last executing test programs: 2.953351074s ago: executing program 3 (id=92): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xf031, 0x10, 0xfffffffc, 0x151, 0x0, r2}, 0x0, 0x1, 0x0, 0x0) syz_ublk_process_io(0x0, 0x2, 0x8, 0x0, 0x1) 2.818046508s ago: executing program 3 (id=94): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="290288ac4d770dd953f7fa7534f3c73cc21e1beedba555dee2095863cb6ddd2179d7a0c65bcb1b99a8041996038bec5a13ecb4ef64431583554ec5162f030e1b4855c0d162da72db7b01878b849fc5e2dff7ac3d012ea6b5c805d3e6411a46096005b07235e5c504f9e485e05ddda0c62263d5003962ef720e1d9f8810457154a1d378207d118456da7bbc965ea2fd7f24be"}, {&(0x7f0000000100)="647bbd91424f1e8a897a38c6926dbc3a"}, {&(0x7f0000000200)="f84cc67aad65bb2a26656f47b4177f20cf556169729cc68c0f4f7cd14bb97a291f0e83d1dc6a57b0bc996c2b80fb0231fcf11bc9d5e9caf6cd59860e2c567e95b1532e9b2d32b2a9944caa289fac2c732722b797373ee57824ee4672c8bb1d9546a45621e262ef00a4"}, {&(0x7f0000000280)="6ca827ab5ff587c25583970974d4cab0b1cfc9b49c94f5b43333c0040a52a28089d003075763745f6b36b4a0bdb9"}], 0x0, &(0x7f00000008c0)=[@rthdr_2292={{0x0, 0x29, 0x39, {0x2e, 0x0, 0x0, 0x1f, 0x0, [@empty, @local, @private1, @local, @remote, @empty, @loopback, @local, @mcast2, @empty]}}}, @flowinfo={{0x0, 0x29, 0xb, 0x1}}, @flowinfo={{0x0, 0x29, 0xb, 0x7}}, @tclass={{0x0, 0x29, 0x43, 0x7f}}, @hopopts={{0x0, 0x29, 0x36, {0x6, 0x0, '\x00', [@calipso={0x7, 0x0, {0x0, 0x0, 0xd7, 0x3, [0x1]}}, @ra={0x5, 0x2, 0x8}, @generic={0x0, 0x0, "085b0b318354e5082a9355bf591e72614f4fa53a44dc2a4f0e296eabb5ffd758531ab6025ce0f0b7abe1bb9e26f1cdd2411c3d040a879dd5bcf7b9972cf38482e9ff0d66e99b73f1b67580b3f1184c92f2a267be4ffeaab53cde10078b9443a8be1cad217e68377845671713491a746fff07000082dc354d7cc1bdac59baa30fa77d25b07715d79351a591fcd3ace081b9"}, @ra={0x5, 0x2, 0x7}]}}}, @tclass={{0x0, 0x29, 0x43, 0x4}}]}}, {{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000600)=[@hopopts={{0x0, 0x29, 0x36, {0x67, 0x0, '\x00', [@padn={0x1, 0x0, [0x0, 0x0]}, @hao={0xc9, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @calipso={0x7, 0x0, {0x1, 0x0, 0xe0, 0x4, [0x9, 0x7, 0x5, 0x3, 0xffffffffffffffff, 0x2f9, 0x5, 0xfffffffffffffffc, 0x9]}}, @pad1, @generic={0xe, 0x0, "83a37127c961a6d9476c8c3440d20040c64285636bee7a81467e8395e6931c8e4115147c3d778fd9bbdbd539d6542431ebd1fa1784d2e8a118d5995787dc8e7c52917da932f124d1d7a485"}]}}}, @dstopts_2292={{0x0, 0x29, 0x4, {0x67, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}]}}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x2b, 0x0, 0x0, 0xe8, 0x0, [@remote, @private2, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hoplimit={{0x0, 0x29, 0x34, 0x3}}, @pktinfo={{0x0, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x88, 0x0, 0x0, 0xe, 0x0, [@rand_addr=' \x01\x00', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, @empty, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}]}}}]}}], 0x4000129, 0x20e8086) sendto$inet6(r0, &(0x7f0000000180)="e4eba9c15d1ee9eb1913bcf106c6b1bb86172d891122171bc44f929c668058cce40ea87402e90200518ed4516e2d4fbc906d645a81939dfb0000959ce7e19237140c51c44c", 0x45, 0x800, 0x0, 0x0) 2.705311231s ago: executing program 3 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xf4240) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000000000, &(0x7f0000001000/0x1000)=nil}) 2.591792763s ago: executing program 3 (id=100): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'veth1_to_bond\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @random="22778b0a4552"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) 2.528268945s ago: executing program 3 (id=103): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x40, 0x1, 0xfd, {0xfd, 0x11, "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"}}, &(0x7f0000000280)={0x0, 0x3, 0x28, @string={0x28, 0x3, "5caa343423a497cebb808401fcacba344cb66083a85da109f857e6e1b73b5e5f92511a4ebb1b"}}, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x10, 0xb5, 0xa, 0x3, 0x41, 0xfff7}}}, &(0x7f0000000880)={0x84, 0x0, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f00000005c0)={0x40, 0x7, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000640)={0x40, 0xb, 0x2, "ac92"}, &(0x7f0000000080)={0x40, 0xf, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.527985865s ago: executing program 1 (id=104): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = eventfd2(0x3, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) 2.490662176s ago: executing program 1 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x3}], 0x1d, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000010c0)="0f01f60faa66b9430b00000f320f01c83e0f017a0b66b8000000000f23c80f21f866350c00f0000f23f80f20c06635000001000f22c00f01ca66b9ad0b000066b8a000000066ba000000000f30b8200c8ee0", 0x52}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.404710748s ago: executing program 1 (id=108): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000c40)={0x1c, &(0x7f0000000100)={0x40, 0x1, 0x7, "ba1aaf540e8730"}, 0x0, 0x0}) 2.306995601s ago: executing program 2 (id=111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x14, 0x5e, 0x0, 0x20000d, 0xff, 0xc1, 0x3, 0x5, 0x5, 0x6, 0x5, 0x0, 0x8001, 0x8, 0x20, 0x6, 0x3, 0x4, '\x00', 0x7, 0xff}) 2.190936544s ago: executing program 2 (id=114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="66b9800000c00f326635000800000f30b809008ee07300baf80c66b87ca0338b66efbafc0c66ed0f01c90f01c20f83f0fb66b8bb9000000f23c80f21f86635000060000f23f8d9c50f796400", 0x4c}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.064201377s ago: executing program 2 (id=118): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff4) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 2.037454307s ago: executing program 2 (id=120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x27, 0x61, 0x66, 0x0, 0x2, 0x11, 0x0, @private=0xa010100, @local}, {0x4e23, 0x4e23, 0x4d, 0x0, @opaque="bac38f40abaf2177c82ca72a222d26da53fdcfd5d66b3a6f5aadfbfb3592e1055d97cdbbec4985ab2324ac9ced7b234f6129b7dcf10abdcb148e701641b4c3a4c6f124a369"}}}}}}, 