last executing test programs: 5m3.137127967s ago: executing program 1 (id=2): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) 4m47.677621597s ago: executing program 32 (id=2): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) 1m27.511232509s ago: executing program 3 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x24040080) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000b00000000030014"], 0x30}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 1m26.424766165s ago: executing program 3 (id=1167): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x32, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x44) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ffa000/0x3000)=nil, 0x400c) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd) mremap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r4) 1m26.291107457s ago: executing program 0 (id=1168): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/consoles\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r0, &(0x7f0000001300), 0x0, 0x0, 0x0) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) 1m26.184568629s ago: executing program 0 (id=1172): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, 0x0) 1m25.250668963s ago: executing program 3 (id=1174): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) munlockall() r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x1) socket$netlink(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1m25.203621514s ago: executing program 0 (id=1177): socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES8], 0xfe8e) 1m23.53088699s ago: executing program 0 (id=1179): add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000200)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffd) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m23.301222703s ago: executing program 0 (id=1184): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() recvmsg$unix(0xffffffffffffffff, 0x0, 0x11000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x0, 0x6b19, 0x7}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000100)={r5, 0x800, 0x0, 0x5, 0xfff}, &(0x7f0000000180)=0x18) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) ioctl$TIOCNOTTY(r3, 0x5422) 1m21.871938495s ago: executing program 3 (id=1188): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, 0x0) 1m20.994991669s ago: executing program 0 (id=1190): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[], 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff6d12020002004788aa96a13bb1000011", 0x14, 0x0, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x2a) 1m20.993227439s ago: executing program 3 (id=1192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$isdn(0x22, 0x2, 0x26) bind$isdn(r3, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6) 1m20.029377923s ago: executing program 3 (id=1194): setsockopt(0xffffffffffffffff, 0x1000, 0x4, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0) 1m5.043239963s ago: executing program 33 (id=1190): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[], 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff6d12020002004788aa96a13bb1000011", 0x14, 0x0, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x2a) 1m4.820924756s ago: executing program 34 (id=1194): setsockopt(0xffffffffffffffff, 0x1000, 0x4, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0) 42.813336034s ago: executing program 4 (id=1471): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 42.639663477s ago: executing program 4 (id=1475): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x3, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r2, 0x928, 0x8) 42.490886818s ago: executing program 4 (id=1477): r0 = socket(0x2a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0xffff, 0x2, 0xfffffff6, 0xfffffffb}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c00078008000640000000200500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 42.4010949s ago: executing program 4 (id=1480): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) socketpair$unix(0x1, 0x2, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={0x0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 42.004407576s ago: executing program 4 (id=1483): writev(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x1000000, 0x0, 0x0, 0x0) 31.491444847s ago: executing program 4 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x32, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x44) r3 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x400c) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd) mremap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r3) 31.340011779s ago: executing program 35 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x32, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x44) r3 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x400c) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd) mremap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r3) 10.755884785s ago: executing program 5 (id=1713): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() recvmsg$unix(0xffffffffffffffff, 0x0, 0x11000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x0, 0x6b19, 0x7}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={r3, 0x800, 0x0, 0x5, 0xfff}, &(0x7f0000000180)=0x18) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) 10.380926721s ago: executing program 5 (id=1715): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000800000200000000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000009008400"/20, @ANYRES32, @ANYRES32, @ANYBLOB="024000000500"], 0x50) 10.235995953s ago: executing program 5 (id=1716): mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x6, 0x2012, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) rt_sigreturn() ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f000030e000/0x2000)=nil, 0x2000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fdatasync(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='svc_stats_latency\x00'}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) 7.860782469s ago: executing program 5 (id=1739): socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x3, 0xfffffffffffffefb, 0x0, 0x0) 4.825946636s ago: executing program 6 (id=1761): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.656005378s ago: executing program 8 (id=1765): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@quota}, {@init_itable}, {@noblock_validity}, {@barrier}, {@barrier}, {@block_validity}]}, 0x1, 0x55a, &(0x7f0000000b80)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000000000000000000000c30000"]) 4.475804041s ago: executing program 6 (id=1767): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f000071a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4001, &(0x7f0000000040)=0x4, 0x5, 0x3) 4.426417802s ago: executing program 8 (id=1769): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x5, &(0x7f0000000740)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 4.222097125s ago: executing program 6 (id=1770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 3.699806973s ago: executing program 8 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x3, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r2, 0x928, 0x8) 3.699595953s ago: executing program 6 (id=1775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0) 3.647831144s ago: executing program 6 (id=1776): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 2.992670694s ago: executing program 8 (id=1777): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f0000000200)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc92669c02f8adaefc29127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498", 0xb0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6f", 0x2b}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)="acc841985992b795fc024b740d97018a16163bb0fb2bb293e68702bb40b6ba70bde570", 0x23}, {&(0x7f0000000740)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 2.887864005s ago: executing program 8 (id=1779): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0xe5cd6ed1ccf8e342}, 0xc050) 2.839251196s ago: executing program 5 (id=1780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x24004884) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2.762676487s ago: executing program 6 (id=1782): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() recvmsg$unix(0xffffffffffffffff, 0x0, 0x11000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x0, 0x6b19, 0x7}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000100)={r4, 0x800, 0x0, 0x5, 0xfff}, &(0x7f0000000180)=0x18) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) 2.373473593s ago: executing program 7 (id=1784): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x7ff) accept(r0, 0x0, 0x0) 1.90398102s ago: executing program 2 (id=1786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0) 1.862526921s ago: executing program 5 (id=1787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000000b00000000030014"], 0x30}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 1.786224133s ago: executing program 2 (id=1788): socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES8], 0xfe8e) 1.102786203s ago: executing program 7 (id=1789): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x2808400, &(0x7f0000000100), 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 695.594519ms ago: executing program 2 (id=1790): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f0000000200)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc92669c02f8adaefc29127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498", 0xb0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6f", 0x2b}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)="acc841985992b795fc024b740d97018a16163bb0fb2bb293e68702bb40b6ba70bde570", 0x23}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a12", 0x5d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 555.993531ms ago: executing program 7 (id=1791): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 527.136362ms ago: executing program 8 (id=1792): close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) 496.826442ms ago: executing program 2 (id=1793): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 348.031414ms ago: executing program 7 (id=1794): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c00078008000640000000200500010006000000050005000a000000050004000000000009000200"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 285.078585ms ago: executing program 2 (id=1795): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 275.847475ms ago: executing program 7 (id=1796): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 100.071368ms ago: executing program 2 (id=1797): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x500f}}, {@nodecompose}, {}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'cp949'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 0s ago: executing program 7 (id=1798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x0) kernel console output (not intermixed with test programs): 5047] netlink: 'syz.3.178': attribute type 3 has an invalid length. [ 104.675707][ T5047] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.178'. [ 104.691914][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 104.716143][ T5049] netlink: 200 bytes leftover after parsing attributes in process `syz.2.180'. [ 106.371785][ T5072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.396965][ T5072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.222143][ T5102] netlink: 'syz.4.191': attribute type 16 has an invalid length. [ 109.224266][ T5102] netlink: 'syz.4.191': attribute type 3 has an invalid length. [ 109.226373][ T5102] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.191'. [ 109.332003][ T5089] delete_channel: no stack [ 110.167033][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 110.186516][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.189340][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.208478][ T5112] netlink: 200 bytes leftover after parsing attributes in process `syz.3.193'. [ 113.149792][ T5151] netlink: 'syz.4.207': attribute type 16 has an invalid length. [ 113.151871][ T5151] netlink: 'syz.4.207': attribute type 3 has an invalid length. [ 113.153909][ T5151] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.207'. [ 114.130995][ T5155] delete_channel: no stack [ 115.474170][ T5191] cifs: Unknown parameter 'p' [ 115.617526][ T5199] netlink: 'syz.4.218': attribute type 16 has an invalid length. [ 115.619525][ T5199] netlink: 'syz.4.218': attribute type 3 has an invalid length. [ 115.621569][ T5199] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.218'. [ 116.559378][ T5208] delete_channel: no stack [ 116.698137][ T4299] Bluetooth: hci5: link tx timeout [ 116.699557][ T4299] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.702673][ T5214] CUSE: unknown device info "ÿ" [ 116.704089][ T5214] CUSE: zero length info key specified [ 117.453154][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 117.455634][ T5233] netlink: 192 bytes leftover after parsing attributes in process `syz.2.228'. [ 117.478512][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.480795][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.639560][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.649258][ T5242] netlink: 'syz.2.232': attribute type 16 has an invalid length. [ 117.651221][ T5242] netlink: 'syz.2.232': attribute type 3 has an invalid length. [ 117.665882][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.668601][ T5242] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.232'. [ 118.110291][ T5251] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 118.147096][ T5251] netlink: 'syz.0.234': attribute type 5 has an invalid length. [ 118.633333][ T5247] delete_channel: no stack [ 118.726759][ T4299] Bluetooth: hci5: command 0x0406 tx timeout [ 120.045524][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 120.047822][ T5291] netlink: 192 bytes leftover after parsing attributes in process `syz.3.243'. [ 120.157817][ T5296] netlink: 'syz.2.245': attribute type 16 has an invalid length. [ 120.164974][ T5296] netlink: 'syz.2.245': attribute type 3 has an invalid length. [ 120.174643][ T5296] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.245'. [ 120.401769][ T5308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.408643][ T5308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.996900][ T5297] delete_channel: no stack [ 121.641211][ T4299] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 121.643506][ T4299] Bluetooth: hci3: Injecting