last executing test programs: 25m12.072820314s ago: executing program 32 (id=289): syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000)=@known='user.syz\x00', 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/169, 0xd1) 24m40.574064689s ago: executing program 33 (id=426): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) 22m6.005302603s ago: executing program 34 (id=1253): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltclass={0x494, 0x29, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff1}, {0x4, 0xfff1}, {0xf, 0x4}}, [@tclass_kind_options=@c_htb={{0x8}, {0x468, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0xf, 0x2, 0x3ff, 0x3, 0x200, 0x18}, {0xd, 0x0, 0x2, 0xffff, 0xfff0, 0x9}, 0x4, 0x81, 0x80, 0x4, 0x6b243130}}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x800, 0x6, 0x0, 0xfffffffb, 0x0, 0x80000a48, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x7, 0xbc, 0x3, 0x7, 0x6688, 0x401, 0xb, 0x9, 0x9, 0x2, 0x2, 0x6, 0xffffff45, 0x4, 0xc7a6, 0x6, 0x273, 0x4, 0x0, 0x3, 0xf, 0x3, 0x80000000, 0x1, 0x7, 0x7, 0x6, 0xffff, 0x0, 0x2, 0x7, 0x0, 0x1, 0x8001, 0x0, 0x0, 0xa3, 0x7, 0x8, 0x6, 0x5, 0x7, 0xfffff800, 0x6, 0x6, 0x4, 0xffff, 0xb9e0, 0x200, 0x7ff, 0x3, 0x5, 0xb102, 0x9, 0xfffffffe, 0x1, 0x2, 0x400, 0x1ff, 0x8, 0x6, 0x9, 0x10000, 0x6, 0x2, 0xa, 0x7fffffff, 0xfca2, 0xfffffffa, 0x40, 0x9, 0xffff191c, 0x401, 0x6, 0x1, 0x6, 0xbebc, 0x8, 0x66c5, 0x5, 0x6, 0x6, 0x7, 0x3bd, 0x2, 0x4, 0x3, 0xa, 0x81, 0x1, 0x1ff, 0x7, 0x9, 0x1, 0x6c, 0x0, 0x4, 0x9, 0x4, 0x100, 0x8b9, 0x401, 0x8, 0xa, 0x1, 0x2, 0x3, 0x4, 0x6, 0x3, 0x80000001, 0x7, 0x10001, 0x6, 0x2, 0xb, 0x2aa8, 0x800, 0x7, 0x7, 0x200, 0x5, 0xa, 0x5, 0x8, 0x8, 0x6, 0x7, 0x9, 0x7, 0x8, 0x1, 0x7, 0xc, 0xe, 0x9, 0x8, 0x5, 0x8, 0x4d3, 0x8, 0x8, 0x8, 0x4, 0x0, 0xfffff6f9, 0xe3c, 0x9, 0x101, 0x5a4c, 0x3, 0x46, 0x8, 0xf, 0x40, 0x8, 0x5, 0xf, 0xffff, 0x3859, 0x0, 0x3ff, 0x3, 0x9ed9, 0x2, 0x53, 0x100, 0x9, 0x101, 0x5, 0x8, 0x1, 0xffffff42, 0x8001, 0xfffff6c4, 0x801, 0x0, 0xf, 0x1ff, 0x1, 0x400, 0x62eb, 0x1, 0x6, 0x2, 0x355, 0x80000000, 0x6, 0xffffffbc, 0x0, 0x5, 0x5, 0x9, 0xfffff028, 0x81, 0x2, 0x8, 0x7, 0x5, 0x10, 0x7, 0x57, 0x1, 0x77f, 0xe, 0xf07, 0x7fff, 0x10001, 0x80, 0x400, 0x2, 0x7, 0xfff, 0xc, 0xd9d, 0x0, 0x1, 0x353, 0x9, 0x6, 0x9, 0x6, 0x3, 0x0, 0xc, 0x4, 0x6, 0x8, 0x9, 0x100, 0x48, 0xffff6824, 0x9, 0x0, 0x1, 0x8, 0x80, 0x2003, 0x2, 0xffff, 0x7, 0x3611, 0x3, 0x5]}, @TCA_HTB_PARMS={0x30, 0x1, {{0xfd, 0x1, 0x6, 0x3, 0x9}, {0x3, 0x0, 0x0, 0xe9, 0x700, 0x7fff}, 0x1, 0x3, 0x2, 0xf3b}}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x8081}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 21m39.292523803s ago: executing program 35 (id=1336): syz_open_dev$video4linux(&(0x7f0000000100), 0x1000000, 0x2000) unshare(0x2c040600) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 18m17.529869951s ago: executing program 36 (id=2097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000001900)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="c1c3"], 0xfdef) 18m16.201570005s ago: executing program 37 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000044001280110001006272696467655f736c617665000000002c00058005000a000000000008002200", @ANYRES32=r2, @ANYBLOB="05001e0000000000050007"], 0x64}}, 0x0) 16m45.605290548s ago: executing program 38 (id=2488): syz_mount_image$hpfs(&(0x7f00000001c0), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000400)={[{@eas_no}, {@chkdsk_no}, {@case_asis}, {@check_none}, {@timeshift={'timeshift', 0x3d, 0x101}}, {@chkdsk_always}]}, 0x1, 0x9e15, &(0x7f000000a040)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) 15m55.99959856s ago: executing program 39 (id=2630): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x8, 0xffff, 0x80, 0x4713, 0x17, "47ee9acad220ac72"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d33f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006) 15m35.429458972s ago: executing program 40 (id=2745): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x200001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "2063569a"}}) 14m38.216748256s ago: executing program 41 (id=2984): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r0 = memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r0, 0x0) 13m43.673379793s ago: executing program 42 (id=3326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0xc2, 0x0, 0x1}, {{@in=@multicast1, 0x1, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) 13m12.589784951s ago: executing program 43 (id=3421): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r2, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x5}, &(0x7f0000000000)=0x90) 12m26.96472413s ago: executing program 44 (id=3818): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m42.139611488s ago: executing program 45 (id=4134): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='O', 0x1, 0x8080, &(0x7f0000000280)={0xa, 0x4e1f, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x8, 0x4}, 0x8) 5m49.899892817s ago: executing program 9 (id=6704): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, 0x0, 0x0) 5m49.642553196s ago: executing program 9 (id=6705): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000100)=""/50, 0x32, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 5m49.638623945s ago: executing program 2 (id=6716): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x1000840, &(0x7f0000000100)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c756e695f786c6174edbe6316c1d374653d3114726f6469722c6572726f72733d7265656f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=default,shortname=mixed,codepage=866,nonumtail=0,rodir,shortname=winnt,uni_xlate=0,\x00'], 0x3, 0x356, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = epoll_create1(0x0) r1 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1a000, r1, &(0x7f0000000000)={0x11}) 5m49.367143246s ago: executing program 9 (id=6709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x80, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "1e1ccb9dd3bbc0ce1603e0fd7ac0b373f753803794e19d9aaf082e76c5650a33eb5e79b8181bdc5115f90d3ed11601e304e7c894e5a2053eda5672a98560c0ee89"}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 5m49.242826591s ago: executing program 2 (id=6711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x115881, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7ff) 5m49.110683099s ago: executing program 9 (id=6712): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 5m48.971190766s ago: executing program 2 (id=6713): bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x1a30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x33}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m48.964298582s ago: executing program 9 (id=6714): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa}) write(r1, &(0x7f0000000340), 0x11000) 5m48.651138824s ago: executing program 9 (id=6718): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) 5m47.369876958s ago: executing program 46 (id=6718): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) 5m46.678668758s ago: executing program 2 (id=6725): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 5m45.997533283s ago: executing program 5 (id=6728): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r2, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) 5m45.789023606s ago: executing program 2 (id=6729): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)={0x40, 0x7, 0x6, "ca2397070078"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x40, 0x15, 0x2, "53a3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m45.158740519s ago: executing program 2 (id=6730): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000280)={{0x77359400}}, 0x0) 5m43.849367034s ago: executing program 47 (id=6730): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000280)={{0x77359400}}, 0x0) 5m43.774653305s ago: executing program 5 (id=6735): keyctl$session_to_parent(0x12) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) add_key$fscrypt_v1(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) 5m43.4209552s ago: executing program 5 (id=6736): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x200) 5m42.7351871s ago: executing program 5 (id=6738): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 5m42.019929417s ago: executing program 5 (id=6742): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c0a2) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000a40)="b0", 0x1}], 0x1) 5m41.142879517s ago: executing program 5 (id=6745): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x100) r1 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) 5m39.588578882s ago: executing program 48 (id=6745): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x100) r1 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) 3m25.968263246s ago: executing program 1 (id=7685): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0xffff, @mcast2, 0x7}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) sendmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 3m25.386519428s ago: executing program 1 (id=7691): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@noblock_validity}, {@resuid}, {@mblk_io_submit}, {@noload}, {@nobarrier}, {@grpquota}, {@acl}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@grpjquota}, {@quota}, {@data_err_ignore}]}, 0xfd, 0x485, &(0x7f0000000800)="$eJzs3MtvVNUfAPDvnU5Ly+PX/hAfIGgVjcRHS8tDFm40mrjQaKILjKvaFoIM1NCaCCGKLjDGhSG6Ny5N/Atc6caoKxO3ujckxrABXY05M/eW6TADbZlhwPl8kgvn3HuHc7733DNz7jkzBNC3xtMfWcTmiPgtIkYjotx8wnj9ryuXzs7+fensbBbV6mt/ZellcfnS2dn8n6htyab6jmo1z29oUe75NyNmKpX5U3l+cunEO5OLp888dezEzNH5o/Mnpw8d2r9v19DB6QMdiTPFdXnH+ws7t7/4xoWXZw9feOunb1J9N+fHizg6abx+dVt6tNOF9diWhnRW7mFFWJMteX8frPX/0RiIkeVjo/HCRz2tHNBV1Wq12urzOXeuCvyHZdHrGgC9UXzQp+ffYrtFQ4/bwp/P1h+AUtxX8q1+pByl/JzBpufbThqOiMPn/vkybdGleQgAgEbfpfHPk63Gf6W4p+G8/+VrKGMR8f+I2BoRd0XEtoi4O6J27r0RcV+bcrI2+5tXSK4d/5Qurju4VUjjv2fyta2V479i9BdjA3luSy3+wezIscr83vya7InBDSk/teIlK33//K+fNe/7NJ9mH28Y/6UtlV+MBfN6XCw3TdDNzSzNdCT4FP+HETvKreLPltcBU9ttj4gd6yzj2ONf72x37Nr40zVujP86OrDOVP0q4rF6+5+LpvgLWdv1yamnD04fmByOyvzeyeKuuNbPv5x/tV35N27/7krtv7Hl/V+PPz0jZsMRi6fPHK+t1y6uvYzzv388267/b1vn/T+UvV5LD+X73ptZWjo1FTGUvZSyIyv2T199bZEvzk/x79nduv9vrT+e1a7E/RGRbuJdEfFARDyYt91DEfFwROy+Tvw/PvfI2+2OtW//68zKd1CKf65V+48st9hYSl1t/7UnBo7/8G278qurav/9tdSefM9q3v9WW8GbungAAABwhyjVvgOflSaW06XSxET9O/zbYmOpsrC49MSRhXdPztW/Kz8Wg6Vipmu0YT50Kp8bLvLTTfl9+bzxFwMjtfzE7EJlrtfBQ5/b1Kb/J38M9Lp2QNf5vRb0L/0f+pf+D/1L/4f+pf9DnxpqvfuDW10PoCfW/vk/3JV6ALee8T/0L/0f+pf+D32p7W/jSzf1k/87NVG+ParRMjFye1SjSESp60Vsihuf8/lgpwp95ZN6l+hE5Yvu1YmKlVf9n1msM7Gh5aEevikBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB00L8BAAD//4hb4Hg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/109, 0x6d) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 3m24.603417813s ago: executing program 1 (id=7697): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xfc, 0x0, 0x0, 0x9, 0x0, 0x4, 0xfe, 0xb, 0x5, 0x0, 0x2, 0x5, 0x1, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000021440)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f000001fb40)=""/248, 0xf8}], 0x1}, 0x6}], 0x1, 0x406, 0x0) 3m24.0867704s ago: executing program 1 (id=7703): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) 3m23.638457906s ago: executing program 1 (id=7709): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x40a9, &(0x7f00000002c0)="$eJzs1M+qEmEYB+DXITNyYUEX8O0ikBodk1xFRYsW5sJVywoDQQzKwk0Q3U1XFO3rGlpOOEePCucPctwceJ7FvHzzm3f4Br55m39/PouI2qMv8+kydtQjIouIslo9zSJqEdFbp83tgzfXdTp7+24yq7puBFd255z7335UpXHAq1qbjvt3I16niLi9+H3vxRE2yXXXePBmd1lWqn99ewD/FCc1W8+FuOB4nloNgVfPh2n0cpjyfr877nTTRpGK/OyuPM93ktqv1l56a3X5XpYHfN8lNtMr6vFvP8li/GGZvk4+fZ5+nKfHD4t2Gr1fpM6TduoMBr3jbQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOo2cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF0BAAD//9C8JcA=") timer_gettime(r0, 0x0) rt_sigaction(0xe, &(0x7f0000000100)={&(0x7f00000001c0)="f30f1efc66450f2832c482adbcaf07000000c4e1e00300aa9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) 3m23.067338722s ago: executing program 1 (id=7714): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x2c, r0, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 3m21.484921168s ago: executing program 49 (id=7714): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x2c, r0, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 2m10.71755965s ago: executing program 3 (id=8238): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 2m10.06749916s ago: executing program 3 (id=8241): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)={0x58, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2m9.553515533s ago: executing program 3 (id=8246): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x2d, @empty}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0x400, @remote, 0xb, 0x1}, 0x20) 2m9.182757443s ago: executing program 3 (id=8251): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m8.785208968s ago: executing program 3 (id=8253): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fbdbdf2505000000200001"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m8.214745227s ago: executing program 3 (id=8256): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x10) 2m7.013945858s ago: executing program 50 (id=8256): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x10) 4.925823879s ago: executing program 4 (id=9120): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@data_writeback}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@nojournal_checksum}, {@debug}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.724899355s ago: executing program 8 (id=9135): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0089364, &(0x7f0000001240)) 2.575702295s ago: executing program 0 (id=9137): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x0, 0x7, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000002c0)={0xffffef0b, 0x3, 0x1de, 0x7fffffff, 0x4, "1d0e004001008677000000001900", 0x2, 0x10001ff}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) 2.446740674s ago: executing program 6 (id=9138): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.271550724s ago: executing program 8 (id=9139): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) 2.185274623s ago: executing program 7 (id=9140): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x1, 0x7fff}, 0x7ff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2a381) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 2.082738776s ago: executing program 0 (id=9141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x9}]}}, 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 2.082505594s ago: executing program 6 (id=9142): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 1.76498185s ago: executing program 8 (id=9143): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)={0x30, r0, 0x1, 0x70bd2c, 0x25dedbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x63}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xf}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1.745437777s ago: executing program 0 (id=9144): r0 = mq_open(&(0x7f00000000c0)='e_1\x00', 0x8c2, 0x30, 0x0) r1 = epoll_create(0x1e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000000}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) 1.628715483s ago: executing program 4 (id=9145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x1000, 0xc, 0x9, 0x4, 0xc4, 0x0, 0x5, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x4, 0x4}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x0, 0x40, 0xfe, 0x5}, {0x0, 0xeeee8000, 0x0, 0x4, 0x4, 0x2, 0xa1, 0x20}, {0x2000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x122, 0x0, 0x800, 0x0, [0x80000001, 0x0, 0x1]}) 1.624966541s ago: executing program 6 (id=9146): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.56287743s ago: executing program 7 (id=9147): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x1a}, 0x40b7}], 0x1, 0x40002021, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) 1.475783791s ago: executing program 0 (id=9148): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000140)=0x34fd, 0x4) close(0x3) 1.304792307s ago: executing program 8 (id=9149): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001980)={'#! ', './file1/../file0', [], 0xa, "008b3d5978e08402783366b29e7b90ca03b6000093e32263377123191833a080046801b072838176570cc550b9"}, 0x41) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) 1.142613483s ago: executing program 6 (id=9150): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x9, 0x3ff, 0x8, 0x4}, 0x7, 0x1, 0x2, 0x1, 0x6, 0x11, 0xd, 0x7, 0x1, 0xfd, {0x0, 0xdffff801, 0x80000000, 0x5, 0x2, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 1.113225815s ago: executing program 7 (id=9151): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000600)={r2, 0x1}, 0xc) 1.096973447s ago: executing program 4 (id=9152): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.014546543s ago: executing program 0 (id=9153): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="f3", 0x1}, {0x0}], 0x2}, 0x48005) 922.72246ms ago: executing program 8 (id=9154): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1062920, &(0x7f0000000380)=ANY=[], 0x4, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) 742.950028ms ago: executing program 6 (id=9155): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) 666.604173ms ago: executing program 0 (id=9156): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close(0x3) 644.833423ms ago: executing program 7 (id=9157): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) 629.321816ms ago: executing program 4 (id=9158): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001000)="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", 0x5a9}, {&(0x7f0000000340)="c0187779bed5886fda610eb557a29fca13ffff60a2c7c4c983eb37", 0x1b}, {&(0x7f00000003c0)="1181c59ea8", 0x5}], 0x3, 0x0, 0x0, 0x200008c5}, 0x4001) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 522.635204ms ago: executing program 8 (id=9159): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x2, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 352.870994ms ago: executing program 6 (id=9160): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 241.711416ms ago: executing program 4 (id=9161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 186.745753ms ago: executing program 7 (id=9162): r0 = socket$unix(0x1, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001400d5c925bd7000fddbdf2501"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 26.905033ms ago: executing program 4 (id=9163): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=9164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): .475428][T20543] microsoft 0003:045E:07DA.0046: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1510.632105][T24109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.641683][T24109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.733187][T20543] usb 7-1: USB disconnect, device number 9 [ 1512.169401][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7427'. [ 1512.201154][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7427'. [ 1512.217311][T24147] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7427'. [ 1512.227590][T24147] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7427'. [ 1513.784499][T24175] netlink: 'syz.1.7438': attribute type 4 has an invalid length. [ 1513.792712][T24175] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.7438'. [ 1514.147309][T14061] IPVS: starting estimator thread 0... [ 1514.157879][T24181] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1514.241587][T24185] IPVS: using max 240 ests per chain, 12000 per kthread [ 1514.422299][T24179] loop6: detected capacity change from 0 to 4096 [ 1514.501481][T24192] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1514.591749][T24179] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1514.779934][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.786908][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1514.821037][T24194] nbd7: detected capacity change from 0 to 63 [ 1514.828242][T24197] block nbd7: NBD_DISCONNECT [ 1514.833479][T24197] block nbd7: Disconnected due to user request. [ 1514.840024][T24197] block nbd7: shutting down sockets [ 1515.314790][T24208] netlink: 'syz.7.7452': attribute type 3 has an invalid length. [ 1515.323529][T24208] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7452'. [ 1515.771572][T20543] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1515.976350][T20543] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.989572][T20543] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1516.045245][T20543] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1516.054753][T20543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1516.063366][T20543] usb 1-1: SerialNumber: syz [ 1516.344639][T20543] usb 1-1: 0:2 : does not exist [ 1516.431060][T20543] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1516.544471][T20543] usb 1-1: USB disconnect, device number 50 [ 1516.668386][T24224] netlink: 200 bytes leftover after parsing attributes in process `syz.6.7460'. [ 1517.300725][T14061] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1517.526051][T14061] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1517.539499][T14061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1517.551561][T14061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1517.561928][T14061] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1517.575455][T14061] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1517.584884][T14061] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.666629][T14061] usb 7-1: config 0 descriptor?? [ 1517.741079][T24242] loop1: detected capacity change from 0 to 4096 [ 1518.077501][T24242] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1518.169427][T14061] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1518.303801][T22385] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 1518.413708][T20543] usb 7-1: USB disconnect, device number 10 [ 1519.747368][T24280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7485'. [ 1519.996757][T14061] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1520.211260][T14061] usb 7-1: Using ep0 maxpacket: 16 [ 1520.244539][T14061] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1520.257421][T14061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1520.336618][T14061] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1520.346117][T14061] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.354743][T14061] usb 7-1: Product: syz [ 1520.359559][T14061] usb 7-1: Manufacturer: syz [ 1520.364800][T14061] usb 7-1: SerialNumber: syz [ 1520.464622][T14061] usb 7-1: config 0 descriptor?? [ 1520.499770][T14061] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1520.510281][T14061] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1521.027379][T24303] batadv_slave_1: entered promiscuous mode [ 1521.038020][T24303] batadv_slave_1: left promiscuous mode [ 1521.103375][T14061] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1521.116953][T14061] em28xx 7-1:0.0: Config register raw data: 0x41 [ 1521.212938][T24304] loop1: detected capacity change from 0 to 2048 [ 1521.276153][T24304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1521.321464][T24304] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.7496: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1521.326723][T14061] usb 7-1: USB disconnect, device number 11 [ 1521.346687][T14061] em28xx 7-1:0.0: Disconnecting em28xx [ 1521.406648][T24304] EXT4-fs (loop1): Remounting filesystem read-only [ 1521.428744][T14061] em28xx 7-1:0.0: Freeing device [ 1521.581763][T22385] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.680928][T20543] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1521.850013][T20543] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1521.857181][T20543] usb 8-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1521.866640][T20543] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.890876][T20543] usb 8-1: config 0 descriptor?? [ 1522.360597][T20543] sony 0003:1345:3008.0048: unbalanced delimiter at end of report description [ 1522.376585][T20543] sony 0003:1345:3008.0048: parse failed [ 1522.382947][T20543] sony 0003:1345:3008.0048: probe with driver sony failed with error -22 [ 1522.580115][T14061] usb 8-1: USB disconnect, device number 5 [ 1522.600660][ T5881] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1522.701864][T24333] nbd8: detected capacity change from 0 to 63 [ 1522.711470][T24334] block nbd8: NBD_DISCONNECT [ 1522.716561][T24334] block nbd8: Disconnected due to user request. [ 1522.723430][T24334] block nbd8: shutting down sockets [ 1522.767841][ T5881] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1522.779363][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1522.791346][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1522.801575][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1522.815045][ T5881] usb 7-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 1522.824581][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.864423][ T5881] usb 7-1: config 0 descriptor?? [ 1523.242339][T24342] netlink: 'syz.0.7511': attribute type 4 has an invalid length. [ 1523.307958][ T5881] wacom 0003:056A:0015.0049: unknown main item tag 0x0 [ 1523.315502][ T5881] wacom 0003:056A:0015.0049: unknown main item tag 0x0 [ 1523.397359][ T5881] wacom 0003:056A:0015.0049: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 1523.461567][ T5881] wacom 0003:056A:0015.0049: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.6-1/input0 [ 1523.475711][ T5881] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0015.0049/input/input100 [ 1523.647834][ T5881] usb 7-1: USB disconnect, device number 12 [ 1524.335543][T24362] loop7: detected capacity change from 0 to 1024 [ 1524.350218][T24362] EXT4-fs: Ignoring removed nobh option [ 1524.357153][T24362] EXT4-fs: Ignoring removed bh option [ 1524.421025][T24364] nbd6: detected capacity change from 0 to 63 [ 1524.430328][T24362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1524.451312][T24365] block nbd6: NBD_DISCONNECT [ 1524.456477][T24365] block nbd6: Disconnected due to user request. [ 1524.463230][T24365] block nbd6: shutting down sockets [ 1524.624812][T22415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.082971][T24376] loop7: detected capacity change from 0 to 2048 [ 1525.141248][T24379] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1525.216980][ T30] audit: type=1800 audit(1762671647.340:1182): pid=24376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7521" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1525.241362][T14061] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1525.426650][T14061] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1525.437066][T14061] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1525.480881][T14061] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1525.490594][T14061] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1525.498974][T14061] usb 1-1: Product: syz [ 1525.501713][T24384] netlink: 'syz.1.7526': attribute type 11 has an invalid length. [ 1525.503628][T14061] usb 1-1: Manufacturer: syz [ 1525.514661][T24384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7526'. [ 1525.518393][T14061] usb 1-1: SerialNumber: syz [ 1525.603107][T14061] usb 1-1: config 0 descriptor?? [ 1525.630791][T14061] usb 1-1: selecting invalid altsetting 0 [ 1525.919833][ T5881] usb 1-1: USB disconnect, device number 51 [ 1526.618706][T24397] input: syz1 as /devices/virtual/input/input103 [ 1527.036254][T24402] loop7: detected capacity change from 0 to 64 [ 1527.511389][T24411] netlink: 3488 bytes leftover after parsing attributes in process `syz.1.7539'. [ 1527.823494][T14061] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1527.988769][T24419] loop6: detected capacity change from 0 to 4096 [ 1528.000843][T14061] usb 8-1: Using ep0 maxpacket: 16 [ 1528.018843][T14061] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1528.030594][T14061] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1528.081356][T14061] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1528.091086][T14061] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.099293][T14061] usb 8-1: Product: syz [ 1528.104205][T14061] usb 8-1: Manufacturer: syz [ 1528.109003][T14061] usb 8-1: SerialNumber: syz [ 1528.157257][T14061] usb 8-1: config 0 descriptor?? [ 1528.186279][T24419] NILFS (loop6): mounting unchecked fs [ 1528.195980][T24419] NILFS (loop6): recovery required for readonly filesystem [ 1528.204467][T24419] NILFS (loop6): write access will be enabled during recovery [ 1528.222221][T24419] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1528.231125][T24419] NILFS (loop6): trying rollback from an earlier position [ 1528.267859][T24419] NILFS (loop6): norecovery option specified, skipping roll-forward recovery [ 1528.396706][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1528.406872][T14061] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input104 [ 1528.420789][T22088] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 1528.458280][T14061] imon:send_packet: packet tx failed (-71) [ 1528.487772][T14061] imon 8-1:0.0: panel buttons/knobs setup failed [ 1528.609175][T22088] usb 1-1: config 0 has an invalid interface number: 181 but max is 0 [ 1528.619145][T22088] usb 1-1: config 0 has no interface number 0 [ 1528.625793][T22088] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1528.635404][T22088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.668317][T22088] usb 1-1: config 0 descriptor?? [ 1528.697327][T14061] rc_core: IR keymap rc-imon-pad not found [ 1528.703699][T14061] Registered IR keymap rc-empty [ 1528.708920][T14061] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1528.719520][T14061] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1528.737925][T14061] imon:send_packet: packet tx failed (-71) [ 1528.761444][T14061] imon 8-1:0.0: remote input dev register failed [ 1528.768833][T14061] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 1528.799496][T14061] imon 8-1:0.0: unable to initialize intf0, err 0 [ 1528.806415][T14061] imon:imon_probe: failed to initialize context! [ 1528.813192][T14061] imon 8-1:0.0: unable to register, err -19 [ 1528.826804][T14061] usb 8-1: USB disconnect, device number 6 [ 1528.909896][ T5881] kernel read not supported for file /rfkill (pid: 5881 comm: kworker/1:5) [ 1528.951059][ T5881] usb 1-1: USB disconnect, device number 52 [ 1529.310914][T14061] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1529.604194][T14061] usb 8-1: Using ep0 maxpacket: 16 [ 1529.651652][T14061] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1529.664440][T14061] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1529.731738][T14061] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1529.741195][T14061] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.749418][T14061] usb 8-1: Product: syz [ 1529.754073][T14061] usb 8-1: Manufacturer: syz [ 1529.758871][T14061] usb 8-1: SerialNumber: syz [ 1529.776003][T14061] usb 8-1: config 0 descriptor?? [ 1529.856458][T24442] GUP no longer grows the stack in syz.1.7554 (24442): 80004000-8000a000 (80002000) [ 1529.866769][T24442] CPU: 0 UID: 0 PID: 24442 Comm: syz.1.7554 Tainted: G W syzkaller #0 PREEMPT(none) [ 1529.866937][T24442] Tainted: [W]=WARN [ 1529.866986][T24442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1529.867066][T24442] Call Trace: [ 1529.867120][T24442] [ 1529.867169][T24442] __dump_stack+0x26/0x30 [ 1529.867332][T24442] dump_stack_lvl+0x1df/0x270 [ 1529.867493][T24442] dump_stack+0x1e/0x25 [ 1529.867639][T24442] __get_user_pages+0x49e9/0x5e00 [ 1529.867824][T24442] ? kmsan_get_metadata+0xfb/0x160 [ 1529.867985][T24442] ? get_dump_page+0x571/0x590 [ 1529.868156][T24442] ? filter_irq_stacks+0x49/0x190 [ 1529.868330][T24442] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1529.868539][T24442] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1529.868763][T24442] get_user_pages_remote+0x468/0x13a0 [ 1529.868940][T24442] ? kmsan_get_metadata+0xfb/0x160 [ 1529.869089][T24442] ? access_remote_vm+0x4e/0x70 [ 1529.869217][T24442] __access_remote_vm+0x2f8/0xff0 [ 1529.869377][T24442] access_remote_vm+0x4e/0x70 [ 1529.869508][T24442] proc_pid_cmdline_read+0xa75/0x19e0 [ 1529.869728][T24442] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1529.869891][T24442] vfs_readv+0x931/0xf30 [ 1529.870079][T24442] ? kmsan_get_metadata+0xfb/0x160 [ 1529.870221][T24442] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1529.870379][T24442] __ia32_compat_sys_preadv+0x2da/0x540 [ 1529.870544][T24442] ia32_sys_call+0x28d3/0x4310 [ 1529.870729][T24442] __do_fast_syscall_32+0xb0/0x150 [ 1529.870910][T24442] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 1529.871082][T24442] do_fast_syscall_32+0x38/0x80 [ 1529.871334][T24442] do_SYSENTER_32+0x1f/0x30 [ 1529.871526][T24442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1529.871703][T24442] RIP: 0023:0xf7fa6539 [ 1529.871812][T24442] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1529.871936][T24442] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 1529.872064][T24442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1529.872156][T24442] RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000000 [ 1529.872236][T24442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.872319][T24442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1529.872402][T24442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.872522][T24442] [ 1530.441470][T14061] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input106 [ 1530.635764][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1530.644686][T14061] imon:send_packet: packet tx failed (-71) [ 1530.675203][T14061] imon 8-1:0.0: panel buttons/knobs setup failed [ 1530.780331][T24450] loop1: detected capacity change from 0 to 1024 [ 