0x77) 1.920533091s ago: executing program 2 (id=123): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x2000006, 0x10003) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 1.903072571s ago: executing program 2 (id=124): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x11, 0x9, 0x0, 0x14, 0x604, 0x823c, 0xc, 0x400, 0xfffd, 0x4, 0xe1, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 540.894815ms ago: executing program 3 (id=143): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) gettid() ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000001580)={{0x3, 0x381, 0x75f, 0x8, 0x9, 0x1ff}, 0x2ad, [0xc94, 0x7fff, 0x3, 0x9, 0x6, 0x6d4d, 0xfa47, 0x0, 0x80000000, 0x6, 0x0, 0x9, 0x41, 0x1, 0x7, 0x35, 0x1, 0x3, 0x0, 0xec05, 0x4, 0x1, 0x2, 0x1, 0x4, 0x400, 0x7, 0x3, 0x3, 0xffff, 0xa0, 0x10, 0x1, 0x8, 0x3, 0x6, 0xffff, 0x8, 0x3c, 0x5, 0x3, 0x2, 0x81, 0x4, 0x0, 0xfffffeff, 0x6, 0x9, 0x7, 0x9, 0x8, 0x76c0, 0x1, 0x0, 0x8001, 0xd, 0x3, 0xa, 0xc5da, 0x2, 0x3, 0xfffffffd, 0x3, 0x9, 0xa, 0x8001, 0xc, 0x1, 0xe, 0x3, 0x20, 0x70, 0x5, 0x9, 0x7, 0xb, 0x2, 0x6, 0xfffffff2, 0x7, 0x80, 0x4, 0x7a3d, 0x8, 0x8e, 0x7, 0x1, 0x0, 0x1, 0x7, 0xe1, 0x8d0, 0x29c3281d, 0x354e, 0x6, 0x77b, 0x8, 0x7, 0x8, 0x8, 0x6, 0xffffb3e8, 0x5, 0x947, 0x401, 0x6, 0x8, 0x4, 0x42, 0x80000001, 0x2, 0x317, 0x3, 0x10, 0x1, 0x4, 0x1, 0x9, 0x8, 0x5, 0x101, 0xcb2, 0x2, 0x28, 0x7, 0x8001, 0xe1, 0x40000, 0x3, 0xc3, 0x0, 0x60000, 0x401, 0x2, 0x76e, 0x4a, 0x9, 0x7ff, 0x1, 0xc4aa, 0x800, 0x4, 0x8, 0x80000000, 0x7ed9, 0x7fffffff, 0x869d, 0x0, 0x6, 0x3, 0x4, 0x0, 0x2, 0x0, 0x1, 0x6, 0x9, 0xcce, 0x2, 0x7, 0xf, 0x9, 0x6, 0x2, 0xfc8, 0x5, 0x5, 0x1, 0xfffffffb, 0x0, 0xf1, 0x0, 0x6, 0x7f, 0xcce, 0x7, 0x3, 0xe97, 0x3f, 0x9, 0x2, 0x3, 0x81, 0x2, 0x7ff, 0x7f, 0x9, 0x3, 0x8, 0xffffffff, 0x2, 0x7fffffff, 0xab4, 0xb14d, 0x7, 0xffffffff, 0xbd63, 0xfffffff8, 0x2, 0x0, 0x4, 0x7, 0x5, 0x5e9a, 0x4, 0x5, 0x5, 0x4, 0x7, 0x743e, 0x6, 0x9, 0x8001, 0x1, 0x6, 0x0, 0x0, 0x81, 0x7, 0x0, 0x339, 0x1, 0x800, 0x5, 0x2, 0x6, 0x0, 0x4, 0xca1, 0x0, 0x6b46, 0xff, 0x7, 0x8, 0xb94, 0x1, 0x7ff, 0xe000000, 0x7, 0x7, 0xffff0001, 0x9, 0xdb, 0x7fffffff, 0xb, 0x9, 0x127, 0x8, 0x5, 0x99f3, 0xfffffd55, 0x9, 0x0, 0x5, 0x1, 0xff, 0xe, 0x3, 0x5, 0x5, 0x2, 0x6, 0x800, 0x4, 0xba, 0xff, 0x9, 0x8, 0xa3, 0x7, 0x0, 0x1e9, 0x8, 0x7, 0x8000, 0x400, 0x4, 0x4, 0xa, 0x5, 0xe, 0x8, 0x2, 0x861, 0x3, 0x6, 0x10000, 0x7, 0x1, 0x8, 0x8, 0x7, 0x1dc0, 0x3, 0x7, 0x9, 0x3d21, 0x2, 0xff, 0x46, 0x4, 0x0, 0x6, 0x4, 0xb, 0x400, 0x1ff, 0xce, 0x5, 0x1, 0xffffffc0, 0x2, 0x1, 0x10001, 0x8, 0x7fffffff, 0x9, 0x30, 0x1ff, 0xe, 0x74, 0x571, 0x5, 0xa, 0xf, 0x0, 0x6, 0xc, 0x4, 0x1, 0x1000, 0xe44c, 0x37, 0x80, 0xe8e, 0x5, 0xfffffff7, 0x8, 0xffffff01, 0x76, 0x4, 0x5, 0x4, 0x0, 0x7fff, 0x2, 0x6, 0x5, 0x1, 0x6, 0xfff, 0x51b7, 0x8, 0x1, 0x81, 0xd, 0xffffffff, 0xfffffff9, 0x8, 0x92, 0x0, 0x7, 0x8, 0x61, 0x8, 0x2, 0x0, 0x3, 0x2, 0x1, 0xfffffffe, 0xa919, 0x99, 0x5, 0x3800000, 0x3, 0x3, 0x1c, 0x7, 0xe, 0xbb, 0x8, 0x3, 0x0, 0x6, 0x7f, 0xf992, 0x6, 0x9, 0xfff, 0x3, 0x3, 0x4, 0x38c0, 0xffffe11b, 0x10001, 0x0, 0x5, 0x2, 0x200, 0x62, 0x4, 0x7, 0xfffff8ff, 0x9, 0xffffffc0, 0x1000, 0x80, 0x2, 0x31ed, 0x93, 0x4, 0x1, 0x80000000, 0x7ff, 0x1, 0x400, 0x2a35c, 0xff, 0x4, 0x0, 0xfffffc00, 0x3, 0x81, 0x9, 0x1, 0xf49, 0x101, 0x40, 0x1, 0x7, 0x9, 0x9, 0x200, 0xffffc4d4, 0x5, 0xd, 0x0, 0xe3e, 0x7, 0x0, 0x1, 0x0, 0x3ff, 0xe4b, 0x6, 0x0, 0x245, 0x2, 0x30000, 0x9, 0x50b7a143, 0x1, 0x59, 0xfea5, 0x100, 0xc000000, 0x3, 0x1c2, 0x9, 0x29, 0x2, 0x2, 0x3, 0x3, 0xfa, 0x5, 0x2, 0x8, 0xe21a, 0xc, 0xfffffffa, 0x5, 0x1, 0xe86, 0x6499, 0x8, 0x9, 0x5, 0x6, 0x7, 0x7fff, 0x0, 0x401, 0x5, 0x3dea, 0x59, 0xd4a, 0x9, 0x5, 0x9, 0x81, 0xfff, 0x0, 0x1, 0x9, 0x5, 0x3, 0x2, 0x9, 0x1, 0xce62, 0x80000000, 0x9824, 0x6, 0xa, 0x6, 0x4, 0x0, 0x6, 0x8, 0x3, 0x200, 0xfffffff7, 0x9, 0x1ff, 0x3, 0x0, 0xbfb7, 0x9, 0x7, 0x68e, 0xe, 0x6, 0x2, 0x7f, 0x2, 0x10, 0x9, 0x1, 0xb6, 0x0, 0x1, 0xfffffffd, 0xfff, 0x1d, 0xfffffffd, 0x80000000, 0x8a, 0x40, 0x0, 0xd31c, 0x40, 0x6, 0xfffffffe, 0x3, 0x4, 0x4, 0xfffff001, 0x5, 0xd729, 0x5, 0x4, 0x1, 0x0, 0x4, 0x6, 0x5, 0x8, 0x0, 0x1, 0x7, 0x7, 0x8, 0x7, 0xffff0af2, 0x0, 0x2, 0x80000000, 0x6, 0x7, 0x10000, 0x6, 0x7, 0x9, 0x0, 0x0, 0x6, 0xf6c, 0x7, 0x1, 0x0, 0x7, 0x80, 0x0, 0xf, 0x8, 0x80, 0x582abcd4, 0x9, 0x310, 0xc, 0x8, 0x8, 0x3, 0xa, 0x10000, 0x4, 0x101, 0x6, 0x6, 0x0, 0xff, 0x5c9, 0xfffffff7, 0x9, 0x69, 0x4, 0x8000, 0x8001, 0x7f, 0x7, 0x9, 0x5, 0x5b, 0x0, 0x7, 0x0, 0xf6c0, 0x4, 0x80000001, 0x855, 0xffffffff, 0x3, 0x9, 0xfffffeff, 0x3, 0x8, 0x9, 0x16ed4, 0xfffffffb, 0xa71e, 0x8, 0x6b, 0x1, 0x6, 0xa, 0x7, 0x3, 0xa, 0xe, 0x40, 0xe2a, 0x3, 0x7f, 0x8, 0x8, 0xfffffffa, 0x8, 0x5f4, 0x0, 0xbec, 0xc, 0xe, 0x4, 0x0, 0x48, 0x7ff, 0xe, 0x81, 0x3ff, 0x28, 0x2, 0x2, 0x9, 0x7, 0x8, 0xfffffff2, 0x9, 0x4a, 0xd, 0xffffffff, 0x0, 0x8, 0x7f, 0x8, 0x8, 0x5, 0x6, 0x7ff, 0xbe, 0x0, 0x1, 0x1, 0x401, 0x6, 0x5, 0x773, 0xfffffff4, 0x3, 0x7fffffff, 0x10000, 0x1ff, 0x1, 0x1, 0x53c, 0x6, 0xb10, 0xfffffffd, 0x80, 0x1, 0x0, 0x4, 0xff28, 0x4, 0xff8c, 0x0, 0x3, 0x6, 0x3, 0x200, 0x81, 0x47, 0x5, 0x9, 0xeed90000, 0x4, 0x6000000, 0x7, 0x40, 0x4, 0x10000, 0x5, 0x0, 0x0, 0x9, 0x5, 0x21, 0xaa, 0x3ff, 0x0, 0x10, 0x4, 0xa, 0x80, 0x82, 0x6400, 0x0, 0x1746, 0x53c, 0x8, 0x6, 0x0, 0x3, 0xc8, 0x4, 0x1, 0x6, 0xa, 0x90fd, 0x4, 0xffff8000, 0x1ff, 0x6, 0x171, 0x9, 0xa, 0x5, 0x10001, 0x6, 0x5, 0x2, 0x7, 0x0, 0x1, 0x4, 0x8, 0x3, 0x41, 0x3, 0x0, 0x4, 0x2, 0x3, 0xe4, 0x9, 0x9, 0x40, 0x1, 0x3, 0x1, 0xb, 0x8, 0x0, 0x73, 0x81, 0x7, 0x7, 0x9, 0x3, 0x9, 0x4251, 0xfffffffd, 0x8001, 0x3, 0x3, 0x1000, 0xe137, 0x80000000, 0x9, 0xb, 0x3, 0x1, 0xff, 0x3, 0xff, 0x6, 0x1, 0x80, 0x0, 0x1, 0x5, 0x1000, 0x8, 0x1ff, 0x200, 0x1, 0xd, 0x8, 0x1ff, 0x3, 0x5, 0x20000, 0x7, 0x0, 0xe87, 0x2, 0x6, 0x4, 0x6, 0x4, 0x8, 0xc, 0xb7, 0xdc3a, 0xd, 0x8, 0xa, 0x0, 0x5, 0x101, 0x16f0, 0x10000, 0x7fa, 0x7, 0x7, 0x1, 0xf, 0x2, 0x9, 0x5a8, 0xe, 0x1, 0x7f, 0x3, 0x9, 0x7fff, 