HCI hardware error event [ 121.649366][ T4310] Bluetooth: hci3: hardware error 0x00 [ 121.957502][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.960080][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.987698][ T5336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 121.990411][ T5336] netlink: 192 bytes leftover after parsing attributes in process `syz.0.256'. [ 123.045135][ T5353] netlink: 'syz.3.260': attribute type 16 has an invalid length. [ 123.058591][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 123.070629][ T5353] netlink: 'syz.3.260': attribute type 3 has an invalid length. [ 123.080148][ T5353] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.260'. [ 123.088471][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 123.116230][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 123.163987][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 123.185224][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 123.209157][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 123.407520][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.410551][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.433625][ T5369] netlink: 20 bytes leftover after parsing attributes in process `syz.5.264'. [ 123.456185][ T5372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.478738][ T5372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.613025][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 123.616393][ T5381] netlink: 184 bytes leftover after parsing attributes in process `syz.2.267'. [ 123.776294][ T5386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.785905][ T5386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.846869][ T4310] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 124.141875][ T5393] netlink: 'syz.4.272': attribute type 16 has an invalid length. [ 124.144108][ T5393] netlink: 'syz.4.272': attribute type 3 has an invalid length. [ 124.145055][ T5365] delete_channel: no stack [ 124.146182][ T5393] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.272'. [ 125.255743][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 125.259538][ T5410] netlink: 184 bytes leftover after parsing attributes in process `syz.2.279'. [ 125.297905][ T4342] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.419164][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 125.481143][ T4342] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 125.483471][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.490481][ T4342] usb 1-1: config 0 descriptor?? [ 125.645429][ T5420] netlink: 'syz.4.283': attribute type 16 has an invalid length. [ 125.649850][ T5420] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 126.137649][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.409489][ T5421] delete_channel: no stack [ 126.621029][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.623603][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.245160][ T4342] usb 1-1: Cannot set autoneg [ 129.247073][ T4342] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 129.259892][ T4342] usb 1-1: USB disconnect, device number 5 [ 129.358620][ T5456] __nla_validate_parse: 1 callbacks suppressed [ 129.358635][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 129.362638][ T5456] netlink: 184 bytes leftover after parsing attributes in process `syz.3.291'. [ 130.368291][ T5470] netlink: 'syz.4.295': attribute type 16 has an invalid length. [ 130.383764][ T5470] netlink: 'syz.4.295': attribute type 3 has an invalid length. [ 130.395028][ T5470] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.295'. [ 131.712332][ T5473] delete_channel: no stack [ 131.930560][ T5490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.933022][ T5490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.759892][ T5500] syz.4.302 uses obsolete (PF_INET,SOCK_PACKET) [ 132.854616][ T5520] netlink: 'syz.5.309': attribute type 16 has an invalid length. [ 132.856623][ T5520] netlink: 'syz.5.309': attribute type 3 has an invalid length. [ 132.871457][ T5520] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.309'. [ 133.213430][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.314'. [ 133.955375][ T5530] delete_channel: no stack [ 134.002762][ T5536] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 134.036879][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.225026][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.236102][ T22] usb 1-1: config 13 has an invalid interface number: 50 but max is 3 [ 134.247260][ T22] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 134.250487][ T22] usb 1-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 134.252655][ T22] usb 1-1: config 13 has no interface number 0 [ 134.268287][ T22] usb 1-1: config 13 interface 50 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 134.270800][ T22] usb 1-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 134.273835][ T22] usb 1-1: config 13 interface 50 has no altsetting 0 [ 134.320517][ T22] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 134.322852][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.324844][ T22] usb 1-1: Product: syz [ 134.325790][ T22] usb 1-1: Manufacturer: syz [ 134.356854][ T22] usb 1-1: SerialNumber: syz [ 134.505654][ T5554] netlink: 'syz.2.318': attribute type 2 has an invalid length. [ 135.288452][ T5567] netlink: 'syz.5.321': attribute type 16 has an invalid length. [ 135.299561][ T5567] netlink: 'syz.5.321': attribute type 3 has an invalid length. [ 135.302783][ T22] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 135.303788][ T478] usb 1-1: Failed to submit usb control message: -71 [ 135.307656][ T22] usb 1-1: USB disconnect, device number 6 [ 135.317065][ T5567] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.321'. [ 135.329821][ T478] usb 1-1: unable to send the bmi data to the device: -71 [ 135.331764][ T478] usb 1-1: unable to get target info from device [ 135.333363][ T478] usb 1-1: could not get target info (-71) [ 135.335194][ T478] usb 1-1: could not probe fw (-71) [ 135.529920][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.532398][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.673384][ T5589] delete_channel: no stack [ 138.009791][ T5615] mmap: syz.4.332 (5615) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.041752][ T4344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.074532][ T4344] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.136846][ T4345] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 138.422555][ T5633] netlink: 'syz.5.335': attribute type 16 has an invalid length. [ 138.431148][ T5633] netlink: 'syz.5.335': attribute type 3 has an invalid length. [ 138.433176][ T5633] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.335'. [ 138.446805][ T4345] usb 1-1: Using ep0 maxpacket: 32 [ 138.449818][ T4345] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.452632][ T4345] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 138.455177][ T4345] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 138.460130][ T4345] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.462614][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.464636][ T4345] usb 1-1: Product: syz [ 138.465746][ T4345] usb 1-1: Manufacturer: syz [ 138.467851][ T4345] usb 1-1: SerialNumber: syz [ 138.735281][ T5615] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.739681][ T5604] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.741748][ T5604] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.832449][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.844624][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.008750][ T5615] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.102904][ T5630] delete_channel: no stack [ 139.151704][ T5615] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.308302][ T5615] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.494705][ T5604] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.497098][ T5604] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.713789][ T4345] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 139.715671][ T4345] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 139.765960][ T4345] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 140.247841][ T4345] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 140.279818][ T4345] cdc_ncm 1-1:1.0 eth4: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 140.328205][ T4345] usb 1-1: USB disconnect, device number 7 [ 140.340565][ T4345] cdc_ncm 1-1:1.0 eth4: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 140.347690][ T5615] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.387663][ T5615] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.399646][ T5685] netlink: 'syz.2.349': attribute type 16 has an invalid length. [ 140.401769][ T5685] netlink: 'syz.2.349': attribute type 3 has an invalid length. [ 140.403541][ T5685] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.349'. [ 140.432479][ T5615] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.472058][ T5615] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.481911][ T5706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.484353][ T5706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.906601][ T5718] netlink: 'syz.0.356': attribute type 2 has an invalid length. [ 142.102564][ T5693] delete_channel: no stack [ 143.133588][ T5739] netlink: 'syz.5.361': attribute type 16 has an invalid length. [ 143.135871][ T5739] netlink: 'syz.5.361': attribute type 3 has an invalid length. [ 143.164447][ T5739] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.361'. [ 144.332750][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.335127][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.738740][ T5790] netlink: 'syz.0.374': attribute type 16 has an invalid length. [ 145.740722][ T5790] netlink: 'syz.0.374': attribute type 3 has an invalid length. [ 145.742694][ T5790] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.374'. [ 145.863165][ T5798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.864620][ T5766] delete_channel: no stack [ 145.865555][ T5798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.313746][ T5825] hub 9-0:1.0: USB hub found [ 146.322909][ T5825] hub 9-0:1.0: 8 ports detected [ 146.336491][ T5831] netlink: 'syz.0.388': attribute type 16 has an invalid length. [ 146.343645][ T5831] netlink: 'syz.0.388': attribute type 3 has an invalid length. [ 146.372254][ T5831] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.388'. [ 146.649796][ T5838] delete_channel: no stack [ 146.860128][ T5852] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 147.067647][ T5865] netlink: 'syz.2.400': attribute type 16 has an invalid length. [ 147.074270][ T5865] netlink: 'syz.2.400': attribute type 3 has an invalid length. [ 147.080900][ T5865] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.400'. [ 147.332939][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.336012][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.974434][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.011782][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.260766][ T5875] netlink: 40 bytes leftover after parsing attributes in process `syz.5.405'. [ 148.462450][ T5876] delete_channel: no stack [ 148.725241][ T5860] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.727660][ T5860] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.729614][ T5860] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.731657][ T5860] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.949098][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 149.134689][ T5890] netlink: 'syz.5.412': attribute type 16 has an invalid length. [ 149.138083][ T5890] netlink: 'syz.5.412': attribute type 3 has an invalid length. [ 149.143382][ T5890] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.412'. [ 150.602489][ T5905] delete_channel: no stack [ 151.037042][ T4344] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 151.216952][ T4344] usb 1-1: Using ep0 maxpacket: 32 [ 151.246832][ T4344] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.285532][ T4344] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 151.455664][ T4344] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 151.469284][ T4344] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.487484][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.489525][ T4344] usb 1-1: Product: syz [ 151.490582][ T4344] usb 1-1: Manufacturer: syz [ 151.491641][ T4344] usb 1-1: SerialNumber: syz [ 151.623633][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.5.424'. [ 151.846219][ T5934] netlink: 'syz.4.425': attribute type 16 has an invalid length. [ 151.848293][ T5934] netlink: 'syz.4.425': attribute type 3 has an invalid length. [ 151.968581][ T5934] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.425'. [ 152.276241][ T5925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.337340][ T5925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.009986][ T5925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.015414][ T5947] delete_channel: no stack [ 153.051240][ T5925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.125388][ T5962] netlink: 'syz.5.438': attribute type 16 has an invalid length. [ 153.135029][ T5962] netlink: 'syz.5.438': attribute type 3 has an invalid length. [ 153.137202][ T5962] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.438'. [ 153.254563][ T4344] cdc_ncm 1-1:1.0: failed to get mac address [ 153.258034][ T4344] cdc_ncm 1-1:1.0: bind() failure [ 153.273009][ T4344] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 153.276435][ T4344] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 153.282851][ T4344] usbtest: probe of 1-1:1.1 failed with error -71 [ 153.297270][ T4344] usb 1-1: USB disconnect, device number 8 [ 154.879790][ T5985] delete_channel: no stack [ 155.227413][ T5989] netlink: 'syz.2.450': attribute type 16 has an invalid length. [ 155.270225][ T5989] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.450'. [ 156.584196][ T4483] libceph: connect (1)[c::]:6789 error -101 [ 156.588624][ T4483] libceph: mon0 (1)[c::]:6789 connect error [ 157.108056][ T6002] ceph: No mds server is up or the cluster is laggy [ 157.115301][ T4483] libceph: connect (1)[c::]:6789 error -101 [ 157.130708][ T4483] libceph: mon0 (1)[c::]:6789 connect error [ 157.432410][ T4310] Bluetooth: hci1: ACL packet too small [ 157.537592][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.539932][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.695876][ T6027] tipc: Started in network mode [ 157.698959][ T6027] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 157.700817][ T6027] tipc: Enabled bearer , priority 10 [ 157.707401][ T6027] netlink: 14 bytes leftover after parsing attributes in process `syz.4.462'. [ 157.751852][ T6032] netlink: 'syz.5.464': attribute type 16 has an invalid length. [ 157.754057][ T6032] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.464'. [ 157.779344][ T6027] tipc: Disabling bearer [ 158.451110][ T6024] delete_channel: no stack [ 159.848040][ T6060] netlink: 'syz.4.475': attribute type 16 has an invalid length. [ 159.850083][ T6060] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.475'. [ 162.036426][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 162.036440][ T27] audit: type=1326 audit(2000000089.410:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915ad28 code=0x7ffc0000 [ 162.061816][ T27] audit: type=1326 audit(2000000089.440:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915ad28 code=0x7ffc0000 [ 162.071446][ T27] audit: type=1326 audit(2000000089.450:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa915ad28 code=0x7ffc0000 [ 162.076587][ T27] audit: type=1326 audit(2000000089.450:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915ad28 code=0x7ffc0000 [ 162.099676][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.102021][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.114050][ T27] audit: type=1326 audit(2000000089.450:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915ad28 code=0x7ffc0000 [ 162.129432][ T27] audit: type=1326 audit(2000000089.450:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa915ad28 code=0x7ffc0000 [ 162.145108][ T27] audit: type=1326 audit(2000000089.450:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915ad28 code=0x7ffc0000 [ 162.155357][ T27] audit: type=1326 audit(2000000089.450:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffa915ad28 code=0x7ffc0000 [ 162.170848][ T6091] fuse: Invalid rootmode [ 162.173255][ T27] audit: type=1326 audit(2000000089.470:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915ad28 code=0x7ffc0000 [ 162.186554][ T27] audit: type=1326 audit(2000000089.470:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa915ad28 code=0x7ffc0000 [ 162.366064][ T6103] netlink: 'syz.0.488': attribute type 16 has an invalid length. [ 162.372418][ T6103] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.488'. [ 162.762220][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.494'. [ 162.765651][ T6119] IPVS: Error joining to the multicast group [ 164.410286][ T6126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.412537][ T6126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.513990][ T4299] Bluetooth: hci1: command 0x0406 tx timeout [ 164.515580][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 164.564972][ T6133] netlink: 'syz.3.498': attribute type 2 has an invalid length. [ 164.698283][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.335789][ T6139] netlink: 'syz.3.500': attribute type 16 has an invalid length. [ 165.339246][ T6139] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.500'. [ 165.390023][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.394763][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.453525][ T14] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 165.468452][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.472734][ T14] usb 1-1: config 0 descriptor?? [ 165.530677][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 165.532263][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 165.535111][ T14] usb 1-1: USB disconnect, device number 9 [ 166.665323][ T6144] delete_channel: no stack [ 166.721997][ T6169] netlink: 'syz.2.511': attribute type 16 has an invalid length. [ 166.735054][ T6169] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.511'. [ 168.178673][ T6193] netlink: 104 bytes leftover after parsing attributes in process `syz.4.519'. [ 169.164842][ T4310] Bluetooth: hci5: command 0x0411 tx timeout [ 169.367108][ T4310] Bluetooth: hci1: command 0x0406 tx timeout [ 169.558468][ T6208] netlink: 52 bytes leftover after parsing attributes in process `syz.3.524'. [ 169.810460][ T6210] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 169.843732][ T6215] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 169.845655][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 169.848027][ T6215] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 170.128172][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.149706][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.571784][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.576476][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.746589][ T6246] block device autoloading is deprecated and will be removed. [ 172.156298][ T14] hid-generic 0005:0C45:5505.0002: item fetching failed at offset 0/1 [ 172.159687][ T14] hid-generic: probe of 0005:0C45:5505.0002 failed with error -22 [ 173.009862][ T6250] delete_channel: no stack [ 175.489017][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 175.796520][ T6305] fuse: Unknown parameter '0x0000000000000006' [ 177.021021][ T6317] netlink: 8680 bytes leftover after parsing attributes in process `syz.2.566'. [ 177.026823][ T6317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.028914][ T6317] IPv6: NLM_F_CREATE should be set when creating new route [ 177.030856][ T6317] IPv6: NLM_F_CREATE should be set when creating new route [ 177.202139][ T6326] tmpfs: Bad value for 'mpol' [ 178.545870][ T6359] sctp: [Deprecated]: syz.2.580 (pid 6359) Use of int in max_burst socket option deprecated. [ 178.545870][ T6359] Use struct sctp_assoc_value instead [ 178.726773][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.906760][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 178.910423][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.913101][ T14] usb 1-1: config 0 has no interfaces? [ 178.916388][ T14] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 178.918779][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.932763][ T14] usb 1-1: Product: syz [ 178.933816][ T14] usb 1-1: Manufacturer: syz [ 178.938903][ T14] usb 1-1: SerialNumber: syz [ 178.960057][ T14] usb 1-1: config 0 descriptor?? [ 179.106943][ T6344] delete_channel: no stack [ 179.169750][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.178004][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.206765][ T4310] Bluetooth: hci4: command 0x0406 tx timeout [ 179.261291][ T6367] trusted_key: encrypted_key: insufficient parameters specified [ 179.549472][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.578'. [ 180.474898][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.480073][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.628460][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.630907][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.905586][ T6398] netlink: 'syz.2.594': attribute type 3 has an invalid length. [ 181.741528][ T6396] delete_channel: no stack [ 181.970682][ T14] usb 1-1: USB disconnect, device number 10 [ 183.224654][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.253448][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.656748][ T4345] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 183.710071][ T6486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.715743][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.856788][ T4345] usb 1-1: Using ep0 maxpacket: 16 [ 183.859762][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.862676][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.865063][ T4345] usb 1-1: New USB device found, idVendor=056a, idProduct=0103, bcdDevice= 0.00 [ 183.874220][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.885186][ T4345] usb 1-1: config 0 descriptor?? [ 184.217664][ T6475] delete_channel: no stack [ 184.294291][ T4345] usbhid 1-1:0.0: can't add hid device: -71 [ 184.296096][ T4345] usbhid: probe of 1-1:0.0 failed with error -71 [ 184.300334][ T4345] usb 1-1: USB disconnect, device number 11 [ 184.712902][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.735683][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.216278][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.234342][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.303182][ T6521] process 'syz.5.648' launched './file1' with NULL argv: empty string added [ 185.517592][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 185.520133][ T6532] ksmbd: Unknown IPC event: 0, ignore. [ 185.583365][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'. [ 186.049491][ T6547] trusted_key: encrypted_key: insufficient parameters specified [ 187.226886][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 187.247566][ T4310] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 187.311117][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.315027][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.379107][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.407324][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 187.412006][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.414883][ T14] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 187.425419][ T14] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 187.438701][ T14] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 187.442563][ T14] usb 1-1: config 7 has no interface number 0 [ 187.444168][ T14] usb 1-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 187.447868][ T6586] netlink: 'syz.2.672': attribute type 10 has an invalid length. [ 187.452596][ T14] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 187.455568][ T14] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 187.457463][ T6586] device syz_tun entered promiscuous mode [ 187.460111][ T14] usb 1-1: config 7 interface 128 has no altsetting 0 [ 187.475190][ T6586] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 187.477684][ T14] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 187.480108][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.482108][ T14] usb 1-1: Product: syz [ 187.493555][ T14] usb 1-1: Manufacturer: syz [ 187.494767][ T14] usb 1-1: SerialNumber: syz [ 187.504201][ T6576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.553974][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 187.828895][ T14] usb 1-1: MIDIStreaming interface descriptor not found [ 187.838423][ T14] usb 1-1: USB disconnect, device number 12 [ 188.878744][ T4287] udevd[4287]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.779637][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.782092][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.791735][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.794164][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.136309][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 193.175831][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.186580][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.558418][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 194.560778][ T6735] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 194.572866][ T6735] netlink: 172 bytes leftover after parsing attributes in process `syz.2.725'. [ 195.754790][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.763802][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.829457][ T6772] random: crng reseeded on system resumption [ 195.872874][ T6772] Restarting kernel threads ... done. [ 195.901008][ T6777] netlink: 'syz.0.738': attribute type 10 has an invalid length. [ 195.903199][ T6777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.738'. [ 195.951179][ T6777] team0: Port device geneve0 added [ 196.232444][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 196.234741][ T6813] netlink: 'syz.5.741': attribute type 1 has an invalid length. [ 196.242905][ T6813] netlink: 172 bytes leftover after parsing attributes in process `syz.5.741'. [ 196.531943][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.535533][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.864620][ T6865] netlink: 'syz.5.751': attribute type 10 has an invalid length. [ 197.867231][ T6865] netlink: 40 bytes leftover after parsing attributes in process `syz.5.751'. [ 197.894921][ T6865] team0: Port device geneve0 added [ 197.933420][ T6850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.935759][ T6850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.954417][ T6850] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 197.956279][ T6850] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 197.961486][ T6850] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.963216][ T6850] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 197.970475][ T6850] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 197.972509][ T6850] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 197.975359][ T6850] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 197.986808][ T6850] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 198.441658][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.450750][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.013555][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.015879][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.619140][ T6894] netlink: 'syz.4.765': attribute type 10 has an invalid length. [ 199.621413][ T6894] netlink: 40 bytes leftover after parsing attributes in process `syz.4.765'. [ 199.627584][ T6894] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 199.701851][ T4344] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 199.851151][ T4310] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.881144][ T4344] usb 1-1: Using ep0 maxpacket: 32 [ 199.884385][ T4344] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 199.886636][ T4344] usb 1-1: config 0 has no interface number 0 [ 199.889414][ T4344] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.892333][ T4344] usb 1-1: config 0 interface 85 has no altsetting 0 [ 199.896126][ T4344] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 199.898992][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.901017][ T4344] usb 1-1: Product: syz [ 199.902618][ T4344] usb 1-1: Manufacturer: syz [ 199.903762][ T4344] usb 1-1: SerialNumber: syz [ 199.917610][ T4344] usb 1-1: config 0 descriptor?? [ 199.973947][ T6902] trusted_key: encrypted_key: insufficient parameters specified [ 199.978618][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.989252][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.002773][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.006791][ T4299] Bluetooth: hci5: command 0x0c1a tx