1530.823446][T24450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1530.845614][T24450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1530.929025][T24450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1530.952845][T14061] rc_core: IR keymap rc-imon-pad not found [ 1530.958930][T14061] Registered IR keymap rc-empty [ 1530.966474][T14061] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1530.976977][T14061] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1531.014570][T14061] imon:send_packet: packet tx failed (-71) [ 1531.042470][T14061] imon 8-1:0.0: remote input dev register failed [ 1531.051801][T14061] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 1531.080940][T14061] imon 8-1:0.0: unable to initialize intf0, err 0 [ 1531.087701][T14061] imon:imon_probe: failed to initialize context! [ 1531.094543][T14061] imon 8-1:0.0: unable to register, err -19 [ 1531.108911][T14061] usb 8-1: USB disconnect, device number 7 [ 1531.300130][T22385] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.717961][T24484] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1533.627693][T14061] kernel write not supported for file bpf-prog (pid: 14061 comm: kworker/0:9) [ 1534.099402][T24512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7581'. [ 1534.110356][T24512] 8021q: VLANs not supported on ip_vti0 [ 1534.537141][T24515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1535.392338][T21845] Bluetooth: hci4: command 0x0405 tx timeout [ 1535.461492][T14061] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 1535.671535][T14061] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.682117][T14061] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1535.748473][T14061] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1535.759597][T14061] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.768580][T14061] usb 9-1: Product: syz [ 1535.774110][T14061] usb 9-1: Manufacturer: syz [ 1535.778894][T14061] usb 9-1: SerialNumber: syz [ 1535.791889][ T5881] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1535.972461][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 1536.014516][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.025028][ T5881] usb 7-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 1536.035007][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.069144][T14061] usb 9-1: 0:2 : does not exist [ 1536.102780][ T5881] usb 7-1: config 0 descriptor?? [ 1536.139910][T14061] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1536.270229][T14061] usb 9-1: USB disconnect, device number 30 [ 1536.331657][T24549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7600'. [ 1536.797462][ T5881] usb 7-1: USB disconnect, device number 13 [ 1537.471906][T21845] Bluetooth: hci4: command 0x0405 tx timeout [ 1538.380309][T24590] loop7: detected capacity change from 0 to 1024 [ 1539.015837][T24600] batadv_slave_1: entered promiscuous mode [ 1539.043371][T24599] batadv_slave_1: left promiscuous mode [ 1539.200195][T22794] hfsplus: b-tree write err: -5, ino 4 [ 1540.699066][T24622] loop6: detected capacity change from 0 to 1024 [ 1540.715076][T24622] EXT4-fs (loop6): inodes count not valid: 2 vs 32 [ 1541.148738][T24631] sctp: [Deprecated]: syz.1.7636 (pid 24631) Use of int in maxseg socket option. [ 1541.148738][T24631] Use struct sctp_assoc_value instead [ 1541.577237][T22775] Bluetooth: hci5: Frame reassembly failed (-84) [ 1541.609917][T24637] Bluetooth: hci5: Frame reassembly failed (-84) [ 1541.733567][T22794] Bluetooth: hci6: Frame reassembly failed (-84) [ 1541.845716][ T5881] kernel read not supported for file /vcs (pid: 5881 comm: kworker/1:5) [ 1543.640701][T24643] Bluetooth: hci5: command 0x1003 tx timeout [ 1543.641314][T12119] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1543.790991][T21845] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1544.512913][T24683] syzkaller1: entered promiscuous mode [ 1544.518595][T24683] syzkaller1: entered allmulticast mode [ 1544.585828][T24686] overlayfs: upper fs does not support tmpfile. [ 1546.354619][T24716] netlink: 'syz.8.7674': attribute type 12 has an invalid length. [ 1546.363040][T24716] netlink: 'syz.8.7674': attribute type 29 has an invalid length. [ 1546.371150][T24716] netlink: 148 bytes leftover after parsing attributes in process `syz.8.7674'. [ 1546.380928][T24716] netlink: 'syz.8.7674': attribute type 2 has an invalid length. [ 1546.389853][T24716] netlink: 'syz.8.7674': attribute type 3 has an invalid length. [ 1546.398997][T24716] netlink: 15 bytes leftover after parsing attributes in process `syz.8.7674'. [ 1547.541650][T24737] bridge_slave_1: left allmulticast mode [ 1547.547513][T24737] bridge_slave_1: left promiscuous mode [ 1547.557857][T24737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.608770][T24737] bridge_slave_0: left allmulticast mode [ 1547.615886][T24737] bridge_slave_0: left promiscuous mode [ 1547.624839][T24737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.045502][T24744] loop6: detected capacity change from 0 to 256 [ 1548.058302][T24744] exfat: Bad value for 'uid' [ 1548.063625][T24744] exfat: Bad value for 'uid' [ 1548.267702][T24749] sctp: [Deprecated]: syz.7.7690 (pid 24749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1548.267702][T24749] Use struct sctp_sack_info instead [ 1548.303912][T24749] sctp: [Deprecated]: syz.7.7690 (pid 24749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1548.303912][T24749] Use struct sctp_sack_info instead [ 1548.383542][T24751] loop1: detected capacity change from 0 to 512 [ 1548.393343][T24751] EXT4-fs: Ignoring removed mblk_io_submit option [ 1548.451182][T24751] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.7691: Invalid inode bitmap blk 4 in block_group 0 [ 1548.481118][T24751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1548.822878][T22385] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.906893][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7705'. [ 1549.951206][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7705'. [ 1550.368239][T22794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.525688][T22794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.720037][T22794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.868329][T22794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.196114][T22794] bridge_slave_1: left allmulticast mode [ 1551.202444][T22794] bridge_slave_1: left promiscuous mode [ 1551.210125][T22794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.244558][T22794] bridge_slave_0: left allmulticast mode [ 1551.250619][T22794] bridge_slave_0: left promiscuous mode [ 1551.257268][T22794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.789110][T22794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.837417][T22794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.861223][T22794] bond0 (unregistering): Released all slaves [ 1551.954862][T22794] tipc: Left network mode [ 1552.360905][T22794] hsr_slave_0: left promiscuous mode [ 1552.382671][T20543] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1552.399417][T22794] hsr_slave_1: left promiscuous mode [ 1552.407538][T22794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.415588][T22794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.469712][T22794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.477517][T22794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.552771][T22794] veth1_macvtap: left promiscuous mode [ 1552.558520][T22794] veth0_macvtap: left promiscuous mode [ 1552.603484][T20543] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.613954][T20543] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1552.697704][T20543] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1552.707303][T20543] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1552.715688][T20543] usb 9-1: SerialNumber: syz [ 1552.938137][T12119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1552.953793][T12119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1552.967777][T12119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1553.000296][T12119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1553.016507][T12119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1553.038385][T20543] usb 9-1: 0:2 : does not exist [ 1553.112468][T20543] usb 9-1: USB disconnect, device number 31 [ 1553.249685][ T4338] Bluetooth: hci5: Frame reassembly failed (-84) [ 1553.350918][T22794] team0 (unregistering): Port device team_slave_1 removed [ 1553.409154][T22794] team0 (unregistering): Port device team_slave_0 removed [ 1554.053753][T22794] IPVS: stop unused estimator thread 0... [ 1554.444618][T24815] chnl_net:caif_netlink_parms(): no params data found [ 1555.174489][T12119] Bluetooth: hci2: command tx timeout [ 1555.314721][T21845] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1555.452163][T24815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.459811][T24815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.468422][T24815] bridge_slave_0: entered allmulticast mode [ 1555.477755][T24815] bridge_slave_0: entered promiscuous mode [ 1555.534939][T24815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.543183][T24815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.551091][T24815] bridge_slave_1: entered allmulticast mode [ 1555.560613][T24815] bridge_slave_1: entered promiscuous mode [ 1555.834911][T24815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1555.887919][T24815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.089302][T24815] team0: Port device team_slave_0 added [ 1556.125581][T24815] team0: Port device team_slave_1 added [ 1556.305812][T24815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.313134][T24815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.340996][T24815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.438174][T24815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.446263][T24815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.474350][T24815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.492041][T24858] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7738'. [ 1556.780325][T24815] hsr_slave_0: entered promiscuous mode [ 1556.790686][T24815] hsr_slave_1: entered promiscuous mode [ 1556.799197][T24815] debugfs: 'hsr0' already exists in 'hsr' [ 1556.805254][T24815] Cannot create hsr debugfs directory [ 1557.207316][T24869] syzkaller1: entered promiscuous mode [ 1557.214183][T24869] syzkaller1: entered allmulticast mode [ 1557.252064][T12119] Bluetooth: hci2: command tx timeout [ 1557.407494][T22791] Bluetooth: hci5: Frame reassembly failed (-84) [ 1558.069233][T24815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1558.110629][T24815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1558.132762][T24815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1558.159864][T24815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1558.599384][T24815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.721591][T24815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.747864][T22794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.755423][T22794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1558.804636][T22794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.812282][T22794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1558.838605][T14061] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1559.010749][T14061] usb 9-1: Using ep0 maxpacket: 16 [ 1559.022163][T14061] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 1559.031203][T14061] usb 9-1: config 1 has no interface number 0 [ 1559.037487][T14061] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1559.047879][T14061] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1559.058293][T14061] usb 9-1: config 1 interface 105 has no altsetting 0 [ 1559.162149][T14061] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1559.171870][T14061] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.180056][T14061] usb 9-1: Product: syz [ 1559.184612][T14061] usb 9-1: Manufacturer: syz [ 1559.189464][T14061] usb 9-1: SerialNumber: syz [ 1559.251990][T24893] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1559.271148][T24893] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1559.313140][T21845] Bluetooth: hci2: command tx timeout [ 1559.471270][T21845] Bluetooth: hci5: command 0x1003 tx timeout [ 1559.477576][T12119] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1559.488438][T20543] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1559.658943][T20543] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.669584][T20543] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1559.701345][T20543] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1559.712078][T20543] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1559.720288][T20543] usb 8-1: SerialNumber: syz [ 1559.724114][T24893] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1559.755634][T24893] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1559.988999][T20543] usb 8-1: 0:2 : does not exist [ 1559.995679][T20543] usb 8-1: unit 255 not found! [ 1560.069689][T20543] usb 8-1: USB disconnect, device number 8 [ 1560.106051][T24815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1560.407467][T14061] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1560.434883][T14061] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1560.491974][T14061] aqc111 9-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 3a:eb:07:59:9e:b6 [ 1560.522074][T14061] usb 9-1: USB disconnect, device number 32 [ 1560.531923][T14061] aqc111 9-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1560.581624][T24815] veth0_vlan: entered promiscuous mode [ 1560.630049][T14061] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1560.642185][T14061] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1560.653024][T14061] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1560.679896][T24815] veth1_vlan: entered promiscuous mode [ 1560.860199][T24815] veth0_macvtap: entered promiscuous mode [ 1560.891262][T24815] veth1_macvtap: entered promiscuous mode [ 1560.895082][T24915] loop6: detected capacity change from 0 to 256 [ 1560.931609][T24915] exfat: Deprecated parameter 'utf8' [ 1560.973349][T24815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1561.009714][T24815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1561.079421][ T4338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.133063][T24915] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1561.157035][T22805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.190237][T22805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.221056][T22805] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.393482][T12119] Bluetooth: hci2: command tx timeout [ 1563.163539][T24947] IPVS: Scheduler module ip_vs_sip not found [ 1563.607500][T24957] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1564.745225][T24983] netlink: 'syz.6.7780': attribute type 83 has an invalid length. [ 1565.572154][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.580270][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.765026][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.773281][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.888242][T25001] loop7: detected capacity change from 0 to 512 [ 1565.985119][T25001] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.7787: inode has both inline data and extents flags [ 1566.036180][T25001] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.7787: couldn't read orphan inode 15 (err -117) [ 1566.106489][T25001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1566.145498][T25009] syzkaller1: entered promiscuous mode [ 1566.151941][T25009] syzkaller1: entered allmulticast mode [ 1566.223012][T20543] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1566.348143][T22415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1566.402826][T20543] usb 9-1: Using ep0 maxpacket: 16 [ 1566.416867][T20543] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.427648][T20543] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1566.441183][T20543] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1566.451290][T20543] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1566.461324][T20543] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1566.482190][T20543] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1566.491679][T20543] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1566.499892][T20543] usb 9-1: Manufacturer: syz [ 1566.519555][T20543] usb 9-1: config 0 descriptor?? [ 1566.532335][T22088] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1566.609167][ T30] audit: type=1326 audit(1762671688.730:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25014 comm="syz.0.7793" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4539 code=0x0 [ 1566.629946][T25017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1566.716961][T22088] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.728674][T22088] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.738983][T22088] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1566.748948][T22088] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.777738][T22088] usb 