last executing test programs: 23m33.912519168s ago: executing program 0 (id=227): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x110a, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 23m33.132406464s ago: executing program 0 (id=231): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x1}) 23m31.793694255s ago: executing program 0 (id=236): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="34d9", 0x2) 23m31.113823154s ago: executing program 0 (id=241): capset(&(0x7f0000000700)={0x19980330}, &(0x7f00000006c0)={0x200000, 0x200000}) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) 23m30.199480997s ago: executing program 0 (id=246): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x1}) 23m28.810768557s ago: executing program 0 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 23m13.550364092s ago: executing program 32 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 22m44.916488638s ago: executing program 3 (id=417): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000a80)=""/196, 0xc4}], 0x1, 0x8e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x21, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xe8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioperm(0x0, 0x44, 0x7) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r4, r7, 0xfffffffffffffc01, 0x0) tee(r4, r7, 0x60000000000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc}) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x19) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) ioperm(0x3, 0x4, 0x1000008) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) 22m42.2218264s ago: executing program 3 (id=424): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000002780)=""/254, 0xfe, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000540)=""/267, 0x10b, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 22m41.310461473s ago: executing program 3 (id=428): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000a00)=[@reply={0x40406301, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22m40.431954028s ago: executing program 3 (id=432): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="40084900000023dad6c7d3620ccd1bad54f43c348fcbcd27a1c27366421d94e0568506dcbb2da8bbf88a6ec81f8739fd699187a266bdc51476db1d7d98dddc2d1d44e60b89e5e55564d2"], 0x0, 0x0, 0x0, 0x0, 0x0}) 22m37.742933374s ago: executing program 3 (id=441): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) 22m37.012401303s ago: executing program 3 (id=445): r0 = socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/229, 0xe5) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0xfc00, 0x5}}]}}, 0x11) r2 = getgid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x100}}, 0x0) fchown(r0, 0xee01, r2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x54) 22m20.748061023s ago: executing program 33 (id=445): r0 = socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/229, 0xe5) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0xfc00, 0x5}}]}}, 0x11) r2 = getgid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x100}}, 0x0) fchown(r0, 0xee01, r2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x54) 10m2.715508137s ago: executing program 6 (id=3312): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) shutdown(r0, 0x1) 10m2.14766399s ago: executing program 6 (id=3314): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33630f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc879147d8e5268249409001e0c0c9bd429f3d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6", 0xcd}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f0000000480)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f0291", 0x99}, {&(0x7f00000011c0)="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", 0x347}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="5300138e06d44d863d4eedd1", 0xc}], 0x1, 0x0, 0x0, 0x900}, 0x0) 10m1.674522853s ago: executing program 6 (id=3317): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6(0xa, 0x805, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 10m0.983802224s ago: executing program 6 (id=3321): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newqdisc={0x24, 0x14, 