timeout [ 200.008408][ T4299] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.009909][ T4299] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.019591][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.532644][ T4344] appletouch 1-1:0.85: Geyser mode initialized. [ 200.538969][ T4344] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input4 [ 200.786298][ T4344] usb 1-1: USB disconnect, device number 13 [ 200.865448][ T4344] appletouch 1-1:0.85: input: appletouch disconnected [ 201.148207][ T6906] netlink: 'syz.3.769': attribute type 16 has an invalid length. [ 201.150227][ T6906] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.769'. [ 201.281366][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.285335][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.503348][ T6922] netlink: 'syz.2.777': attribute type 10 has an invalid length. [ 201.505692][ T6922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.777'. [ 201.582168][ T6922] team0: Port device geneve0 added [ 201.736795][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 201.870969][ T6934] netlink: 'syz.2.782': attribute type 16 has an invalid length. [ 201.872997][ T6934] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.782'. [ 201.885707][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.892091][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.927079][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 201.938068][ T22] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 201.940211][ T22] usb 1-1: config 0 has no interface number 0 [ 201.941756][ T22] usb 1-1: config 0 interface 19 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 201.944429][ T22] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 201.958982][ T22] usb 1-1: config 0 interface 19 altsetting 0 has an invalid endpoint with address 0x91, skipping [ 201.966125][ T22] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.976402][ T22] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 201.988731][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.990879][ T22] usb 1-1: Product: syz [ 201.991946][ T22] usb 1-1: Manufacturer: syz [ 201.993186][ T22] usb 1-1: SerialNumber: syz [ 202.005463][ T22] usb 1-1: config 0 descriptor?? [ 202.007395][ T6918] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.009393][ T6918] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.051542][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 202.051555][ T27] audit: type=1326 audit(2000000129.430:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.3.785" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5ad28 code=0x0 [ 202.087022][ T4310] Bluetooth: hci2: command 0x0406 tx timeout [ 202.088601][ T4310] Bluetooth: hci4: command 0x0406 tx timeout [ 202.090127][ T4310] Bluetooth: hci5: command 0x0406 tx timeout [ 202.243162][ T4344] usb 1-1: USB disconnect, device number 14 [ 202.518292][ T6945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.521080][ T6945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.608263][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.611082][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.994608][ T6964] netlink: 'syz.0.794': attribute type 16 has an invalid length. [ 204.002763][ T6964] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.794'. [ 204.371660][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.382298][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.946936][ T22] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 205.157261][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.162281][ T22] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 205.429382][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.432698][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.436141][ T22] usb 1-1: Product: syz [ 205.439075][ T22] usb 1-1: Manufacturer: syz [ 205.442600][ T22] usb 1-1: SerialNumber: syz [ 205.502830][ T6991] netlink: 'syz.4.806': attribute type 16 has an invalid length. [ 205.505037][ T6991] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.806'. [ 205.741581][ T6986] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 206.557386][ T7010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.559920][ T7010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.630366][ T6986] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 207.828222][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.851087][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.855890][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.864912][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.951601][ T22] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 207.953355][ T22] cdc_ncm 1-1:1.0: dwNtbInMaxSize=14 is too small. Using 2048 [ 207.955124][ T22] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 208.162482][ T22] cdc_ncm 1-1:1.0 eth4: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 208.186799][ T22] usb 1-1: USB disconnect, device number 15 [ 208.188934][ T22] cdc_ncm 1-1:1.0 eth4: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 209.823671][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.826129][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.039978][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.042356][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.694297][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.706381][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.708624][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.711126][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.098695][ T27] audit: type=1326 audit(2000000140.480:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7087 comm="syz.4.835" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa595ad28 code=0x0 [ 214.661046][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.663366][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.763599][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.768821][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.942919][ T7114] netlink: 'syz.3.845': attribute type 10 has an invalid length. [ 215.955510][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.845'. [ 216.018699][ T7114] team0: Port device geneve0 added [ 216.980398][ T7121] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.982994][ T7121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.985318][ T7121] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 216.987344][ T7121] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 216.997465][ T7121] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 216.999892][ T7121] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 217.001382][ T7121] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 217.007276][ T7121] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 217.009102][ T7121] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 217.016132][ T7121] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 217.136605][ T7142] loop2: detected capacity change from 0 to 7 [ 217.164439][ T7142] Dev loop2: unable to read RDB block 7 [ 217.166122][ T7142] loop2: unable to read partition table [ 217.202490][ T7142] loop2: partition table beyond EOD, truncated [ 217.204784][ T7142] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 217.220174][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.013679][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.106914][ T4299] Bluetooth: hci1: command 0x0c1a tx timeout [ 218.145218][ T7156] netlink: 592 bytes leftover after parsing attributes in process `syz.3.859'. [ 218.236333][ T7160] netlink: 'syz.0.862': attribute type 10 has an invalid length. [ 218.253069][ T7160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.862'. [ 218.261495][ T7163] netlink: 304 bytes leftover after parsing attributes in process `syz.5.861'. [ 219.046960][ T4299] Bluetooth: hci4: command 0x0c1a tx timeout [ 219.047005][ T4310] Bluetooth: hci5: command 0x0c1a tx timeout [ 219.050841][ T4299] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.755753][ T7188] tipc: Can't bind to reserved service type 1 [ 220.829784][ T7196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.832097][ T7196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.981143][ T7204] loop0: detected capacity change from 0 to 128 [ 221.136967][ T4300] Bluetooth: hci5: command 0x0406 tx timeout [ 221.138857][ T4300] Bluetooth: hci2: command 0x0406 tx timeout [ 221.140706][ T4300] Bluetooth: hci4: command 0x0406 tx timeout [ 221.154089][ T7204] affs: No valid root block on device loop0 [ 223.913200][ T7239] netlink: 'syz.0.892': attribute type 16 has an invalid length. [ 223.921731][ T7239] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.892'. [ 223.954812][ T7240] block device autoloading is deprecated and will be removed. [ 224.051108][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.053375][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.527110][ T4343] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 225.736218][ T4343] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.744269][ T4343] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 225.775692][ T4343] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.831982][ T4343] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 225.929063][ T4343] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 226.040774][ T4343] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.098202][ T4343] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.152678][ T4343] usb 1-1: Product: syz [ 226.180661][ T4343] usb 1-1: Manufacturer: syz [ 226.307516][ T4343] cdc_wdm 1-1:1.0: skipping garbage [ 226.308860][ T4343] cdc_wdm 1-1:1.0: skipping garbage [ 226.359962][ T4343] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 226.367109][ T4343] cdc_wdm 1-1:1.0: Unknown control protocol [ 226.374996][ T7271] loop2: detected capacity change from 0 to 256 [ 226.381630][ T7272] netlink: 'syz.4.904': attribute type 16 has an invalid length. [ 226.386070][ T7272] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.904'. [ 226.394448][ T7271] exfat: Deprecated parameter 'namecase' [ 226.447428][ T7271] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 226.547459][ T7277] block device autoloading is deprecated and will be removed. [ 226.575299][ T14] usb 1-1: USB disconnect, device number 16 [ 227.156813][ T14] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 227.173486][ T7291] loop2: detected capacity change from 0 to 40427 [ 227.196126][ T7291] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 227.199510][ T7291] F2FS-fs (loop2): Invalid uid value -1 [ 227.281655][ T7301] netlink: 'syz.3.915': attribute type 16 has an invalid length. [ 227.284006][ T7301] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.915'. [ 227.385763][ T4507] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.185321][ T7307] loop3: detected capacity change from 0 to 1024 [ 228.187510][ T14] usb 1-1: device descriptor read/all, error -71 [ 228.462151][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.464290][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.518946][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.521009][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.535532][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.538453][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.546323][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.554410][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.559045][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.561178][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.584205][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.586345][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.631521][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.633449][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.637530][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.639642][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.642902][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.644909][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.654056][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 228.656047][ T7307] hfsplus: request for non-existent node 33423360 in B*Tree [ 229.742998][ T7347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.753240][ T7347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.770472][ T7350] netlink: 'syz.0.943': attribute type 10 has an invalid length. [ 229.782556][ T7350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.943'. [ 229.988283][ T7347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.991045][ T7347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.467076][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.469447][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.876231][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.887130][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.838729][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.856912][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.295344][ T7441] loop0: detected capacity change from 0 to 512 [ 233.301829][ T7441] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 233.347299][ T7441] EXT4-fs (loop0): 1 orphan inode deleted [ 233.348792][ T7441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.354564][ T7441] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.369638][ T4380] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 233.372768][ T4380] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:7: Failed to release dquot type 1 [ 233.414735][ T4301] EXT4-fs (loop0): unmounting filesystem. [ 233.450714][ T4380] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 233.453323][ T4380] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:7: Failed to release dquot type 1 [ 233.698417][ T7451] netlink: 'syz.4.975': attribute type 10 has an invalid length. [ 233.700420][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.4.975'. [ 233.702587][ T7451] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 235.759802][ T7479] loop4: detected capacity change from 0 to 64 [ 235.881487][ T4509] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.042875][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.045441][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.908779][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.911139][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.465602][ T7520] loop2: detected capacity change from 0 to 7 [ 239.484388][ T7520] Dev loop2: unable to read RDB block 7 [ 239.485891][ T7520] loop2: unable to read partition table [ 239.489507][ T7520] loop2: partition table beyond EOD, truncated [ 239.491692][ T7520] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.788828][ T7550] netlink: 'syz.0.1022': attribute type 10 has an invalid length. [ 240.804886][ T7550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1022'. [ 242.963965][ T7567] loop2: detected capacity change from 0 to 7 [ 242.970391][ T7567] Dev loop2: unable to read RDB block 7 [ 242.971827][ T7567] loop2: unable to read partition table [ 242.979792][ T7567] loop2: partition table beyond EOD, truncated [ 242.981453][ T7567] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 242.987318][ T3913] Dev loop2: unable to read RDB block 7 [ 242.988754][ T3913] loop2: unable to read partition table [ 242.992724][ T3913] loop2: partition table beyond EOD, truncated [ 244.024530][ T7588] netlink: 'syz.4.1026': attribute type 10 has an invalid length. [ 244.026789][ T7588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1026'. [ 244.029031][ T7588] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 244.158248][ T27] audit: type=1326 audit(2000000171.540:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015ad28 code=0x7ffc0000 [ 244.163836][ T27] audit: type=1326 audit(2000000171.540:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015ad28 code=0x7ffc0000 [ 244.195692][ T27] audit: type=1326 audit(2000000171.570:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb015ad28 code=0x7ffc0000 [ 244.232149][ T27] audit: type=1326 audit(2000000171.570:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015ad28 code=0x7ffc0000 [ 244.238319][ T27] audit: type=1326 audit(2000000171.570:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015ad28 code=0x7ffc0000 [ 244.244086][ T27] audit: type=1326 audit(2000000171.590:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb015ad28 code=0x7ffc0000 [ 244.251786][ T27] audit: type=1326 audit(2000000171.590:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015ad28 code=0x7ffc0000 [ 244.257574][ T27] audit: type=1326 audit(2000000171.590:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015ad28 code=0x7ffc0000 [ 244.263014][ T27] audit: type=1326 audit(2000000171.590:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffb015ad28 code=0x7ffc0000 [ 244.278421][ T27] audit: type=1326 audit(2000000171.660:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.5.1029" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb015ad28 code=0x7ffc0000 [ 245.172244][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.174625][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.202485][ T7614] loop2: detected capacity change from 0 to 7 [ 245.212684][ T7614] Dev loop2: unable to read RDB block 7 [ 245.231007][ T7614] loop2: unable to read partition table [ 245.232597][ T7614] loop2: partition table beyond EOD, truncated [ 245.247046][ T7614] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 246.227986][ T7621] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 246.229918][ T7621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1041'. [ 247.384726][ T7652] loop2: detected capacity change from 0 to 7 [ 247.403018][ T7652] Dev loop2: unable to read RDB block 7 [ 247.405133][ T7652] loop2: unable to read partition table [ 247.408103][ T7652] loop2: partition table beyond EOD, truncated [ 247.409794][ T7652] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 247.839273][ T7672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.841445][ T7672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.955773][ T7676] netlink: 'syz.5.1060': attribute type 10 has an invalid length. [ 247.958115][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1060'. [ 248.809356][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.997571][ T7692] loop2: detected capacity change from 0 to 7 [ 249.001505][ T7692] Dev loop2: unable to read RDB block 7 [ 249.002990][ T7692] loop2: unable to read partition table [ 249.004431][ T7692] loop2: partition table beyond EOD, truncated [ 249.006013][ T7692] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 250.122189][ T7710] netlink: 'syz.4.1074': attribute type 10 has an invalid length. [ 250.124288][ T7710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1074'. [ 250.126834][ T7710] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 250.167945][ T4343] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 251.489723][ T4343] usb 1-1: config 0 has an invalid interface number: 242 but max is 0 [ 251.499880][ T4343] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.523019][ T4343] usb 1-1: config 0 has no interface number 0 [ 251.524588][ T4343] usb 1-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 251.543333][ T4343] usb 1-1: config 0 interface 242 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 251.546639][ T4343] usb 1-1: config 0 interface 242 has no altsetting 0 [ 251.569767][ T4343] usb 1-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 251.572061][ T4343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.594591][ T4343] usb 1-1: Product: syz [ 251.595780][ T4343] usb 1-1: Manufacturer: syz [ 251.610379][ T4343] usb 1-1: SerialNumber: syz [ 251.622591][ T4343] usb 1-1: config 0 descriptor?? [ 251.625626][ T7725] loop2: detected capacity change from 0 to 7 [ 251.654030][ T7725] Dev loop2: unable to read RDB block 7 [ 251.655708][ T7725] loop2: unable to read partition table [ 251.658252][ T7725] loop2: partition table beyond EOD, truncated [ 251.675675][ T7725] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.769349][ T3913] Dev loop2: unable to read RDB block 7 [ 251.770924][ T3913] loop2: unable to read partition table [ 251.773022][ T3913] loop2: partition table beyond EOD, truncated [ 251.851751][ T4343] usb 1-1: USB disconnect, device number 19 [ 252.137762][ T7745] netlink: 'syz.5.1087': attribute type 10 has an invalid length. [ 252.145590][ T7745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1087'. [ 253.439880][ T7757] loop5: detected capacity change from 0 to 2048 [ 253.488058][ T7757] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 253.494448][ T7757] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 253.514946][ T7757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.530880][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'. [ 254.664719][ T7779] netlink: 'syz.0.1099': attribute type 10 has an invalid length. [ 254.688198][ T7779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1099'. [ 255.924903][ T7795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.927369][ T7795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.108923][ T7802] netlink: 'syz.0.1109': attribute type 2 has an invalid length. [ 261.781638][ T7862] netlink: 'syz.3.1128': attribute type 3 has an invalid length. [ 261.795918][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.827733][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.626972][ T7920] netlink: 'syz.5.1150': attribute type 3 has an invalid length. [ 269.477694][ T7928] delete_channel: no stack [ 270.720342][ T7972] netlink: 'syz.4.1165': attribute type 29 has an invalid length. [ 270.732979][ T7972] netlink: 'syz.4.1165': attribute type 29 has an invalid length. [ 270.763298][ T7972] netlink: 'syz.4.1165': attribute type 29 has an invalid length. [ 270.782773][ T7972] netlink: 'syz.4.1165': attribute type 29 has an invalid length. [ 270.788864][ T7974] netlink: 'syz.3.1167': attribute type 3 has an invalid length. [ 271.814001][ T7986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.816383][ T7986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.143643][ T7989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.251380][ T7989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.349913][ T7989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.452233][ T7989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.779814][ T7991] delete_channel: no stack [ 273.712672][ T7989] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.724196][ T7989] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.753467][ T7989] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.786285][ T7989] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.871538][ T4483] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 273.873552][ T4483] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 273.896999][ T4483] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 276.399469][ T8038] device syzkaller0 entered promiscuous mode [ 277.002298][ T8033] delete_channel: no stack [ 277.962945][ T8045] delete_channel: no stack [ 280.298842][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.301450][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.966052][ T8086] delete_channel: no stack [ 283.694281][ T8128] delete_channel: no stack [ 286.094808][ T8165] delete_channel: no stack [ 289.706568][ T8205] delete_channel: no stack [ 292.150781][ T4300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.154830][ T4300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.158081][ T4300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.161318][ T4300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.163596][ T4300] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 292.165626][ T4300] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.475729][ T4310] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.479984][ T4310] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.482543][ T4310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.485723][ T4310] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.493338][ T4310] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 292.495522][ T4310] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.306018][ T8242] delete_channel: no stack [ 293.637877][ T8254] random: crng reseeded on system resumption [ 294.257550][ T4310] Bluetooth: hci0: command 0x0409 tx timeout [ 294.433191][ T8259] netlink: 'syz.2.1275': attribute type 16 has an invalid length. [ 294.435159][ T8259] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1275'. [ 294.566923][ T4300] Bluetooth: hci6: command 0x0409 tx timeout [ 295.435853][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 296.098554][ T8273] delete_channel: no stack [ 296.313687][ T8244] chnl_net:caif_netlink_parms(): no params data found [ 296.326983][ T4300] Bluetooth: hci0: command 0x041b tx timeout [ 296.400387][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.402367][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.405115][ T8244] device bridge_slave_0 entered promiscuous mode [ 296.415130][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.420483][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.429590][ T8244] device bridge_slave_1 entered promiscuous mode [ 296.471340][ T8293] netlink: 'syz.5.1284': attribute type 16 has an invalid length. [ 296.473270][ T8293] netlink: 63370 bytes leftover after parsing attributes in process `syz.5.1284'. [ 296.646973][ T4310] Bluetooth: hci6: command 0x041b tx timeout [ 296.753581][ T8307] input: syz0 as /devices/virtual/input/input5 [ 297.003296][ T8313] netlink: 'syz.4.1294': attribute type 16 has an invalid length. [ 297.005372][ T8313] netlink: 63370 bytes leftover after parsing attributes in process `syz.4.1294'. [ 297.021078][ T8244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.025449][ T8244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.041303][ T8244] team0: Port device team_slave_0 added [ 297.044544][ T8244] team0: Port device team_slave_1 added [ 297.057371][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.059267][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.065862][ T8244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.094341][ T4482] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.258951][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.260699][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.299791][ T8244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.306341][ T4482] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.333138][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1297'. [ 297.402437][ T4482] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.417153][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.418976][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.421577][ T8233] device bridge_slave_0 entered promiscuous mode [ 297.455444][ T8334] loop2: detected capacity change from 0 to 1024 [ 297.476373][ T8336] netlink: 'syz.4.1303': attribute type 16 has an invalid length. [ 297.478906][ T8336] netlink: 63370 bytes leftover after parsing attributes in process `syz.4.1303'. [ 297.487463][ T8334] ======================================================= [ 297.487463][ T8334] WARNING: The mand mount option has been deprecated and [ 297.487463][ T8334] and is ignored by this kernel. Remove the mand [ 297.487463][ T8334] option from the mount to silence this warning. [ 297.487463][ T8334] ======================================================= [ 297.536154][ T4482] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.548732][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.562062][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.566435][ T8233] device bridge_slave_1 entered promiscuous mode [ 297.616067][ T8334] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 297.668798][ T8244] device hsr_slave_0 entered promiscuous mode [ 297.683654][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 297.693092][ T8244] device hsr_slave_1 entered promiscuous mode [ 297.747046][ T8244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.749004][ T8244] Cannot create hsr debugfs directory [ 297.821416][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'. [ 297.835707][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.855256][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.973236][ T8233] team0: Port device team_slave_0 added [ 297.993084][ T8233] team0: Port device team_slave_1 added [ 298.057230][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.059460][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.132660][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.137476][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.152813][ T8233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.162277][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.164060][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.187876][ T8233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.378736][ T8233] device hsr_slave_0 entered promiscuous mode [ 298.407175][ T4300] Bluetooth: hci0: command 0x040f tx timeout [ 