0x8000, 0xae, 0x401, 0x6, 0x4, 0x9, 0x3, 0x43a1cd2c, 0x5bd, 0x1, 0xfffffffe, 0x2, 0x7f, 0x85, 0x18, 0x7, 0xd49, 0x10001, 0x2, 0x2, 0x1ff, 0x80000001, 0x6, 0xf21e, 0x2, 0x7fff, 0x2, 0x9, 0x7, 0x6, 0x6, 0x9, 0x6, 0x10000, 0xda35, 0x8, 0x2, 0x9, 0x7, 0x9, 0x7, 0xffffffff, 0x7, 0x5, 0x40, 0x0, 0x8, 0x8, 0x5, 0x0, 0x4, 0x6c4d, 0x1, 0x14, 0x80000000, 0x6, 0xfffffffd, 0xffff, 0x3, 0xfda, 0x1000, 0x4, 0x7fffffff, 0x9, 0xfffff001, 0xc, 0xc, 0xd1, 0x8, 0x7fffffff, 0x2, 0x3, 0x86, 0x6, 0x8a, 0x10001, 0xb, 0x3, 0xc000, 0x1, 0x5, 0x1ff, 0x7, 0x40, 0x100, 0xe948, 0x4, 0x3, 0xd, 0x6, 0x6a4d09b6, 0x2, 0xccd, 0x4, 0x200, 0x6, 0x2a97, 0x2, 0x2, 0x40, 0x392, 0x5, 0x6, 0x0, 0x7fff, 0xfffffff0, 0x40, 0x81, 0x6, 0x9, 0x6, 0x80000000, 0x8000, 0x7fff, 0x9, 0x103, 0x6, 0x10, 0x3c, 0xf, 0x4, 0x3, 0x400, 0x8, 0x0, 0x0, 0x3, 0xdc, 0x2, 0x401, 0x4, 0x77, 0xe92, 0x4, 0x10, 0x7fff, 0x8, 0x4, 0x8001, 0x2, 0x2, 0x8, 0xd9, 0x0, 0x7, 0x8, 0x3ff, 0x0, 0x80, 0x7, 0xfffffffd, 0x1000, 0x6, 0x4, 0x0, 0x81, 0x5, 0xe2e, 0x0, 0x8001, 0x9, 0x2a278a8e, 0x2b, 0x4, 0x4, 0x10000, 0xf0e]}) 342.72092ms ago: executing program 0 (id=148): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 329.058131ms ago: executing program 0 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75feff86dd9d90491c3248060000", 0x1b}, {&(0x7f0000000440)="0400000002e877da3002473500000003467b5dc42d91b8718ce49830d7268a4a5734f37117f1218db9719b90dce10eed9afe95193610fd61de415f6fa08998ed9a7ee297bee5b84c", 0x48}], 0x2) 274.633592ms ago: executing program 0 (id=150): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) r1 = syz_open_procfs$userns(0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 262.321973ms ago: executing program 0 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000002c0)={@val={0xa, 0x72d1}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x34, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x0, 0x6, '1=C', 0x3, 0x2c, 0x0, @mcast2, @private2, [], "80b2742b"}}}}}}}}, 0x6e) 198.759144ms ago: executing program 0 (id=152): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x6695f000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/65536, 0x10000) read(r0, &(0x7f0000000400)=""/65536, 0x10000) 180.462225ms ago: executing program 0 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0xd, 0x80, 0x0, 0x40, 0x5, 0x2, 0x8, 0xff, 0x40, 0x0, 0x6, 0x0, 0xed, 0x1, 0x92, 0x81, 0x7, 0x1, '\x00', 0x6, 0x6}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) 159.021775ms ago: executing program 1 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 138.090896ms ago: executing program 1 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000005c0)=0x9) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0)) 67.284007ms ago: executing program 1 (id=156): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 0s ago: executing program 32 (id=156): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 28.648989][ T36] audit: type=1400 audit(1785754970.700:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.650008][ T286] cgroup: Unknown subsys name 'net' [ 28.671650][ T36] audit: type=1400 audit(1785754970.700:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.699139][ T36] audit: type=1400 audit(1785754970.730:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.699334][ T286] cgroup: Unknown subsys name 'devices' [ 28.822968][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.828948][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.920726][ T36] audit: type=1400 audit(1785754970.980:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.944001][ T36] audit: type=1400 audit(1785754970.980:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.964456][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.968996][ T36] audit: type=1400 audit(1785754970.980:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.000585][ T36] audit: type=1400 audit(1785754971.040:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.014348][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.025984][ T36] audit: type=1400 audit(1785754971.040:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.060666][ T36] audit: type=1400 audit(1785754971.070:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.086376][ T36] audit: type=1400 audit(1785754971.070:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.770688][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.777779][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.795667][ T293] bridge_slave_0: entered allmulticast mode [ 29.802468][ T293] bridge_slave_0: entered promiscuous mode [ 29.811726][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.818792][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.827968][ T293] bridge_slave_1: entered allmulticast mode [ 29.834272][ T293] bridge_slave_1: entered promiscuous mode [ 29.947324][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.954519][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.961974][ T298] bridge_slave_0: entered allmulticast mode [ 29.968180][ T298] bridge_slave_0: entered promiscuous mode [ 29.976570][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.983702][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.990803][ T298] bridge_slave_1: entered allmulticast mode [ 29.996988][ T298] bridge_slave_1: entered promiscuous mode [ 30.057815][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.064898][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.071983][ T297] bridge_slave_0: entered allmulticast mode [ 30.078242][ T297] bridge_slave_0: entered promiscuous mode [ 30.093215][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.100289][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.107736][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.114795][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.124650][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.131728][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.138785][ T297] bridge_slave_1: entered allmulticast mode [ 30.145168][ T297] bridge_slave_1: entered promiscuous mode [ 30.181987][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.189169][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.197019][ T299] bridge_slave_0: entered allmulticast mode [ 30.203898][ T299] bridge_slave_0: entered promiscuous mode [ 30.216421][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.223600][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.230753][ T299] bridge_slave_1: entered allmulticast mode [ 30.236923][ T299] bridge_slave_1: entered promiscuous mode [ 30.326789][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.333878][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.341170][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.348195][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.363225][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.370908][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.378442][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.385838][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.406979][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.414080][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.427191][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.434259][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.474526][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.481722][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.489337][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.496400][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.532565][ T293] veth0_vlan: entered promiscuous mode [ 30.544077][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.551153][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.559011][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.566082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.583158][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.590226][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.607380][ T298] veth0_vlan: entered promiscuous mode [ 30.622031][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.629097][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.638756][ T293] veth1_macvtap: entered promiscuous mode [ 30.657740][ T298] veth1_macvtap: entered promiscuous mode [ 30.693363][ T297] veth0_vlan: entered promiscuous mode [ 30.707310][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.712128][ T299] veth0_vlan: entered promiscuous mode [ 30.751269][ T297] veth1_macvtap: entered promiscuous mode [ 30.791872][ T299] veth1_macvtap: entered promiscuous mode [ 30.830784][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.073307][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.092749][ T309] device offline error, dev sda, sector 274742 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2 [ 31.104041][ T309] device offline error, dev sda, sector 275248 op 0x1:(WRITE) flags 0x4000 phys_seg 17 prio class 2 [ 31.115662][ T309] device offline error, dev sda, sector 275760 op 0x1:(WRITE) flags 0x4000 phys_seg 17 prio class 2 [ 31.126719][ T309] device offline error, dev sda, sector 276272 op 0x1:(WRITE) flags 0x4000 phys_seg 16 prio class 2 [ 31.139227][ T309] device offline error, dev sda, sector 276784 op 0x1:(WRITE) flags 0x4000 phys_seg 46 prio class 2 [ 31.150235][ T309] device offline error, dev sda, sector 277296 op 0x1:(WRITE) flags 0x4000 phys_seg 29 prio class 2 [ 31.161706][ T309] device offline error, dev sda, sector 277808 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 31.177521][ T309] device offline error, dev sda, sector 278318 op 0x1:(WRITE) flags 0x0 phys_seg 41 prio class 2 [ 31.195860][ T309] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 34789) [ 31.209486][ T309] device offline error, dev sda, sector 278646 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 31.220677][ T309] device offline error, dev sda, sector 279152 op 0x1:(WRITE) flags 0x4000 phys_seg 24 prio class 2 [ 31.240450][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 31.248942][ T310] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 31.257731][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35470) [ 31.257957][ T310] usb 1-1: config 0 has no interface number 0 [ 31.269518][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139302) [ 31.275628][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 31.287367][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139304) [ 31.311990][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139360) [ 31.323632][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139372) [ 31.335752][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139380) [ 31.336412][ T310] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 31.347557][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139418) [ 31.369429][ T13] Buffer I/O error on device sda1, logical block 34792 [ 31.369427][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139444) [ 31.369461][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139448) [ 31.397980][ T13] Buffer I/O error on device sda1, logical block 34793 [ 31.412419][ T13] Buffer I/O error on device sda1, logical block 34794 [ 31.422804][ T310] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 31.442453][ T13] Buffer I/O error on device sda1, logical block 34795 [ 31.451193][ T310] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 31.461115][ T13] Buffer I/O error on device sda1, logical block 34796 [ 31.468109][ T13] Buffer I/O error on device sda1, logical block 34797 [ 31.473702][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.475030][ T13] Buffer I/O error on device sda1, logical block 34798 [ 31.490142][ T13] Buffer I/O error on device sda1, logical block 34799 [ 31.497070][ T13] Buffer I/O error on device sda1, logical block 34800 [ 31.499698][ T310] usb 1-1: Product: syz [ 31.504259][ T13] Buffer I/O error on device sda1, logical block 34801 [ 31.517962][ T310] usb 1-1: Manufacturer: syz [ 31.518544][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 31.538016][ T310] usb 1-1: SerialNumber: syz [ 31.540500][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 31.548128][ T310] usb 1-1: config 0 descriptor?? [ 31.555938][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 31.561085][ T322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.573108][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 31.581372][ T322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.593034][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 31.613614][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 31.627371][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 31.644935][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 31.675012][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 31.690990][ T348] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 31.700750][ T73] Aborting journal on device sda1-8. [ 31.706136][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 31.715162][ T373] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.2.23: Detected aborted journal [ 31.715699][ T348] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 31.726129][ T371] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.1.22: Detected aborted journal [ 31.726233][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 31.735098][ T348] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 31.746186][ T371] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 31.753473][ T348] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 31.762287][ T373] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 31.773036][ T348] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 31.807884][ T348] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 31.816678][ T348] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 31.863906][ T322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.875403][ T322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.897356][ T348] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 31.972488][ T382] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 32.091892][ T310] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 32.215652][ T424] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.33'. [ 32.327882][ T387] Write-error on swap-device (8:0:787782) [ 32.341286][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 32.350235][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 Aug 3 11:02:54 syzkaller kern.alert kernel: [ 32.327882][ T387] Write-error on swap-device (8:0:787782) [ 32.371602][ T387] Write-error on swap-device (8:0:796022) [ 32.377522][ T387] Write-error on swap-device (8:0:796030) [ 32.383815][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 32.391281][ T387] Write-error on swap-device (8:0:795982) Aug 3 11:02:54 [ 32.398662][ T387] Write-error on swap-device (8:0:795990) syzkaller kern.a[ 32.398797][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 lert kernel: [ [ 32.416501][ T387] Write-error on swap-device (8:0:796038) 32.371602][ T3[ 32.416583][ T387] Write-error on swap-device (8:0:796046) 87] Write-error [ 32.416634][ T387] Write-error on swap-device (8:0:796054) on swap-device ([ 32.416684][ T387] Write-error on swap-device (8:0:796062) 8:0:796022) [ 32.416736][ T387] Write-error on swap-device (8:0:796070) Aug 3 11:02:54 [ 32.452102][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 syzkaller kern.a[ 32.462633][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 lert kernel: [ [ 32.473576][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 32.377522][ T3[ 32.483530][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 87] Write-error [ 32.493599][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 on swap-device ([ 32.503956][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 8:0:796030) Aug[ 32.513935][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 3 11:02:54 syzkaller kern.alert kernel: [ 32.391281][ T387] Write-error on swap-device (8:0:795982) Aug 3 11:02:54 syzkaller kern.alert kernel: [ 32.398662][ T387] Write-error on swap-device (8:0:795990) Aug 3 11:02:54 syzkaller kern.alert kernel: [ 32.416501][ T387] Write-error on swap-device (8:0:796038) Aug 3 11:02:54 syzkaller kern.alert kernel: [ 32.416583][ T387] Write-error on swap-device (8:0:796046) Aug 3 11:02:54 syzkaller kern.alert kernel: [ 32.416634][ T387] Write-error on swap-device (8:0:796054) Aug 3 11:02:54 syzkaller kern.alert kernel: [ 32.416684][ T387] Write-error on swap-device (8:0:796062) Aug 3 11:02:54 syzkaller kern.alert kernel: [ 32.416736][ T387] Write-error on swap-device (8:0:796070) [ 32.720656][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.870445][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 32.876901][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.888245][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.898768][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 32.904256][ T310] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 32.907889][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.920492][ T310] asix 1-1:0.34: probe with driver asix failed with error -71 [ 32.937399][ T45] usb 4-1: config 0 descriptor?? [ 32.943903][ T310] usb 1-1: USB disconnect, device number 2 [ 32.944216][ T45] hub 4-1:0.0: USB hub found [ 32.954710][ T110] udevd[110]: worker [313] terminated by signal 7 (Bus error) [ 32.962464][ T110] udevd[110]: worker [313] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 32.973278][ T110] udevd[110]: worker [435] terminated by signal 7 (Bus error) [ 32.980957][ T110] udevd[110]: worker [435] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 32.997122][ T110] udevd[110]: worker [326] terminated by signal 7 (Bus error) [ 33.004736][ T110] udevd[110]: worker [326] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 33.015160][ T110] udevd[110]: worker [368] terminated by signal 7 (Bus error) [ 33.030461][ T110] udevd[110]: worker [368] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.34' [ 33.052815][ T110] udevd[110]: worker [437] terminated by signal 7 (Bus error) [ 33.060352][ T110] udevd[110]: worker [437] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 33.144856][ T45] hub 4-1:0.0: 1 port detected [ 33.400448][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.550479][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 33.560347][ T65] usb 3-1: string descriptor 0 read error: -22 [ 33.566630][ T65] usb 3-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 33.575796][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.780811][ T45] hub 4-1:0.0: activate --> -90 [ 33.788935][ T65] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.840439][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.989633][ T65] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.004373][ T310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.015679][ T310] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 34.029613][ T65] usb 3-1: USB disconnect, device number 2 [ 34.035337][ T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.060416][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.082868][ T310] usb 1-1: Product: syz [ 34.087085][ T310] usb 1-1: Manufacturer: syz [ 34.101908][ T310] usb 1-1: SerialNumber: syz [ 34.186662][ T45] usb 4-1-port1: cannot disable (err = -71) [ 34.194141][ T45] usb 4-1: Failed to suspend device, error -71 [ 34.205935][ T10] usb 4-1: USB disconnect, device number 2 [ 34.325661][ T454] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.531430][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 34.531450][ T36] audit: type=1400 audit(1785754976.580:161): avc: denied { getopt } for pid=483 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.604408][ T36] audit: type=1400 audit(1785754976.660:162): avc: denied { read write } for pid=487 comm="syz.2.52" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.650450][ T36] audit: type=1400 audit(1785754976.660:163): avc: denied { open } for pid=487 comm="syz.2.52" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.673259][ T36] audit: type=1400 audit(1785754976.660:164): avc: denied { map } for pid=487 comm="syz.2.52" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.730726][ T490] syzkaller1: entered promiscuous mode [ 34.746251][ T490] syzkaller1: entered allmulticast mode [ 34.811340][ T492] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.838189][ T36] audit: type=1400 audit(1785754976.890:165): avc: denied { bind } for pid=491 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.882748][ T36] audit: type=1400 audit(1785754976.890:166): avc: denied { name_bind } for pid=491 comm="syz.2.54" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 34.905176][ T36] audit: type=1400 audit(1785754976.890:167): avc: denied { node_bind } for pid=491 comm="syz.2.54" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 34.927931][ T36] audit: type=1400 audit(1785754976.890:168): avc: denied { connect } for pid=491 comm="syz.2.54" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.950524][ T36] audit: type=1400 audit(1785754976.920:169): avc: denied { name_bind } for pid=493 comm="syz.3.55" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.960195][ T454] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.972202][ T36] audit: type=1400 audit(1785754976.920:170): avc: denied { node_bind } for pid=493 comm="syz.3.55" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.204441][ T310] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.211061][ T310] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 35.218561][ T310] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 35.305948][ T516] kvm: kvm [515]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 35.314874][ T516] kvm: kvm [515]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 35.350467][ T323] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.406979][ T310] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 35.415579][ T310] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 35.431083][ T310] usb 1-1: USB disconnect, device number 3 [ 35.437485][ T310] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 35.500433][ T323] usb 3-1: Using ep0 maxpacket: 16 [ 35.506953][ T323] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 35.518209][ T323] usb 3-1: config 1 has no interface number 0 [ 35.529754][ T323] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 35.550087][ T323] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 35.561974][ T323] usb 3-1: config 1 interface 105 has no altsetting 0 [ 35.570210][ T323] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 35.579563][ T323] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 35.587883][ T323] usb 3-1: Product: syz [ 35.592217][ T323] usb 3-1: Manufacturer: syz [ 35.596841][ T323] usb 3-1: SerialNumber: syz [ 35.605104][ T506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 35.612677][ T506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 35.827130][ T548] Zero length message leads to an empty skb [ 35.865405][ T552] syzkaller1: entered promiscuous mode [ 35.871046][ T552] syzkaller1: entered allmulticast mode [ 36.024248][ T506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 36.034439][ T506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 36.141914][ T565] syzkaller1: entered promiscuous mode [ 36.147621][ T565] syzkaller1: entered allmulticast mode [ 36.451903][ T323] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 36.681131][ T323] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 36.702576][ T323] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b6:a2:eb:5b:04:00 [ 36.721914][ T323] usb 3-1: USB disconnect, device number 3 [ 36.731069][ T323] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 36.802644][ T323] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 36.812579][ T323] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 36.822405][ T323] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 36.835549][ T601] tipc: Started in network mode [ 36.850896][ T601] tipc: Node identity 7f000001, cluster identity 4711 [ 36.857936][ T601] tipc: Enabled bearer , priority 10 [ 36.873645][ T601] tipc: Disabling bearer [ 36.893297][ T608] kvm: user requested TSC rate below hardware speed [ 36.969013][ T615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.998355][ T618] batadv_slave_1: entered allmulticast mode [ 37.012812][ T618] veth1_to_bond: entered promiscuous mode [ 37.019673][ T617] veth1_to_bond: left promiscuous mode [ 37.025656][ T617] batadv_slave_1: left allmulticast mode [ 37.239296][ T459] rust_binder: 638: undelivered death notification, 0000000000000000 [ 37.280461][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.420463][ T323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 37.441633][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.452684][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.462587][ T45] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 37.471764][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.480784][ T45] usb 4-1: config 0 descriptor?? [ 37.558757][ T663] syzkaller1: entered promiscuous mode [ 37.564405][ T663] syzkaller1: entered allmulticast mode [ 37.580452][ T323] usb 2-1: Using ep0 maxpacket: 32 [ 37.592510][ T323] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 37.600850][ T323] usb 2-1: config 0 has no interface number 0 [ 37.606991][ T323] usb 2-1: config 0 interface 184 has no altsetting 0 [ 37.616478][ T323] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 37.630411][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.638452][ T323] usb 2-1: Product: syz [ 37.644680][ T323] usb 2-1: Manufacturer: syz [ 37.649384][ T323] usb 2-1: SerialNumber: syz [ 37.659054][ T323] usb 2-1: config 0 descriptor?? [ 37.666955][ T323] smsc75xx v1.0.0 [ 37.910514][ T310] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 38.062621][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.074171][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 38.085510][ T310] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 38.097130][ T45] usb 4-1: string descriptor 0 read error: -22 [ 38.103778][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.113511][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.121762][ T310] usb 3-1: Product: syz [ 38.126006][ T310] usb 3-1: Manufacturer: syz [ 38.130712][ T310] usb 3-1: SerialNumber: syz [ 38.138510][ T672] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 38.232485][ T194] EXT4-fs warning: 33 callbacks suppressed [ 38.232507][ T194] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1083: inode #121: lblock 0: comm crond: error -5 reading directory block [ 38.301269][ T45] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input4 [ 38.320747][ T45] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 38.341085][ T692] udevd[692]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 38.353466][ T672] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 38.398616][ T110] udevd[110]: worker [691] terminated by signal 7 (Bus error) [ 38.406458][ T110] udevd[110]: worker [691] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 38.417719][ T696] netlink: 'syz.0.133': attribute type 8 has an invalid length. [ 38.425672][ T696] netlink: 'syz.0.133': attribute type 32 has an invalid length. [ 38.431744][ T110] udevd[110]: worker [673] terminated by signal 7 (Bus error) [ 38.441064][ T110] udevd[110]: worker [673] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 38.508525][ T9] usb 4-1: USB disconnect, device number 3 [ 38.606341][ T711] syzkaller1: entered promiscuous mode [ 38.612102][ T711] syzkaller1: entered allmulticast mode [ 38.750889][ T715] kvm: kvm [714]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x87 [ 38.759367][ T715] kvm: kvm [714]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x87 [ 38.770865][ T715] kvm: kvm [714]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x87 [ 38.782849][ T715] kvm: kvm [714]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x87 [ 38.791518][ T715] kvm: kvm [714]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x87 [ 38.802933][ T715] kvm_intel: kvm [714]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x87 [ 38.875662][ T323] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 38.887190][ T323] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 38.897081][ T323] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 38.907974][ T323] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 38.917693][ T323] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 38.928073][ T323] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 38.937632][ T323] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 38.950574][ T323] usb 2-1: USB disconnect, device number 2 [ 38.959618][ T110] udevd[110]: worker [527] terminated by signal 7 (Bus error) [ 38.967801][ T110] udevd[110]: worker [527] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 38.968234][ T672] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 38.989147][ T110] udevd[110]: worker [719] terminated by signal 7 (Bus error) [ 38.996710][ T110] udevd[110]: worker [719] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.184' [ 39.134777][ T736] ======================================================= [ 39.134777][ T736] WARNING: The mand mount option has been deprecated and [ 39.134777][ T736] and is ignored by this kernel. Remove the mand [ 39.134777][ T736] option from the mount to silence this warning. [ 39.134777][ T736] ======================================================= [ 39.173218][ T736] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 39.187655][ T736] overlayfs: failed to look up (tracing) for ino (-66) [ 39.197794][ T310] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 39.204365][ T310] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 39.211954][ T310] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 39.290623][ T459] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 39.322947][ T746] syzkaller1: entered promiscuous mode [ 39.328507][ T746] syzkaller1: entered allmulticast mode [ 39.407465][ T310] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 39.441495][ T459] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 39.444019][ T310] usb 3-1: USB disconnect, device number 4 [ 39.459618][ T310] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 39.461380][ T110] udevd[110]: worker [671] terminated by signal 7 (Bus error) [ 39.476352][ T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 39.489487][ T459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 39.499453][ T311] bridge_slave_1: left allmulticast mode [ 39.505279][ T311] bridge_slave_1: left promiscuous mode [ 39.514880][ T459] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.550535][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.561646][ T311] bridge_slave_0: left allmulticast mode [ 39.568674][ T459] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.577602][ T36] kauditd_printk_skb: 48 callbacks suppressed SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 39.577619][ T36] audit: type=1400 audit(1785754981.630:219): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2702]" dev="pipefs" ino=2702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.578157][ T311] bridge_slave_0: left promiscuous mode [ 39.621290][ T459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.635247][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.635451][ T459] usb 4-1: config 0 descriptor?? [ 39.669895][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.674125][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.720668][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.729693][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.770735][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.779884][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.794772][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.803970][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.815916][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.825087][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.834146][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.843154][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.852264][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.861226][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.870162][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.879170][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.888205][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.897314][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.993411][ T311] veth1_macvtap: left promiscuous mode [ 39.998962][ T311] veth0_vlan: left promiscuous mode [ 40.011785][ T459] usb 4-1: can't set config #0, error -71 [ 40.050756][ T459] usb 4-1: USB disconnect, device number 4 [ 40.292944][ T311] bridge_slave_1: left allmulticast mode [ 40.298612][ T311] bridge_slave_1: left promiscuous mode [ 40.304287][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.311729][ T311] bridge_slave_0: left allmulticast mode [ 40.317370][ T311] bridge_slave_0: left promiscuous mode [ 40.323169][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.330909][ T311] bridge_slave_1: left allmulticast mode [ 40.336629][ T311] bridge_slave_1: left promiscuous mode [ 40.342327][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.349728][ T311] bridge_slave_0: left allmulticast mode [ 40.355463][ T311] bridge_slave_0: left promiscuous mode [ 40.361220][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.368835][ T311] bridge_slave_1: left allmulticast mode [ 40.374581][ T311] bridge_slave_1: left promiscuous mode [ 40.380366][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.387853][ T311] bridge_slave_0: left allmulticast mode [ 40.393901][ T311] bridge_slave_0: left promiscuous mode [ 40.399563][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.632667][ T311] tipc: Left network mode [ 40.638723][ T311] veth1_macvtap: left promiscuous mode [ 40.644413][ T311] veth0_vlan: left promiscuous mode [ 40.649787][ T311] veth1_macvtap: left promiscuous mode [ 40.655323][ T311] veth0_vlan: left promiscuous mode [ 40.660734][ T311] veth1_macvtap: left promiscuous mode [ 40.666220][ T311] veth0_vlan: left promiscuous mode [ 40.907243][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.916940][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.925940][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.934883][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.943903][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.952863][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.961952][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.971027][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.979988][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.988960][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.997910][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.006877][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.015909][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.024972][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.034549][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.043522][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.052558][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.061716][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001