0xf0b, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, {0xd, 0x7}, {0x0, 0x8}, {0x4, 0xffe0}}}, 0x24}}, 0x20000010) 10m0.51095828s ago: executing program 6 (id=3325): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4e20, 0x1ff, 0x4e20, 0xfff, 0x2, 0x0, 0x80, 0x30, 0x0, r2}, {0x8, 0xf31, 0x0, 0x4, 0x9, 0x2, 0x5, 0x9}, {0x3, 0x10, 0x5, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d4, 0x32}, 0x2, @in=@multicast1, 0x34ff, 0x1, 0x2, 0x4, 0x7f, 0x0, 0x2}}, 0xe4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x138, 0xd4feffff, 0x228, 0x20a, 0x278, 0x228, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'pimreg0\x00', 'team_slave_0\x00', {0xff}, {}, 0x6}, 0x0, 0x114, 0x138, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff, 0xffffff00, 0xff000000], 0xcf, 0x3}}, @common=@frag={{0x30}, {[0x2, 0x9], 0x5, 0x22, 0x2}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x4, 0x4}, {0x0, 0x2, 0x5}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x34c) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000180), 0x80040) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000001c0)={0xffffffffffffffff, 0x2, 0x3, 0x0, 0x5}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="e73804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 9m58.423284864s ago: executing program 6 (id=3331): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) 9m43.193516164s ago: executing program 34 (id=3331): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) 1m44.847983051s ago: executing program 2 (id=5139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 1m44.09928141s ago: executing program 2 (id=5142): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m43.126425188s ago: executing program 2 (id=5145): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=@raw={0xdc, 0x4e, {"240b895f09b66f6e12d88daa6e0a036bdefd79cffdb8afd51d8d1b3c869dac6cc0c1056ca8f95025c08888ce6bf4282a4ccb75640adf1a00be455e1dd5e3dba0c78c66d31949f1179b200e899828d9e6271697a5a0abcf72cbd0c96e3fcfc9a668e77ed01292d6a77b0f3de7414c9c6efa181d1a33b63b86e60e5df5159d3d4cb5adc958c4ce5eb17214e73f1cbd443a9c8fa29227c40388dd5d4491b8bee45d0754ef0527e58ace57838a64105d05620318aadc6a2644392497f00defcb2e78f8e9d662e89fb4ea1919aa07c5bc2ac7cc199f39563858b3fc"}}, 0x0, 0x1200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 1m42.296359848s ago: executing program 2 (id=5149): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) truncate(0x0, 0x9) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, 0x0, 0x40000) getpid() write$binfmt_misc(r0, &(0x7f0000000640)="728b", 0x2) getpgrp(0x0) 1m40.82349063s ago: executing program 2 (id=5159): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=@raw={0xdc, 0x4e, {"240b895f09b66f6e12d88daa6e0a036bdefd79cffdb8afd51d8d1b3c869dac6cc0c1056ca8f95025c08888ce6bf4282a4ccb75640adf1a00be455e1dd5e3dba0c78c66d31949f1179b200e899828d9e6271697a5a0abcf72cbd0c96e3fcfc9a668e77ed01292d6a77b0f3de7414c9c6efa181d1a33b63b86e60e5df5159d3d4cb5adc958c4ce5eb17214e73f1cbd443a9c8fa29227c40388dd5d4491b8bee45d0754ef0527e58ace57838a64105d05620318aadc6a2644392497f00defcb2e78f8e9d662e89fb4ea1919aa07c5bc2ac7cc199f39563858b3fc"}}, 0x0, 0x1200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 1m40.070544415s ago: executing program 2 (id=5164): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4804) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 1m37.21331025s ago: executing program 35 (id=5164): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4804) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 1m9.878555307s ago: executing program 8 (id=5165): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) 1m7.778190374s ago: executing program 8 (id=5247): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 1m6.887429735s ago: executing program 8 (id=5252): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000c084}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a80)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}], 0x18}}], 0x2, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 1m4.449261845s ago: executing program 36 (id=5252): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000c084}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a80)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}], 