡֟⼡䵮셙쩦ﶍ打㲘偃쾽漊潊蛾螎髼ⵀ쿭튂逝퀡 [ 256.467890][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.475771][ T23] usb 5-1: too many configurations: 105, using maximum allowed: 8 [ 256.578028][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 256.585707][ T23] usb 5-1: can't read configurations, error -71 [ 256.597930][ T4215] usb 2-1: Manufacturer: 㰅韛Ἲ㸑빘獾檯䘆沣딅ᑎ朸ꜥఫᢒ纜ᚒ藹嚦ὤ哏䋜㛤﹦奮었齧鋴ᷭ줼⣡삸᳛⥐幝슐‒钯䏏콳둖ᅤ诊໢짆謯 [ 256.801165][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 256.811919][ T4215] usb 2-1: can't set config #1, error -71 [ 256.818958][ T4215] usb 2-1: USB disconnect, device number 14 [ 256.907488][ T7059] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 258.739947][ T7073] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 258.848918][ T7075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.924579][ T7073] device veth5 entered promiscuous mode [ 258.964238][ T7073] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 258.978034][ T4211] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 259.321711][ T7069] loop2: detected capacity change from 0 to 128 [ 259.338897][ T4211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.371030][ T4211] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 259.391030][ T7069] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 259.424686][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.459079][ T4211] usb 2-1: config 0 descriptor?? [ 259.469454][ T7069] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 259.489086][ T7069] FAT-fs (loop2): Filesystem has been set read-only [ 260.419995][ T4211] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 260.433388][ T4211] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input22 [ 260.817281][ T7] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 260.827773][ T7103] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 261.353280][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 261.734973][ T4211] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 262.652791][ T4213] usb 2-1: USB disconnect, device number 15 [ 262.787820][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 262.805068][ T7119] netlink: 'syz.1.928': attribute type 1 has an invalid length. [ 262.919610][ T7096] IPv6: Can't replace route, no match found [ 262.949227][ T7125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.967963][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 262.976042][ T7] usb 1-1: too many configurations: 105, using maximum allowed: 8 [ 263.025479][ T7119] device veth7 entered promiscuous mode [ 263.041296][ T7] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 263.049189][ T7] usb 1-1: can't read configurations, error -71 [ 263.068773][ T7119] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 263.426506][ T7120] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 263.442625][ T7120] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 264.604686][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 264.717918][ T7147] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 265.397950][ T7] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 265.647830][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 267.099443][ T7168] loop2: detected capacity change from 0 to 128 [ 267.226150][ T7168] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 267.237627][ T7168] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 267.246247][ T7168] FAT-fs (loop2): Filesystem has been set read-only [ 267.647737][ T4219] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 267.659748][ T4213] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 267.673537][ T7173] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 267.736546][ T7173] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.768113][ T7173] device veth9 entered promiscuous mode [ 267.813718][ T7173] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 267.867810][ T7] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 267.884908][ T7] usb 1-1: can't read configurations, error -71 [ 267.896113][ T7] usb usb1-port1: attempt power cycle [ 268.068031][ T4213] usb 2-1: Using ep0 maxpacket: 32 [ 268.132206][ T7181] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 268.272339][ T7181] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 268.310684][ T7166] IPv6: Can't replace route, no match found [ 268.448519][ T4213] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.493561][ T4213] usb 2-1: too many configurations: 105, using maximum allowed: 8 [ 268.764873][ T4219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.793899][ T4219] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.870032][ T4213] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 268.870273][ T4219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.880777][ T4213] usb 2-1: can't read configurations, error -71 [ 268.905591][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 268.937342][ T4219] usb 5-1: config 0 descriptor?? [ 268.970307][ T4219] usb 5-1: can't set config #0, error -71 [ 268.995078][ T4219] usb 5-1: USB disconnect, device number 18 [ 269.443897][ T7198] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 270.519487][ T7209] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 270.614834][ T7212] loop2: detected capacity change from 0 to 128 [ 270.646702][ T7212] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 270.658966][ T7212] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 270.667541][ T7212] FAT-fs (loop2): Filesystem has been set read-only [ 271.407747][ T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 271.499189][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 271.708099][ T7] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 271.716848][ T7] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 271.727587][ T13] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 272.584706][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.748032][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.762931][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.773156][ T7] usb 1-1: Product: 깹잩酞ꠒ敞ퟱ䫑炲₷׋蘈㾨媑퉨꩕᧕蓘陭൝짜㋩⻊뮺힐杕䁥眾蓩崈⯠澊ྰ㰅ṥ刦⚋㟛煭흯晲ꊡ嘴츗燶ᾪܖᦑ쎢ɂ醞们☔솛ꕢࠋ噔߻⒍ꈍ䠮朡֟⼡䵮셙쩦ﶍ打㲘偃쾽漊潊蛾螎髼ⵀ쿭튂逝퀡 [ 272.819192][ T7] usb 1-1: Manufacturer: 㰅韛Ἲ㸑빘獾檯䘆沣딅ᑎ朸ꜥఫᢒ纜ᚒ藹嚦ὤ哏䋜㛤﹦奮었齧鋴ᷭ줼⣡삸᳛⥐幝슐‒钯䏏콳둖ᅤ诊໢짆謯 [ 272.958680][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.003619][ T13] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.451740][ T7240] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 273.527826][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.562182][ T13] usb 2-1: config 0 descriptor?? [ 273.594602][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 273.648034][ T7] usb 1-1: 0:2 : does not exist [ 273.705964][ T7] usb 1-1: USB disconnect, device number 18 [ 275.022673][ T7259] device veth7 entered promiscuous mode [ 275.210231][ T13] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 275.221803][ T6288] udevd[6288]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.240426][ T13] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input23 [ 275.258553][ T21] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 275.329572][ T13] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 275.708298][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 275.790102][ T7258] IPv6: Can't replace route, no match found [ 276.018462][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 276.092595][ T21] usb 5-1: too many configurations: 105, using maximum allowed: 8 [ 276.341159][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 276.362371][ T21] usb 5-1: can't read configurations, error -71 [ 276.466463][ T4213] usb 2-1: USB disconnect, device number 18 [ 276.603093][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 276.757844][ T4245] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 276.837500][ T7271] loop2: detected capacity change from 0 to 40427 [ 276.940027][ T7271] F2FS-fs (loop2): Found nat_bits in checkpoint [ 277.050751][ T7296] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 277.787919][ T4245] usb 1-1: Using ep0 maxpacket: 32 [ 277.791710][ T7271] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 277.998266][ T4245] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 278.017597][ T4245] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 279.185444][ T7312] device veth11 entered promiscuous mode [ 279.342484][ T4245] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.507964][ T4245] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.527350][ T4245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.539254][ T4245] usb 1-1: Product: 깹잩酞ꠒ敞ퟱ䫑炲₷׋蘈㾨媑퉨꩕᧕蓘陭൝짜㋩⻊뮺힐杕䁥眾蓩崈⯠澊ྰ㰅ṥ刦⚋㟛煭흯晲ꊡ嘴츗燶ᾪܖᦑ쎢ɂ醞们☔솛ꕢࠋ噔߻⒍ꈍ䠮朡֟⼡䵮셙쩦ﶍ打㲘偃쾽漊潊蛾螎髼ⵀ쿭튂逝퀡 [ 279.881964][ T7322] IPv6: Can't replace route, no match found [ 280.460647][ T7332] loop1: detected capacity change from 0 to 256 [ 280.478197][ T4245] usb 1-1: Manufacturer: 㰅韛Ἲ㸑빘獾檯䘆沣딅ᑎ朸ꜥఫᢒ纜ᚒ藹嚦ὤ哏䋜㛤﹦奮었齧鋴ᷭ줼⣡삸᳛⥐幝슐‒钯䏏콳둖ᅤ诊໢짆謯 [ 280.518048][ T4245] usb 1-1: can't set config #1, error -71 [ 280.528604][ T4245] usb 1-1: USB disconnect, device number 19 [ 280.840202][ T7338] loop4: detected capacity change from 0 to 128 [ 280.853129][ T7335] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 280.892916][ T7338] FAT-fs (loop4): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 280.902683][ T4245] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 280.902723][ T7338] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 280.919786][ T7338] FAT-fs (loop4): Filesystem has been set read-only [ 282.297982][ T4245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.328753][ T4245] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.347736][ T4245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.376657][ T4245] usb 1-1: config 0 descriptor?? [ 282.463053][ T7357] device veth11 entered promiscuous mode [ 282.636239][ T7343] loop1: detected capacity change from 0 to 40427 [ 282.657896][ T4219] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 282.904372][ T4245] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 282.913848][ T4219] usb 5-1: Using ep0 maxpacket: 32 [ 282.922638][ T7343] F2FS-fs (loop1): Found nat_bits in checkpoint [ 282.929601][ T4245] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input24 [ 283.260080][ T7343] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 283.870317][ T4245] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 283.902957][ T7379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.559902][ T4219] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 284.575031][ T4219] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 284.579399][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 284.593262][ T4219] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.618519][ T4168] attempt to access beyond end of device [ 284.618519][ T4168] loop1: rw=2049, want=45104, limit=40427 [ 284.888127][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 284.969445][ T7375] IPv6: Can't replace route, no match found [ 285.088664][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.378290][ T23] usb 3-1: too many configurations: 105, using maximum allowed: 8 [ 285.397862][ T5558] usb 1-1: USB disconnect, device number 20 [ 285.548030][ T4219] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.557140][ T4219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.568298][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 285.575970][ T23] usb 3-1: can't read configurations, error -71 [ 285.586609][ T7391] fido_id[7391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 285.611340][ T4219] usb 5-1: Product: 깹잩酞ꠒ敞ퟱ䫑炲₷׋蘈㾨媑퉨꩕᧕蓘陭൝짜㋩⻊뮺힐杕䁥眾蓩崈⯠澊ྰ㰅ṥ刦⚋㟛煭흯晲ꊡ嘴츗燶ᾪܖᦑ쎢ɂ醞们☔솛ꕢࠋ噔߻⒍ꈍ䠮朡֟⼡䵮셙쩦ﶍ打㲘偃쾽漊潊蛾螎髼ⵀ쿭튂逝퀡 [ 285.679726][ T4219] usb 5-1: can't set config #1, error -71 [ 285.703744][ T4219] usb 5-1: USB disconnect, device number 21 [ 285.896438][ T7395] device veth11 entered promiscuous mode [ 285.929460][ T7405] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 287.142060][ T7413] loop1: detected capacity change from 0 to 128 [ 287.443888][ T7413] FAT-fs (loop1): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 287.455954][ T7413] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 287.464790][ T7413] FAT-fs (loop1): Filesystem has been set read-only [ 288.987041][ T7433] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 288.993595][ T7433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 289.001595][ T7433] vhci_hcd vhci_hcd.0: Device attached [ 289.274563][ T5558] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 289.277821][ T7] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 289.290201][ T4219] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 289.547956][ T4219] usb 1-1: Using ep0 maxpacket: 32 [ 289.600813][ T7434] vhci_hcd: connection reset by peer [ 289.611095][ T4234] vhci_hcd: stop threads [ 289.619204][ T4234] vhci_hcd: release socket [ 289.636127][ T4234] vhci_hcd: disconnect device [ 289.748182][ T4219] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 289.764619][ T4219] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 289.803629][ T4219] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.998401][ T4219] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.017508][ T4219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.053844][ T4219] usb 1-1: Product: 깹잩酞ꠒ敞ퟱ䫑炲₷׋蘈㾨媑퉨꩕᧕蓘陭൝짜㋩⻊뮺힐杕䁥眾蓩崈⯠澊ྰ㰅ṥ刦⚋㟛煭흯晲ꊡ嘴츗燶ᾪܖᦑ쎢ɂ醞们☔솛ꕢࠋ噔߻⒍ꈍ䠮朡֟⼡䵮셙쩦ﶍ打㲘偃쾽漊潊蛾螎髼ⵀ쿭튂逝퀡 [ 290.198448][ T4219] usb 1-1: Manufacturer: 㰅韛Ἲ㸑빘獾檯䘆沣딅ᑎ朸ꜥఫᢒ纜ᚒ藹嚦ὤ哏䋜㛤﹦奮었齧鋴ᷭ줼⣡삸᳛⥐幝슐‒钯䏏콳둖ᅤ诊໢짆謯 [ 290.323485][ T7443] device veth13 entered promiscuous mode [ 290.509550][ T7449] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 290.738271][ T5558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.846953][ T5558] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.997575][ T5558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.191994][ T5558] usb 5-1: config 0 descriptor?? [ 291.367972][ T4219] usb 1-1: 0:2 : does not exist [ 291.406061][ T4219] usb 1-1: USB disconnect, device number 21 [ 292.658908][ T5558] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 292.727489][ T5558] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input25 [ 292.759073][ T7470] tap0: tun_chr_ioctl cmd 1074025680 [ 292.873433][ T5558] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 293.034648][ T7478] loop2: detected capacity change from 0 to 16 [ 293.060076][ T6288] udevd[6288]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.238371][ T7478] erofs: (device loop2): mounted with root inode @ nid 36. [ 293.329602][ T7478] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 293.350055][ T7478] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 293.363266][ T7478] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 293.677166][ T7479] Invalid ELF header type: 3 != 1 [ 294.337749][ T13] usb 5-1: USB disconnect, device number 22 [ 294.407863][ T7] vhci_hcd: vhci_device speed not set [ 295.900699][ T7481] fido_id[7481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 296.201303][ T7496] loop2: detected capacity change from 0 to 512 [ 296.425437][ T7496] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 296.434801][ T13] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 296.846835][ T7496] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 297.198443][ T7496] __quota_error: 21 callbacks suppressed [ 297.198462][ T7496] Quota error (device loop2): write_blk: dquota write failed [ 297.263491][ T7496] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 297.328030][ T7496] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.1041: Failed to acquire dquot type 0 [ 297.369602][ T7496] EXT4-fs (loop2): 1 truncate cleaned up [ 297.375312][ T7496] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,min_batch_time=0x0000000000000004,sb=0x000000007fffffff,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 297.527808][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 298.340101][ T7491] IPv6: Can't replace route, no match found [ 298.418377][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 298.426833][ T13] usb 5-1: too many configurations: 105, using maximum allowed: 8 [ 298.520783][ T13] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 298.545621][ T13] usb 5-1: can't read configurations, error -71 [ 299.675376][ T7525] netlink: 'syz.3.1050': attribute type 1 has an invalid length. [ 299.793833][ T7531] loop2: detected capacity change from 0 to 128 [ 299.859512][ T7531] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 301.214243][ T7545] loop1: detected capacity change from 0 to 128 [ 302.000133][ T7525] device veth15 entered promiscuous mode [ 302.009993][ T7138] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 302.013447][ T7545] FAT-fs (loop1): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 302.037808][ T7545] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 302.046429][ T7545] FAT-fs (loop1): Filesystem has been set read-only [ 302.246271][ T7553] IPv6: Can't replace route, no match found [ 302.413670][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 302.607857][ T13] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 302.800137][ T7547] loop0: detected capacity change from 0 to 40427 [ 302.808784][ T7571] loop4: detected capacity change from 0 to 16 [ 302.956260][ T7571] erofs: (device loop4): mounted with root inode @ nid 36. [ 303.747842][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.768129][ T7577] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 303.926291][ T7581] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 303.990353][ T7547] F2FS-fs (loop0): Found nat_bits in checkpoint [ 304.649654][ T7577] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 304.663439][ T7577] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 304.741901][ T7582] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 304.798011][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 304.817725][ T13] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 304.865734][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.936795][ T13] usb 2-1: config 0 descriptor?? [ 305.010938][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 305.039299][ T7582] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.081453][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 305.113661][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 305.127832][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 305.227537][ T7582] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.237381][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 305.272767][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 306.147167][ T13] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 306.153250][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 306.158122][ T13] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input26 [ 306.197794][ T7582] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 306.207476][ T7599] IPVS: Error connecting to the multicast addr [ 306.228140][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 306.269624][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 306.270175][ T13] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 306.407986][ T7604] loop2: detected capacity change from 0 to 64 [ 307.150550][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 307.160071][ T7582] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 307.169816][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 307.216378][ T7582] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 307.238394][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 307.269899][ T7582] attempt to access beyond end of device [ 307.269899][ T7582] loop4: rw=524288, want=848, limit=16 [ 307.285706][ T7582] attempt to access beyond end of device [ 307.285706][ T7582] loop4: rw=524288, want=13478624104, limit=16 [ 307.310499][ T7582] attempt to access beyond end of device [ 307.310499][ T7582] loop4: rw=524288, want=13478624080, limit=16 [ 307.472992][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 307.482338][ T7582] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 307.538776][ T4213] usb 2-1: USB disconnect, device number 19 [ 307.542652][ T7582] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 307.595313][ T7582] attempt to access beyond end of device [ 307.595313][ T7582] loop4: rw=524288, want=32, limit=16 [ 307.614646][ T7582] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[3537] [ 