298.409113][ T8233] device hsr_slave_1 entered promiscuous mode [ 298.437614][ T8233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.439898][ T8233] Cannot create hsr debugfs directory [ 298.666523][ T8244] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 298.727017][ T4310] Bluetooth: hci6: command 0x040f tx timeout [ 298.812925][ T8244] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 298.925026][ T8244] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 299.028878][ T8244] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 299.635841][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.641494][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.160738][ T8233] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.450825][ T8233] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.469245][ T8233] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.487010][ T4310] Bluetooth: hci0: command 0x0419 tx timeout [ 300.590000][ T8233] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 300.612585][ T8462] fuse: Bad value for 'fd' [ 300.808135][ T4300] Bluetooth: hci6: command 0x0419 tx timeout [ 300.874227][ T8478] Soft offlining pfn 0x1ae101 at process virtual address 0x200000798000 [ 300.883053][ T8478] Memory failure: 0x1ae101: unhandlable page. [ 300.996056][ T8244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.095833][ T8244] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.108575][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.111293][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.485536][ T8233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.513188][ T8502] fuse: Bad value for 'fd' [ 301.521012][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.523609][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.526334][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.528283][ T4672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.534223][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.544029][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.563517][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.565454][ T4672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.567449][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.572300][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.575367][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.590028][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.592505][ T8233] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.642521][ T4482] device hsr_slave_0 left promiscuous mode [ 301.667453][ T4482] device hsr_slave_1 left promiscuous mode [ 301.746989][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.748921][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.751512][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.753621][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.757355][ T4482] device bridge_slave_1 left promiscuous mode [ 301.759125][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.798789][ T4482] device bridge_slave_0 left promiscuous mode [ 301.800334][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.921706][ T4482] device veth1_macvtap left promiscuous mode [ 301.923626][ T4482] device veth0_macvtap left promiscuous mode [ 301.925397][ T4482] device veth1_vlan left promiscuous mode [ 301.927782][ T4482] device veth0_vlan left promiscuous mode [ 302.025779][ T4482] bond1 (unregistering): Released all slaves [ 302.091658][ T4310] Bluetooth: hci5: command 0x0406 tx timeout [ 302.152717][ T4482] team0 (unregistering): Port device geneve0 removed [ 302.246513][ T8517] loop4: detected capacity change from 0 to 1024 [ 302.317071][ T5131] hfsplus: b-tree write err: -5, ino 4 [ 302.736148][ T8530] loop4: detected capacity change from 0 to 2048 [ 302.782662][ T8530] loop4: p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 304.170837][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 304.193314][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.330512][ T8560] loop4: detected capacity change from 0 to 64 [ 304.332613][ T8560] hfs: dir_umask requires a value [ 304.334178][ T8560] hfs: unable to parse mount options [ 304.392724][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 304.418095][ T8550] udevd[8550]: inotify_add_watch(7, /dev/loop4p18, 10) failed: No such file or directory [ 304.423819][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop4p19, 10) failed: No such file or directory [ 304.424331][ T4526] udevd[4526]: inotify_add_watch(7, /dev/loop4p23, 10) failed: No such file or directory [ 304.432408][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop4p26, 10) failed: No such file or directory [ 304.440129][ T4530] udevd[4530]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory [ 304.445921][ T4517] udevd[4517]: inotify_add_watch(7, /dev/loop4p21, 10) failed: No such file or directory [ 304.447902][ T4529] udevd[4529]: inotify_add_watch(7, /dev/loop4p22, 10) failed: No such file or directory [ 304.453680][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop4p27, 10) failed: No such file or directory [ 304.461944][ T8544] udevd[8544]: inotify_add_watch(7, /dev/loop4p25, 10) failed: No such file or directory [ 304.462929][ T4418] udevd[4418]: inotify_add_watch(7, /dev/loop4p28, 10) failed: No such file or directory [ 304.618232][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.778609][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.001004][ T8601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.003373][ T8601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.328367][ T8604] loop5: detected capacity change from 0 to 512 [ 306.366949][ T8604] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 306.369287][ T8604] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.416092][ T4573] EXT4-fs (loop5): unmounting filesystem. [ 307.198626][ T4482] bond0 (unregistering): Released all slaves [ 307.440954][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.443459][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.453863][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.457655][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.460156][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.461899][ T4672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.464170][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.467394][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.469683][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.471525][ T4672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.473563][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.489766][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1372'. [ 307.509684][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.512267][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.515041][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.539395][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.549669][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.567190][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.569746][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.587627][ T8244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.590340][ T8244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.594826][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.599599][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.602878][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.608363][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.632606][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.635125][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.638483][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.647374][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.650032][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.656267][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.660352][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.670437][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.680710][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.686459][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.694613][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.725444][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.013606][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.015620][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.035350][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.092604][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.098166][ T8661] loop2: detected capacity change from 0 to 8192 [ 308.107640][ T8233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.120026][ T8244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.148722][ T8661] loop2: p1 p2 p3 p4 [ 308.149748][ T8661] loop2: partition table partially beyond EOD, truncated [ 308.151567][ T8661] loop2: p1 start 51379968 is beyond EOD, truncated [ 308.153239][ T8661] loop2: p2 size 131026 extends beyond EOD, truncated [ 308.156218][ T8661] loop2: p3 size 167771980 extends beyond EOD, truncated [ 308.159392][ T8661] loop2: p4 size 81920 extends beyond EOD, truncated [ 308.531044][ T8685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.543888][ T8685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.631102][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.633578][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.668363][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.670864][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.674528][ T8244] device veth0_vlan entered promiscuous mode [ 308.685598][ T8244] device veth1_vlan entered promiscuous mode [ 308.699103][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.705351][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.709050][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.715519][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 308.753384][ T8244] device veth0_macvtap entered promiscuous mode [ 308.768382][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.777759][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.780307][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.787167][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.813377][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.817286][ T8244] device veth1_macvtap entered promiscuous mode [ 308.845804][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.850062][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.852761][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.855365][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.864558][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.869676][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.876482][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.884009][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.887268][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.894488][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.910667][ T8233] device veth0_vlan entered promiscuous mode [ 308.915086][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.918563][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.922530][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.937019][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.948671][ T8233] device veth1_vlan entered promiscuous mode [ 308.974483][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.982139][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.984650][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.002421][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.004890][ T8244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.007741][ T8244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.018587][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.027156][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 309.029802][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 309.033139][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.037337][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.048099][ T8233] device veth0_macvtap entered promiscuous mode [ 309.057074][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.059699][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.075027][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.086059][ T8244] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.093695][ T8244] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.095928][ T8244] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.110473][ T8244] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.138966][ T8233] device veth1_macvtap entered promiscuous mode [ 309.247662][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.250407][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.252815][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.255365][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.272178][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.274835][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.277488][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.280130][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.283885][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.294217][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.297179][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.303215][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.357198][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.359807][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.362161][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.379037][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.381656][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.397187][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.399678][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.407060][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.414342][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.423637][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.426275][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.455719][ T8725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.469887][ T5131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.472038][ T5131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.480331][ T8725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.489446][ T8233] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.494063][ T8233] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.497674][ T8233] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.500038][ T8233] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.514490][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 