0x18}}], 0x2, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 46.861757042s ago: executing program 1 (id=5311): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xffff000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 43.444343098s ago: executing program 1 (id=5321): socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @multicast}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 39.388705011s ago: executing program 1 (id=5327): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/19, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 38.604242082s ago: executing program 1 (id=5330): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000008380)='./bus\x00', 0x14018, &(0x7f0000000ac0)={[{@barrier}, {@nobarrier}, {@gid}, {@uid}, {@nodecompose}, {@nodecompose}, {@umask={'umask', 0x3d, 0x2}}, {@uid}, {@gid}]}, 0x1, 0x6ea, &(0x7f0000000300)="$eJzs3UtsXFcdB+DfHY9fQUqdNmkBVSJtpIKISPxQCmGTgBDyoqoqsWDBykqcxsokrWy3OBWiAQpsuyhiWxbZsUJixSao7JBgydKwqoTohlV2ru5j7Ek8Y8/k5Vj9vujOPfeexz3nP/c5VnQDfGEtnk77Toosnn5to1zevL3Q2by9MNlkd5KU6VbSrmcpbiTFJ8nF1FO+Uq5syheDtvNRWf3/m58mma7banfLl43+5e+vv9RT+v2t0UZxq5lyMslYM99tfPeqqf3buzSwvdpkT7r/+IvtnDJgp7qBg4O2tcutUaoPPN6Bw6Oor5u7zCRHmstkdZ1rzg6tJ9u7R2+ksxwAAAAcsMX/nZgfpfx0M3/mbu5m49A/xgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAT1bz/v2imVjd9MkX3/f8Tzbo06UPtzkF3AAAAAAAAAACGMNlNXOif/7W7uZuNHO0ubxXV3/xfrhaOV59fyjtZy3JWcyYbWcp61rOauSQzPQ1NbCytr6/ODVFzvm/N+Uc7bgAAAAAAAAD4gvllFnf+/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+DIhmrZ9V0vJueSaudZCrJRFnuVvLPbvqQKPqtvPPk+wEAAAAPZeoB6kwkd7ORo93lraJ65n++el6eyju5kfWsZD2dLOdy8wxdPvW3Nm8vdDZvL1wvp94WtxqjdiOt1L899N/yl6sS07mSlWrNmVyqOnM5rapm6T9Jrnf7dH+/kl98VrZ9ofbTIXt2uZmXG/uw+yvC5EiDe0xmknYr49sRma36Vu8Ex3qjsDsS3/tsUKMX61n7/i2ld0tzaW3/8nO83kKZ3DfmF4Yc2ZFmXo7nN4N+ual88Pshm9zf1M5Gbw0stB2JVqpIzPfsfc/XkZhK/5gnX//zHz8sihvXrl5ZOz14SIfE/fvEQk8kXth776si8eOrnac0Eu3hi/7kd0lmq0ic2F65mB/mRzmdk3kjq1nJu1nKepZTNCNdavbn8nNm70hdvGfpjf26M9F8L/VZ9N4+TW830tunk/lBlVrKy1Xdo1lJkbdyOct5tfo3n7l8O+dyLud7vuETA/tdja066lvlEf/v7DrqW/07f+obTaLs6W+b+R7e3S8aj0J9UijjeqwnruW8e86dqfJ6z8I7UXq2is7kUNejKkr7DLncOb/aJMpt/GpwNA/A/ZGY67kFeG7v/fwPVdG1zo1rq1eX3u57dR1v5ju3Fq/05P56/9ufvw5Yv3/Mh9NzHiv3l2cz1ZxJjmW87tpYN++57bPMPfGq8o5v57V25Z2ov+6ie6S+PvBInWju4Xa3NF/lvdA3b6HKK++02u3sut9K3kpn+34IgKfYkW8emZj+7/Q/pj+e/mD66vRrU9+f/M7kixMZ/9v4d9uzY6+0Xiz+lI/z853nfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MGt3Xzv2lKns7zaP9EanLVXovsmn5012adW0bxJZ6hNtEbtz+NIbL2fPAXdWF17KcljaLlYXbs59Rj6XO4J3ZcIjlZ99p49qkpcPMjI/2vUWpkaachbz9RRGmkTM3WdIQpP1sEc2x3VKtF8RQ/yclHgUDi7fv3ts2s33/vWyvWlN5ffXL4xfu7c+dnz515dOHtlpbM8W38edC+Bx2Hnon/QPQEAAAAAAAAAAACG9XD/BaI9VOGDHiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwuC2eTvtOiszNnpktlzdvL3TKqZveKdlO0molxc+S4pPkYuopMz3NFYO289HK+bEkn+601e6Wb+1Rb2tyqFHcaqacTDLWzB/CPe1deuj2iu0RlgE71Q0cHLTPAwAA///JVPji") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5452, 0x0) 37.522409072s ago: executing program 1 (id=5333): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/72, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) 36.607411012s ago: executing program 1 (id=5335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_extract_tcp_res(0x0, 0xfffffff7, 0x3ff) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "3788a64e83eb6ae7dbe42623861a30b67899dd66acbf723a1674b019a34d3c38d9407c9cbf0a5ab4427d34989ada55dc37c0aee18986dd59057b987177727332", 0x23}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) 21.193808433s ago: executing program 37 (id=5335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_extract_tcp_res(0x0, 0xfffffff7, 0x3ff) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "3788a64e83eb6ae7dbe42623861a30b67899dd66acbf723a1674b019a34d3c38d9407c9cbf0a5ab4427d34989ada55dc37c0aee18986dd59057b987177727332", 0x23}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) 21.033639915s ago: executing program 5 (id=5376): r0 = userfaultfd(0x1) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 20.303689981s ago: executing program 5 (id=5379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x40044) 19.613578057s ago: executing program 5 (id=5381): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 18.897023101s ago: executing program 5 (id=5382): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x400, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x10}, 0x18) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 17.351853788s ago: executing program 5 (id=5385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1010410, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {@noquota}]}, 0x9, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvzdp17aatIMh8KghaGUvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5+dFla9KlXZMI/XzgNOfce5tzvjn3nnuSe0kC2LPG0z+ZiMMR8VESMVpfnomIpJobiDhZ2+7O2mo+TUmsr7/5R1Jdf3ttNd94rqT+eLBeeDYifnw/4khmc73l5ZW5XLFYWKyXJyvzFybLyytHz8/nZguzhYXjU9PTx068cOL47sX61y8rh258/Noz35z8570nrn34UxIn41B9XXMcu2W89upGxGD6Et7j1d2urM+SfjeAHcnUjvBqOhyjsa+aa2O4ly0DALrl3YhYBwD2mMT5HwD2mMbnALfXVvON1N9PJHrr5isRcaAWf+P6Zm3NQP2a3YEYjIiR28k9V0aSiBjbhfrHI+KL797+Kk3RpeuQAK1cvhIRZ8fGN4//yaZ7FrbruQ62Gb+vbPyD3vk+nf+82Gr+l9mY/0SL+c9Qi2N3Jx58/Geu70I1baXzv5eb7m270xR/3di+eumR6pxvMDl3vlhIx7ZHI2IiBofS8tQWdUzc+vdWu3XN878/P3nny7T+9PHuFpnrA0P3/s9MrpJ7mJib3bwS8eRAq/iTjf5P2sx/T3dYx+svffB5u3Vp/Gm8jbQ5/u5avxrxdMv+v3tHW7Ll/YmT1d1hsrFTtPDtr5+NtKu/uf/TlNbfeC/QC2n/j2wd/1jSfL9meft1/Hx19Id26x4cf+v9f3/yVjW/v77sUq5SWZyK2J+8sXn5sbv/2yg3tk/jn3iq9fG/1f6fvic822H8Azd+/3rn8XdXGv/Mtvp/+5lrd+b2tau/s/6fruYm6ks6Gf86beDDvHYAAAAAAAAAAAAAAAAAAAAAAAAA0KlMRByKJJPdyGcy2WztN7wfj5FMsVSuHDlXWlqYiepvZY/FYKbxVZejTd+HOlX/PvxG+dh95ecj4rGI+HRouFrO5kvFmX4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9v8/n/qt6F+tw4A6JoD/W4AANBzzv8AsPds7/w/3LV2AAC94/0/AOw9zv8AsPc4/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBlp0+dStP632ur+bQ8c3F5aa508ehMoTyXnV/KZ/OlxQvZ2VJptljI5kvzbZ/ocu2hWCpdmI6FpUuTlUK5MlleXjkzX1paqJw5P5+bLZwpDPYsMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoXHl5ZS5XLBYWZWRkZDYyzaPEcP8GKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uf8CAAD//53qKtg=") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r3, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.144062271s ago: executing program 5 (id=5388): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0xf2, 0x4, 0x5e, 0x8, 0xbb, 0x81}, 0xc) 13.545958523s ago: executing program 38 (id=5388): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0xf2, 0x4, 0x5e, 0x8, 0xbb, 0x81}, 0xc) 11.04755536s ago: executing program 7 (id=5397): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f000000ed40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x488d1) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 9.451068151s ago: executing program 7 (id=5399): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="ccc042382379c2e4ece2056bd55dd90e22baccf2c53b772c7201d03ba75cd47af65892edb6dc749ccad167362d378a5d99612f731b199e2f1d95f771aa87218df1cb4e65387073b4d9d128d63fd42a12", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) r4 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000100)="93857078c9c12367b1e639a8d984", 0xe}, {0x0}], 0x2) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x5, 0xe, 0x9, 0x8, "c400523a6f29960fce66e2e7aadce2988b5ec056b7577f87586a324b565ffcbb"}) read$FUSE(0xffffffffffffffff, 0x0, 0x25) listen(r0, 0x5) 8.357569909s ago: executing program 9 (id=5401): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x74ed00, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x404, &(0x7f0000000300), 0x3, 0x434, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0xffffff91}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 8.132189796s ago: executing program 7 (id=5402): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 7.442145035s ago: executing program 7 (id=5404): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sync_file_range(r0, 0x10, 0x6, 0x7) 6.082083219s ago: executing program 7 (id=5406): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="ccc042382379c2e4ece2056bd55dd90e22baccf2c53b772c7201d03ba75cd47af65892edb6dc749ccad167362d378a5d99612f731b199e2f1d95f771aa87218df1cb4e65387073b4d9d128d63fd42a12", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) close(r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000001000)={'ah\x00'}, &(0x7f0000000980)=0x1e) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a900007f5cbbe0083000000000b09007a150b5d"], 