last executing test programs: 21.707635941s ago: executing program 0 (id=1160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f"], 0xb9) 19.916035602s ago: executing program 0 (id=1165): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x42000862) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$incfs_size(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=0x9263, 0x8, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) unshare(0x40000000) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 17.405434175s ago: executing program 0 (id=1171): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x5, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 10.641104208s ago: executing program 1 (id=1181): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b02, 0x0) 10.548242407s ago: executing program 1 (id=1182): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d34f70b06d038e7ff7fc6e5539b3d5d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006) 10.546529757s ago: executing program 0 (id=1183): dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_clone3(0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x1, 0xffffffff, 0x0) 10.51543548s ago: executing program 4 (id=1184): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4f4}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 10.294525932s ago: executing program 2 (id=1185): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 9.799054952s ago: executing program 4 (id=1186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(r2, &(0x7f00000026c0)=[{0x0}], 0x1, 0x15f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) 9.032093189s ago: executing program 1 (id=1187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8004) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain={'key_or_keyring:', r5}) r6 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0), 0x0, r4) r7 = request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/kvm\x00', r6) socket$inet(0x2, 0x800, 0x0) keyctl$assume_authority(0x10, r7) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xec, 0xff}, {0x19, 0x5, 0xfe}, {0xfc, 0x1}, {0xfe, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x0, 0x9, '\x00', 0xb}, {}, {0x20, 0x81}, {0x0, 0xe}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0x81}, {}, {0x1, 0x50, 0x9}, {0x4, 0x7, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x3, 0x4, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x5, 0x7, '\x00', 0x8}, {0x80, 0x4, 0x7f, '\x00', 0x40}, {0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x6}, {0xfc, 0x5, 0xe}]}}) 8.884992804s ago: executing program 4 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 8.505917813s ago: executing program 4 (id=1189): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20800}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x65ac, &(0x7f0000000740)={0x0, 0x1caa, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) connect$rose(r7, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) 8.303046033s ago: executing program 1 (id=1190): syz_mount_image$ntfs3(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2010002, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfa, 0x1f7a2, &(0x7f000003f240)="$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") creat(&(0x7f00000001c0)='./bus\x00', 0x77) lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000080)=@sha1={0x1, "df0ed20f9239fa7d648cf014ad4f16d302f796d1"}, 0x15, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280)={0x2, 0x0, 0x28}, 0x18) 8.168072947s ago: executing program 3 (id=1191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000"], 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000004c0)='\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d0800038004000380080005"], 0x3c}}, 0x0) 7.011892663s ago: executing program 3 (id=1192): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b02, 0x0) 6.94587743s ago: executing program 4 (id=1193): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x5, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 6.764471708s ago: executing program 1 (id=1194): pipe2(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x4788, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.54234064s ago: executing program 2 (id=1195): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) mount$9p_unix(&(0x7f00000022c0)='./file0/file3\x00', &(0x7f0000002300)='./file0/file3\x00', 0x0, 0x1001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x40802140, 0xa, 0x8, 0x7, 0xcdd, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x2, 0x5, 0xfffffffffffffff9, 0x400, 0xc, {0x0, 0xb, 0x7, 0x1, 0x1, 0x4, 0x9, 0x0, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000006400)={0x10, 0x0, r1}, 0x10) 5.574312859s ago: executing program 2 (id=1196): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4f4}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 4.682853328s ago: executing program 2 (id=1197): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0xe37ec71d62524b12, 0x20, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5, 0x0, 0x800000000000000}, 0x18) close(r6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000040)=0x1f) 3.779869429s ago: executing program 3 (id=1198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000540)}, 0x20) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000580)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 3.713670226s ago: executing program 2 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 2.640853275s ago: executing program 3 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) pselect6(0x40, &(0x7f0000000100)={0xffffffffffffffff, 0x200, 0x3, 0xfffffffffffffffd, 0x0, 0x5, 0xfdfffffffffffffc, 0x4}, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={0x0}) 2.418204916s ago: executing program 3 (id=1201): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) 2.337433025s ago: executing program 4 (id=1202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000840)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.204103368s ago: executing program 1 (id=1203): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000000000010000040500010007000042667c4d87dbe800157849b460bda741aa63c30a2e04434014c16cfeb2aadba72212daf440b27cc31b647e8975ed0fff72c476219b20e13a49f96ea0de73be390ee930830233208cadb813b7c513355d94fc8cf9bc000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xfffffffffffffe3d, r5, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfc00}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010100000000000000002b000000080003e700", @ANYRES32=0x0, @ANYBLOB="0a002a003e01013e010100000a003400010101010101000004004600"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8d0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0001}]}) setuid(0x0) 2.048460844s ago: executing program 2 (id=1204): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="6005020000002328"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.723628587s ago: executing program 0 (id=1205): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000200), 0x0, 0x0, 0x1) accept$phonet_pipe(r0, 0x0, &(0x7f0000000140)) sendfile(r1, r2, 0x0, 0x1000000201005) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100)) r3 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000008940)={0x0, {}, 0x0, {}, 0x2, 0x5, 0x6, 0x0, "9e959f16deab7b08aa26e66c4056a516950600000000000000eef4fb0efcc1d8a6078ed9d5f8643902dd8f6fac274de9d940ffa5e592bbd48685450d00002000", "f625c10e6e0080ffffffffffffffff7e904dc8df6aa3a893ec00347f41be6908", [0xa, 0x80000476]}) creat(&(0x7f0000000380)='./bus\x00', 0x0) 532.778977ms ago: executing program 3 (id=1206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000080)={0x10000, "6898ec0c000000196644ccf2fdfc973ab6e8670009848076783b6bf6fa00", 0x1, 0x80, 0x0, 0x7, 0x2, 0x0, 0xdf, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 0 (id=1207): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4f4}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): 0, Product=0, SerialNumber=0 [ 87.551704][ T4338] usb 2-1: config 0 descriptor?? [ 87.748348][ T4316] vhci_hcd: vhci_device speed not set [ 87.974291][ T4338] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0002/input/input5 [ 88.144415][ T4338] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 88.187201][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.251306][ T4338] usb 2-1: USB disconnect, device number 2 [ 88.372552][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.549126][ T4508] fido_id[4508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 89.694602][ T4484] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.704624][ T4484] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.713599][ T4484] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.723299][ T4484] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.508408][ T4266] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.760711][ T4266] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.792634][ T4266] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 90.818511][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 90.842692][ T4266] usb 5-1: Product: syz [ 90.862921][ T4266] usb 5-1: Manufacturer: syz [ 90.877822][ T4266] usb 5-1: SerialNumber: syz [ 91.118190][ T4266] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 93.436779][ T4266] usb 5-1: USB disconnect, device number 3 [ 93.453879][ T4266] usblp0: removed [ 93.742778][ T4565] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET) [ 93.998725][ T4266] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.085198][ T26] audit: type=1326 audit(1763009060.201:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b98f6c9 code=0x7ffc0000 [ 94.176292][ T26] audit: type=1326 audit(1763009060.241:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b98f6c9 code=0x7ffc0000 [ 94.239882][ T4266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.281250][ T4266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.332077][ T26] audit: type=1326 audit(1763009060.241:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f849b98f6c9 code=0x7ffc0000 [ 94.353920][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.373036][ T4266] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.437485][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.454787][ T4579] ======================================================= [ 94.454787][ T4579] WARNING: The mand mount option has been deprecated and [ 94.454787][ T4579] and is ignored by this kernel. Remove the mand [ 94.454787][ T4579] option from the mount to silence this warning. [ 94.454787][ T4579] ======================================================= [ 94.502738][ T4266] usb 5-1: config 0 descriptor?? [ 94.517024][ T26] audit: type=1326 audit(1763009060.241:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f849b98f6c9 code=0x7ffc0000 [ 94.538924][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.545977][ T4266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 95.760177][ T4603] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 95.769301][ T4603] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 96.168231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 97.263879][ T4625] netlink: 220 bytes leftover after parsing attributes in process `syz.2.58'. [ 97.292166][ T4625] netlink: 220 bytes leftover after parsing attributes in process `syz.2.58'. [ 97.341695][ T4625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.58'. [ 97.372884][ T4629] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 97.382128][ T4626] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 97.391284][ T4629] netlink: 'syz.1.57': attribute type 2 has an invalid length. [ 97.414978][ T4626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.56'. [ 97.533266][ T4631] Zero length message leads to an empty skb [ 97.918630][ T41] usb 5-1: USB disconnect, device number 4 [ 99.262309][ T4655] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 99.271247][ T4655] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 100.617675][ T4664] fuse: Bad value for 'group_id' [ 100.848262][ T4331] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.439495][ T4331] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 101.458620][ T4331] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.522180][ T4331] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.598105][ T4331] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.640787][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.738262][ T4331] usb 3-1: invalid MIDI out EP 0 [ 101.905259][ T4675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.938805][ T4675] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.989666][ T4331] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 102.046006][ T4428] udevd[4428]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.090210][ T4675] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 103.558696][ T4706] fuse: Bad value for 'group_id' [ 103.610321][ T4703] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.076529][ T4716] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 104.097095][ T4716] netlink: 'syz.0.78': attribute type 2 has an invalid length. [ 104.317094][ T4317] usb 3-1: USB disconnect, device number 3 [ 106.203617][ T4739] tmpfs: Unknown parameter 'usrquota' [ 106.304662][ T4739] loop0: detected capacity change from 0 to 2048 [ 106.961275][ T4739] NILFS (loop0): invalid segment: Magic number mismatch [ 106.968432][ T4739] NILFS (loop0): trying rollback from an earlier position [ 107.003193][ T4739] NILFS (loop0): recovery complete [ 107.074878][ T4741] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.402206][ T4780] loop4: detected capacity change from 0 to 512 [ 109.409078][ T4780] EXT4-fs: Ignoring removed i_version option [ 109.415092][ T4780] EXT4-fs: Ignoring removed bh option [ 110.285926][ T4780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.295806][ T4780] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.848237][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 111.638251][ T4519] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.848356][ T4519] usb 3-1: Using ep0 maxpacket: 16 [ 111.856233][ T4519] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.897743][ T4519] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.948557][ T4519] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.955178][ T4519] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 112.078432][ T4519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.136749][ T4519] usb 3-1: config 0 descriptor?? [ 112.557397][ T4519] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 112.576748][ T4519] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 112.605918][ T4519] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 112.653180][ T4519] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 112.681684][ T4519] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 112.778100][ T4519] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 112.882661][ T4519] usb 3-1: USB disconnect, device number 4 [ 113.180090][ T4826] fido_id[4826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 114.142259][ T4830] loop2: detected capacity change from 0 to 512 [ 114.149213][ T4830] EXT4-fs: Ignoring removed i_version option [ 114.155221][ T4830] EXT4-fs: Ignoring removed bh option [ 114.797448][ T4830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.808028][ T4830] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.289661][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 118.432461][ T4879] loop3: detected capacity change from 0 to 512 [ 118.440193][ T4879] EXT4-fs: Ignoring removed i_version option [ 118.446199][ T4879] EXT4-fs: Ignoring removed bh option [ 119.083866][ T4879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 119.093128][ T4879] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.600295][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 120.661129][ T4900] tmpfs: Unknown parameter 'usrquota' [ 120.749698][ T4900] loop1: detected capacity change from 0 to 2048 [ 121.422458][ T4900] NILFS (loop1): invalid segment: Magic number mismatch [ 121.429546][ T4900] NILFS (loop1): trying rollback from an earlier position [ 121.443135][ T4900] NILFS (loop1): recovery complete [ 121.528374][ T4902] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.793575][ T4910] kthread_run failed with err -4 [ 124.562807][ T4932] loop3: detected capacity change from 0 to 512 [ 124.569704][ T4932] EXT4-fs: Ignoring removed i_version option [ 124.575709][ T4932] EXT4-fs: Ignoring removed bh option [ 125.047582][ T4932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.056750][ T4932] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.511506][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 126.530030][ T4951] Cannot find add_set index 0 as target [ 126.943788][ T4955] tmpfs: Unknown parameter 'usrquota' [ 127.046131][ T4955] loop1: detected capacity change from 0 to 2048 [ 127.079574][ T4955] NILFS (loop1): invalid segment: Magic number mismatch [ 127.086595][ T4955] NILFS (loop1): trying rollback from an earlier position [ 127.659599][ T4955] NILFS (loop1): recovery complete [ 127.712148][ T4956] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.118325][ T4309] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.624462][ T4309] usb 1-1: config 27 has an invalid descriptor of length 194, skipping remainder of the config [ 130.732185][ T4309] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 130.815243][ T4309] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.853674][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.208270][ T5005] device syzkaller0 entered promiscuous mode [ 131.249686][ T4309] usb 1-1: USB disconnect, device number 2 [ 131.545395][ T5010] process 'syz.1.142' launched './file2' with NULL argv: empty string added [ 132.588298][ T4266] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.631357][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.637845][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.758368][ T4266] usb 2-1: device descriptor read/64, error -71 [ 133.028231][ T4266] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.188410][ T4266] usb 2-1: device descriptor read/64, error -71 [ 133.308586][ T4266] usb usb2-port1: attempt power cycle [ 133.423309][ T5026] device syzkaller1 entered promiscuous mode [ 133.538837][ T5031] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 133.558419][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.573359][ T5031] netlink: 'syz.2.148': attribute type 2 has an invalid length. [ 133.703511][ T5035] device syzkaller0 entered promiscuous mode [ 133.718391][ T4266] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.761464][ T4266] usb 2-1: device descriptor read/8, error -71 [ 133.788235][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 133.797734][ T22] usb 4-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 133.865680][ T22] usb 4-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 133.915920][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.928091][ T22] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 133.947004][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.005113][ T22] usb 4-1: config 0 descriptor?? [ 134.038298][ T4266] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.098696][ T4266] usb 2-1: device descriptor read/8, error -71 [ 134.228843][ T4266] usb usb2-port1: unable to enumerate USB device [ 135.978566][ T5052] device syzkaller0 entered promiscuous mode [ 136.226766][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 136.249004][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 136.369541][ T22] usb 4-1: USB disconnect, device number 3 [ 137.072738][ T5066] netlink: 64 bytes leftover after parsing attributes in process `syz.0.156'. [ 137.551608][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 137.818570][ T4317] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 137.957945][ T5087] netlink: 'syz.0.162': attribute type 10 has an invalid length. [ 138.033756][ T4317] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 138.068269][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.099803][ T4317] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 138.154625][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 138.190265][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.197017][ T4317] usb 5-1: Product: syz [ 138.243155][ T4317] usb 5-1: Manufacturer: syz [ 138.250715][ T4317] usb 5-1: SerialNumber: syz [ 138.296842][ T4317] usb 5-1: config 0 descriptor?? [ 138.353237][ T4317] usb 5-1: selecting invalid altsetting 0 [ 138.388572][ T5087] bond0: (slave team0): Enslaving as an active interface with an up link [ 138.536098][ T4317] usb 5-1: USB disconnect, device number 5 [ 139.590102][ T5103] tmpfs: Unknown parameter 'usrquota' [ 139.616178][ T5103] loop4: detected capacity change from 0 to 2048 [ 140.539306][ T5098] sched: RT throttling activated [ 140.556260][ T5103] NILFS (loop4): invalid segment: Magic number mismatch [ 140.563270][ T5103] NILFS (loop4): trying rollback from an earlier position [ 140.574348][ T5103] NILFS (loop4): recovery complete [ 141.026172][ T5104] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.992494][ T5118] loop4: detected capacity change from 0 to 512 [ 141.999415][ T5118] EXT4-fs: Ignoring removed i_version option [ 142.005403][ T5118] EXT4-fs: Ignoring removed bh option [ 142.622221][ T5118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.631601][ T5118] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.246408][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 144.481885][ T5145] tmpfs: Unknown parameter 'usrquota' [ 144.507880][ T5145] loop0: detected capacity change from 0 to 2048 [ 145.919258][ T5145] NILFS (loop0): invalid segment: Magic number mismatch [ 145.926289][ T5145] NILFS (loop0): trying rollback from an earlier position [ 145.941146][ T5145] NILFS (loop0): recovery complete [ 146.004308][ T5148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.988685][ T4324] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.194067][ T4324] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 147.215960][ T4324] usb 5-1: config 0 has no interface number 0 [ 147.558002][ T4324] usb 5-1: config 0 interface 122 has no altsetting 0 [ 147.587034][ T4324] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 147.615699][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.773299][ T4324] usb 5-1: Product: syz [ 147.784843][ T4324] usb 5-1: Manufacturer: syz [ 147.799550][ T4324] usb 5-1: SerialNumber: syz [ 147.814093][ T4324] usb 5-1: config 0 descriptor?? [ 148.650494][ T5178] device syzkaller0 entered promiscuous mode [ 150.008501][ T4331] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.198284][ T4331] usb 2-1: Using ep0 maxpacket: 8 [ 150.224197][ T4331] usb 2-1: config 1 interface 0 has no altsetting 0 [ 150.271406][ T4331] usb 2-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 150.345469][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.377201][ T4331] usb 2-1: Product: syz [ 150.407431][ T4331] usb 2-1: SerialNumber: syz [ 150.679294][ T4331] usbhid 2-1:1.0: can't add hid device: -71 [ 150.710801][ T4331] usbhid: probe of 2-1:1.0 failed with error -71 [ 150.768453][ T4331] usb 2-1: USB disconnect, device number 7 [ 151.988219][ T4317] usb 5-1: USB disconnect, device number 6 [ 151.994327][ T4317] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 154.906804][ T5258] loop0: detected capacity change from 0 to 2048 [ 156.178291][ T5258] NILFS (loop0): invalid segment: Magic number mismatch [ 156.185326][ T5258] NILFS (loop0): trying rollback from an earlier position [ 156.195798][ T5258] NILFS (loop0): recovery complete [ 156.234981][ T5259] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.166468][ T5270] syz.0.206 (5270) used greatest stack depth: 19776 bytes left [ 158.309486][ T5288] device syzkaller0 entered promiscuous mode [ 158.538253][ T4519] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.718221][ T4519] usb 2-1: device descriptor read/64, error -71 [ 158.778879][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 158.810732][ T5296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.214'. [ 158.971306][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.988463][ T4519] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.026401][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.114621][ T7] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 159.148413][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.168353][ T4519] usb 2-1: device descriptor read/64, error -71 [ 159.219612][ T7] usb 4-1: config 0 descriptor?? [ 159.320807][ T4519] usb usb2-port1: attempt power cycle [ 159.738361][ T4519] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.876543][ T4519] usb 2-1: device descriptor read/8, error -71 [ 160.011289][ T4356] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.190526][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 160.196556][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 160.229682][ T4519] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 160.255067][ T7] usb 4-1: USB disconnect, device number 4 [ 160.288876][ T4519] usb 2-1: device descriptor read/8, error -71 [ 160.438493][ T4519] usb usb2-port1: unable to enumerate USB device [ 161.892336][ T5316] tipc: Started in network mode [ 161.932599][ T5316] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 161.968278][ T5316] tipc: Enabled bearer , priority 10 [ 162.310955][ T5337] device syzkaller0 entered promiscuous mode [ 163.079440][ T4266] tipc: Node number set to 4269801494 [ 164.217613][ T5370] fuse: Unknown parameter 'group_id00000000000000000000' [ 164.431655][ T5374] device syzkaller0 entered promiscuous mode [ 165.078905][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 165.177413][ T5384] netlink: 'syz.4.240': attribute type 4 has an invalid length. [ 165.215068][ T5384] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.240'. [ 166.368238][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.552631][ T5408] fuse: Unknown parameter 'group_id00000000000000000000' [ 166.569627][ T22] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.602550][ T22] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.632953][ T22] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.652329][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.684037][ T5402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.854311][ T5412] device syzkaller0 entered promiscuous mode [ 167.517291][ T5429] netlink: 260 bytes leftover after parsing attributes in process `syz.1.251'. [ 168.744653][ T4266] usb 3-1: USB disconnect, device number 5 [ 169.865072][ T5446] binder_alloc: 5445: binder_alloc_buf, no vma [ 170.318700][ T5456] fuse: Unknown parameter 'group_id00000000000000000000' [ 171.421620][ T5466] loop4: detected capacity change from 0 to 2048 [ 172.225535][ T5466] NILFS (loop4): invalid segment: Magic number mismatch [ 172.232692][ T5466] NILFS (loop4): trying rollback from an earlier position [ 172.266565][ T5466] NILFS (loop4): recovery complete [ 172.419640][ T5469] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.493831][ T5472] device syzkaller0 entered promiscuous mode [ 173.498220][ T5504] binder_alloc: 5503: binder_alloc_buf, no vma [ 176.059703][ T5516] fuse: Bad value for 'user_id' [ 176.208424][ T4317] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.300947][ T5522] tipc: Started in network mode [ 176.328300][ T5522] tipc: Node identity 62228b21359e, cluster identity 4711 [ 176.345850][ T5522] tipc: Enabled bearer , priority 0 [ 176.369572][ T5524] netlink: 'syz.2.276': attribute type 21 has an invalid length. [ 176.398297][ T5524] netlink: 'syz.2.276': attribute type 6 has an invalid length. [ 176.401165][ T4317] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 176.439943][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.466530][ T4317] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.476056][ T5524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.276'. [ 176.511611][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 176.538742][ T5526] device syzkaller0 entered promiscuous mode [ 176.547163][ T4317] usb 5-1: Product: syz [ 176.580597][ T4317] usb 5-1: Manufacturer: syz [ 176.626659][ T4317] usb 5-1: SerialNumber: syz [ 176.627218][ T5522] tipc: Resetting bearer [ 176.652285][ T4317] usb 5-1: config 0 descriptor?? [ 176.667721][ T4317] usb 5-1: selecting invalid altsetting 0 [ 176.706535][ T5521] tipc: Resetting bearer [ 176.816761][ T5521] tipc: Disabling bearer [ 177.262272][ T5533] device syzkaller0 entered promiscuous mode [ 178.015069][ T4266] usb 5-1: USB disconnect, device number 7 [ 179.273785][ T5572] loop3: detected capacity change from 0 to 2048 [ 179.310299][ T5572] NILFS (loop3): invalid segment: Magic number mismatch [ 179.317713][ T5572] NILFS (loop3): trying rollback from an earlier position [ 179.366183][ T5572] NILFS (loop3): recovery complete [ 179.942370][ T5573] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.606780][ T5588] device syzkaller0 entered promiscuous mode [ 181.948248][ T4266] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.159720][ T4266] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 182.184518][ T4266] usb 3-1: config 0 has no interface number 0 [ 182.205933][ T4266] usb 3-1: config 0 interface 122 has no altsetting 0 [ 182.236415][ T4266] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 182.291375][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.313182][ T4266] usb 3-1: Product: syz [ 182.322992][ T4266] usb 3-1: Manufacturer: syz [ 182.333347][ T4266] usb 3-1: SerialNumber: syz [ 182.363894][ T4266] usb 3-1: config 0 descriptor?? [ 185.677211][ T5637] device syzkaller0 entered promiscuous mode [ 186.024600][ T4266] usb 3-1: USB disconnect, device number 6 [ 186.038563][ T4266] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 186.461576][ T5645] fuse: Bad value for 'fd' [ 186.578474][ T4266] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 186.769886][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.781172][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.793274][ T4266] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 186.802685][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.829216][ T4266] usb 3-1: config 0 descriptor?? [ 187.340053][ T4266] usbhid 3-1:0.0: can't add hid device: -71 [ 187.354416][ T4266] usbhid: probe of 3-1:0.0 failed with error -71 [ 187.395562][ T4266] usb 3-1: USB disconnect, device number 7 [ 187.473470][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 188.072258][ T5679] device syzkaller0 