309.538747][ T4597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.548040][ T4597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.575756][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.660376][ T4597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.689326][ T4597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.732126][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 309.747574][ T415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.749833][ T415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.754522][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.249911][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.270701][ T8755] loop7: detected capacity change from 0 to 2048 [ 310.296463][ T8755] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.468752][ T8764] loop4: detected capacity change from 0 to 128 [ 310.509779][ T4482] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.630627][ T8772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.641366][ T8772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.699749][ T4482] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.858861][ T4482] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.936359][ T8785] loop4: detected capacity change from 0 to 16 [ 310.963622][ T8785] erofs: (device loop4): mounted with root inode @ nid 36. [ 311.024430][ T4482] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.270643][ T8802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.283069][ T8802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.764826][ T8826] loop2: detected capacity change from 0 to 1024 [ 312.824930][ T8826] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 312.991919][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 314.666276][ T8899] loop5: detected capacity change from 0 to 512 [ 314.721576][ T8899] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 314.748559][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.768864][ T8899] EXT4-fs (loop5): 1 truncate cleaned up [ 314.770341][ T8899] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 314.775204][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.815671][ T8907] loop4: detected capacity change from 0 to 4096 [ 314.848643][ T8899] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 314.906757][ T8907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 314.955141][ T8907] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 314.963965][ T4573] EXT4-fs (loop5): unmounting filesystem. [ 315.058823][ T8907] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 315.125510][ T4305] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /369/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 315.139792][ T4305] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 315.153265][ T4305] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 315.158420][ T4305] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /369/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 315.164415][ T4305] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 315.175794][ T4305] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 315.192740][ T4305] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /369/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 315.214835][ T4305] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 315.223218][ T4305] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 315.227016][ T4305] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /369/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 315.233155][ T4305] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 315.238784][ T4305] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 315.242137][ T4305] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /369/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 315.525994][ T4305] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 315.696453][ T4305] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 315.994913][ T4305] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 316.043176][ T4305] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 316.055901][ T4305] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 316.070581][ T4305] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 316.090181][ T4305] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 316.287254][ T8931] fuse: Bad value for 'group_id' [ 316.422839][ T8937] loop6: detected capacity change from 0 to 256 [ 317.406972][ T4482] device hsr_slave_0 left promiscuous mode [ 317.564984][ T4482] device hsr_slave_1 left promiscuous mode [ 317.636910][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.636993][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.647911][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.647961][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.653139][ T4482] device bridge_slave_1 left promiscuous mode [ 317.653272][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.678085][ T4482] device bridge_slave_0 left promiscuous mode [ 317.678184][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.846979][ T4482] device veth1_macvtap left promiscuous mode [ 317.847068][ T4482] device veth0_macvtap left promiscuous mode [ 317.847288][ T4482] device veth1_vlan left promiscuous mode [ 317.847356][ T4482] device veth0_vlan left promiscuous mode [ 318.268274][ T4482] team0 (unregistering): Port device geneve0 removed [ 318.302210][ T8970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.304526][ T8970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.460989][ T8975] fuse: Bad value for 'group_id' [ 319.781156][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.783522][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.329173][ T9003] fuse: Bad value for 'group_id' [ 320.443521][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.451566][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.555479][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1515'. [ 320.739798][ T9015] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 320.858207][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 321.516569][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 321.919762][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.159884][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.144471][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.146924][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.700749][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.703054][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.288771][ T4482] bond0 (unregistering): Released all slaves [ 325.321480][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.334411][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.540829][ T8996] bridge0: port 3(gretap0) entered blocking state [ 325.542969][ T8996] bridge0: port 3(gretap0) entered disabled state [ 325.556504][ T8996] device gretap0 entered promiscuous mode [ 325.566098][ T8996] bridge0: port 3(gretap0) entered blocking state [ 325.568116][ T8996] bridge0: port 3(gretap0) entered forwarding state [ 326.651292][ T4310] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.657345][ T4310] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.663382][ T4310] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.675220][ T4310] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.681686][ T4310] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.686964][ T4310] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.321712][ T9091] chnl_net:caif_netlink_parms(): no params data found [ 327.483382][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.485293][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.495930][ T9091] device bridge_slave_0 entered promiscuous mode [ 327.567461][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.569242][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.572036][ T9091] device bridge_slave_1 entered promiscuous mode [ 327.671172][ T9091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.694727][ T9091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.487542][ T9091] team0: Port device team_slave_0 added [ 328.497969][ T9091] team0: Port device team_slave_1 added [ 328.533098][ T4310] Bluetooth: hci5: unexpected event for opcode 0x0c5b [ 328.557775][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.559539][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.577272][ T9091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.581489][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.583277][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.630436][ T9091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.726989][ T4310] Bluetooth: hci1: command 0x0409 tx timeout [ 328.749087][ T9091] device hsr_slave_0 entered promiscuous mode [ 328.785854][ T9164] loop5: detected capacity change from 0 to 2048 [ 328.797495][ T9091] device hsr_slave_1 entered promiscuous mode [ 328.962561][ T9164] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 329.029778][ T4573] EXT4-fs (loop5): unmounting filesystem. [ 329.248292][ T9186] loop5: detected capacity change from 0 to 1024 [ 329.285837][ T9091] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 329.966625][ T9091] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 330.085362][ T9091] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 330.142952][ T9091] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 330.460196][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.471340][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.498065][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.514324][ T9091] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.556462][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.560103][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.562831][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.564606][ T4597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.592992][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.595486][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.608019][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.622005][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.623711][ T4597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.626013][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.647526][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.798995][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.802496][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.807127][ T4310] Bluetooth: hci1: command 0x041b tx timeout [ 330.810405][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.818616][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.825695][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.850855][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.865476][ T9091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.887880][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.891296][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.893914][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.914870][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.955865][ T9234] loop2: detected capacity change from 0 to 64 [ 330.962738][ T9234] hfs: request for non-existent node 1061 in B*Tree [ 330.964788][ T9234] hfs: request for non-existent node 1061 in B*Tree [ 330.966912][ T9234] hfs: get root inode failed [ 331.007888][ T8550] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 331.257005][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.263331][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.295814][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.309743][ T11] tipc: Left network mode [ 331.964910][ T9280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.979150][ T9280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.093694][ T9283] loop2: detected capacity change from 0 to 164 [ 332.149154][ T9285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.168698][ T9285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.304343][ T9289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.309959][ T9289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.409456][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.412215][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.472046][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.474612][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.477996][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.480590][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.484453][ T9091] device veth0_vlan entered promiscuous mode [ 332.499136][ T9091] device veth1_vlan entered promiscuous mode [ 332.590984][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.593362][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.595929][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.607266][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.613446][ T9091] device veth0_macvtap entered promiscuous mode [ 332.672676][ T9091] device veth1_macvtap entered promiscuous mode [ 332.675425][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.678478][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.700841][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.703643][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.706141][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.718393][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.721276][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.753489][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.756159][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.765014][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.770233][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.936873][ T4300] Bluetooth: hci1: command 0x040f tx timeout [ 333.049710][ T9316] loop5: detected capacity change from 0 to 32768 [ 333.057369][ T9316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1605 (9316) [ 333.068541][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.072649][ T9316] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 333.074575][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.075404][ T9316] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 333.079552][ T9316] BTRFS info (device loop5): max_inline at 0 [ 333.080902][ T9316] BTRFS info (device loop5): enabling disk space caching [ 333.082703][ T9316] BTRFS info (device loop5): setting nodatasum [ 333.084229][ T9316] BTRFS info (device loop5): turning off barriers [ 333.085736][ T9316] BTRFS info (device loop5): turning on flush-on-commit [ 333.087482][ T9316] BTRFS