7-1: config 0 descriptor?? [ 1566.980889][T20543] rc_core: IR keymap rc-hauppauge not found [ 1566.987052][T20543] Registered IR keymap rc-empty [ 1566.997284][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.032790][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.062155][T20543] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1567.076676][T20543] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input109 [ 1567.101881][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.146966][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.186875][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.211384][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.226295][T22088] pyra 0003:1E7D:2CF6.004B: unknown main item tag 0x2 [ 1567.233905][T22088] pyra 0003:1E7D:2CF6.004B: unknown main item tag 0x0 [ 1567.241151][T22088] pyra 0003:1E7D:2CF6.004B: unexpected long global item [ 1567.242079][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.256207][T22088] pyra 0003:1E7D:2CF6.004B: parse failed [ 1567.263272][T22088] pyra 0003:1E7D:2CF6.004B: probe with driver pyra failed with error -22 [ 1567.281329][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.327620][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.361516][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.388635][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.411027][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.427305][ T5881] usb 7-1: USB disconnect, device number 14 [ 1567.441053][T20543] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1567.463416][T20543] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1567.473527][T20543] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1567.505571][T20543] usb 9-1: USB disconnect, device number 33 [ 1567.560311][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804db6a200: rx timeout, send abort [ 1568.068875][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804db6a200: abort rx timeout. Force session deactivation [ 1568.557857][T25047] loop6: detected capacity change from 0 to 128 [ 1568.565881][T25048] binder: 25046:25048 ioctl c0306201 0 returned -14 [ 1568.582454][T25048] binder: 25046:25048 ioctl 4080aea2 0 returned -22 [ 1568.598268][T25047] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1568.612209][T20543] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1568.644803][T25047] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1568.719488][ T30] audit: type=1326 audit(1762671690.830:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25050 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1568.744109][ T30] audit: type=1326 audit(1762671690.830:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25050 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1568.823707][T20543] usb 9-1: Using ep0 maxpacket: 8 [ 1568.855744][T22448] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1568.866121][T20543] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1568.877139][T20543] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1568.905222][ T30] audit: type=1326 audit(1762671690.920:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25050 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1568.931114][ T30] audit: type=1326 audit(1762671690.950:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25050 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1568.954215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.961411][ T30] audit: type=1326 audit(1762671690.970:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25050 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1568.984294][ T30] audit: type=1326 audit(1762671691.020:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25050 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1569.006560][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.013162][ T30] audit: type=1326 audit(1762671691.020:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25050 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1569.035398][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.044313][ T30] audit: type=1326 audit(1762671691.020:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25050 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1569.066968][ T30] audit: type=1326 audit(1762671691.030:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25050 comm="syz.7.7808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1569.089232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.098240][T20543] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1569.107712][T20543] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.116129][T20543] usb 9-1: Product: syz [ 1569.120643][T20543] usb 9-1: Manufacturer: syz [ 1569.125430][T20543] usb 9-1: SerialNumber: syz [ 1569.138853][T20543] usb 9-1: config 0 descriptor?? [ 1569.738438][T25041] delete_channel: no stack [ 1569.749735][T20543] usb 9-1: USB disconnect, device number 34 [ 1570.270919][T20543] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1570.483230][T20543] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1570.493005][T20543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.501420][T20543] usb 1-1: Product: syz [ 1570.505767][T20543] usb 1-1: Manufacturer: syz [ 1570.510665][T20543] usb 1-1: SerialNumber: syz [ 1570.589026][T20543] usb 1-1: config 0 descriptor?? [ 1571.310047][T20543] mos7840 1-1:0.0: required endpoints missing [ 1571.334222][T20543] usb 1-1: USB disconnect, device number 53 [ 1573.750887][T20543] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1573.835394][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7845'. [ 1573.947763][T20543] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.958551][T20543] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1574.002942][T20543] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1574.013054][T20543] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1574.022225][T20543] usb 8-1: SerialNumber: syz [ 1574.275791][T20543] usb 8-1: 0:2 : does not exist [ 1574.315049][T20543] usb 8-1: USB disconnect, device number 9 [ 1574.363460][T22088] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1574.550823][T22088] usb 1-1: Using ep0 maxpacket: 16 [ 1574.591278][T22088] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1574.600851][T22088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.609060][T22088] usb 1-1: Product: syz [ 1574.613629][T22088] usb 1-1: Manufacturer: syz [ 1574.618393][T22088] usb 1-1: SerialNumber: syz [ 1574.684682][T22088] usb 1-1: config 0 descriptor?? [ 1574.782224][T25145] loop3: detected capacity change from 0 to 512 [ 1574.793456][T25145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1574.803278][T25145] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1574.810783][T25145] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1574.895479][T25145] EXT4-fs (loop3): 1 truncate cleaned up [ 1574.903632][T25145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1574.961974][T25145] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1575.108268][T24815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.147376][T22088] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1575.163232][T22088] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1575.201866][T22088] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1575.210154][T22088] usb 1-1: media controller created [ 1575.278808][T22088] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1575.344928][T25132] dtv5100: wlen = 65, aborting. [ 1575.385471][T22088] zl10353_read_register: readreg error (reg=127, ret==0) [ 1575.393324][T22088] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1575.401527][T22088] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1575.432668][T22088] usb 1-1: USB disconnect, device number 54 [ 1575.569419][T22088] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1576.214858][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.222277][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.394553][T25170] bond0: entered promiscuous mode [ 1576.401923][T25170] bond_slave_0: entered promiscuous mode [ 1576.412278][T25170] bond_slave_1: entered promiscuous mode [ 1576.427547][T25170] batadv0: entered promiscuous mode [ 1576.440759][T25170] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1576.610295][T25173] syz.7.7864 (25173): /proc/25172/oom_adj is deprecated, please use /proc/25172/oom_score_adj instead. [ 1576.666750][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7865'. [ 1576.692033][T25175] vlan2: entered allmulticast mode [ 1576.698558][T25175] bridge0: port 3(vlan2) entered blocking state [ 1576.707870][T25175] bridge0: port 3(vlan2) entered disabled state [ 1576.721526][T25175] vlan2: entered promiscuous mode [ 1577.736232][T25194] netlink: 'syz.6.7875': attribute type 2 has an invalid length. [ 1577.744488][T25194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7875'. [ 1577.753808][T25194] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7875'. [ 1577.763207][T25194] netlink: 'syz.6.7875': attribute type 2 has an invalid length. [ 1577.771594][T25194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7875'. [ 1578.161282][T25204] kernel read not supported for file /üÿÿÿ (pid: 25204 comm: syz.8.7878) [ 1578.172128][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1578.172201][ T30] audit: type=1800 audit(1762671700.300:1198): pid=25204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7878" name=FCFFFFFF20 dev="mqueue" ino=100446 res=0 errno=0 [ 1579.032019][T25220] loop3: detected capacity change from 0 to 512 [ 1579.105174][T25220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1579.351286][T24815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.421375][T22088] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1579.606095][T22088] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.616271][T22088] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1579.629652][T22088] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1579.639246][T22088] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.782170][T22088] usb 9-1: config 0 descriptor?? [ 1580.258718][T22088] kovaplus 0003:1E7D:2D50.004C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.8-1/input0 [ 1580.834135][T22088] kovaplus 0003:1E7D:2D50.004C: couldn't init struct kovaplus_device [ 1580.843198][T22088] kovaplus 0003:1E7D:2D50.004C: couldn't install mouse [ 1580.854182][T22088] kovaplus 0003:1E7D:2D50.004C: probe with driver kovaplus failed with error -71 [ 1580.869472][T22088] usb 9-1: USB disconnect, device number 35 [ 1582.399598][T25285] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1582.634165][T25287] loop6: detected capacity change from 0 to 1024 [ 1582.739955][T25287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7913'. [ 1582.781506][T25287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7913'. [ 1582.994841][T22805] hfsplus: b-tree write err: -5, ino 4 [ 1584.026012][T25306] loop6: detected capacity change from 0 to 2048 [ 1584.110043][T25306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1584.211454][ T30] audit: type=1800 audit(1762671706.330:1199): pid=25306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7922" name="file1" dev="loop6" ino=1367 res=0 errno=0 [ 1584.329404][T25313] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1584.816945][T25324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1585.145303][T25329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7931'. [ 1585.831128][T22088] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1586.010638][T22088] usb 9-1: Using ep0 maxpacket: 32 [ 1586.026578][T22088] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1586.040034][T22088] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1586.050969][T22088] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1586.060226][T22088] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.101772][T22088] usb 9-1: config 0 descriptor?? [ 1586.112584][T22088] hub 9-1:0.0: USB hub found [ 1586.335673][T22088] hub 9-1:0.0: 1 port detected [ 1586.962371][T22088] hub 9-1:0.0: activate --> -90 [ 1587.174494][T14061] usb 9-1: USB disconnect, device number 36 [ 1587.180981][T22088] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1587.399944][T25365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7948'. [ 1588.282647][ T5881] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1588.447036][ T5881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.458570][ T5881] usb 9-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1588.467974][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.486437][ T5881] usb 9-1: config 0 descriptor?? [ 1588.514642][T25387] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7959'. [ 1588.928012][ T5881] cherry 0003:046A:0023.004D: unbalanced delimiter at end of report description [ 1588.963969][ T5881] cherry 0003:046A:0023.004D: probe with driver cherry failed with error -22 [ 1589.145420][ T5881] usb 9-1: USB disconnect, device number 37 [ 1589.876319][T25409] netlink: 'syz.0.7969': attribute type 27 has an invalid length. [ 1590.062825][T25409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.147292][T25409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1590.190266][T25414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1590.631704][T25424] tipc: MTU too low for tipc bearer [ 1591.045619][T25435] misc userio: Begin command sent, but we're already running [ 1591.323164][T25441] loop7: detected capacity change from 0 to 16 [ 1591.352445][T25441] erofs (device loop7): mounted with root inode @ nid 36. [ 1591.375514][T25441] erofs (device loop7): readahead error at folio 2 @ nid 89 [ 1591.398187][T12119] erofs (device loop7): failed to decompress 7514 in[4096, 0] out[8192] [ 1591.414829][T25441] erofs (device loop7): failed to decompress 7514 in[4096, 0] out[8192] [ 1591.441066][T25441] erofs (device loop7): read error -117 @ 1 of nid 89 [ 1591.457345][ T30] audit: type=1800 audit(1762671713.570:1200): pid=25441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7982" name="file3" dev="loop7" ino=89 res=0 errno=0 [ 1591.615387][T25447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1592.300824][T22088] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1592.499195][T22088] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1592.511491][T22088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.522781][T22088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.523308][T25458] veth0_vlan: entered allmulticast mode [ 1592.532829][T22088] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1592.670304][T22088] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1592.681428][T22088] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1592.691552][T22088] usb 1-1: Manufacturer: syz [ 1592.704313][T25460] veth0_vlan: left promiscuous mode [ 1592.714001][T25460] veth0_vlan: entered promiscuous mode [ 1592.761856][T22088] usb 1-1: config 0 descriptor?? [ 1593.335972][T22088] appleir 0003:05AC:8243.004E: unknown main item tag 0x0 [ 1593.378757][T22088] appleir 0003:05AC:8243.004E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1593.478551][T25466] loop7: detected capacity change from 0 to 128 [ 1593.495048][T25466] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1593.619187][T22088] usb 1-1: USB disconnect, device number 55 [ 1596.522052][T25524] macsec1: entered promiscuous mode [ 1596.527473][T25524] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1596.535982][T25524] macsec1: entered allmulticast mode [ 1596.541623][T25524] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1598.015796][T25554] netlink: 774 bytes leftover after parsing attributes in process `syz.6.8032'. [ 1598.546086][T22088] libceph: connect (1)[c::]:6789 error -101 [ 1598.552667][T22088] libceph: mon0 (1)[c::]:6789 connect error [ 1598.578533][T25562] ceph: No mds server is up or the cluster is laggy [ 1598.583377][T25567] input: syz1 as /devices/virtual/input/input111 [ 1598.592210][T25567] input: failed to attach handler leds to device input111, error: -6 [ 1598.670946][T20543] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1598.860799][T20543] usb 9-1: Using ep0 maxpacket: 16 [ 1598.876438][T20543] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1598.888547][T20543] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1598.898656][T20543] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1598.911866][T20543] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1598.921279][T20543] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.996343][T20543] usb 9-1: config 0 descriptor?? [ 1599.197004][T25578] loop7: detected capacity change from 0 to 512 [ 1599.227067][T25578] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1599.519368][T20543] microsoft 