entered promiscuous mode [ 188.907386][ T26] audit: type=1326 audit(1763009155.021:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f942318f6c9 code=0x0 [ 189.139734][ T5697] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.321'. [ 189.750170][ T5706] binder_alloc: 5702: binder_alloc_buf, no vma [ 190.048500][ T5709] fuse: Bad value for 'user_id' [ 190.743845][ T26] audit: type=1326 audit(1763009156.861:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5704 comm="syz.4.325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f942318f6c9 code=0x0 [ 191.898595][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.905977][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.806375][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.072145][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.078552][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.090111][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.166320][ T5764] fuse: Bad value for 'user_id' [ 195.314175][ T5717] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.324129][ T5717] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.337559][ T5717] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.346656][ T5717] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.102044][ T5787] ipt_ECN: cannot use operation on non-tcp rule [ 196.178267][ T4324] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 196.368434][ T4324] usb 2-1: Using ep0 maxpacket: 8 [ 196.383539][ T4324] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.408324][ T4324] usb 2-1: config 1 interface 0 has no altsetting 0 [ 196.431913][ T4324] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 196.504749][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.553602][ T4324] usb 2-1: Product: syz [ 196.573425][ T4324] usb 2-1: Manufacturer: syz [ 196.585906][ T4324] usb 2-1: SerialNumber: syz [ 197.375825][ T4324] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input15 [ 197.436633][ T3622] bcm5974 2-1:1.0: could not read from device [ 197.489822][ T3622] bcm5974 2-1:1.0: could not read from device [ 197.505551][ T4324] usb 2-1: USB disconnect, device number 12 [ 197.521435][ T3622] bcm5974 2-1:1.0: could not read from device [ 199.059645][ T5818] netlink: 48 bytes leftover after parsing attributes in process `syz.0.349'. [ 199.103276][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 200.822971][ T5852] fuse: Bad value for 'fd' [ 201.780355][ T5863] netlink: 48 bytes leftover after parsing attributes in process `syz.2.362'. [ 201.895097][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 202.218266][ T4266] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.973249][ T4266] usb 3-1: Using ep0 maxpacket: 32 [ 203.225540][ T4266] usb 3-1: config 2 has an invalid interface number: 15 but max is 0 [ 203.356114][ T4266] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 203.357834][ T5878] device syzkaller0 entered promiscuous mode [ 203.398906][ T4266] usb 3-1: config 2 has no interface number 1 [ 203.416330][ T4266] usb 3-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.470064][ T4266] usb 3-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 203.588572][ T4266] usb 3-1: config 2 interface 0 has no altsetting 0 [ 203.618384][ T4266] usb 3-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 203.618403][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.618415][ T4266] usb 3-1: Product: syz [ 203.618424][ T4266] usb 3-1: Manufacturer: syz [ 203.618434][ T4266] usb 3-1: SerialNumber: syz [ 203.659897][ T4266] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 204.610884][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.611215][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.808402][ T4519] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.859881][ T4266] pwc: Failed to set LED on/off time (-71) [ 204.860179][ T4266] pwc: send_video_command error -71 [ 204.860192][ T4266] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 204.860275][ T4266] Philips webcam: probe of 3-1:2.0 failed with error -71 [ 204.864630][ T4266] usb 3-1: USB disconnect, device number 8 [ 205.179039][ T5895] loop4: detected capacity change from 0 to 2048 [ 206.191219][ T5895] NILFS (loop4): invalid segment: Magic number mismatch [ 206.191289][ T5895] NILFS (loop4): trying rollback from an earlier position [ 206.196294][ T5895] NILFS (loop4): recovery complete [ 206.521058][ T5896] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.937474][ T4519] usb 1-1: unable to read config index 0 descriptor/all [ 207.955185][ T4519] usb 1-1: can't read configurations, error -71 [ 208.202032][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 208.338289][ T4266] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 208.540725][ T4266] usb 2-1: config 27 has an invalid descriptor of length 194, skipping remainder of the config [ 208.576200][ T4266] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 208.627321][ T4266] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.702171][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.089580][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.835399][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.884502][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.433717][ T5912] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.443046][ T5912] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.453338][ T5912] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.463127][ T5912] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.614063][ T5925] netlink: 'syz.0.378': attribute type 4 has an invalid length. [ 210.648602][ T5925] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.378'. [ 210.697109][ T5933] tipc: Started in network mode [ 210.718643][ T5933] tipc: Node identity 0ad2eeca45d, cluster identity 4711 [ 210.727790][ T5933] tipc: Enabled bearer , priority 0 [ 210.747295][ T5934] device syzkaller0 entered promiscuous mode [ 210.781270][ T5944] netlink: 'syz.3.380': attribute type 21 has an invalid length. [ 210.805312][ T5944] netlink: 'syz.3.380': attribute type 6 has an invalid length. [ 210.834673][ T5944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.380'. [ 210.901453][ T5934] tipc: Resetting bearer [ 211.010769][ T5934] tipc: Disabling bearer [ 211.032883][ T5949] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 211.046987][ T5949] netlink: 'syz.0.381': attribute type 2 has an invalid length. [ 211.482205][ T4519] usb 2-1: USB disconnect, device number 13 [ 214.251079][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 214.332837][ T5988] netlink: 'syz.0.391': attribute type 4 has an invalid length. [ 214.368810][ T5988] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.391'. [ 214.421465][ T5993] tipc: Enabled bearer , priority 0 [ 214.430622][ T5993] device syzkaller0 entered promiscuous mode [ 214.475358][ T5993] tipc: Resetting bearer [ 214.548182][ T5992] tipc: Resetting bearer [ 214.635368][ T5992] tipc: Disabling bearer [ 214.848243][ T4338] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 214.931590][ T6009] netlink: 'syz.4.396': attribute type 21 has an invalid length. [ 214.966097][ T6009] netlink: 'syz.4.396': attribute type 6 has an invalid length. [ 215.019419][ T6009] netlink: 132 bytes leftover after parsing attributes in process `syz.4.396'. [ 215.067732][ T4338] usb 3-1: config 27 has an invalid descriptor of length 194, skipping remainder of the config [ 215.078871][ T6008] device syzkaller0 entered promiscuous mode [ 215.096956][ T4338] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 215.143979][ T4338] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.185657][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.377183][ T6032] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 216.385254][ T6032] netlink: 'syz.0.401': attribute type 2 has an invalid length. [ 216.947731][ T6043] trusted_key: encrypted_key: key user:syz not found [ 217.389520][ T6047] tipc: Enabled bearer , priority 0 [ 217.512400][ T6047] device syzkaller0 entered promiscuous mode [ 217.573186][ T6047] tipc: Resetting bearer [ 217.628379][ T6046] tipc: Resetting bearer [ 217.688746][ T6046] tipc: Disabling bearer [ 217.908519][ T6049] device syzkaller0 entered promiscuous mode [ 218.450682][ T6055] netlink: 'syz.1.410': attribute type 21 has an invalid length. [ 218.544552][ T4309] usb 3-1: USB disconnect, device number 9 [ 218.550659][ T6055] netlink: 'syz.1.410': attribute type 6 has an invalid length. [ 218.629803][ T6055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.410'. [ 218.919658][ T6068] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 218.928436][ T6068] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 220.154418][ T6094] tmpfs: Unknown parameter 'usrquota' [ 220.248289][ T6094] loop0: detected capacity change from 0 to 2048 [ 220.565415][ T6094] NILFS (loop0): invalid segment: Magic number mismatch [ 220.572635][ T6094] NILFS (loop0): trying rollback from an earlier position [ 220.621388][ T6094] NILFS (loop0): recovery complete [ 220.870067][ T6095] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.609516][ T6113] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 221.706649][ T6113] netlink: 'syz.0.422': attribute type 2 has an invalid length. [ 222.058228][ T127] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 222.277544][ T127] usb 4-1: config 27 has an invalid descriptor of length 194, skipping remainder of the config [ 222.301618][ T127] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 222.334376][ T127] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.381626][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.131962][ T6128] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 223.140962][ T6128] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 223.962029][ T6132] fuse: Invalid rootmode [ 224.176743][ T6135] netlink: 'syz.0.427': attribute type 21 has an invalid length. [ 224.252891][ T6135] netlink: 'syz.0.427': attribute type 6 has an invalid length. [ 224.388394][ T6135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.427'. [ 225.135528][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 225.187840][ T6152] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.433'. [ 225.818701][ T6165] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 225.827483][ T6165] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 226.971310][ T127] usb 4-1: USB disconnect, device number 5 [ 227.088004][ T6171] fuse: Invalid rootmode [ 227.872053][ T6193] netlink: 'syz.2.443': attribute type 21 has an invalid length. [ 227.958404][ T6193] netlink: 'syz.2.443': attribute type 6 has an invalid length. [ 227.988103][ T6193] netlink: 132 bytes leftover after parsing attributes in process `syz.2.443'. [ 228.289368][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 228.325890][ T6202] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.445'. [ 228.880528][ T6209] loop2: detected capacity change from 0 to 2048 [ 230.138330][ T6209] NILFS (loop2): invalid segment: Magic number mismatch [ 230.145328][ T6209] NILFS (loop2): trying rollback from an earlier position [ 230.157798][ T6209] NILFS (loop2): recovery complete [ 230.188803][ T6210] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.630755][ T6216] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 230.639570][ T6216] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.658028][ T6223] device syzkaller0 entered promiscuous mode [ 231.804909][ T6226] fuse: Invalid rootmode [ 231.858231][ T4324] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 232.288545][ T4324] usb 3-1: config 27 has an invalid descriptor of length 194, skipping remainder of the config [ 232.332926][ T4324] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 232.386567][ T4324] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.424692][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.425163][ T6238] netlink: 'syz.4.455': attribute type 21 has an invalid length. [ 232.590511][ T6238] netlink: 'syz.4.455': attribute type 6 has an invalid length. [ 233.240251][ T6238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.455'. [ 233.712722][ T6254] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 233.721546][ T6254] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.385170][ T6275] fuse: Bad value for 'rootmode' [ 235.564810][ T6279] device syzkaller0 entered promiscuous mode [ 235.817492][ T4309] usb 3-1: USB disconnect, device number 10 [ 239.240627][ T6331] fuse: Bad value for 'rootmode' [ 239.496687][ T6336] device syzkaller0 entered promiscuous mode [ 240.574823][ T6351] netlink: 220 bytes leftover after parsing attributes in process `syz.1.481'. [ 240.597300][ T6351] netlink: 220 bytes leftover after parsing attributes in process `syz.1.481'. [ 240.618793][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 240.779444][ T4324] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 241.719558][ T4324] usb 4-1: config 27 has an invalid descriptor of length 194, skipping remainder of the config [ 241.742044][ T4324] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 241.823742][ T4324] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.854185][ T6364] fuse: Bad value for 'rootmode' [ 241.873266][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.000525][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.007887][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.324179][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.444434][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.491028][ T4324] usb 4-1: USB disconnect, device number 6 [ 244.715495][ T6403] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 244.724312][ T6403] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 246.945107][ T6368] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.954605][ T6368] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.963636][ T6368] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.972580][ T6368] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.272600][ T6423] fuse: Unknown parameter 'use00000000000000000000' [ 247.646538][ T6442] netlink: 'syz.1.504': attribute type 21 has an invalid length. [ 247.664728][ T6442] netlink: 'syz.1.504': attribute type 6 has an invalid length. [ 247.719717][ T6442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.504'. [ 249.885355][ T6433] trusted_key: encrypted_key: key user:syz not found [ 250.087795][ T6460] fuse: Unknown parameter 'use00000000000000000000' [ 250.143817][ T6461] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 250.152711][ T6461] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 251.036423][ T6466] netlink: 220 bytes leftover after parsing attributes in process `syz.4.510'. [ 251.099194][ T6466] netlink: 220 bytes leftover after parsing attributes in process `syz.4.510'. [ 251.170594][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 251.838392][ T2120] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 252.183919][ T2120] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 252.213325][ T2120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 252.285943][ T2120] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 252.418234][ T2120] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 252.426584][ T2120] usb 3-1: Product: syz [ 252.431802][ T2120] usb 3-1: Manufacturer: syz [ 252.436435][ T2120] usb 3-1: SerialNumber: syz [ 252.449839][ T2120] usb 3-1: config 0 descriptor?? [ 252.506565][ T2120] usb 3-1: selecting invalid altsetting 0 [ 252.693763][ T6497] loop1: detected capacity change from 0 to 2048 [ 252.856631][ T6497] NILFS (loop1): invalid segment: Magic number mismatch [ 252.863781][ T6497] NILFS (loop1): trying rollback from an earlier position [ 252.916770][ T6497] NILFS (loop1): recovery complete [ 253.343037][ T6498] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.408911][ T6493] tipc: Enabled bearer , priority 0 [ 253.505001][ T6493] device syzkaller0 entered promiscuous mode [ 253.549261][ T6493] tipc: Resetting bearer [ 253.587869][ T6492] tipc: Resetting bearer [ 253.748393][ T4309] usb 3-1: USB disconnect, device number 11 [ 253.818701][ T6514] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 253.827445][ T6514] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 254.524863][ T6492] tipc: Disabling bearer [ 254.839831][ T6525] device syzkaller0 entered promiscuous mode [ 255.008270][ T4324] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 255.195950][ T4324] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 255.195976][ T4324] usb 4-1: config 0 has no interface number 0 [ 255.195998][ T4324] usb 4-1: config 0 interface 122 has no altsetting 0 [ 255.202714][ T4324] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 255.202740][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.202757][ T4324] usb 4-1: Product: syz [ 255.202771][ T4324] usb 4-1: Manufacturer: syz [ 255.202785][ T4324] usb 4-1: SerialNumber: syz [ 255.205004][ T4324] usb 4-1: config 0 descriptor?? [ 255.559046][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.559144][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.589729][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 256.661362][ T6549] netlink: 'syz.1.533': attribute type 4 has an invalid length. [ 256.677537][ T6549] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.533'. [ 258.382810][ T2120] usb 4-1: USB disconnect, device number 7 [ 258.390761][ T2120] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 260.128682][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.136059][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.957534][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.032879][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.725805][ T6557] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.737950][ T6557] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.746996][ T6557] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.756697][ T6557] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.925672][ T6597] fuse: Unknown parameter 'user_i00000000000000000000' [ 262.366485][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 262.423132][ T6617] netlink: 'syz.3.553': attribute type 4 has an invalid length. [ 262.423146][ T6617] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.553'. [ 262.827279][ T6631] fuse: Unknown parameter 'user_i00000000000000000000' [ 262.918240][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 263.134843][ T7] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 263.165304][ T7] usb 3-1: config 0 has no interface number 0 [ 263.228027][ T7] usb 3-1: config 0 interface 122 has no altsetting 0 [ 263.266310][ T7] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 263.298784][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.343393][ T7] usb 3-1: Product: syz [ 263.374343][ T7] usb 3-1: Manufacturer: syz [ 263.390753][ T7] usb 3-1: SerialNumber: syz [ 263.414757][ T7] usb 3-1: config 0 descriptor?? [ 263.654155][ T6640] device syzkaller0 entered promiscuous mode [ 264.721196][ T6651] binder_alloc: 6649: binder_alloc_buf, no vma [ 264.748658][ T6651] binder: 6649:6651 ioctl c0306201 200000000240 returned -11 [ 264.939304][ T6656] tmpfs: Unknown parameter 'usrquota' [ 265.015810][ T6656] loop4: detected capacity change from 0 to 2048 [ 265.031918][ T6656] NILFS (loop4): invalid segment: Magic number mismatch [ 265.038960][ T6656] NILFS (loop4): trying rollback from an earlier position [ 265.083961][ T6656] NILFS (loop4): recovery complete [ 265.700246][ T6657] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.108581][ T6663] netlink: 220 bytes leftover after parsing attributes in process `syz.4.567'. [ 266.125899][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 266.146059][ T6663] netlink: 220 bytes leftover after parsing attributes in process `syz.4.567'. [ 266.183936][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.567'. [ 266.264343][ T6665] netlink: 'syz.1.568': attribute type 4 has an invalid length. [ 266.288881][ T6665] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.568'. [ 266.664476][ T6673] fuse: Unknown parameter 'user_id00000000000000000000' [ 266.817528][ T4331] usb 3-1: USB disconnect, device number 12 [ 266.833413][ T4331] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 266.995982][ T6681] device syzkaller0 entered promiscuous mode [ 267.532398][ T6691] binder_alloc: 6690: binder_alloc_buf, no vma [ 267.553711][ T6691] binder: 6690:6691 ioctl c0306201 200000000240 returned -11 [ 267.777915][ T6700] loop0: detected capacity change from 0 to 2048 [ 268.745705][ T6700] NILFS (loop0): invalid segment: Magic number mismatch [ 268.753255][ T6700] NILFS (loop0): trying rollback from an earlier position [ 268.772379][ T6700] NILFS (loop0): recovery complete [ 269.018590][ T6703] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.329027][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 269.344381][ T6711] netlink: 'syz.0.582': attribute type 4 has an invalid length. [ 269.368165][ T6711] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.582'. [ 269.394026][ T6714] netlink: 'syz.1.583': attribute type 21 has an invalid length. [ 269.419052][ T6714] netlink: 'syz.1.583': attribute type 6 has an invalid length. [ 269.458634][ T6714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.583'. [ 270.088261][ T6384] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 271.236372][ T6735] device syzkaller0 entered promiscuous mode [ 271.249125][ T6384] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 271.273659][ T6384] usb 5-1: config 0 has no interface number 0 [ 271.294861][ T6384] usb 5-1: config 0 interface 122 has no altsetting 0 [ 271.344864][ T6384] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 271.373577][ T6384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.387328][ T6384] usb 5-1: Product: syz [ 271.391807][ T6384] usb 5-1: Manufacturer: syz [ 271.396614][ T6384] usb 5-1: SerialNumber: syz [ 271.410559][ T6384] usb 5-1: config 0 descriptor?? [ 272.158510][ T6384] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 272.384765][ T6384] usb 2-1: config 27 has an invalid descriptor of length 194, skipping remainder of the config [ 272.403695][ T6384] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 272.445689][ T6384] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.462393][ T6384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.632285][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 272.656564][ T6764] netlink: 'syz.3.596': attribute type 4 has an invalid length. [ 272.675344][ T6764] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.596'. [ 272.905341][ T6766] binder: 6760:6766 ioctl c018620c 200000000380 returned -22 [ 273.307686][ T6775] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 273.321268][ T6775] netlink: 'syz.3.598': attribute type 2 has an invalid length. [ 273.875843][ T6384] usb 5-1: USB disconnect, device number 8 [ 273.915006][ T6384] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 275.805633][ T6791] device syzkaller0 entered promiscuous mode [ 276.179413][ T6800] binder: BINDER_SET_CONTEXT_MGR already set [ 276.203020][ T6800] binder: 6798:6800 ioctl 4018620d 200000000040 returned -16 [ 276.242567][ T6800] binder: 6798:6800 ioctl c0306201 200000000240 returned -11 [ 276.375150][ T4324] usb 2-1: USB disconnect, device number 14 [ 278.173007][ T6833] : renamed from bridge_slave_0 [ 278.318208][ T6384] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 278.511015][ T6384] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 278.524922][ T6384] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 278.605388][ T6384] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 278.668062][ T6384] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.724752][ T6384] usb 3-1: config 0 has no interfaces? [ 278.763915][ T6384] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 278.803279][ T6384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.857206][ T6384] usb 3-1: config 0 descriptor?? [ 279.635168][ T6851] netlink: 'syz.0.616': attribute type 1 has an invalid length. [ 279.668926][ T6851] netlink: 'syz.0.616': attribute type 2 has an invalid length. [ 280.558403][ T6384] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 280.928976][ T6384] usb 4-1: config 27 has an invalid descriptor of length 194, skipping remainder of the config [ 280.995626][ T6384] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 281.021702][ T6862] device syzkaller1 entered promiscuous mode [ 281.038193][ T6384] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.132822][ T6384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.584475][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 281.637916][ T4324] usb 3-1: USB disconnect, device number 13 [ 281.697520][ T6865] netlink: 'syz.1.620': attribute type 4 has an invalid length. [ 281.714032][ T6865] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.620'. [ 282.876148][ T6889] tmpfs: Unknown parameter 'usrquota' [ 282.969859][ T6889] loop2: detected capacity change from 0 to 2048 [ 283.583463][ T6889] NILFS (loop2): invalid segment: Magic number mismatch [ 283.590538][ T6889] NILFS (loop2): trying rollback from an earlier position [ 283.603085][ T6889] NILFS (loop2): recovery complete [ 283.639507][ T6892] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.842997][ T6384] usb 4-1: USB disconnect, device number 8 [ 285.145521][ T6910] fuse: Bad value for 'fd' [ 285.484791][ T6916] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 285.493085][ T6916] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 286.677823][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 286.799532][ T6930] netlink: 'syz.0.634': attribute type 4 has an invalid length. [ 286.816698][ T6930] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.634'. [ 287.921817][ T6941] netlink: 164 bytes leftover after parsing attributes in process `syz.3.638'. [ 288.218312][ T6945] tipc: Enabled bearer , priority 0 [ 288.275048][ T6948] device syzkaller0 entered promiscuous mode [ 288.354263][ T6944] tipc: Resetting bearer [ 288.390045][ T6944] tipc: Disabling bearer [ 288.568285][ T4324] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 288.697095][ T6958] fuse: Unknown parameter '0x0000000000000003' [ 288.789544][ T4324] usb 1-1: config 27 has an invalid descriptor of length 194, skipping remainder of the config [ 288.814997][ T4324] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 288.836133][ T4324] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 288.892772][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.074098][ T6965] device syzkaller1 entered promiscuous mode [ 290.436357][ T6979] device syzkaller0 entered promiscuous mode [ 291.230432][ T6992] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 291.239406][ T6992] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 294.057691][ T7] usb 1-1: USB disconnect, device number 5 [ 294.195009][ T7015] tipc: Started in network mode [ 294.257427][ T7015] tipc: Node identity baf3fed6732e, cluster identity 4711 [ 294.333952][ T7015] tipc: Enabled bearer , priority 0 [ 294.368560][ T7016] device syzkaller0 entered promiscuous mode [ 294.448350][ T7014] tipc: Resetting bearer [ 294.686214][ T7014] tipc: Disabling bearer [ 294.743097][ T7022] device syzkaller1 entered promiscuous mode [ 295.394098][ T7035] device syzkaller0 entered promiscuous mode [ 297.501071][ T7071] tipc: Enabled bearer , priority 0 [ 297.517116][ T7071] device syzkaller0 entered promiscuous mode [ 297.646598][ T7070] tipc: Resetting bearer [ 297.745369][ T7070] tipc: Disabling bearer [ 298.572099][ T7085] device syzkaller0 entered promiscuous mode [ 298.632152][ T7087] fuse: Unknown parameter '0x0000000000000003' [ 299.526184][ T7108] tipc: Enabled bearer , priority 0 [ 299.600220][ T7108] tipc: Resetting bearer [ 299.667949][ T7105] tipc: Disabling bearer [ 300.533113][ T7123] tmpfs: Unknown parameter 'usrquota' [ 300.633872][ T7123] loop0: detected capacity change from 0 to 2048 [ 300.662351][ T7123] NILFS (loop0): invalid segment: Magic number mismatch [ 300.669447][ T7123] NILFS (loop0): trying rollback from an earlier position [ 300.726592][ T7123] NILFS (loop0): recovery complete [ 300.977027][ T7125] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.333222][ T7138] netlink: 'syz.1.690': attribute type 4 has an invalid length. [ 301.369927][ T7138] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.690'. [ 302.099788][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 302.245448][ T7148] device syzkaller1 entered promiscuous mode [ 302.517106][ T7166] tipc: Started in network mode [ 302.517178][ T7166] tipc: Node identity 1ed1f2c4d531, cluster identity 4711 [ 302.517249][ T7166] tipc: Enabled bearer , priority 0 [ 302.524281][ T7166] tipc: Resetting bearer [ 302.544840][ T7165] tipc: Disabling bearer [ 302.698165][ T6384] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 302.969374][ T6384] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 302.969401][ T6384] usb 4-1: config 0 has no interface number 0 [ 302.969424][ T6384] usb 4-1: config 0 interface 122 has no altsetting 0 [ 303.062556][ T6384] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 303.062577][ T6384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.062589][ T6384] usb 4-1: Product: syz [ 303.062599][ T6384] usb 4-1: Manufacturer: syz [ 303.062608][ T6384] usb 4-1: SerialNumber: syz [ 303.063971][ T6384] usb 4-1: config 0 descriptor?? [ 303.813422][ T7179] loop2: detected capacity change from 0 to 2048 [ 305.158220][ T7179] NILFS (loop2): invalid segment: Magic number mismatch [ 305.158249][ T7179] NILFS (loop2): trying rollback from an earlier position [ 305.170680][ T7179] NILFS (loop2): recovery complete [ 305.185379][ T7182] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.631302][ T7186] netlink: 'syz.1.703': attribute type 4 has an invalid length. [ 305.675209][ T7186] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.703'. [ 306.509145][ T7201] tipc: Enabled bearer , priority 0 [ 306.523015][ T7201] tipc: Resetting bearer [ 306.558944][ T7200] tipc: Disabling bearer [ 306.598778][ T7206] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 306.607560][ T7206] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 307.507055][ T7215] netlink: 'syz.1.711': attribute type 4 has an invalid length. [ 308.068356][ T6384] dvb_usb_m920x: probe of 4-1:0.122 failed with error -110 [ 308.216929][ T7] usb 4-1: USB disconnect, device number 9 [ 308.295758][ T7226] netlink: 220 bytes leftover after parsing attributes in process `syz.1.715'. [ 308.403029][ T7226] netlink: 220 bytes