307.628287][ T7582] ================================================================== [ 307.636822][ T7582] BUG: KASAN: vmalloc-out-of-bounds in hex_dump_to_buffer+0x3c0/0xd50 [ 307.645011][ T7582] Read of size 1 at addr ffffc90002e36000 by task syz.4.1066/7582 [ 307.652839][ T7582] [ 307.655185][ T7582] CPU: 0 PID: 7582 Comm: syz.4.1066 Not tainted 5.15.184-syzkaller #0 [ 307.663381][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.673469][ T7582] Call Trace: [ 307.676781][ T7582] [ 307.679734][ T7582] dump_stack_lvl+0x168/0x230 [ 307.684455][ T7582] ? show_regs_print_info+0x20/0x20 [ 307.689682][ T7582] ? _printk+0xcc/0x110 [ 307.693857][ T7582] ? hex_dump_to_buffer+0x3c0/0xd50 [ 307.699075][ T7582] ? load_image+0x3b0/0x3b0 [ 307.703798][ T7582] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 307.709204][ T7582] print_address_description+0x60/0x2d0 [ 307.714789][ T7582] ? hex_dump_to_buffer+0x3c0/0xd50 [ 307.720021][ T7582] kasan_report+0xdf/0x130 [ 307.724470][ T7582] ? hex_dump_to_buffer+0x3c0/0xd50 [ 307.729701][ T7582] hex_dump_to_buffer+0x3c0/0xd50 [ 307.734778][ T7582] print_hex_dump+0x136/0x260 [ 307.739489][ T7582] ? hex_dump_to_buffer+0xd50/0xd50 [ 307.744743][ T7582] z_erofs_lz4_decompress+0xc7f/0x1180 [ 307.750266][ T7582] z_erofs_decompress+0x767/0xde0 [ 307.755312][ T7582] ? lock_chain_count+0x20/0x20 [ 307.760158][ T7582] ? z_erofs_put_shortlivedpage+0x16a/0x3c0 [ 307.766067][ T7582] z_erofs_decompress_queue+0x11a6/0x1990 [ 307.771788][ T7582] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 307.777616][ T7582] ? z_erofs_decompress_kickoff+0x2b9/0x2e0 [ 307.783496][ T7582] ? submit_bio+0x2be/0x560 [ 307.788003][ T7582] ? submit_bio_noacct+0x6d0/0x6d0 [ 307.793097][ T7582] ? bio_add_page+0x2d6/0x460 [ 307.797770][ T7582] z_erofs_runqueue+0x164c/0x1890 [ 307.802836][ T7582] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 307.808406][ T7582] ? mutex_unlock+0x10/0x10 [ 307.812895][ T7582] z_erofs_readahead+0xb81/0x10c0 [ 307.817922][ T7582] ? z_erofs_readpage+0x6c0/0x6c0 [ 307.823077][ T7582] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 307.829060][ T7582] ? local_lock_release+0x97/0x170 [ 307.834170][ T7582] read_pages+0x165/0x920 [ 307.838511][ T7582] ? page_cache_ra_unbounded+0x930/0x930 [ 307.844158][ T7582] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 307.849606][ T7582] page_cache_ra_unbounded+0x830/0x930 [ 307.855058][ T7582] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 307.861565][ T7582] ? lockdep_hardirqs_on+0x94/0x140 [ 307.866791][ T7582] force_page_cache_ra+0x3e5/0x440 [ 307.871890][ T7582] generic_fadvise+0x520/0x7d0 [ 307.876639][ T7582] ? dump_task+0x600/0x600 [ 307.881064][ T7582] ? __fdget+0x18b/0x210 [ 307.885316][ T7582] __x64_sys_fadvise64+0x139/0x180 [ 307.890411][ T7582] do_syscall_64+0x4c/0xa0 [ 307.894805][ T7582] ? clear_bhb_loop+0x30/0x80 [ 307.899477][ T7582] ? clear_bhb_loop+0x30/0x80 [ 307.904164][ T7582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.910048][ T7582] RIP: 0033:0x7f03fdebb969 [ 307.914469][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.934077][ T7582] RSP: 002b:00007f03fbce1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 307.942498][ T7582] RAX: ffffffffffffffda RBX: 00007f03fe0e3160 RCX: 00007f03fdebb969 [ 307.950491][ T7582] RDX: 0000000000020000 RSI: 000000000000fcff RDI: 0000000000000009 [ 307.958465][ T7582] RBP: 00007f03fdf3dab1 R08: 0000000000000000 R09: 0000000000000000 [ 307.966450][ T7582] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 307.974401][ T7582] R13: 0000000000000000 R14: 00007f03fe0e3160 R15: 00007ffd4ccf85b8 [ 307.982383][ T7582] [ 307.985413][ T7582] [ 307.987898][ T7582] [ 307.990225][ T7582] Memory state around the buggy address: [ 307.995852][ T7582] ffffc90002e35f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.003908][ T7582] ffffc90002e35f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.011964][ T7582] >ffffc90002e36000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 308.020017][ T7582] ^ [ 308.024105][ T7582] ffffc90002e36080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 308.032168][ T7582] ffffc90002e36100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 308.040395][ T7582] ================================================================== [ 308.048462][ T7582] Disabling lock debugging due to kernel taint [ 308.054777][ T7582] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 308.061971][ T7582] CPU: 0 PID: 7582 Comm: syz.4.1066 Tainted: G B 5.15.184-syzkaller #0 [ 308.071508][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.081543][ T7582] Call Trace: [ 308.084804][ T7582] [ 308.087722][ T7582] dump_stack_lvl+0x168/0x230 [ 308.092390][ T7582] ? show_regs_print_info+0x20/0x20 [ 308.097592][ T7582] ? load_image+0x3b0/0x3b0 [ 308.102081][ T7582] panic+0x2c9/0x7f0 [ 308.105973][ T7582] ? asm_common_interrupt+0x22/0x40 [ 308.111154][ T7582] ? bpf_jit_dump+0xd0/0xd0 [ 308.115731][ T7582] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 308.121603][ T7582] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 308.127481][ T7582] ? _raw_spin_unlock+0x40/0x40 [ 308.132435][ T7582] ? hex_dump_to_buffer+0x3c0/0xd50 [ 308.137642][ T7582] check_panic_on_warn+0x80/0xa0 [ 308.142569][ T7582] ? hex_dump_to_buffer+0x3c0/0xd50 [ 308.147754][ T7582] end_report+0x6d/0xf0 [ 308.151892][ T7582] kasan_report+0x102/0x130 [ 308.156460][ T7582] ? hex_dump_to_buffer+0x3c0/0xd50 [ 308.161648][ T7582] hex_dump_to_buffer+0x3c0/0xd50 [ 308.166653][ T7582] print_hex_dump+0x136/0x260 [ 308.171314][ T7582] ? hex_dump_to_buffer+0xd50/0xd50 [ 308.176495][ T7582] z_erofs_lz4_decompress+0xc7f/0x1180 [ 308.181934][ T7582] z_erofs_decompress+0x767/0xde0 [ 308.186936][ T7582] ? lock_chain_count+0x20/0x20 [ 308.191762][ T7582] ? z_erofs_put_shortlivedpage+0x16a/0x3c0 [ 308.197632][ T7582] z_erofs_decompress_queue+0x11a6/0x1990 [ 308.203346][ T7582] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 308.209143][ T7582] ? z_erofs_decompress_kickoff+0x2b9/0x2e0 [ 308.215010][ T7582] ? submit_bio+0x2be/0x560 [ 308.219512][ T7582] ? submit_bio_noacct+0x6d0/0x6d0 [ 308.224599][ T7582] ? bio_add_page+0x2d6/0x460 [ 308.229273][ T7582] z_erofs_runqueue+0x164c/0x1890 [ 308.234277][ T7582] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 308.239814][ T7582] ? mutex_unlock+0x10/0x10 [ 308.244327][ T7582] z_erofs_readahead+0xb81/0x10c0 [ 308.249341][ T7582] ? z_erofs_readpage+0x6c0/0x6c0 [ 308.254373][ T7582] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 308.260338][ T7582] ? local_lock_release+0x97/0x170 [ 308.265427][ T7582] read_pages+0x165/0x920 [ 308.269736][ T7582] ? page_cache_ra_unbounded+0x930/0x930 [ 308.275357][ T7582] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 308.280796][ T7582] page_cache_ra_unbounded+0x830/0x930 [ 308.286515][ T7582] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 308.292992][ T7582] ? lockdep_hardirqs_on+0x94/0x140 [ 308.298178][ T7582] force_page_cache_ra+0x3e5/0x440 [ 308.303292][ T7582] generic_fadvise+0x520/0x7d0 [ 308.308050][ T7582] ? dump_task+0x600/0x600 [ 308.312443][ T7582] ? __fdget+0x18b/0x210 [ 308.316661][ T7582] __x64_sys_fadvise64+0x139/0x180 [ 308.321751][ T7582] do_syscall_64+0x4c/0xa0 [ 308.326167][ T7582] ? clear_bhb_loop+0x30/0x80 [ 308.330827][ T7582] ? clear_bhb_loop+0x30/0x80 [ 308.335501][ T7582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.341372][ T7582] RIP: 0033:0x7f03fdebb969 [ 308.345783][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.365378][ T7582] RSP: 002b:00007f03fbce1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 308.373806][ T7582] RAX: ffffffffffffffda RBX: 00007f03fe0e3160 RCX: 00007f03fdebb969 [ 308.381770][ T7582] RDX: 0000000000020000 RSI: 000000000000fcff RDI: 0000000000000009 [ 308.389720][ T7582] RBP: 00007f03fdf3dab1 R08: 0000000000000000 R09: 0000000000000000 [ 308.397673][ T7582] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 308.405734][ T7582] R13: 0000000000000000 R14: 00007f03fe0e3160 R15: 00007ffd4ccf85b8 [ 308.413692][ T7582] [ 308.416874][ T7582] Kernel Offset: disabled [ 308.426618][ T7582] Rebooting in 86400 seconds..