0003:045E:07DA.004F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1599.531781][T20543] microsoft 0003:045E:07DA.004F: no inputs found [ 1599.538305][T20543] microsoft 0003:045E:07DA.004F: could not initialize ff, continuing anyway [ 1599.706551][T20543] usb 9-1: USB disconnect, device number 38 [ 1599.868185][T25590] loop3: detected capacity change from 0 to 16 [ 1599.899791][T25590] erofs (device loop3): mounted with root inode @ nid 36. [ 1599.926104][T25590] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 1599.938059][T12119] erofs (device loop3): failed to decompress 7514 in[4096, 0] out[8192] [ 1599.974385][T25590] erofs (device loop3): failed to decompress 7514 in[4096, 0] out[8192] [ 1599.984803][T25590] erofs (device loop3): read error -117 @ 1 of nid 89 [ 1599.994850][ T30] audit: type=1800 audit(1762671722.120:1201): pid=25590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8046" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 1601.749965][T25624] netlink: 'syz.0.8061': attribute type 4 has an invalid length. [ 1602.343496][T25632] loop6: detected capacity change from 0 to 256 [ 1602.546111][T25632] FAT-fs (loop6): Directory bread(block 64) failed [ 1602.553344][T25632] FAT-fs (loop6): Directory bread(block 65) failed [ 1602.560567][T25632] FAT-fs (loop6): Directory bread(block 66) failed [ 1602.567263][T25632] FAT-fs (loop6): Directory bread(block 67) failed [ 1602.574247][T25632] FAT-fs (loop6): Directory bread(block 68) failed [ 1602.581060][T25632] FAT-fs (loop6): Directory bread(block 69) failed [ 1602.587883][T25632] FAT-fs (loop6): Directory bread(block 70) failed [ 1602.595472][T25632] FAT-fs (loop6): Directory bread(block 71) failed [ 1602.602474][T25632] FAT-fs (loop6): Directory bread(block 72) failed [ 1602.609259][T25632] FAT-fs (loop6): Directory bread(block 73) failed [ 1602.888981][ T30] audit: type=1800 audit(1762671725.010:1202): pid=25640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8065" name="file0" dev="loop6" ino=1048999 res=0 errno=0 [ 1605.180918][T20543] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1605.199606][T25682] loop6: detected capacity change from 0 to 2048 [ 1605.293328][T25682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1605.340762][T20543] usb 9-1: Using ep0 maxpacket: 16 [ 1605.359541][T20543] usb 9-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.371323][T20543] usb 9-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1605.387131][T20543] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1605.395073][T20543] usb 9-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1605.404551][T20543] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.462301][T20543] usb 9-1: config 0 descriptor?? [ 1605.938753][T20543] aquacomputer_d5next 0003:0C70:F0B6.0050: unknown main item tag 0x0 [ 1605.947411][T20543] aquacomputer_d5next 0003:0C70:F0B6.0050: unknown main item tag 0x0 [ 1605.956006][T20543] aquacomputer_d5next 0003:0C70:F0B6.0050: unknown main item tag 0x0 [ 1605.964493][T20543] aquacomputer_d5next 0003:0C70:F0B6.0050: unknown main item tag 0x0 [ 1605.973702][T20543] aquacomputer_d5next 0003:0C70:F0B6.0050: unknown main item tag 0x0 [ 1606.056756][T20543] aquacomputer_d5next 0003:0C70:F0B6.0050: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.8-1/input0 [ 1606.156864][T20543] usb 9-1: USB disconnect, device number 39 [ 1606.231811][T25690] overlayfs: statfs failed on './file0' [ 1606.987084][T25714] netlink: 'syz.0.8100': attribute type 34 has an invalid length. [ 1608.126410][T25732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8109'. [ 1608.814671][T25745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8113'. [ 1609.198778][T25749] netlink: 'syz.6.8116': attribute type 21 has an invalid length. [ 1610.778054][T25772] loop6: detected capacity change from 0 to 736 [ 1611.787487][T25796] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1612.530982][T25816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8147'. [ 1613.415763][T25831] could not open pipe file descriptor [ 1613.843313][T25838] loop7: detected capacity change from 0 to 256 [ 1613.862484][T25838] exfat: Unknown parameter '017777777777777777777770x0000000000000000' [ 1614.437010][T25852] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1614.552403][T25855] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1615.020120][T25863] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1615.607543][T25875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8172'. [ 1615.661675][T25875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8172'. [ 1615.782441][T25880] netlink: 'syz.8.8174': attribute type 10 has an invalid length. [ 1616.895268][T25899] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1616.936139][T25901] loop7: detected capacity change from 0 to 128 [ 1618.328406][T25930] syzkaller1: entered promiscuous mode [ 1618.334471][T25930] syzkaller1: entered allmulticast mode [ 1619.196428][T25943] loop3: detected capacity change from 0 to 4096 [ 1619.381984][T25947] netlink: 'syz.0.8205': attribute type 10 has an invalid length. [ 1621.083601][T25978] netlink: 212916 bytes leftover after parsing attributes in process `syz.7.8222'. [ 1621.101125][T25980] loop3: detected capacity change from 0 to 128 [ 1623.510001][T26024] sp0: Synchronizing with TNC [ 1623.593258][T26026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8241'. [ 1623.603696][T26026] netlink: 'syz.3.8241': attribute type 1 has an invalid length. [ 1623.778286][T26029] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8242'. [ 1623.789789][T26029] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8242'. [ 1627.032656][T21845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1627.047014][T21845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1627.059672][T21845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1627.078066][T21845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1627.101316][T21845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1627.568236][T26079] sctp: [Deprecated]: syz.8.8266 (pid 26079) Use of int in max_burst socket option deprecated. [ 1627.568236][T26079] Use struct sctp_assoc_value instead [ 1628.076520][T26072] chnl_net:caif_netlink_parms(): no params data found [ 1628.098256][T20543] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1628.270812][T20543] usb 1-1: Using ep0 maxpacket: 16 [ 1628.285640][T20543] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.296239][T20543] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1628.320058][T20543] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1628.329680][T20543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.338040][T20543] usb 1-1: Product: syz [ 1628.342592][T20543] usb 1-1: Manufacturer: syz [ 1628.347370][T20543] usb 1-1: SerialNumber: syz [ 1628.634464][T20543] usb 1-1: 0:2 : does not exist [ 1628.655640][T20543] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1628.721977][T26072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.731579][T26072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.741866][T26072] bridge_slave_0: entered allmulticast mode [ 1628.751626][T26072] bridge_slave_0: entered promiscuous mode [ 1628.776899][T20543] usb 1-1: USB disconnect, device number 56 [ 1628.823082][T26072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.832225][T26072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.842589][T26072] bridge_slave_1: entered allmulticast mode [ 1628.852312][T26072] bridge_slave_1: entered promiscuous mode [ 1629.071378][T26072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.092760][T26072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.228770][T26072] team0: Port device team_slave_0 added [ 1629.238511][T12119] Bluetooth: hci2: command tx timeout [ 1629.256398][T26072] team0: Port device team_slave_1 added [ 1629.372889][T26072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.380105][T26072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.407278][T26072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.424170][T26072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.435640][T26072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.462751][T26072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.724065][T26072] hsr_slave_0: entered promiscuous mode [ 1629.734479][T26072] hsr_slave_1: entered promiscuous mode [ 1629.743472][T26072] debugfs: 'hsr0' already exists in 'hsr' [ 1629.750706][T26072] Cannot create hsr debugfs directory [ 1630.078317][T20543] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1630.306696][T20543] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1630.318269][T20543] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1630.378014][T20543] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1630.387650][T20543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.396170][T20543] usb 1-1: Product: syz [ 1630.400707][T20543] usb 1-1: Manufacturer: syz [ 1630.405478][T20543] usb 1-1: SerialNumber: syz [ 1630.490757][T14072] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1630.650819][T14072] usb 9-1: Using ep0 maxpacket: 8 [ 1630.673660][T14072] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1630.683793][T14072] usb 9-1: config 179 has no interface number 0 [ 1630.690308][T14072] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1630.702708][T14072] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1630.714536][T14072] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1630.726051][T14072] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1630.738157][T14072] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1630.750019][T26114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1630.752154][T14072] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1630.772726][T14072] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.850088][T26110] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1631.237006][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1631.237006][ T5851] usb 9-1: USB disconnect, device number 40 [ 1631.260687][ C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 1631.272807][T26072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1631.310995][T12119] Bluetooth: hci2: command tx timeout [ 1631.324115][T26072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1631.372699][T26072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1631.413840][T26072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1631.588137][T20543] cdc_ncm 1-1:1.0: bind() failure [ 1631.610886][T20543] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1631.624871][T20543] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1631.639654][T20543] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1631.660109][T20543] usb 1-1: USB disconnect, device number 57 [ 1632.062755][T26072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.229772][T26072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.305109][T22794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.312726][T22794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.392385][T22794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.399856][T22794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1632.715398][T26131] loop7: detected capacity change from 0 to 1024 [ 1633.393901][T12119] Bluetooth: hci2: command tx timeout [ 1633.846079][T26072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1633.942055][T26159] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8297'. [ 1635.418653][T26072] veth0_vlan: entered promiscuous mode [ 1635.470905][T12119] Bluetooth: hci2: command tx timeout [ 1635.515320][T26072] veth1_vlan: entered promiscuous mode [ 1635.761044][T26191] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1635.773223][T26072] veth0_macvtap: entered promiscuous mode [ 1635.821617][T26072] veth1_macvtap: entered promiscuous mode [ 1635.975087][T26072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1636.053643][T26072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1636.151040][T22794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.207953][T22794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.224320][T22794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.235640][T22794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.663275][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1637.670162][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1639.338735][T26259] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8333'. [ 1639.459981][T22794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.468160][T22794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.706036][T22787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.716847][T22787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1641.177475][T26295] pim6reg1: entered promiscuous mode [ 1641.183274][T26295] pim6reg1: entered allmulticast mode [ 1641.476114][T26304] dummy0: entered promiscuous mode [ 1641.483161][T26304] dummy0: left promiscuous mode [ 1641.948703][T26311] all (unregistering): Released all slaves [ 1642.099709][T26314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1642.107302][T26314] IPv6: NLM_F_CREATE should be set when creating new route [ 1642.550972][T26317] loop6: detected capacity change from 0 to 4096 [ 1642.619638][T26317] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1642.628152][T26317] NILFS (loop6): trying rollback from an earlier position [ 1642.685905][T26317] NILFS (loop6): recovery complete [ 1642.716780][T26327] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1644.010912][T22088] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1644.226378][T22088] usb 8-1: config 0 has an invalid interface number: 229 but max is 0 [ 1644.235067][T22088] usb 8-1: config 0 has no interface number 0 [ 1644.241542][T22088] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 1644.250896][T22088] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.306506][T22088] usb 8-1: config 0 descriptor?? [ 1644.521650][T26366] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8378'. [ 1644.618896][T22088] usb 8-1: USB disconnect, device number 10 [ 1647.065426][T26412] syzkaller1: entered promiscuous mode [ 1647.071499][T26412] syzkaller1: entered allmulticast mode [ 1647.381212][T26417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8401'. [ 1647.708802][T26425] loop7: detected capacity change from 0 to 512 [ 1647.761021][T26425] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.8405: inode has both inline data and extents flags [ 1647.812885][T26425] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.8405: couldn't read orphan inode 15 (err -117) [ 1647.912758][T26429] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1647.920167][T26425] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.167851][T22415] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.646267][T26437] loop4: detected capacity change from 0 to 4096 [ 1648.679584][T26437] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1648.844419][T26437] ntfs3(loop4): ino=19, mi_enum_attr [ 1648.850230][T26437] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1648.948383][T26437] ntfs3(loop4): failed to convert name for inode 20. [ 1650.345264][T26470] syzkaller1: entered promiscuous mode [ 1650.351422][T26470] syzkaller1: entered allmulticast mode [ 1651.071952][T14072] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1651.267431][T14072] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1651.276901][T14072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.327690][T14072] usb 5-1: config 0 descriptor?? [ 1651.365483][T14072] cp210x 5-1:0.0: cp210x converter detected [ 1651.826613][T14072] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1652.039431][T26499] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8437'. [ 1652.049065][T26499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8437'. [ 1652.061772][T26499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8437'. [ 1652.079038][T14072] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1652.268836][T14072] usb 5-1: USB disconnect, device number 11 [ 1652.297268][T14072] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1652.337394][T14072] cp210x 5-1:0.0: device disconnected [ 1653.071670][T26512] loop6: detected capacity change from 0 to 512 [ 1653.122570][T26512] EXT4-fs: Ignoring removed nobh option [ 1653.204723][T26512] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.8442: iget: bad i_size value: 38620345925642 [ 1653.320631][T26512] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8442: couldn't read orphan inode 15 (err -117) [ 1653.380253][T26512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1653.427017][T26512] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.6.8442: path /329/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 1653.611293][T20543] hid-generic 0000:0004:0000.0051: unknown main item tag 0x0 [ 1653.619175][T20543] hid-generic 0000:0004:0000.0051: unknown main item tag 0x0 [ 1653.627675][T20543] hid-generic 0000:0004:0000.0051: unknown main item tag 0x0 [ 1653.728616][T22448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.743356][T20543] hid-generic 0000:0004:0000.0051: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1654.048858][T26527] syzkaller1: entered promiscuous mode [ 1654.055176][T26527] syzkaller1: entered allmulticast mode [ 1654.092474][T26527] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 1654.158166][T26530] kvm: apic: phys broadcast and lowest prio [ 1655.892735][T26553] loop3: detected capacity change from 0 to 7 [ 1655.919133][T26553] Dev loop3: unable to read RDB block 7 [ 1655.925378][T26553] loop3: unable to read partition table [ 1655.989955][T26553] loop3: partition table beyond EOD, truncated [ 1655.996498][T26553] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1656.581895][T20543] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1656.638674][T26563] tipc: Started in network mode [ 1656.644046][T26563] tipc: Node identity 4, cluster identity 4711 [ 1656.650518][T26563] tipc: Node number set to 4 [ 1656.751992][T20543] usb 8-1: Using ep0 maxpacket: 8 [ 1656.801446][T20543] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.815723][T20543] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.826119][T20543] usb 8-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1656.836479][T20543] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.913253][T20543] usb 8-1: config 0 descriptor?? [ 1657.377321][T20543] magicmouse 0003:05AC:0324.0052: unknown main item tag 0x1 [ 1657.385346][T20543] magicmouse 0003:05AC:0324.0052: unknown main item tag 0x0 [ 1657.393165][T20543] magicmouse 0003:05AC:0324.0052: unknown main item tag 0x0 [ 1657.492378][T20543] magicmouse 0003:05AC:0324.0052: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.7-1/input0 [ 1657.601307][T22088] usb 8-1: USB disconnect, device number 11 [ 1657.899877][T26586] loop4: detected capacity change from 0 to 512 [ 1657.951238][T26586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1658.016637][T26586] EXT4-fs (loop4): 1 truncate cleaned up [ 1658.024770][T26586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1658.243335][T26586] EXT4-fs (loop4): shut down requested (2) [ 1658.443001][T26072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.482874][T26597] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8478'. [ 1659.329396][T26617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8486'. [ 1661.561259][T14072] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1661.745503][T14072] usb 9-1: Using ep0 maxpacket: 32 [ 1661.766671][T14072] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.777992][T14072] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.788448][T14072] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1661.800158][T14072] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.905987][T14072] usb 9-1: config 0 descriptor?? [ 1662.345586][T14072] savu 0003:1E7D:2D5A.0053: unbalanced collection at end of report description [ 1662.365894][T14072] savu 0003:1E7D:2D5A.0053: parse failed [ 1662.372259][T14072] savu 0003:1E7D:2D5A.0053: probe with driver savu failed with error -22 [ 1662.585046][T20543] usb 9-1: USB disconnect, device number 41 [ 1662.607322][T22088] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1662.795641][T26688] ip6gretap1: entered allmulticast mode [ 1662.817762][T22088] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1662.828920][T22088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.851149][T22088] usb 5-1: config 0 descriptor?? [ 1662.877499][T22088] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1662.984879][T26686] loop7: detected capacity change from 0 to 4096 [ 1663.062298][T26691] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1663.173619][ T30] audit: type=1800 audit(1762671785.300:1203): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8514" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1663.204706][ T30] audit: type=1800 audit(1762671785.320:1204): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8514" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1663.680661][T26700] loop6: detected capacity change from 0 to 8 [ 1663.717960][T26700] syz.6.8521: attempt to access beyond end of device [ 1663.717960][T26700] loop6: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 1663.720495][T22088] gspca_stv06xx: I2C: Read error writing address: -71 [ 1663.733321][T26700] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 1663.755746][T26700] unable to read xattr id index table [ 1663.797335][T22088] usb 5-1: USB disconnect, device number 12 [ 1665.184932][T26724] netlink: 'syz.8.8532': attribute type 1 has an invalid length. [ 1665.195081][T26724] netlink: 'syz.8.8532': attribute type 2 has an invalid length. [ 1665.211675][T26724] netlink: 'syz.8.8532': attribute type 1 has an invalid length. [ 1665.219758][T26724] netlink: 'syz.8.8532': attribute type 2 has an invalid length. [ 1665.851882][T26736] input: syz1 as /devices/virtual/input/input113 [ 1666.023261][T26738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8538'. [ 1667.137929][T26753] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 1667.211769][T26755] IPVS: stopping master sync thread 26756 ... [ 1669.760685][T22088] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1669.940611][T22088] usb 9-1: Using ep0 maxpacket: 8 [ 1669.965232][T22088] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1669.975175][T22088] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.983551][T22088] usb 9-1: Product: syz [ 1669.987976][T22088] usb 9-1: Manufacturer: syz [ 1669.994459][T22088] usb 9-1: SerialNumber: syz [ 1670.078800][T22088] usb 9-1: config 0 descriptor?? [ 1670.417811][T26800] loop6: detected capacity change from 0 to 16 [ 1670.429576][T22088] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1670.431579][T26800] erofs (device loop6): mounted with root inode @ nid 36. [ 1670.481232][T26800] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8566'. [ 1670.490738][T26800] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8566'. [ 1670.794118][T22771] Bluetooth: hci5: Frame reassembly failed (-84) [ 1670.847980][T26805] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1671.252588][T22088] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1671.274105][T22088] usb 9-1: USB disconnect, device number 42 [ 1671.587966][T22088] hid-generic 0005:0007:5505.0054: item fetching failed at offset 4/5 [ 1671.605353][T22088] hid-generic 0005:0007:5505.0054: probe with driver hid-generic failed with error -22 [ 1671.924263][T26824] loop4: detected capacity change from 0 to 1024 [ 1671.934512][T26824] EXT4-fs: Ignoring removed nobh option [ 1671.942253][T26824] EXT4-fs: Ignoring removed bh option [ 1671.957076][T26824] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 1672.022649][T26824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1672.109838][T26824] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 1672.238540][T26072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.831171][T21845] Bluetooth: hci5: command 0x1003 tx timeout [ 1672.833558][T12119] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1673.576252][T26854] loop6: detected capacity change from 0 to 1024 [ 1674.814656][T20543] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1674.992071][T20543] usb 8-1: Using ep0 maxpacket: 32 [ 1675.004330][T20543] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1675.026056][T20543] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1675.035807][T20543] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.044160][T20543] usb 8-1: Product: syz [ 1675.048484][T20543] usb 8-1: Manufacturer: syz [ 1675.053481][T20543] usb 8-1: SerialNumber: syz [ 1675.096511][T20543] usb 8-1: config 0 descriptor?? [ 1675.585985][T20543] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1676.156276][T26902] loop4: detected capacity change from 0 to 1024 [ 1676.223586][T20543] usb 8-1: USB disconnect, device number 12 [ 1676.323121][T22771] hfsplus: b-tree write err: -5, ino 4 [ 1676.503749][T26906] loop4: detected capacity change from 0 to 16 [ 1676.519085][T26906] erofs (device loop4): mounted with root inode @ nid 36. [ 1677.512709][T26922] loop4: detected capacity change from 0 to 4096 [ 1677.548151][T26922] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 1677.810915][T26922] ntfs3(loop4): MFT: r=18, expect seq=1 instead of 0! [ 1677.818208][T26922] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1677.843217][T26922] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1677.925643][T26922] netlink: zone id is out of range [ 1677.931858][T26922] netlink: zone id is out of range [ 1677.937593][T26922] netlink: zone id is out of range [ 1677.943068][T26922] netlink: zone id is out of range [ 1677.948322][T26922] netlink: zone id is out of range [ 1677.953942][T26922] netlink: zone id is out of range [ 1677.959186][T26922] netlink: zone id is out of range [ 1677.964931][T26922] netlink: zone id is out of range [ 1677.970189][T26922] netlink: zone id is out of range [ 1678.000464][T26922] netlink: zone id is out of range [ 1679.249545][T26956] EXT4-fs (loop9): unable to read superblock [ 1679.696435][T26964] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8639'. [ 1681.616813][T26993] team_slave_0: entered promiscuous mode [ 1681.622892][T26993] team_slave_1: entered promiscuous mode [ 1681.638694][T26993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1681.705832][T26993] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1681.754292][T14072] hid-generic 0005:0007:5505.0055: item fetching failed at offset 4/5 [ 1681.794862][T14072] hid-generic 0005:0007:5505.0055: probe with driver hid-generic failed with error -22 [ 1682.079523][T27000] loop6: detected capacity change from 0 to 524279808 [ 1682.150668][T27000] loop6: detected capacity change from 524279808 to 1 [ 1682.191947][T27000] Dev loop6: unable to read RDB block 1 [ 1682.198054][T27000] loop6: unable to read partition table [ 1682.242176][T27000] loop6: partition table beyond EOD, truncated [ 1682.248728][T27000] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 1682.712851][T27014] loop4: detected capacity change from 0 to 64 [ 1683.127624][T22775] kworker/u8:7: attempt to access beyond end of device [ 1683.127624][T22775] loop4: rw=1, sector=65, nr_sectors = 1 limit=64 [ 1683.127769][T22775] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 1683.127880][T22775] kworker/u8:7: attempt to access beyond end of device [ 1683.127880][T22775] loop4: rw=1, sector=66, nr_sectors = 1 limit=64 [ 1683.127997][T22775] Buffer I/O error on dev loop4, logical block 66, lost async page write [ 1683.128110][T22775] kworker/u8:7: attempt to access beyond end of device [ 1683.128110][T22775] loop4: rw=1, sector=67, nr_sectors = 1 limit=64 [ 1683.128245][T22775] Buffer I/O error on dev loop4, logical block 67, lost async page write [ 1683.128350][T22775] kworker/u8:7: attempt to access beyond end of device [ 1683.128350][T22775] loop4: rw=1, sector=68, nr_sectors = 1 limit=64 [ 1683.128467][T22775] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 1683.128579][T22775] kworker/u8:7: attempt to access beyond end of device [ 1683.128579][T22775] loop4: rw=1, sector=72, nr_sectors = 1 limit=64 [ 1683.128710][T22775] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 1683.128816][T22775] kworker/u8:7: attempt to access beyond end of device [ 1683.128816][T22775] loop4: rw=1, sector=73, nr_sectors = 1 limit=64 [ 1683.128931][T22775] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 1683.129036][T22775] kworker/u8:7: attempt to access beyond end of device [ 1683.129036][T22775] loop4: rw=1, sector=76, nr_sectors = 1 limit=64 [ 1683.129163][T22775] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 1683.129266][T22775] kworker/u8:7: attempt to access beyond end of device [ 1683.129266][T22775] loop4: rw=1, sector=77, nr_sectors = 1 limit=64 [ 1683.129383][T22775] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 1683.140242][T22775] kworker/u8:7: attempt to access beyond end of device [ 1683.140242][T22775] loop4: rw=1, sector=78, nr_sectors = 240 limit=64 [ 1683.333977][T22775] kworker/u8:7: attempt to access beyond end of device [ 1683.333977][T22775] loop4: rw=1, sector=318, nr_sectors = 1 limit=64 [ 1683.334123][T22775] Buffer I/O error on dev loop4, logical block 318, lost async page write [ 1683.334234][T22775] Buffer I/O error on dev loop4, logical block 319, lost async page write [ 1683.367281][ T30] audit: type=1326 audit(1762671805.490:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27017 comm="syz.7.8664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1683.367509][ T30] audit: type=1326 audit(1762671805.490:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27017 comm="syz.7.8664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1684.681639][T27048] traps: syz.8.8675[27048] attempts to use CLI/STI, pretending it's a NOP, ip:80000002 [ 1686.825989][T27091] binder: 27089:27091 ioctl c0306201 80000540 returned -14 [ 1686.882878][T27094] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8696'. [ 1687.318792][T27101] bridge0: port 4(syz_tun) entered blocking state [ 1687.326086][T27101] bridge0: port 4(syz_tun) entered disabled state [ 1687.333269][T27101] syz_tun: entered allmulticast mode [ 1687.341876][T27101] syz_tun: entered promiscuous mode [ 1687.348468][T27101] bridge0: port 4(syz_tun) entered blocking state [ 1687.355618][T27101] bridge0: port 4(syz_tun) entered listening state [ 1688.648336][T27129] loop7: detected capacity change from 0 to 128 [ 1688.671497][T27129] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1688.752843][T27129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1690.657493][T27158] bridge_slave_0: left allmulticast mode [ 1690.663661][T27158] bridge_slave_0: left promiscuous mode [ 1690.670469][T27158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.722386][T27160] netlink: 'syz.4.8725': attribute type 10 has an invalid length. [ 1690.789018][T27158] bridge_slave_1: left allmulticast mode [ 1690.795415][T27158] bridge_slave_1: left promiscuous mode [ 1690.802318][T27158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.931549][T27158] bond0: (slave bond_slave_0): Releasing backup interface [ 1691.050715][T27158] bond0: (slave bond_slave_1): Releasing backup interface [ 1691.151111][T27158] team_slave_0: left promiscuous mode [ 1691.237776][T27158] team0: Port device team_slave_0 removed [ 1691.280130][T27158] team_slave_1: left promiscuous mode [ 1691.320089][T27158] team0: Port device team_slave_1 removed [ 1691.336633][T27158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1691.344594][T27158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1691.375422][T27158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1691.383203][T27158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1691.436659][T27158] net_ratelimit: 4 callbacks suppressed [ 1691.436736][T27158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1691.481819][T27160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1691.501533][T27160] team0: Port device bond0 added [ 1692.837520][T27183] loop4: detected capacity change from 0 to 128 [ 1692.881581][T27183] FAT-fs (loop4): bogus number of FAT structure [ 1692.888057][T27183] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1692.900803][T27183] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1693.635987][T22088] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1693.643820][T22088] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1693.653387][T22088] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1693.661772][T22088] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1693.669433][T22088] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1693.679296][T22088] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1693.687830][T22088] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1693.695624][T22088] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1693.703403][T22088] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1693.711290][T22088] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 1693.862270][T27198] random: crng reseeded on system resumption [ 1693.913013][T27198] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8743'. [ 1693.971872][T22088] hid-generic 0003:0004:0000.0056: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1694.180672][T27204] loop7: detected capacity change from 0 to 128 [ 1694.506395][T27198] syz.4.8743 (27198) used greatest stack depth: 2344 bytes left [ 1694.949178][T27217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8749'. [ 1694.958761][T27217] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8749'. [ 