leftover after parsing attributes in process `syz.1.715'. [ 308.466542][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 308.709378][ T7232] netlink: 'syz.3.717': attribute type 4 has an invalid length. [ 308.736675][ T7232] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.717'. [ 308.981548][ T7239] fuse: Unknown parameter 'fd0x0000000000000003' [ 309.279958][ T7247] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 309.288778][ T7247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 311.386303][ T26] audit: type=1326 audit(1763009277.501:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa010d8f6c9 code=0x0 [ 312.329635][ T7285] netlink: 'syz.4.731': attribute type 4 has an invalid length. [ 312.410122][ T7285] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.731'. [ 312.805600][ T7297] device syzkaller0 entered promiscuous mode [ 315.787390][ T7344] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 315.851773][ T7344] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.746'. [ 316.511622][ T7356] sctp: [Deprecated]: syz.1.749 (pid 7356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.511622][ T7356] Use struct sctp_sack_info instead [ 316.626449][ T7363] device syzkaller0 entered promiscuous mode [ 316.950329][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.956663][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.638234][ T6384] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 317.799836][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 317.810914][ T7382] netlink: 'syz.4.758': attribute type 4 has an invalid length. [ 317.819679][ T7382] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.758'. [ 317.838198][ T6384] usb 4-1: Using ep0 maxpacket: 8 [ 317.845035][ T6384] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.924450][ T6384] usb 4-1: config 1 interface 0 has no altsetting 0 [ 317.959905][ T6384] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 317.996533][ T6384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.026477][ T6384] usb 4-1: Product: syz [ 318.043730][ T6384] usb 4-1: Manufacturer: syz [ 318.049015][ T6384] usb 4-1: SerialNumber: syz [ 318.383668][ T6384] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input19 [ 318.409304][ T3622] bcm5974 4-1:1.0: could not read from device [ 318.454611][ T3622] bcm5974 4-1:1.0: could not read from device [ 318.470008][ T6384] usb 4-1: USB disconnect, device number 10 [ 318.487456][ T3622] bcm5974 4-1:1.0: could not read from device [ 318.889651][ T7399] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 318.898500][ T7399] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 320.098909][ T7414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.767'. [ 320.203575][ T7418] binder: BINDER_SET_CONTEXT_MGR already set [ 320.231475][ T7418] binder: 7416:7418 ioctl 4018620d 200000000040 returned -16 [ 320.257902][ T7418] binder: 7416:7418 ioctl c0306201 200000000240 returned -11 [ 320.271354][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 320.315785][ T7420] netlink: 'syz.0.770': attribute type 4 has an invalid length. [ 320.357018][ T7420] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.770'. [ 320.981743][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 320.997374][ T7436] device syzkaller0 entered promiscuous mode [ 321.168168][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 321.174868][ T7] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.226069][ T7] usb 4-1: config 1 interface 0 has no altsetting 0 [ 321.270898][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 321.284773][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.302000][ T7] usb 4-1: Product: syz [ 321.310761][ T7] usb 4-1: Manufacturer: syz [ 321.323718][ T7] usb 4-1: SerialNumber: syz [ 321.797653][ T7] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input20 [ 321.841152][ T3622] bcm5974 4-1:1.0: could not read from device [ 321.856524][ T3622] bcm5974 4-1:1.0: could not read from device [ 321.877563][ T7] usb 4-1: USB disconnect, device number 11 [ 322.813744][ T7461] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 322.847142][ T7461] netlink: 'syz.0.781': attribute type 2 has an invalid length. [ 323.427256][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 323.456293][ T7472] netlink: 'syz.2.784': attribute type 4 has an invalid length. [ 323.500428][ T7472] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.784'. [ 324.957132][ T7488] : renamed from bridge_slave_0 [ 325.318642][ T127] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 325.508243][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 325.519710][ T127] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.577384][ T127] usb 4-1: config 1 interface 0 has no altsetting 0 [ 325.606393][ T127] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 325.626141][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.654024][ T127] usb 4-1: Product: syz [ 325.663166][ T127] usb 4-1: Manufacturer: syz [ 325.673456][ T127] usb 4-1: SerialNumber: syz [ 325.805138][ T7518] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 325.834637][ T7518] netlink: 'syz.1.798': attribute type 2 has an invalid length. [ 326.155814][ T127] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input21 [ 326.185557][ T3622] bcm5974 4-1:1.0: could not read from device [ 326.212476][ T3622] bcm5974 4-1:1.0: could not read from device [ 326.248361][ T127] usb 4-1: USB disconnect, device number 12 [ 326.265724][ T3622] bcm5974 4-1:1.0: could not read from device [ 328.535398][ T7554] device syzkaller0 entered promiscuous mode [ 328.868377][ T26] audit: type=1326 audit(1763009294.991:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942318f6c9 code=0x7ffc0000 [ 328.937891][ T26] audit: type=1326 audit(1763009294.991:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f942318f6c9 code=0x7ffc0000 [ 329.157993][ T26] audit: type=1326 audit(1763009294.991:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942318f6c9 code=0x7ffc0000 [ 329.270607][ T26] audit: type=1326 audit(1763009294.991:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942318f6c9 code=0x7ffc0000 [ 329.797767][ T7591] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 329.806665][ T7591] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 330.550389][ T7590] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 330.607607][ T7590] netlink: 'syz.3.813': attribute type 2 has an invalid length. [ 332.374071][ T7606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 332.481428][ T7639] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 332.490253][ T7639] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 333.353311][ T7642] device syzkaller0 entered promiscuous mode [ 335.170987][ T6384] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 335.233043][ T7667] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 335.368269][ T6384] usb 3-1: Using ep0 maxpacket: 32 [ 335.377711][ T6384] usb 3-1: config 2 has an invalid interface number: 15 but max is 0 [ 335.410255][ T6384] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 335.454497][ T6384] usb 3-1: config 2 has no interface number 1 [ 335.478356][ T6384] usb 3-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.511964][ T7671] netlink: 'syz.4.834': attribute type 1 has an invalid length. [ 335.543231][ T7671] netlink: 'syz.4.834': attribute type 2 has an invalid length. [ 335.586075][ T6384] usb 3-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 335.645095][ T6384] usb 3-1: config 2 interface 0 has no altsetting 0 [ 335.672997][ T6384] usb 3-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 335.713376][ T6384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.731842][ T6384] usb 3-1: Product: syz [ 335.738258][ T6384] usb 3-1: Manufacturer: syz [ 335.742878][ T6384] usb 3-1: SerialNumber: syz [ 335.788497][ T6384] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 336.064441][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.114052][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.334757][ T6384] pwc: Failed to set LED on/off time (-71) [ 336.344999][ T6384] pwc: send_video_command error -71 [ 336.356155][ T6384] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 336.383176][ T6384] Philips webcam: probe of 3-1:2.0 failed with error -71 [ 336.418490][ T6384] usb 3-1: USB disconnect, device number 14 [ 337.073871][ T7683] device syzkaller0 entered promiscuous mode [ 337.468185][ T6384] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 337.720020][ T6384] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 337.761796][ T6384] usb 1-1: config 0 has no interface number 0 [ 337.818481][ T6384] usb 1-1: config 0 interface 122 has no altsetting 0 [ 337.855472][ T6384] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 337.894669][ T6384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.929389][ T6384] usb 1-1: Product: syz [ 337.949511][ T6384] usb 1-1: Manufacturer: syz [ 337.975390][ T6384] usb 1-1: SerialNumber: syz [ 338.018889][ T6384] usb 1-1: config 0 descriptor?? [ 340.068189][ T6384] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 340.168156][ T4331] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 340.278334][ T6384] usb 4-1: Using ep0 maxpacket: 32 [ 340.285681][ T6384] usb 4-1: config 2 has an invalid interface number: 15 but max is 0 [ 340.321472][ T6384] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 340.359575][ T4331] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 340.388319][ T4331] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 340.409564][ T6384] usb 4-1: config 2 has no interface number 1 [ 340.415716][ T6384] usb 4-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.431365][ T26] audit: type=1326 audit(1763009306.551:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f942318f6c9 code=0x0 [ 340.438300][ T4331] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 340.472390][ T6384] usb 4-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 340.493739][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.504507][ T6384] usb 4-1: config 2 interface 0 has no altsetting 0 [ 340.526786][ T6384] usb 4-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 340.542832][ T6384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.555727][ T7726] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 340.574217][ T6384] usb 4-1: Product: syz [ 340.584432][ T6384] usb 4-1: Manufacturer: syz [ 340.594133][ T6384] usb 4-1: SerialNumber: syz [ 340.679660][ T6384] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 340.958469][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.002551][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.017986][ T127] usb 1-1: USB disconnect, device number 6 [ 341.030619][ T127] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 341.180571][ T6384] pwc: Failed to set LED on/off time (-71) [ 341.194423][ T6384] pwc: send_video_command error -71 [ 341.226168][ T6384] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 341.228263][ T7739] device syzkaller0 entered promiscuous mode [ 341.236032][ T6384] Philips webcam: probe of 4-1:2.0 failed with error -71 [ 341.266018][ T6384] usb 4-1: USB disconnect, device number 13 [ 342.033326][ T7764] binder: 7763:7764 ioctl c0306201 200000000240 returned -11 [ 342.782769][ T6384] usb 3-1: USB disconnect, device number 15 [ 342.955968][ T7785] device syzkaller0 entered promiscuous mode [ 343.528207][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 343.566332][ T26] audit: type=1326 audit(1763009309.681:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa010d8f6c9 code=0x0 [ 343.628275][ T127] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 343.728281][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 343.736195][ T7] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.766922][ T7] usb 1-1: config 1 interface 0 has no altsetting 0 [ 343.792439][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 343.841835][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 343.847155][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.857059][ T127] usb 3-1: config 2 has an invalid interface number: 15 but max is 0 [ 343.875694][ T127] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 343.890253][ T7] usb 1-1: Product: syz [ 343.905382][ T7] usb 1-1: Manufacturer: syz [ 343.910875][ T127] usb 3-1: config 2 has no interface number 1 [ 343.917541][ T7] usb 1-1: SerialNumber: syz [ 343.940757][ T127] usb 3-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.956466][ T127] usb 3-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 343.982129][ T127] usb 3-1: config 2 interface 0 has no altsetting 0 [ 344.007413][ T127] usb 3-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 344.017386][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.025893][ T127] usb 3-1: Product: syz [ 344.049328][ T127] usb 3-1: Manufacturer: syz [ 344.063036][ T127] usb 3-1: SerialNumber: syz [ 344.101307][ T127] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 344.358875][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.429841][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.463046][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input22 [ 344.491037][ T3622] bcm5974 1-1:1.0: could not read from device [ 344.504725][ T3622] bcm5974 1-1:1.0: could not read from device [ 344.542278][ T127] pwc: Failed to set LED on/off time (-71) [ 344.559133][ T127] pwc: send_video_command error -71 [ 344.571557][ T7802] binder: 7801:7802 ioctl 4018620d 0 returned -22 [ 344.575187][ T7] usb 1-1: USB disconnect, device number 7 [ 344.592641][ T3622] bcm5974 1-1:1.0: could not read from device [ 344.601874][ T127] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 344.627326][ T127] Philips webcam: probe of 3-1:2.0 failed with error -71 [ 344.629902][ T7802] binder: 7801:7802 ioctl c0306201 200000000240 returned -11 [ 344.701909][ T127] usb 3-1: USB disconnect, device number 16 [ 345.482439][ T7822] device syzkaller0 entered promiscuous mode [ 346.603135][ T26] audit: type=1326 audit(1763009312.721:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7823 comm="syz.4.879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f942318f6c9 code=0x0 [ 346.741574][ T7842] binder: 7841:7842 ioctl 4018620d 0 returned -22 [ 346.760765][ T7842] binder: 7841:7842 ioctl c0306201 200000000240 returned -11 [ 348.678407][ T7890] binder: 7889:7890 ioctl 4018620d 0 returned -22 [ 348.724290][ T7890] binder: 7889:7890 ioctl c0306201 200000000240 returned -11 [ 351.222772][ T26] audit: type=1326 audit(1763009317.341:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7902 comm="syz.4.897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f942318f6c9 code=0x0 [ 351.283730][ T7908] loop1: detected capacity change from 0 to 32768 [ 351.533335][ T7908] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 351.638148][ T4338] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 351.835578][ T4338] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 351.875660][ T4338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.918482][ T4338] usb 3-1: Product: syz [ 351.930669][ T4338] usb 3-1: Manufacturer: syz [ 351.960230][ T4338] usb 3-1: SerialNumber: syz [ 351.995943][ T4338] usb 3-1: config 0 descriptor?? [ 352.114080][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 352.256212][ T4338] usb-storage 3-1:0.0: USB Mass Storage device detected [ 355.095071][ T7962] binder: 7961:7962 ioctl c0306201 200000000240 returned -11 [ 355.758221][ T2120] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 355.968278][ T2120] usb 1-1: Using ep0 maxpacket: 32 [ 355.975438][ T2120] usb 1-1: config 2 has an invalid interface number: 15 but max is 0 [ 356.026928][ T2120] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 356.082185][ T2120] usb 1-1: config 2 has no interface number 1 [ 356.114937][ T2120] usb 1-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.189296][ T2120] usb 1-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 356.277745][ T2120] usb 1-1: config 2 interface 0 has no altsetting 0 [ 356.314851][ T2120] usb 1-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 356.358259][ T2120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.391885][ T2120] usb 1-1: Product: syz [ 356.406229][ T2120] usb 1-1: Manufacturer: syz [ 356.427734][ T2120] usb 1-1: SerialNumber: syz [ 356.485013][ T127] usb 3-1: USB disconnect, device number 17 [ 356.494570][ T2120] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 356.753051][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.789966][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.925181][ T2120] pwc: Failed to set LED on/off time (-71) [ 356.934091][ T2120] pwc: send_video_command error -71 [ 356.951583][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 356.967374][ T2120] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 356.981609][ T2120] Philips webcam: probe of 1-1:2.0 failed with error -71 [ 357.024868][ T2120] usb 1-1: USB disconnect, device number 8 [ 357.080672][ T4338] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 357.268237][ T4338] usb 3-1: Using ep0 maxpacket: 32 [ 357.279591][ T4338] usb 3-1: config 2 has an invalid interface number: 15 but max is 0 [ 357.318172][ T6384] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 357.373573][ T4338] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 357.392249][ T4338] usb 3-1: config 2 has no interface number 1 [ 357.402770][ T4338] usb 3-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.439424][ T4338] usb 3-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 357.521419][ T6384] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.544646][ T4338] usb 3-1: config 2 interface 0 has no altsetting 0 [ 357.572841][ T6384] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 357.600466][ T6384] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.611316][ T4338] usb 3-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 357.624801][ T4338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.642946][ T6384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.651363][ T4338] usb 3-1: Product: syz [ 357.655701][ T4338] usb 3-1: Manufacturer: syz [ 357.666921][ T8009] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 357.705632][ T4338] usb 3-1: SerialNumber: syz [ 357.799844][ T4338] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 358.050629][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.115921][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.279811][ T4338] pwc: Failed to set LED on/off time (-71) [ 358.288234][ T4338] pwc: send_video_command error -71 [ 358.314937][ T8029] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 358.333491][ T4338] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 358.373551][ T8032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.923'. [ 358.441873][ T4338] Philips webcam: probe of 3-1:2.0 failed with error -71 [ 358.494488][ T4338] usb 3-1: USB disconnect, device number 18 [ 358.698226][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 358.919798][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.945326][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 359.012734][ T7] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 359.067874][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.122597][ T7] usb 4-1: config 0 descriptor?? [ 359.549489][ T7] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 359.572272][ T7] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 359.605995][ T7] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 359.631946][ T7] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 359.657220][ T7] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 359.893889][ T8042] loop0: detected capacity change from 0 to 64 [ 360.149274][ T8032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.157997][ T8032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.799484][ T7] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 360.840824][ T8042] hfs: hfs: Invalid key length: 94 [ 361.172937][ T127] usb 5-1: USB disconnect, device number 9 [ 361.250648][ T7] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 361.390662][ T7] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 361.416822][ T7] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -5 [ 362.146908][ T7] usb 4-1: USB disconnect, device number 14 [ 362.422205][ T8050] fido_id[8050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 367.553299][ T8122] device syzkaller0 entered promiscuous mode [ 369.328241][ T4338] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 369.528140][ T4338] usb 1-1: Using ep0 maxpacket: 32 [ 369.535047][ T4338] usb 1-1: config 2 has an invalid interface number: 15 but max is 0 [ 369.584903][ T4338] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 369.633134][ T4338] usb 1-1: config 2 has no interface number 1 [ 369.668090][ T4338] usb 1-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.785421][ T4338] usb 1-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 369.856118][ T4338] usb 1-1: config 2 interface 0 has no altsetting 0 [ 369.892945][ T4338] usb 1-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 369.942852][ T4338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.983208][ T4338] usb 1-1: Product: syz [ 370.002634][ T4338] usb 1-1: Manufacturer: syz [ 370.023949][ T4338] usb 1-1: SerialNumber: syz [ 370.047463][ T8136] loop3: detected capacity change from 0 to 65536 [ 370.096899][ T4338] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 370.237696][ T8136] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 370.251092][ T8136] XFS (loop3): Mounting V5 Filesystem [ 370.353207][ T8151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.382055][ T8151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.412789][ T8136] XFS (loop3): Ending clean mount [ 370.521706][ T4338] pwc: Failed to set LED on/off time (-71) [ 370.529865][ T4338] pwc: send_video_command error -71 [ 370.568295][ T8136] XFS (loop3): Quotacheck needed: Please wait. [ 370.576508][ T4338] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 370.640965][ T4338] Philips webcam: probe of 1-1:2.0 failed with error -71 [ 370.720920][ T4338] usb 1-1: USB disconnect, device number 9 [ 370.758967][ T8136] XFS (loop3): Quotacheck: Done. [ 371.015023][ T4264] XFS (loop3): Unmounting Filesystem [ 372.273464][ T8205] usb usb8: usbfs: process 8205 (syz.3.954) did not claim interface 0 before use [ 372.508167][ T6384] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 373.513310][ T6384] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.618185][ T6384] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 373.658422][ T6384] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.726533][ T6384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.838236][ T8201] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.433546][ T8230] loop2: detected capacity change from 0 to 64 [ 375.461721][ T6384] usb 5-1: USB disconnect, device number 10 [ 376.086201][ T8247] loop4: detected capacity change from 0 to 512 [ 376.201331][ T8247] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 376.258015][ T8247] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 376.476228][ T8247] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 376.548368][ T8247] EXT4-fs (loop4): 1 truncate cleaned up [ 376.558258][ T8247] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 376.712002][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 378.169865][ T8261] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.971'. [ 378.186930][ T8236] loop2: detected capacity change from 0 to 32768 [ 378.241677][ T8236] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.964 (8236) [ 378.365137][ T8236] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.390802][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.397126][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.399494][ T8236] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 378.438491][ T8236] BTRFS info (device loop2): force clearing of disk cache [ 378.448539][ T8236] BTRFS info (device loop2): enabling auto defrag [ 378.477392][ T8236] BTRFS info (device loop2): max_inline at 0 [ 378.508170][ T6384] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 378.567432][ T8236] BTRFS info (device loop2): enabling disk space caching [ 378.607990][ T8236] BTRFS info (device loop2): disk space caching is enabled [ 378.718400][ T6384] usb 1-1: Using ep0 maxpacket: 32 [ 378.737754][ T6384] usb 1-1: config 2 has an invalid interface number: 15 but max is 0 [ 378.770758][ T6384] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 378.808745][ T6384] usb 1-1: config 2 has no interface number 1 [ 378.833456][ T6384] usb 1-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.875198][ T6384] usb 1-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 378.922007][ T6384] usb 1-1: config 2 interface 0 has no altsetting 0 [ 378.962828][ T6384] usb 1-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 378.983425][ T6384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.002182][ T6384] usb 1-1: Product: syz [ 379.010981][ T6384] usb 1-1: Manufacturer: syz [ 379.021198][ T6384] usb 1-1: SerialNumber: syz [ 379.103223][ T6384] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 379.219748][ T8236] BTRFS error (device loop2): open_ctree failed: -12 [ 379.371153][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.443355][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.652077][ T6384] pwc: Failed to set LED on/off time (-71) [ 379.674235][ T6384] pwc: send_video_command error -71 [ 379.698221][ T6384] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 379.716203][ T6384] Philips webcam: probe of 1-1:2.0 failed with error -71 [ 379.745491][ T6384] usb 1-1: USB disconnect, device number 10 [ 379.775987][ T8281] loop4: detected capacity change from 0 to 32768 [ 379.789441][ T8311] binder: 8310:8311 ioctl c0306201 0 returned -14 [ 379.832332][ T8311] binder: 8310:8311 ioctl c0306201 200000000240 returned -11 [ 380.047301][ T8281] XFS (loop4): Mounting V5 Filesystem [ 380.244650][ T8281] XFS (loop4): Ending clean mount [ 380.319240][ T8281] XFS (loop4): Quotacheck needed: Please wait. [ 380.396043][ T8281] XFS (loop4): Quotacheck: Done. [ 380.437882][ T26] audit: type=1800 audit(1763009346.551:18): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.975" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 380.754742][ T4274] XFS (loop4): Unmounting Filesystem [ 381.782793][ T8351] device syzkaller0 entered promiscuous mode [ 382.151506][ T8358] binder: 8357:8358 ioctl c0306201 200000000240 returned -11 [ 384.229004][ T6384] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 384.413739][ T6384] usb 5-1: Using ep0 maxpacket: 32 [ 384.428437][ T6384] usb 5-1: config 2 has an invalid interface number: 15 but max is 0 [ 384.436900][ T6384] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 384.446255][ T6384] usb 5-1: config 2 has no interface number 1 [ 384.452884][ T6384] usb 5-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.466217][ T6384] usb 5-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 384.479567][ T6384] usb 5-1: config 2 interface 0 has no altsetting 0 [ 384.509330][ T6384] usb 5-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 384.518611][ T6384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.526793][ T6384] usb 5-1: Product: syz [ 384.531686][ T6384] usb 5-1: Manufacturer: syz [ 384.536350][ T6384] usb 5-1: SerialNumber: syz [ 384.565079][ T6384] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 384.812055][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.854260][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.007110][ T6384] pwc: Failed to set LED on/off time (-71) [ 385.028849][ T6384] pwc: send_video_command error -71 [ 385.035354][ T6384] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 385.048856][ T6384] Philips webcam: probe of 5-1:2.0 failed with error -71 [ 385.073299][ T6384] usb 5-1: USB disconnect, device number 11 [ 387.132485][ T8382] device syzkaller0 entered promiscuous mode [ 387.798799][ T8413] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 387.807561][ T8413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 387.932627][ T8412] binder: 8410:8412 ioctl c0306201 200000000240 returned -11 [ 389.462387][ T8301] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 389.679982][ T8301] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 389.693756][ T26] audit: type=1326 audit(1763009355.811:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.2.1000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f363138f6c9 code=0x0 [ 389.716183][ T8301] usb 1-1: config 0 has no interface number 0 [ 389.732382][ T8301] usb 1-1: config 0 interface 122 has no altsetting 0 [ 389.748393][ T6384] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 389.762547][ T8301] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 389.783677][ T8301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.792544][ T8301] usb 1-1: Product: syz [ 389.796846][ T8301] usb 1-1: Manufacturer: syz [ 389.801823][ T8301] usb 1-1: SerialNumber: syz [ 389.819926][ T8301] usb 1-1: config 0 descriptor?? [ 389.948148][ T6384] usb 2-1: Using ep0 maxpacket: 32 [ 389.954284][ T6384] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 389.988429][ T6384] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.004740][ T6384] usb 2-1: config 0 has no interface number 0 [ 390.025839][ T6384] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.052109][ T6384] usb 2-1: config 0 has no interface number 0 [ 390.074654][ T6384] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.084829][ T6384] usb 2-1: config 0 has no interface number 0 [ 390.101125][ T6384] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.114492][ T6384] usb 2-1: config 0 has no interface number 0 [ 390.139838][ T6384] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.154770][ T6384] usb 2-1: config 0 has no interface number 0 [ 390.196775][ T6384] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.215221][ T6384] usb 2-1: config 0 has no interface number 0 [ 390.256260][ T8301] usb 1-1: USB disconnect, device number 11 [ 390.263187][ T6384] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.279062][ T8301] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 390.300867][ T6384] usb 2-1: config 0 has no interface number 0 [ 390.315833][ T6384] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 390.334304][ T6384] usb 2-1: config 0 has no interface number 0 [ 390.363070][ T6384] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 390.418930][ T6384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.437179][ T6384] usb 2-1: Product: syz [ 390.451680][ T6384] usb 2-1: Manufacturer: syz [ 390.467648][ T6384] usb 2-1: SerialNumber: syz [ 390.543684][ T6384] usb 2-1: config 0 descriptor?? [ 390.577213][ T6384] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 390.867733][ T6384] etas_es58x 2-1:0.2: Product info: ࠅ [ 391.077097][ T127] usb 2-1: USB disconnect, device number 15 [ 391.111005][ T127] etas_es58x 2-1:0.2: Disconnecting syz syz [ 391.248331][ T8447] device syzkaller0 entered promiscuous mode [ 391.925728][ T8462] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 391.934656][ T8462] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 392.602453][ T8465] binder: 8464:8465 ioctl c0306201 200000000240 returned -11 [ 393.170775][ T8469] loop0: detected capacity change from 0 to 40427 [ 393.199939][ T8469] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 393.216182][ T8469] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 393.252252][ T8469] F2FS-fs (loop0): invalid crc value [ 393.272827][ T8469] F2FS-fs (loop0): Found nat_bits in checkpoint [ 393.379960][ T8469] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 393.391982][ T8469] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 394.558380][ T8454] device syzkaller0 entered promiscuous mode [ 395.998128][ T8301] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 396.089376][ T26] audit: type=1326 audit(1763009362.211:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa010d8f6c9 code=0x0 [ 396.326350][ T8301] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 396.345416][ T8301] usb 1-1: config 0 has no interface number 0 [ 396.371431][ T8301] usb 1-1: config 0 interface 122 has no altsetting 0 [ 396.435365][ T8301] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 396.457031][ T8301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.477668][ T8301] usb 1-1: Product: syz [ 396.488231][ T8301] usb 1-1: Manufacturer: syz [ 396.492972][ T8301] usb 1-1: SerialNumber: syz [ 396.524835][ T8301] usb 1-1: config 0 descriptor?? [ 396.548273][ T4338] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 396.768227][ T4338] usb 3-1: Using ep0 maxpacket: 32 [ 396.787191][ T4338] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 396.796336][ T4338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.809144][ T4338] usb 3-1: config 0 has no interface number 0 [ 396.815481][ T4338] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.854610][ T4338] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 396.906954][ T4338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.927697][ T4338] usb 3-1: Product: syz [ 396.938443][ T4338] usb 3-1: Manufacturer: syz [ 396.943243][ T4338] usb 3-1: SerialNumber: syz [ 396.988456][ T4338] usb 3-1: config 0 descriptor?? [ 397.005767][ T8301] usb 1-1: USB disconnect, device number 12 [ 397.028667][ T8301] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 397.452483][ T4338] usb 3-1: USB disconnect, device number 19 [ 397.581168][ T8524] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 397.590228][ T8524] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 397.610921][ T8522] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1028'. [ 397.743049][ T4426] udevd[4426]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.241085][ T8528] device syzkaller0 entered promiscuous mode [ 398.424011][ T8531] device syzkaller0 entered promiscuous mode [ 398.442981][ T8539] usb usb8: check_ctrlrecip: process 8539 (syz.0.1034) requesting ep 01 but needs 81 [ 398.455699][ T8539] usb usb8: usbfs: process 8539 (syz.0.1034) did not claim interface 0 before use [ 398.465459][ T8539] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 398.506687][ T8541] device ip6gre1 entered promiscuous mode [ 398.528663][ T8541] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.947823][ T8566] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 400.956835][ T8566] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 402.677210][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.685263][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.780543][ T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.908291][ T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.923413][ T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.168917][ T8301] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 403.369625][ T8301] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 403.382832][ T8301] usb 5-1: config 0 has no interface number 0 [ 403.389117][ T8301] usb 5-1: config 0 interface 122 has no altsetting 0 [ 403.408100][ T8301] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 403.452570][ T8301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.468978][ T8576] binder: BINDER_SET_CONTEXT_MGR already set [ 403.475168][ T8301] usb 5-1: Product: syz [ 403.485353][ T8301] usb 5-1: Manufacturer: syz [ 403.495672][ T8576] binder: 8574:8576 ioctl 4018620d 200000000040 returned -16 [ 403.498076][ T8301] usb 5-1: SerialNumber: syz [ 403.518255][ T8576] binder: 8574:8576 ioctl c0306201 200000000240 returned -11 [ 403.527215][ T8301] usb 5-1: config 0 descriptor?? [ 403.555589][ T8581] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1047'. [ 403.565581][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'. [ 404.645654][ T8301] usb 5-1: USB disconnect, device number 12 [ 404.748003][ T8596] loop1: detected capacity change from 0 to 40427 [ 404.757039][ T8596] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 404.764844][ T8596] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 404.775286][ T8596] F2FS-fs (loop1): invalid crc value [ 404.791745][ T8301] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 404.831148][ T8596] F2FS-fs (loop1): Found nat_bits in checkpoint [ 404.885312][ T8596] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 404.892666][ T8596] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 405.601277][ T8611] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 405.610267][ T8611] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 406.806440][ T8626] binder: 8625:8626 ioctl c0306201 200000000240 returned -11 [ 406.948267][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.058119][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 409.617839][ T8658] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 409.626696][ T8658] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 410.655002][ T8664] tipc: Enabled bearer , priority 0 [ 410.694768][ T8664] device syzkaller0 entered promiscuous mode [ 410.720167][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 410.789749][ T8664] tipc: Resetting bearer [ 410.817390][ T8660] tipc: Resetting bearer [ 410.848817][ T8660] tipc: Disabling bearer [ 412.648371][ T7] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 412.848193][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 412.855055][ T7] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.968141][ T7] usb 3-1: config 1 interface 0 has no altsetting 0 [ 413.003874][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 413.048372][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.087708][ T7] usb 3-1: Product: syz [ 413.114451][ T7] usb 3-1: Manufacturer: syz [ 413.131559][ T7] usb 3-1: SerialNumber: syz [ 413.580109][ T7] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input28 [ 413.623266][ T3622] bcm5974 3-1:1.0: could not read from device [ 413.642169][ T3622] bcm5974 3-1:1.0: could not read from device [ 413.682459][ T7] usb 3-1: USB disconnect, device number 20 [ 413.743662][ T3622] bcm5974 3-1:1.0: could not read from device [ 413.773598][ T8687] loop3: detected capacity change from 0 to 32768 [ 413.807021][ T8687] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1075 (8687) [ 413.873682][ T8687] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 413.894908][ T8687] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 413.926771][ T8687] BTRFS info (device loop3): using free space tree [ 414.333607][ T8687] BTRFS info (device loop3): enabling ssd optimizations [ 414.744136][ T8721] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 414.752984][ T8721] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 415.508162][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 415.539463][ T4264] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 415.547134][ T8725] loop2: detected capacity change from 0 to 128 [ 417.044001][ T4426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (4426) [ 417.538270][ T8744] device syzkaller0 entered promiscuous mode [ 418.497774][ T8301] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 418.605145][ T8774] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 418.614198][ T8774] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 419.319714][ T8301] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 419.459229][ T8301] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 419.540404][ T8301] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.596719][ T8301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.644058][ T8767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 420.412314][ T26] audit: type=1326 audit(1763009386.531:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8779 comm="syz.1.1091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa010d8f6c9 code=0x0 [ 420.598856][ T8782] loop0: detected capacity change from 0 to 32768 [ 420.719753][ T8782] XFS (loop0): Mounting V5 Filesystem [ 420.991927][ T8782] XFS (loop0): Ending clean mount [ 421.133465][ T4338] usb 3-1: USB disconnect, device number 21 [ 421.308995][ T8782] XFS (loop0): Quotacheck needed: Please wait. [ 421.368430][ T8782] XFS (loop0): Quotacheck: Done. [ 421.440524][ T8812] device syzkaller0 entered promiscuous mode [ 421.470301][ T8814] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1100'. [ 421.755741][ T8807] syz.4.1097 (8807): drop_caches: 2 [ 421.758784][ T4267] XFS (loop0): Unmounting Filesystem [ 422.459441][ T8836] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 422.468369][ T8836] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 423.643008][ T8846] binder: 8845:8846 ioctl 4018620d 0 returned -22 [ 423.675615][ T8846] binder: 8845:8846 ioctl c0306201 200000000240 returned -11 [ 426.218121][ T8301] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 426.226720][ T8879] ipt_REJECT: ECHOREPLY no longer supported. [ 426.408170][ T8301] usb 3-1: Using ep0 maxpacket: 8 [ 426.415147][ T8301] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 426.459272][ T8301] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.628502][ T8301] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.778695][ T8887] loop1: detected capacity change from 0 to 2048 [ 427.299990][ T8887] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 427.318896][ T8887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.330155][ T8301] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.332623][ T8884] loop0: detected capacity change from 0 to 1024 [ 427.340837][ T8301] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.363350][ T8301] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 427.374169][ T8301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.456687][ T8884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 427.663435][ T8894] binder: 8892:8894 ioctl 4018620d 0 returned -22 [ 427.702177][ T8884] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 427.711647][ T8301] usb 3-1: usb_control_msg returned -32 [ 427.723445][ T8301] usbtmc 3-1:16.0: can't read capabilities [ 427.968389][ T8746] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 428.433884][ T8746] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 428.564083][ T8746] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 428.579861][ T8746] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 428.633053][ T8746] usb 4-1: config 220 has no interface number 1 [ 428.660083][ T8746] usb 4-1: config 220 interface 0 has no altsetting 0 [ 428.694850][ T8746] usb 4-1: config 220 interface 76 has no altsetting 0 [ 428.736982][ T8746] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 428.760370][ T8746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.791163][ T8746] usb 4-1: Product: syz [ 428.792315][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 428.795370][ T8746] usb 4-1: Manufacturer: syz [ 428.826233][ T8746] usb 4-1: SerialNumber: syz [ 429.038730][ T26] audit: type=1800 audit(1763009395.151:22): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1120" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 429.295556][ T8746] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 430.072617][ T8746] usb 4-1: No valid video chain found. [ 430.168445][ T8301] usb 3-1: USB disconnect, device number 22 [ 430.206767][ T8746] usb 4-1: USB disconnect, device number 15 [ 430.223260][ T8931] device syzkaller0 entered promiscuous mode [ 431.810515][ T8952] binder: 8950:8952 ioctl 4018620d 0 returned -22 [ 431.859323][ T8952] binder: 8950:8952 ioctl c0306201 200000000240 returned -11 [ 432.158152][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.477890][ T8746] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 434.198099][ T8746] usb 1-1: Using ep0 maxpacket: 32 [ 434.206718][ T8746] usb 1-1: config 2 has an invalid interface number: 15 but max is 0 [ 434.231880][ T8746] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 434.245540][ T8746] usb 1-1: config 2 has no interface number 1 [ 434.252664][ T8746] usb 1-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.266092][ T8746] usb 1-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 434.279145][ T8746] usb 1-1: config 2 interface 0 has no altsetting 0 [ 434.289244][ T8746] usb 1-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 434.298426][ T8746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.306435][ T8746] usb 1-1: Product: syz [ 434.311062][ T8746] usb 1-1: Manufacturer: syz [ 434.315698][ T8746] usb 1-1: SerialNumber: syz [ 434.339788][ T8746] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 434.591488][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.601838][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.785350][ T8746] pwc: Failed to set LED on/off time (-71) [ 434.791985][ T8746] pwc: send_video_command error -71 [ 434.797230][ T8746] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 434.805410][ T8746] Philips webcam: probe of 1-1:2.0 failed with error -71 [ 434.820051][ T8746] usb 1-1: USB disconnect, device number 13 [ 435.526700][ T8938] device syzkaller0 entered promiscuous mode [ 435.747048][ T8984] device syzkaller0 entered promiscuous mode [ 436.753597][ T8993] trusted_key: encrypted_key: key user:syz not found [ 437.459908][ T9006] loop1: detected capacity change from 0 to 65536 [ 437.651073][ T9006] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 437.660207][ T9006] XFS (loop1): Mounting V5 Filesystem [ 437.761039][ T8991] loop4: detected capacity change from 0 to 32768 [ 437.789198][ T8991] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1139 (8991) [ 437.854632][ T8991] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 437.869795][ T9006] XFS (loop1): Ending clean mount [ 437.885902][ T9006] XFS (loop1): Quotacheck needed: Please wait. [ 437.957582][ T9006] XFS (loop1): Quotacheck: Done. [ 437.984390][ T8991] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 438.018353][ T8991] BTRFS info (device loop4): using free space tree [ 438.947186][ T26] audit: type=1800 audit(1763009405.061:23): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1143" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 439.035281][ T4265] XFS (loop1): Unmounting Filesystem [ 439.194087][ T8991] BTRFS error (device loop4): open_ctree failed: -12 [ 439.349259][ T4427] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by udevd (4427) [ 439.841203][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.847704][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.923330][ T9066] device syzkaller0 entered promiscuous mode [ 441.144184][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 442.927742][ T9078] loop2: detected capacity change from 0 to 7 [ 442.948986][ T4426] Dev loop2: unable to read RDB block 7 [ 442.956266][ T4426] loop2: AHDI p1 p2 [ 442.965108][ T4426] loop2: partition table partially beyond EOD, truncated [ 442.975795][ T4426] loop2: p1 start 1818582900 is beyond EOD, truncated [ 442.987007][ T9078] Dev loop2: unable to read RDB block 7 [ 443.004235][ T9078] loop2: AHDI p1 p2 [ 443.008936][ T9078] loop2: partition table partially beyond EOD, truncated [ 443.034596][ T9078] loop2: p1 start 1818582900 is beyond EOD, truncated [ 446.509666][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 448.052222][ T9076] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1150'. [ 448.064418][ T9098] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 448.539985][ T9121] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 448.548937][ T9121] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 449.662659][ T9125] netlink: 'syz.4.1161': attribute type 17 has an invalid length. [ 449.674904][ T9125] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1161'. [ 449.693922][ T9125] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 449.724687][ T9127] tipc: Enabled bearer , priority 0 [ 449.789454][ T26] audit: type=1800 audit(1763009415.911:24): pid=9136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1162" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 449.815529][ T9129] device syzkaller0 entered promiscuous mode [ 449.900271][ T9124] tipc: Resetting bearer [ 449.946647][ T9120] tipc: Resetting bearer [ 450.036342][ T9120] tipc: Disabling bearer [ 451.798127][ T9151] trusted_key: encrypted_key: key user:syz not found [ 453.319468][ T9153] loop2: detected capacity change from 0 to 32768 [ 453.480100][ T9153] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 453.577333][ T9164] device syzkaller0 entered promiscuous mode [ 453.589402][ T9167] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1172'. [ 454.045273][ T9178] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 454.054098][ T9178] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 454.111489][ T4426] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 459.547266][ T26] audit: type=1800 audit(1763009425.661:25): pid=9259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1180" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 459.788327][ T9045] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 459.968226][ T9045] usb 1-1: Using ep0 maxpacket: 8 [ 459.979311][ T9045] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 459.979336][ T9045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.979355][ T9045] usb 1-1: Product: syz [ 459.979369][ T9045] usb 1-1: Manufacturer: syz [ 459.979382][ T9045] usb 1-1: SerialNumber: syz [ 460.197845][ T9045] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 461.148193][ T9284] device syzkaller0 entered promiscuous mode [ 461.806197][ T9290] loop1: detected capacity change from 0 to 4096 [ 462.053905][ T9294] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 462.062803][ T9294] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 463.133487][ T9300] device syzkaller0 entered promiscuous mode [ 463.146728][ T4265] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 463.165083][ T4265] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 463.244079][ T8746] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 463.448275][ T8746] usb 4-1: Using ep0 maxpacket: 8 [ 463.456240][ T8746] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 463.476942][ T8746] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.487469][ T8746] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.504582][ T8746] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.517574][ T8746] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.531182][ T8746] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.540943][ T8746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.755771][ T8746] usb 4-1: usb_control_msg returned -32 [ 463.770466][ T8746] usbtmc 4-1:16.0: can't read capabilities [ 464.788164][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.379072][ T9320] ubi31: attaching mtd0 [ 465.552099][ T9320] ubi31: scanning is finished [ 465.559902][ T9320] ubi31: empty MTD device detected [ 465.883042][ T9320] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 465.891726][ T9320] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 465.900920][ T9320] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 465.915323][ T9320] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 465.933386][ T9320] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 465.942360][ T9320] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 465.958114][ T9320] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4174658695 [ 465.975746][ T9320] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 465.989439][ T9321] ubi31: background thread "ubi_bgt31d" started, PID 9321 [ 466.064811][ T8746] usb 4-1: USB disconnect, device number 16 [ 468.145546][ T9046] usb 1-1: USB disconnect, device number 14 [ 468.164429][ T9046] usblp0: removed [ 468.368101][ T8734] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 468.393974][ T9045] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 468.558077][ T8734] usb 5-1: device descriptor read/64, error -71 [ 468.598187][ T9045] usb 3-1: Using ep0 maxpacket: 8 [ 468.607448][ T9045] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 468.657311][ T9045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.681962][ T9045] usb 3-1: Product: syz [ 468.703054][ T9045] usb 3-1: Manufacturer: syz [ 468.724065][ T9045] usb 3-1: SerialNumber: syz [ 468.747328][ T9045] usb 3-1: config 0 descriptor?? [ 468.797431][ T9357] loop0: detected capacity change from 0 to 32768 [ 468.833890][ T8734] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 468.926057][ T9357] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 468.972195][ T9045] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 468.998062][ T8734] usb 5-1: device descriptor read/64, error -71 [ 469.014932][ T26] audit: type=1804 audit(1763009435.131:26): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1205" name="/newroot/225/file1/bus" dev="loop0" ino=17058 res=1 errno=0 [ 469.054182][ T26] audit: type=1804 audit(1763009435.161:27): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1205" name="/newroot/225/file1/bus" dev="loop0" ino=17058 res=1 errno=0 [ 469.128315][ T8734] usb usb5-port1: attempt power cycle [ 469.153834][ T26] audit: type=1804 audit(1763009435.161:28): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1205" name="/newroot/225/file1/bus" dev="loop0" ino=17058 res=1 errno=0 [ 469.194160][ T9362] (syz.0.1205,9362,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 469.359817][ T9362] loop0: detected capacity change from 32768 to 32767 [ 469.370302][ T9357] OCFS2: ERROR (device loop0): int ocfs2_validate_xattr_block(struct super_block *, struct buffer_head *): Extended attribute block #9553 has bad signature TTR01 [ 469.393615][ T9357] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 469.454514][ T9357] OCFS2: File system is now read-only. [ 469.467570][ T9365] lo speed is unknown, defaulting to 1000 [ 469.480855][ T9357] (syz.0.1205,9357,1):ocfs2_xattr_block_find:2835 ERROR: status = -30 [ 469.493846][ T9365] lo speed is unknown, defaulting to 1000 [ 469.503412][ T9357] (syz.0.1205,9357,1):ocfs2_xattr_block_get:1232 ERROR: status = -30 [ 469.516187][ T9365] lo speed is unknown, defaulting to 1000 [ 469.535366][ T26] audit: type=1804 audit(1763009435.651:29): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1205" name="/newroot/225/file1/bus" dev="loop0" ino=17058 res=1 errno=0 [ 469.556977][ T8734] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 469.574602][ T9365] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 469.608670][ T8734] usb 5-1: device descriptor read/8, error -71 [ 469.644984][ T9365] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 469.764593][ T9365] lo speed is unknown, defaulting to 1000 [ 469.773835][ T9365] lo speed is unknown, defaulting to 1000 [ 469.788832][ T9365] lo speed is unknown, defaulting to 1000 [ 469.796432][ T9365] lo speed is unknown, defaulting to 1000 [ 469.809104][ T9365] lo speed is unknown, defaulting to 1000 [ 469.830692][ T4267] ------------[ cut here ]------------ [ 469.836568][ T4267] kernel BUG at fs/ocfs2/suballoc.c:2468! [ 469.862565][ T4267] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 469.868693][ T4267] CPU: 0 PID: 4267 Comm: syz-executor Not tainted syzkaller #0 [ 469.876254][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 469.886317][ T4267] RIP: 0010:_ocfs2_free_suballoc_bits+0xe4c/0x1170 [ 469.892835][ T4267] Code: 49 89 ce 45 89 c7 e8 d3 55 8a fe 48 8b 74 24 30 45 89 f8 4c 89 f1 49 be 00 00 00 00 00 fc ff df e9 c0 fa ff ff e8 d4 26 3a fe <0f> 0b e8 cd 26 3a fe 0f 0b 65 44 8b 25 03 6a bb 7c 48 c7 c0 b0 6c [ 469.912540][ T4267] RSP: 0000:ffffc90003e076a0 EFLAGS: 00010293 [ 469.918616][ T4267] RAX: ffffffff8346af8c RBX: 0000000000000001 RCX: ffff88807d269dc0 [ 469.926588][ T4267] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 469.934645][ T4267] RBP: ffffc90003e07828 R08: 0000000000000020 R09: 000000000000007f [ 469.942615][ T4267] R10: fffffbfff1c3ed56 R11: 1ffffffff1c3ed55 R12: ffff88801dbbae00 [ 469.950593][ T4267] R13: 0000000000000020 R14: dffffc0000000000 R15: ffff888054ebbc08 [ 469.958566][ T4267] FS: 0000555580104500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 469.967493][ T4267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.974074][ T4267] CR2: 000055558011f5c8 CR3: 000000005ab33000 CR4: 00000000003506f0 [ 469.982052][ T4267] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.990024][ T4267] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.997996][ T4267] Call Trace: [ 470.001282][ T4267] [ 470.004223][ T4267] ? ocfs2_free_suballoc_bits+0x50/0x50 [ 470.009786][ T4267] ? jbd2_journal_dirty_metadata+0x71a/0xc20 [ 470.015773][ T4267] ? ocfs2_release_clusters+0x50/0x50 [ 470.021150][ T4267] _ocfs2_free_clusters+0x5fd/0xae0 [ 470.026356][ T4267] ? ocfs2_release_clusters+0x50/0x50 [ 470.031729][ T4267] ? ocfs2_release_clusters+0x50/0x50 [ 470.037108][ T4267] ? ocfs2_free_clusters+0x40/0x40 [ 470.042222][ T4267] ? _raw_spin_unlock+0x24/0x40 [ 470.047074][ T4267] ? jbd2_journal_dirty_metadata+0x71a/0xc20 [ 470.053066][ T4267] ocfs2_sync_local_to_main+0x570/0xc00 [ 470.058629][ T4267] ? ocfs2_shutdown_local_alloc+0xa10/0xa10 [ 470.064518][ T4267] ? ocfs2_shutdown_local_alloc+0x3d9/0xa10 [ 470.070419][ T4267] ? rcu_is_watching+0x11/0xa0 [ 470.075194][ T4267] ? ocfs2_shutdown_local_alloc+0x3d9/0xa10 [ 470.081100][ T4267] ? __kmalloc_node_track_caller+0xdf/0x230 [ 470.087004][ T4267] ? memcpy+0x3c/0x60 [ 470.091000][ T4267] ocfs2_shutdown_local_alloc+0x6dd/0xa10 [ 470.096724][ T4267] ? ocfs2_local_alloc_count_bits+0x290/0x290 [ 470.102788][ T4267] ? __cancel_work_timer+0x470/0x520 [ 470.108084][ T4267] ? cancel_work_sync+0x20/0x20 [ 470.112944][ T4267] ? ocfs2_recovery_disable_quota+0x20/0x20 [ 470.118848][ T4267] ? kobject_put+0x262/0x460 [ 470.123442][ T4267] ? __kmem_cache_free+0xb6/0x1f0 [ 470.128496][ T4267] ? ocfs2_disable_quotas+0x12b/0x210 [ 470.133878][ T4267] ocfs2_dismount_volume+0x1fc/0x930 [ 470.139176][ T4267] ? ocfs2_enable_quotas+0x440/0x440 [ 470.144471][ T4267] ? clear_inode+0x150/0x150 [ 470.149061][ T4267] ? ocfs2_free_inode+0x20/0x20 [ 470.153923][ T4267] generic_shutdown_super+0x130/0x340 [ 470.159296][ T4267] kill_block_super+0x7c/0xe0 [ 470.163976][ T4267] deactivate_locked_super+0x93/0xf0 [ 470.169269][ T4267] cleanup_mnt+0x463/0x4f0 [ 470.173686][ T4267] ? lockdep_hardirqs_on+0x94/0x140 [ 470.178886][ T4267] task_work_run+0x1ca/0x250 [ 470.183476][ T4267] ? task_work_cancel+0x230/0x230 [ 470.188500][ T4267] ? exit_to_user_mode_loop+0x3b/0x110 [ 470.193961][ T4267] exit_to_user_mode_loop+0xe6/0x110 [ 470.199248][ T4267] exit_to_user_mode_prepare+0xee/0x180 [ 470.204798][ T4267] syscall_exit_to_user_mode+0x16/0x40 [ 470.210272][ T4267] do_syscall_64+0x58/0xa0 [ 470.214697][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 470.219374][ T4267] ? clear_bhb_loop+0x60/0xb0 [ 470.224050][ T4267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.229942][ T4267] RIP: 0033:0x7f032e3909f7 [ 470.234364][ T4267] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 470.253976][ T4267] RSP: 002b:00007fffae5748c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 470.262391][ T4267] RAX: 0000000000000000 RBX: 00007f032e411d7d RCX: 00007f032e3909f7 [ 470.270454][ T4267] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffae574980 [ 470.278430][ T4267] RBP: 00007fffae574980 R08: 0000000000000000 R09: 0000000000000000 [ 470.286399][ T4267] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffae575a10 [ 470.294365][ T4267] R13: 00007f032e411d7d R14: 0000000000072a1e R15: 00007fffae575a50 [ 470.302345][ T4267] [ 470.305369][ T4267] Modules linked in: [ 470.311206][ T8734] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 470.325507][ T4267] ---[ end trace 0000000000000000 ]--- [ 470.333689][ T4267] RIP: 0010:_ocfs2_free_suballoc_bits+0xe4c/0x1170 [ 470.340889][ T4267] Code: 49 89 ce 45 89 c7 e8 d3 55 8a fe 48 8b 74 24 30 45 89 f8 4c 89 f1 49 be 00 00 00 00 00 fc ff df e9 c0 fa ff ff e8 d4 26 3a fe <0f> 0b e8 cd 26 3a fe 0f 0b 65 44 8b 25 03 6a bb 7c 48 c7 c0 b0 6c [ 470.363207][ T8734] usb 5-1: device descriptor read/8, error -71 [ 470.369869][ T4267] RSP: 0000:ffffc90003e076a0 EFLAGS: 00010293 [ 470.376225][ T4267] RAX: ffffffff8346af8c RBX: 0000000000000001 RCX: ffff88807d269dc0 [ 470.386616][ T4267] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 470.395270][ T4267] RBP: ffffc90003e07828 R08: 0000000000000020 R09: 000000000000007f [ 470.405783][ T4267] R10: fffffbfff1c3ed56 R11: 1ffffffff1c3ed55 R12: ffff88801dbbae00 [ 470.414268][ T4267] R13: 0000000000000020 R14: dffffc0000000000 R15: ffff888054ebbc08 [ 470.424249][ T4267] FS: 0000555580104500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 470.433742][ T4267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.442745][ T4267] CR2: 0000001b2f80eff8 CR3: 000000005ab33000 CR4: 00000000003506f0 [ 470.451370][ T4267] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 470.462034][ T4267] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 470.473605][ T4267] Kernel panic - not syncing: Fatal exception [ 470.480045][ T4267] Kernel Offset: disabled [ 470.484377][ T4267] Rebooting in 86400 seconds..