info (device loop5): doing ref verification [ 333.089172][ T9316] BTRFS info (device loop5): force clearing of disk cache [ 333.090975][ T9316] BTRFS info (device loop5): setting nodatacow, compression disabled [ 333.092003][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.093014][ T9316] BTRFS info (device loop5): max_inline at 4096 [ 333.095605][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.097146][ T9316] BTRFS info (device loop5): disk space caching is enabled [ 333.104616][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.114969][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.122447][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.125097][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.132707][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.135315][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.139082][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.141781][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.144554][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.169401][ T9328] loop6: detected capacity change from 0 to 256 [ 333.185282][ T9328] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 333.193728][ T9328] MINIX-fs: bad superblock or unable to read bitmaps [ 333.232054][ T9091] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.234238][ T9091] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.249658][ T9091] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.251978][ T9091] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.388768][ T9316] BTRFS info (device loop5): enabling ssd optimizations [ 333.395601][ T9316] BTRFS info (device loop5): rebuilding free space tree [ 333.429668][ T9316] BTRFS info (device loop5): disabling free space tree [ 333.431464][ T9316] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 333.434176][ T9316] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 333.539742][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.542317][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.590882][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.593325][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.723207][ T4573] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.000826][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.033696][ T4597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.035932][ T4597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.079237][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.183391][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.185995][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.489977][ T11] device hsr_slave_0 left promiscuous mode [ 334.629457][ T11] device hsr_slave_1 left promiscuous mode [ 334.717338][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.723416][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.734818][ T11] device bridge_slave_1 left promiscuous mode [ 334.743805][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.788710][ T11] device bridge_slave_0 left promiscuous mode [ 334.790558][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.966770][ T4310] Bluetooth: hci1: command 0x0419 tx timeout [ 335.494900][ T9413] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 335.823146][ T9418] loop8: detected capacity change from 0 to 40427 [ 335.834059][ T9418] F2FS-fs (loop8): invalid crc value [ 335.855520][ T9418] F2FS-fs (loop8): Found nat_bits in checkpoint [ 335.877891][ T9418] F2FS-fs (loop8): Start checkpoint disabled! [ 335.916091][ T9418] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 336.040857][ T9431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.043343][ T9431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.308393][ T9451] loop8: detected capacity change from 0 to 1024 [ 337.611759][ T9462] fuse: Unknown parameter 'grou00000000000000000000' [ 338.266255][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.568320][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.610115][ T9494] fuse: Unknown parameter 'grou00000000000000000000' [ 340.729740][ T11] bond0 (unregistering): Released all slaves [ 341.331821][ T9497] Set syz1 is full, maxelem 65536 reached [ 341.950561][ T9538] loop5: detected capacity change from 0 to 128 [ 342.041034][ T9538] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 342.043637][ T9538] FAT-fs (loop5): Filesystem has been set read-only [ 342.104392][ T9542] fuse: Unknown parameter 'group_i00000000000000000000' [ 342.178897][ T9548] loop5: detected capacity change from 0 to 1024 [ 342.193646][ T9548] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 342.258217][ T9548] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 342.283318][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1672'. [ 342.289378][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1672'. [ 342.291596][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1672'. [ 342.308543][ T9545] loop8: detected capacity change from 0 to 4096 [ 342.313364][ T9548] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 342.323712][ T9545] ntfs3: Unknown parameter 'hide_dot_files' [ 342.332917][ T9548] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.1671: missing EA_INODE flag [ 342.367748][ T9548] EXT4-fs (loop5): Remounting filesystem read-only [ 342.375286][ T9548] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1671: error while reading EA inode 11 err=-117 [ 342.394569][ T9548] EXT4-fs (loop5): Remounting filesystem read-only [ 342.416934][ T9548] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.1671: missing EA_INODE flag [ 342.457463][ T9548] EXT4-fs (loop5): Remounting filesystem read-only [ 342.463862][ T9548] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1671: error while reading EA inode 11 err=-117 [ 342.475228][ T9548] EXT4-fs (loop5): Remounting filesystem read-only [ 342.597553][ T4573] EXT4-fs (loop5): unmounting filesystem. [ 342.960366][ T9564] loop8: detected capacity change from 0 to 65536 [ 343.030693][ T9574] input: syz0 as /devices/virtual/input/input7 [ 343.163975][ T9564] XFS (loop8): Mounting V5 Filesystem [ 343.240058][ T9564] XFS (loop8): Ending clean mount [ 343.263490][ T9578] loop5: detected capacity change from 0 to 40427 [ 343.275806][ T9578] F2FS-fs (loop5): invalid crc value [ 343.291393][ T9578] F2FS-fs (loop5): Found nat_bits in checkpoint [ 343.316299][ T9091] XFS (loop8): Unmounting Filesystem [ 343.345152][ T9578] F2FS-fs (loop5): Start checkpoint disabled! [ 343.368028][ T9578] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 343.410694][ T9593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.414221][ T9593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.318101][ T9623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.335567][ T9623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.420432][ T9626] loop7: detected capacity change from 0 to 256 [ 344.432006][ T9626] exfat: Unknown parameter 'namecascard' [ 344.480818][ T8550] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.003539][ T9654] fuse: Unknown parameter 'group_i00000000000000000000' [ 345.658873][ T9684] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1704'. [ 345.667165][ T9684] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1704'. [ 345.681004][ T9684] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1704'. [ 345.973079][ T9699] fuse: Unknown parameter 'group_id00000000000000000000' [ 345.976186][ T9700] loop5: detected capacity change from 0 to 1024 [ 345.989721][ T9700] EXT4-fs: Ignoring removed orlov option [ 345.995460][ T9700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.060232][ T9700] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 346.340624][ T4573] EXT4-fs (loop5): unmounting filesystem. [ 346.489321][ T9724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.497613][ T9724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.238233][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1718'. [ 347.511833][ T9763] fuse: Unknown parameter 'group_id00000000000000000000' [ 348.004063][ T9791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.008144][ T9791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.294711][ T9815] fuse: Unknown parameter 'group_id00000000000000000000' [ 350.876097][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 350.882373][ T9858] fuse: Bad value for 'user_id' [ 352.316135][ T9894] fuse: Bad value for 'user_id' [ 352.445994][ T9898] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 352.539661][ T9905] loop8: detected capacity change from 0 to 1024 [ 352.591352][ T9905] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 352.676228][ T9091] EXT4-fs (loop8): unmounting filesystem. [ 352.898442][ T27] kauditd_printk_skb: 169 callbacks suppressed [ 352.898457][ T27] audit: type=1326 audit(2000000280.280:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.8.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d55ad28 code=0x7ffc0000 [ 352.931231][ T27] audit: type=1326 audit(2000000280.310:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.8.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff9d55ad28 code=0x7ffc0000 [ 352.952730][ T27] audit: type=1326 audit(2000000280.320:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.8.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d55ad28 code=0x7ffc0000 [ 352.991791][ T27] audit: type=1326 audit(2000000280.330:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.8.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=292 compat=0 ip=0xffff9d55ad28 code=0x7ffc0000 [ 353.027328][ T27] audit: type=1326 audit(2000000280.390:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.8.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d55ad28 code=0x7ffc0000 [ 353.059033][ T27] audit: type=1326 audit(2000000280.390:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.8.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d55ad28 code=0x7ffc0000 [ 353.454265][ T9943] fuse: Bad value for 'user_id' [ 354.397881][ T9962] loop2: detected capacity change from 0 to 256 [ 354.444538][ T9962] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 354.615880][ T9955] infiniband syz2: set active [ 354.621647][ T9962] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 354.669307][ T9955] infiniband syz2: added syz_tun [ 354.859629][ T9955] RDS/IB: syz2: added [ 354.878927][ T9955] smc: adding ib device syz2 with port count 1 [ 354.891844][ T9955] smc: ib device syz2 port 1 has pnetid [ 356.405776][T10003] loop7: detected capacity change from 0 to 128 [ 356.452403][T10003] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 356.454919][T10003] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 356.530340][ T8244] EXT4-fs (loop7): unmounting filesystem. [ 357.077967][T10026] loop2: detected capacity change from 0 to 1024 [ 357.137268][T10026] hfsplus: invalid extended attribute record [ 357.146363][T10026] [ 357.146998][T10026] ============================================ [ 357.148585][T10026] WARNING: possible recursive locking detected [ 357.150147][T10026] 6.1.131-syzkaller #0 Not tainted [ 357.151395][T10026] -------------------------------------------- [ 357.153054][T10026] syz.2.1797/10026 is trying to acquire lock: [ 357.154582][T10026] ffff0000dad1cb48 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x2c4/0x1168 [ 357.157426][T10026] [ 357.157426][T10026] but task is already holding lock: [ 357.159350][T10026] ffff0000dad1df88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x24c/0xa18 [ 357.162237][T10026] [ 357.162237][T10026] other info that might help us debug this: [ 357.164348][T10026] Possible unsafe locking scenario: [ 357.164348][T10026] [ 357.166286][T10026] CPU0 [ 357.167173][T10026] ---- [ 357.167975][T10026] lock(&HFSPLUS_I(inode)->extents_lock); [ 357.169542][T10026] lock(&HFSPLUS_I(inode)->extents_lock); [ 357.171089][T10026] [ 357.171089][T10026] *** DEADLOCK *** [ 357.171089][T10026] [ 357.173188][T10026] May be due to missing lock nesting notation [ 357.173188][T10026] [ 357.175310][T10026] 6 locks held by syz.2.1797/10026: [ 357.176704][T10026] #0: ffff0000fa18c460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 357.179150][T10026] #1: ffff0000dad1d400 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: do_unlinkat+0x2d0/0x70c [ 357.181798][T10026] #2: ffff0000dad1e180 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: vfs_unlink+0xd8/0x508 [ 357.184443][T10026] #3: ffff0000daeb2998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_unlink+0x144/0x6a0 [ 357.186913][T10026] #4: ffff0000dad1df88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x24c/0xa18 [ 357.189877][T10026] #5: ffff0000daeb28f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xcc/0x4b0 [ 357.192544][T10026] [ 357.192544][T10026] stack backtrace: [ 357.194117][T10026] CPU: 0 PID: 10026 Comm: syz.2.1797 Not tainted 6.1.131-syzkaller #0 [ 357.196256][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 357.198923][T10026] Call trace: [ 357.199781][T10026] dump_backtrace+0x1c8/0x1f4 [ 357.201003][T10026] show_stack+0x2c/0x3c [ 357.202103][T10026] dump_stack_lvl+0x108/0x170 [ 357.203347][T10026] dump_stack+0x1c/0x58 [ 357.204490][T10026] __lock_acquire+0x6310/0x7680 [ 357.205731][T10026] lock_acquire+0x26c/0x7cc [ 357.206924][T10026] __mutex_lock_common+0x190/0x21a0 [ 357.208349][T10026] mutex_lock_nested+0x38/0x44 [ 357.209601][T10026] hfsplus_get_block+0x2c4/0x1168 [ 357.210915][T10026] block_read_full_folio+0x2f4/0x98c [ 357.212306][T10026] hfsplus_read_folio+0x28/0x38 [ 357.213647][T10026] filemap_read_folio+0x14c/0x39c [ 357.214947][T10026] do_read_cache_folio+0x24c/0x544 [ 357.216296][T10026] read_cache_page+0x6c/0x180 [ 357.217491][T10026] hfsplus_block_free+0x11c/0x4b0 [ 357.218753][T10026] hfsplus_free_extents+0x148/0x8d4 [ 357.220173][T10026] hfsplus_file_truncate+0x674/0xa18 [ 357.221560][T10026] hfsplus_delete_inode+0x154/0x200 [ 357.222892][T10026] hfsplus_unlink+0x414/0x6a0 [ 357.224143][T10026] vfs_unlink+0x2f0/0x508 [ 357.225276][T10026] do_unlinkat+0x4cc/0x70c [ 357.226451][T10026] __arm64_sys_unlinkat+0xcc/0xfc [ 357.227752][T10026] invoke_syscall+0x98/0x2bc [ 357.228931][T10026] el0_svc_common+0x138/0x258 [ 357.230232][T10026] do_el0_svc+0x58/0x13c [ 357.231410][T10026] el0_svc+0x58/0x168 [ 357.232471][T10026] el0t_64_sync_handler+0x84/0xf0 [ 357.233816][T10026] el0t_64_sync+0x18c/0x190 [ 357.235048][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.748638][T10026] hfsplus: unable to mark blocks free: error -5 [ 357.751437][T10026] hfsplus: can't free extent [ 358.011519][T10031] caif:caif_disconnect_client(): nothing to disconnect