1696.960960][T20543] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1697.075368][T27256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1697.159652][T20543] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.171318][T20543] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1697.180843][T20543] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.292755][T20543] usb 8-1: config 0 descriptor?? [ 1697.752372][T20543] keytouch 0003:0926:3333.0057: fixing up Keytouch IEC report descriptor [ 1697.816786][T20543] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0057/input/input114 [ 1697.935606][T20543] keytouch 0003:0926:3333.0057: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1698.043896][T27273] loop6: detected capacity change from 0 to 256 [ 1698.101252][T27273] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1698.188413][T27275] syz_tun: left allmulticast mode [ 1698.193886][T27275] syz_tun: left promiscuous mode [ 1698.199959][T27275] bridge0: port 4(syz_tun) entered disabled state [ 1698.270214][T27275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.296431][T27276] netlink: 'syz.0.8776': attribute type 10 has an invalid length. [ 1698.332070][T27275] bridge_slave_1: left allmulticast mode [ 1698.338037][T27275] bridge_slave_1: left promiscuous mode [ 1698.345608][T27275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.400995][T14072] IPVS: starting estimator thread 0... [ 1698.429112][T27275] bond0: (slave bond_slave_0): Releasing backup interface [ 1698.454627][T20543] usb 8-1: USB disconnect, device number 13 [ 1698.470037][T27275] bond_slave_0: left promiscuous mode [ 1698.492954][T27279] IPVS: using max 240 ests per chain, 12000 per kthread [ 1698.518288][T27275] bond0: (slave bond_slave_1): Releasing backup interface [ 1698.543082][T27275] bond_slave_1: left promiscuous mode [ 1698.551891][T27275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.628600][T27275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.657384][T27275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1699.092771][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1699.099494][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1699.200722][T14072] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1699.376125][T14072] usb 9-1: Using ep0 maxpacket: 16 [ 1699.393057][T14072] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.403592][T14072] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1699.443525][T14072] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1699.453090][T14072] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.461428][T14072] usb 9-1: Product: syz [ 1699.468590][T14072] usb 9-1: Manufacturer: syz [ 1699.476173][T14072] usb 9-1: SerialNumber: syz [ 1699.783990][T14072] usb 9-1: 0:2 : does not exist [ 1700.087606][T14072] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1700.088287][T27304] loop6: detected capacity change from 0 to 4096 [ 1700.120969][T27304] nilfs2: Unknown parameter '7Vê¶hlÜ' [ 1700.216425][T14072] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 1700.306903][T14072] usb 9-1: USB disconnect, device number 43 [ 1700.504769][T27309] pim6reg1: entered allmulticast mode [ 1700.949963][T27317] loop6: detected capacity change from 0 to 128 [ 1701.424745][T27325] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1701.457899][T27326] netlink: 'syz.8.8797': attribute type 10 has an invalid length. [ 1701.501910][T27329] input: syz0 as /devices/virtual/input/input115 [ 1701.513642][T14072] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1701.556662][T27330] netlink: 'syz.6.8798': attribute type 4 has an invalid length. [ 1701.686574][T14072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.692245][T27324] loop4: detected capacity change from 0 to 4096 [ 1701.698112][T14072] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1701.714164][T14072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.767494][T14072] usb 1-1: config 0 descriptor?? [ 1702.010994][T27334] syzkaller1: entered promiscuous mode [ 1702.016949][T27334] syzkaller1: entered allmulticast mode [ 1702.211508][T14072] keytouch 0003:0926:3333.0058: fixing up Keytouch IEC report descriptor [ 1702.263001][T14072] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0058/input/input116 [ 1702.386807][T14072] keytouch 0003:0926:3333.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1702.836381][T27345] loop7: detected capacity change from 0 to 128 [ 1702.888144][T20543] usb 1-1: USB disconnect, device number 58 [ 1702.889533][T27345] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1702.938616][T27345] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1703.089323][T22415] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1703.180869][T14072] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1703.260643][ T5851] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1703.346224][T14072] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.357624][T14072] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1703.387287][T14072] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1703.398090][T14072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.406370][T14072] usb 5-1: Product: syz [ 1703.410784][T14072] usb 5-1: Manufacturer: syz [ 1703.415654][T14072] usb 5-1: SerialNumber: syz [ 1703.433390][ T5851] usb 9-1: Using ep0 maxpacket: 32 [ 1703.437424][T14072] cdc_mbim 5-1:1.0: skipping garbage [ 1703.458724][ T5851] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1703.467559][ T5851] usb 9-1: config 0 has no interface number 0 [ 1703.474376][ T5851] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1703.519542][ T5851] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1703.529432][ T5851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.538465][ T5851] usb 9-1: Product: syz [ 1703.542962][ T5851] usb 9-1: Manufacturer: syz [ 1703.547738][ T5851] usb 9-1: SerialNumber: syz [ 1703.617480][ T5851] usb 9-1: config 0 descriptor?? [ 1703.636088][ T5851] smsc75xx v1.0.0 [ 1703.660700][T27349] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1703.741432][T20543] kernel read not supported for file /dsp (pid: 20543 comm: kworker/1:0) [ 1703.898154][T27357] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8812'. [ 1704.289120][T22775] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.308463][T27349] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1704.323178][ T5851] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1704.335015][ T5851] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1704.361908][T14072] cdc_mbim 5-1:1.0: setting tx_max = 48 [ 1704.395417][T14072] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1704.416670][T14072] wwan wwan0: port wwan0mbim0 attached [ 1704.436614][T14061] kernel write not supported for file /snd/seq (pid: 14061 comm: kworker/0:9) [ 1704.515075][T22775] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.545034][T14072] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 0e:a3:06:6b:6f:2b [ 1704.550556][ T5851] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1704.568125][ T5851] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1704.579031][ T5851] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1704.589835][ T5851] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1704.600549][ T5851] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 1704.655503][T14072] usb 5-1: USB disconnect, device number 13 [ 1704.663809][T14072] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1704.708064][T22775] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.787560][ T5851] usb 9-1: USB disconnect, device number 44 [ 1704.881680][T14072] wwan wwan0: port wwan0mbim0 disconnected [ 1704.893957][T22775] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.145844][T22775] bridge_slave_1: left allmulticast mode [ 1705.152020][T22775] bridge_slave_1: left promiscuous mode [ 1705.158456][T22775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.188644][T22775] bridge_slave_0: left allmulticast mode [ 1705.194832][T22775] bridge_slave_0: left promiscuous mode [ 1705.201475][T22775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.542307][T14062] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1705.759376][ T5851] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1705.939084][T14062] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1705.949009][T14062] usb 1-1: config 1 has no interface number 0 [ 1705.956517][T14062] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1705.968346][T14062] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1705.969043][ T5851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.978499][T14062] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.987388][T14062] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1705.990962][ T5851] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1706.001880][T14062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.010074][ T5851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.020046][T14062] usb 1-1: Product: syz [ 1706.044347][T14062] usb 1-1: Manufacturer: syz [ 1706.051459][T14062] usb 1-1: SerialNumber: syz [ 1706.100011][ T5851] usb 9-1: config 0 descriptor?? [ 1706.127964][T27371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1706.142912][T22775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.191131][T22775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.217532][T22775] bond0 (unregistering): Released all slaves [ 1706.255897][T27382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8823'. [ 1706.381264][T27371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1706.466532][T22775] IPVS: stopping backup sync thread 25313 ... [ 1706.561061][ T5851] keytouch 0003:0926:3333.0059: fixing up Keytouch IEC report descriptor [ 1706.610946][ T5851] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0059/input/input117 [ 1706.681516][T14062] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1706.770717][ T5851] keytouch 0003:0926:3333.0059: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1707.113985][T22775] hsr_slave_0: left promiscuous mode [ 1707.125943][T22775] hsr_slave_1: left promiscuous mode [ 1707.135792][T22775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1707.143844][T22775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.157104][T22775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1707.166634][T22775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1707.247230][T22775] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1707.254875][T22775] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1707.265447][T22775] veth1_macvtap: left promiscuous mode [ 1707.271416][T22775] veth0_macvtap: left promiscuous mode [ 1707.279293][T22775] veth1_vlan: left promiscuous mode [ 1707.285106][T22775] veth0_vlan: left promiscuous mode [ 1707.420673][ T5851] usb 9-1: USB disconnect, device number 45 [ 1707.450734][ T5881] usb 1-1: USB disconnect, device number 59 [ 1707.459813][ T5881] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 1708.633960][T22775] team0 (unregistering): Port device team_slave_1 removed [ 1708.712461][T22775] team0 (unregistering): Port device team_slave_0 removed [ 1709.170833][T14062] sierra_net 1-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 1709.179786][T14062] sierra_net 1-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 1709.493448][ T5881] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1711.585014][T27450] batadv_slave_1: entered promiscuous mode [ 1711.602732][T27449] batadv_slave_1: left promiscuous mode [ 1712.326237][T27458] loop4: detected capacity change from 0 to 1024 [ 1712.426097][ T30] audit: type=1804 audit(1762671834.550:1207): pid=27458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8855" name="/newroot/105/file2/bus" dev="loop4" ino=26 res=1 errno=0 [ 1712.607910][T22797] hfsplus: b-tree write err: -5, ino 8 [ 1712.663338][T27464] overlayfs: failed to decode file handle (len=19, type=0, flags=0, err=-22) [ 1713.864822][T27476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8862'. [ 1716.952927][T27521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8881'. [ 1716.972424][T27521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8881'. [ 1716.987191][T27521] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8881'. [ 1716.999994][T27521] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8881'. [ 1717.565725][T27536] o2cb: This node has not been configured. [ 1717.572026][T27536] o2cb: Cluster check failed. Fix errors before retrying. [ 1717.580929][T27536] (syz.0.8888,27536,0):user_dlm_register:674 ERROR: status = -22 [ 1717.588894][T27536] (syz.0.8888,27536,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1718.141979][T27527] loop4: detected capacity change from 0 to 2048 [ 1719.460692][T27574] loop6: detected capacity change from 0 to 128 [ 1719.525347][T27574] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1719.577614][T27574] ext4 filesystem being mounted at /417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1719.686566][T27583] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8907'. [ 1720.045931][T22448] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1720.444891][T27595] gretap0: entered promiscuous mode [ 1722.752199][ T5881] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1722.935410][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 1722.956272][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.968023][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.978196][ T5881] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1722.987772][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.054439][ T5881] usb 5-1: config 0 descriptor?? [ 1723.140852][ T5851] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1723.313892][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1723.321378][ T5851] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1723.330938][ T5851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.351606][T14062] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1723.394749][ T5851] usb 8-1: config 0 descriptor?? [ 1723.492862][ T5881] hid_parser_main: 8 callbacks suppressed [ 1723.493407][ T5881] hid-picolcd 0003:04D8:F002.005A: unknown main item tag 0x0 [ 1723.507289][ T5881] hid-picolcd 0003:04D8:F002.005A: unknown main item tag 0x0 [ 1723.515262][ T5881] hid-picolcd 0003:04D8:F002.005A: unknown main item tag 0x0 [ 1723.523198][ T5881] hid-picolcd 0003:04D8:F002.005A: unknown main item tag 0x0 [ 1723.531117][ T5881] hid-picolcd 0003:04D8:F002.005A: unknown main item tag 0x0 [ 1723.539093][ T5881] hid-picolcd 0003:04D8:F002.005A: unknown main item tag 0x0 [ 1723.565325][T14062] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.575723][T14062] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1723.588947][T14062] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1723.598069][T14062] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1723.608916][T14062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.642241][T14062] usb 9-1: config 0 descriptor?? [ 1723.731947][ T5881] hid-picolcd 0003:04D8:F002.005A: No report with id 0xf3 found [ 1723.740105][ T5881] hid-picolcd 0003:04D8:F002.005A: No report with id 0xf4 found [ 1723.764924][ T5881] usb 5-1: USB disconnect, device number 14 [ 1724.116485][T14062] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1724.125270][T14062] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1724.132700][T14062] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1724.140005][T14062] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1724.273281][ T5851] video4linux radio48: keene_cmd_main failed (-71) [ 1724.280188][ T5851] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 1724.304345][ T5851] usb 8-1: USB disconnect, device number 14 [ 1724.516385][T14062] hid-led 0003:0FC5:B080.005B: probe with driver hid-led failed with error -32 [ 1724.549676][T14062] usb 9-1: USB disconnect, device number 46 [ 1725.671671][T27681] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8948'. [ 1727.712864][T27372] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1727.966442][T27372] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1727.980010][T27372] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1727.989537][T27372] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.027938][T27372] usb 9-1: config 0 descriptor?? [ 1728.685569][T27372] usb 9-1: language id specifier not provided by device, defaulting to English [ 1728.694466][ T30] audit: type=1326 audit(1762672106.801:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27739 comm="syz.7.8972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1728.719620][ T30] audit: type=1326 audit(1762672106.811:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27739 comm="syz.7.8972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1728.742907][ T30] audit: type=1326 audit(1762672106.851:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27739 comm="syz.7.8972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1728.765441][ T30] audit: type=1326 audit(1762672106.851:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27739 comm="syz.7.8972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1728.791197][ T30] audit: type=1326 audit(1762672106.851:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27739 comm="syz.7.8972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1728.814050][ T30] audit: type=1326 audit(1762672106.871:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27739 comm="syz.7.8972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 1728.900124][T27372] letsketch 0003:6161:4D15.005C: Device info: [ 1729.151859][ T30] audit: type=1326 audit(1762672107.281:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.6.8973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1729.158335][T27372] usb 9-1: Max retries (5) exceeded reading string descriptor 201 [ 1729.184661][T27372] letsketch 0003:6161:4D15.005C: probe with driver letsketch failed with error -71 [ 1729.209507][ T30] audit: type=1326 audit(1762672107.331:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.6.8973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1729.232330][ T30] audit: type=1326 audit(1762672107.331:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.6.8973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1729.255475][ T30] audit: type=1326 audit(1762672107.331:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27741 comm="syz.6.8973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1729.324657][T27742] loop6: detected capacity change from 0 to 512 [ 1729.376276][T27372] usb 9-1: USB disconnect, device number 47 [ 1729.723219][T27746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8975'. [ 1730.671628][T27764] vcan0: tx drop: invalid da for name 0x0000020000000003 [ 1731.756599][T27780] loop7: detected capacity change from 0 to 4096 [ 1732.081233][T27372] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1732.262676][T27372] usb 5-1: Using ep0 maxpacket: 16 [ 1732.277998][T27372] usb 5-1: config 0 has no interfaces? [ 1732.306446][T27372] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1732.316044][T27372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.324490][T27372] usb 5-1: Product: syz [ 1732.328849][T27372] usb 5-1: Manufacturer: syz [ 1732.333958][T27372] usb 5-1: SerialNumber: syz [ 1732.403274][T27372] usb 5-1: config 0 descriptor?? [ 1732.562343][T22771] ntfs3(loop7): ino=5, mi_enum_attr [ 1732.686123][T27798] sctp: [Deprecated]: syz.0.8999 (pid 27798) Use of int in max_burst socket option deprecated. [ 1732.686123][T27798] Use struct sctp_assoc_value instead [ 1732.754180][ T5851] usb 5-1: USB disconnect, device number 15 [ 1734.310873][T27372] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1734.378525][T27833] loop6: detected capacity change from 0 to 512 [ 1734.390969][T27833] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1734.418836][T14062] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1734.483463][T27372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.494972][T27372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.506605][T27372] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1734.523414][T27372] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1734.534916][T27372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.585325][T27372] usb 1-1: config 0 descriptor?? [ 1734.631214][T14062] usb 8-1: Using ep0 maxpacket: 32 [ 1734.649536][T14062] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.661278][T14062] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.671692][T14062] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1734.681429][T14062] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.712889][T14062] usb 8-1: config 0 descriptor?? [ 1735.087935][T27372] plantronics 0003:047F:FFFF.005D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1735.191145][T14062] hid_parser_main: 1 callbacks suppressed [ 1735.191246][T14062] ft260 0003:0403:6030.005E: unknown main item tag 0x7 [ 1735.328861][ T5851] usb 1-1: USB disconnect, device number 60 [ 1735.386678][T14062] ft260 0003:0403:6030.005E: chip code: 6424 8183 [ 1735.589157][T14062] ft260 0003:0403:6030.005E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 1735.701301][T27372] kernel write not supported for file bpf-prog (pid: 27372 comm: kworker/0:1) [ 1735.794913][T14062] ft260 0003:0403:6030.005E: failed to retrieve status: -71, no wakeup [ 1735.821399][T14062] ft260 0003:0403:6030.005E: failed to retrieve status: -71 [ 1735.846431][T14062] ft260 0003:0403:6030.005E: failed to reset I2C controller: -71 [ 1735.870170][T14062] usb 8-1: USB disconnect, device number 15 [ 1737.897408][T27894] Bluetooth: hci0: unsupported parameter 512 [ 1737.904294][T27894] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 1738.889356][T27909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9046'. [ 1739.667099][T27927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9054'. [ 1740.106686][T27934] loop4: detected capacity change from 0 to 1024 [ 1740.314878][T27931] loop7: detected capacity change from 0 to 4096 [ 1740.343385][T27931] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1742.118337][T14062] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1742.288311][T14062] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1742.301281][T14062] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.313067][T14062] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.323867][T14062] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1742.351137][T14062] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1742.360985][T14062] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1742.369270][T14062] usb 8-1: Manufacturer: syz [ 1742.378956][T14062] usb 8-1: config 0 descriptor?? [ 1742.780729][ T5851] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1742.824297][T14062] appleir 0003:05AC:8243.005F: unknown main item tag 0x0 [ 1742.857687][T14062] appleir 0003:05AC:8243.005F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1742.883690][T27975] cifs: Unknown parameter 'ÿ' [ 1742.950613][ T5851] usb 9-1: Using ep0 maxpacket: 32 [ 1742.974201][ T5851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.985728][ T5851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.996020][ T5851] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1743.007666][ T5851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.085347][ T5851] usb 9-1: config 0 descriptor?? [ 1743.125905][T14062] usb 8-1: USB disconnect, device number 16 [ 1743.687455][ T5851] kone 0003:1E7D:2CED.0060: unknown main item tag 0x0 [ 1743.694741][ T5851] kone 0003:1E7D:2CED.0060: unknown main item tag 0x0 [ 1743.701989][ T5851] kone 0003:1E7D:2CED.0060: unknown main item tag 0x0 [ 1743.709034][ T5851] kone 0003:1E7D:2CED.0060: unknown main item tag 0x0 [ 1743.716888][ T5851] kone 0003:1E7D:2CED.0060: unknown main item tag 0x0 [ 1743.833034][ T5851] kone 0003:1E7D:2CED.0060: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.8-1/input0 [ 1743.892736][ T5851] usb 9-1: USB disconnect, device number 48 [ 1744.613600][T28002] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9090'. [ 1744.623185][T28002] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9090'. [ 1745.177380][T22797] Bluetooth: hci5: Frame reassembly failed (-84) [ 1745.197982][T28017] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1745.581344][T28028] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1745.861029][T28033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9101'. [ 1747.053085][T28055] input: syz0 as /devices/virtual/input/input119 [ 1747.231035][T21845] Bluetooth: hci5: command 0x1003 tx timeout [ 1747.237724][T12119] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1747.751308][T28061] trusted_key: syz.4.9112 sent an empty control message without MSG_MORE. [ 1748.563926][T28077] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1749.040663][ T5851] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1749.214152][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.225595][ T5851] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1749.237658][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.356325][ T5851] usb 5-1: config 0 descriptor?? [ 1749.820870][ T5851] keytouch 0003:0926:3333.0061: fixing up Keytouch IEC report descriptor [ 1749.876164][ T5851] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0061/input/input121 [ 1750.034015][ T5851] keytouch 0003:0926:3333.0061: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1750.061783][T28079] loop4: detected capacity change from 0 to 512 [ 1750.103180][T28079] EXT4-fs: Ignoring removed mblk_io_submit option [ 1750.111672][T28079] EXT4-fs: Ignoring removed mblk_io_submit option [ 1750.161589][T28079] EXT4-fs: Mount option(s) incompatible with ext3 [ 1750.963245][ T5851] usb 5-1: USB disconnect, device number 16 [ 1753.300606][ T5851] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1753.471770][ T5851] usb 9-1: Using ep0 maxpacket: 16 [ 1753.492205][ T5851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.503613][ T5851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1753.514055][ T5851] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1753.527271][ T5851] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1753.536858][ T5851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.610888][ T5851] usb 9-1: config 0 descriptor?? [ 1753.621017][ C0] ===================================================== [ 1753.628539][ C0] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1465/0x2000 [ 1753.637056][ C0] bpf_prog_run_generic_xdp+0x1465/0x2000 [ 1753.643100][ C0] do_xdp_generic+0xd52/0x1690 [ 1753.648047][ C0] __netif_receive_skb_core+0x2bc2/0x7150 [ 1753.654028][ C0] __netif_receive_skb+0xcc/0xac0 [ 1753.659238][ C0] process_backlog+0x485/0xa00 [ 1753.664231][ C0] __napi_poll+0xdd/0x8a0 [ 1753.668740][ C0] net_rx_action+0xbc8/0x1c30 [ 1753.673677][ C0] handle_softirqs+0x169/0x6e0 [ 1753.678624][ C0] __do_softirq+0x14/0x1b [ 1753.683190][ C0] do_softirq+0x99/0x100 [ 1753.687625][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 1753.692985][ C0] tun_rx_batched+0x889/0x980 [ 1753.697822][ C0] tun_get_user+0x5d62/0x6d70 [ 1753.702712][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 1753.707945][ C0] vfs_write+0xbe2/0x15d0 [ 1753.712551][ C0] __ia32_sys_write+0x1f9/0x4d0 [ 1753.717522][ C0] ia32_sys_call+0x35bc/0x4310 [ 1753.722528][ C0] __do_fast_syscall_32+0xb0/0x150 [ 1753.727841][ C0] do_fast_syscall_32+0x38/0x80 [ 1753.732926][ C0] do_SYSENTER_32+0x1f/0x30 [ 1753.737594][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1753.744244][ C0] [ 1753.746636][ C0] Uninit was created at: [ 1753.751147][ C0] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 1753.757901][ C0] kmalloc_reserve+0x22f/0x4b0 [ 1753.762906][ C0] pskb_expand_head+0x1fc/0x1610 [ 1753.768038][ C0] do_xdp_generic+0xa79/0x1690 [ 1753.773046][ C0] __netif_receive_skb_core+0x2bc2/0x7150 [ 1753.778971][ C0] __netif_receive_skb+0xcc/0xac0 [ 1753.784255][ C0] process_backlog+0x485/0xa00 [ 1753.789176][ C0] __napi_poll+0xdd/0x8a0 [ 1753.793768][ C0] net_rx_action+0xbc8/0x1c30 [ 1753.798612][ C0] handle_softirqs+0x169/0x6e0 [ 1753.803685][ C0] __do_softirq+0x14/0x1b [ 1753.808177][ C0] [ 1753.810676][ C0] CPU: 0 UID: 0 PID: 28178 Comm: syz.7.9164 Tainted: G W syzkaller #0 PREEMPT(none) [ 1753.821890][ C0] Tainted: [W]=WARN [ 1753.825819][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1753.836062][ C0] ===================================================== [ 1753.843175][ C0] Disabling lock debugging due to kernel taint [ 1753.849446][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1753.855972][ C0] CPU: 0 UID: 0 PID: 28178 Comm: syz.7.9164 Tainted: G B W syzkaller #0 PREEMPT(none) [ 1753.867094][ C0] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1753.872199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1753.882445][ C0] Call Trace: [ 1753.885799][ C0] [ 1753.888711][ C0] __dump_stack+0x26/0x30 [ 1753.893277][ C0] dump_stack_lvl+0x53/0x270 [ 1753.898010][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1753.903961][ C0] dump_stack+0x1e/0x25 [ 1753.908280][ C0] vpanic+0x435/0xd30 [ 1753.912413][ C0] panic+0x15d/0x160 [ 1753.916490][ C0] kmsan_report+0x31c/0x320 [ 1753.921120][ C0] ? __msan_warning+0x1b/0x30 [ 1753.925914][ C0] ? bpf_prog_run_generic_xdp+0x1465/0x2000 [ 1753.931975][ C0] ? do_xdp_generic+0xd52/0x1690 [ 1753.937062][ C0] ? __netif_receive_skb_core+0x2bc2/0x7150 [ 1753.943127][ C0] ? __netif_receive_skb+0xcc/0xac0 [ 1753.948494][ C0] ? process_backlog+0x485/0xa00 [ 1753.953546][ C0] ? __napi_poll+0xdd/0x8a0 [ 1753.958378][ C0] ? net_rx_action+0xbc8/0x1c30 [ 1753.963347][ C0] ? handle_softirqs+0x169/0x6e0 [ 1753.968443][ C0] ? __do_softirq+0x14/0x1b [ 1753.973090][ C0] ? do_softirq+0x99/0x100 [ 1753.977680][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 1753.983041][ C0] ? tun_rx_batched+0x889/0x980 [ 1753.988036][ C0] ? tun_get_user+0x5d62/0x6d70 [ 1753.993124][ C0] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1753.998465][ C0] ? vfs_write+0xbe2/0x15d0 [ 1754.003074][ C0] ? __ia32_sys_write+0x1f9/0x4d0 [ 1754.008207][ C0] ? ia32_sys_call+0x35bc/0x4310 [ 1754.013306][ C0] ? __do_fast_syscall_32+0xb0/0x150 [ 1754.018751][ C0] ? do_fast_syscall_32+0x38/0x80 [ 1754.023937][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 1754.028762][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1754.035437][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.040694][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.045955][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.051196][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1754.057714][ C0] ? kmsan_get_metadata+0x150/0x160 [ 1754.063045][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1754.069567][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.074843][ C0] __msan_warning+0x1b/0x30 [ 1754.079463][ C0] bpf_prog_run_generic_xdp+0x1465/0x2000 [ 1754.085413][ C0] do_xdp_generic+0xd52/0x1690 [ 1754.090334][ C0] ? qdisc_run_end+0xa1/0x120 [ 1754.095180][ C0] ? filter_irq_stacks+0x49/0x190 [ 1754.100420][ C0] __netif_receive_skb_core+0x2bc2/0x7150 [ 1754.106404][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.111650][ C0] ? process_backlog+0x485/0xa00 [ 1754.116730][ C0] ? process_backlog+0x485/0xa00 [ 1754.121797][ C0] ? filter_irq_stacks+0x12c/0x190 [ 1754.127103][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.132347][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1754.138303][ C0] __netif_receive_skb+0xcc/0xac0 [ 1754.143582][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.148882][ C0] process_backlog+0x485/0xa00 [ 1754.153798][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1754.159201][ C0] __napi_poll+0xdd/0x8a0 [ 1754.163693][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.169047][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1754.175006][ C0] net_rx_action+0xbc8/0x1c30 [ 1754.179810][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1754.185766][ C0] ? __run_timer_base+0x109/0xd90 [ 1754.191003][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1754.196238][ C0] handle_softirqs+0x169/0x6e0 [ 1754.201192][ C0] __do_softirq+0x14/0x1b [ 1754.205662][ C0] do_softirq+0x99/0x100 [ 1754.210076][ C0] [ 1754.213069][ C0] [ 1754.216069][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 1754.221258][ C0] ? tun_rx_batched+0x16c/0x980 [ 1754.226254][ C0] tun_rx_batched+0x889/0x980 [ 1754.231077][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.236335][ C0] tun_get_user+0x5d62/0x6d70 [ 1754.241185][ C0] ? stack_depot_save_flags+0x35/0x7b0 [ 1754.246779][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.252046][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1754.257286][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1754.263885][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1754.270275][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 1754.275469][ C0] vfs_write+0xbe2/0x15d0 [ 1754.279995][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1754.285709][ C0] __ia32_sys_write+0x1f9/0x4d0 [ 1754.290698][ C0] ia32_sys_call+0x35bc/0x4310 [ 1754.295726][ C0] __do_fast_syscall_32+0xb0/0x150 [ 1754.301015][ C0] do_fast_syscall_32+0x38/0x80 [ 1754.306033][ C0] do_SYSENTER_32+0x1f/0x30 [ 1754.310698][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1754.317268][ C0] RIP: 0023:0xf7f43539 [ 1754.321424][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1754.341161][ C0] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1754.349755][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1754.357828][ C0] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1754.365893][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1754.373959][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1754.382114][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.390205][ C0] [ 1754.393686][ C0] Kernel Offset: disabled [ 1754.398056][ C0] Rebooting in 86400 seconds..