0x0}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x101540) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x30, r2, 0xcc931000) r8 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r8, &(0x7f00000005c0)=[{&(0x7f0000000100)="93857078c9c12367b1e639a8d984", 0xe}, {0x0}], 0x2) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000000)={0x5, 0xe, 0x9, 0x8, "c400523a6f29960fce66e2e7aadce2988b5ec056b7577f87586a324b565ffcbb"}) read$FUSE(r5, 0x0, 0x25) listen(r0, 0x5) 4.793523662s ago: executing program 4 (id=5408): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file3\x00', 0x40, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d8, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf00f, 0x4000000, 0x0, 0x0, r0}]) 3.738785061s ago: executing program 4 (id=5409): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8, 0x0) r1 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r1}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f00000001c0)=ANY=[], 0x3, 0x9bf, &(0x7f0000001640)="$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") r3 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.202703029s ago: executing program 9 (id=5410): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c90010000c000500150808"], 0x15) 2.810068817s ago: executing program 7 (id=5411): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4e20, 0x1ff, 0x4e20, 0xfff, 0x2, 0x0, 0x80, 0x30, 0x0, r2}, {0x8, 0xf31, 0x0, 0x4, 0x9, 0x2, 0x5, 0x9}, {0x3, 0x10, 0x5, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d4, 0x32}, 0x2, @in=@multicast1, 0x34ff, 0x1, 0x2, 0x4, 0x7f, 0x0, 0x2}}, 0xe4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x138, 0xd4feffff, 0x228, 0x20a, 0x278, 0x228, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'pimreg0\x00', 'team_slave_0\x00', {0xff}, {}, 0x6}, 0x0, 0x114, 0x138, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff, 0xffffff00, 0xff000000], 0xcf, 0x3}}, @common=@frag={{0x30}, {[0x2, 0x9], 0x5, 0x22, 0x2}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x4, 0x4}, {0x0, 0x2, 0x5}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x34c) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000180), 0x80040) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000001c0)={0xffffffffffffffff, 0x2, 0x3, 0x0, 0x5}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) openat$audio(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="e73804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 2.34159157s ago: executing program 9 (id=5412): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.288036175s ago: executing program 4 (id=5413): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x0) 1.651732755s ago: executing program 9 (id=5414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20) 1.468716057s ago: executing program 4 (id=5415): syz_emit_vhci(0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80)={[0x93]}, 0x8) write$nbd(r0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000002240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{0x6}, 0x5}}}, 0x7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.054897036s ago: executing program 9 (id=5416): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a9280, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0x4018aee3, 0x0) 821.715424ms ago: executing program 4 (id=5417): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x7b}, 0xdf, 0x1, 0x3, 0x1, 0x24, 0x4007}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 460.290077ms ago: executing program 9 (id=5418): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x11, 0x6ed, &(0x7f00000003c0)="$eJzs3U1sHFcdAPD/rNf2bioct03TIFWqaaWCsEj8IRfMJQYhZKQKVUGCs9U4jZXNB7aL3B6IC0hcOXBFKgdzgRMIISEhRSpnuFXcLE4VSFx6Snpg0Hytx+6uvY7rj9DfL5rMm3nz3vznPzNvdleyJoDPrMXJaD6IdixOvraRLW9vzXa2t2ZvF+VGJyJGI6IR0ay1St6PWIhiis9nK6qKfvv55cr8tQ8+2v6wWGqWUyOK/9r9A2wOchSb5RQTETFUzo9gV39vPF5/ozvFpJuZLGEvV4mD0zYcEekuP7y4U9NLOlRb6Hu/A0+OpHhu1hT3/3jEuYhoVQ+0zaKycfIRHuhQY9Hm8cUBAAAAZ8b5h/cjNmLstOMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ0n5/v+knB5V5YlIqvf/j9TesT9yyuH2t39krarwoHESwQAAAAAAAADA8XrxYfz2WpqOVctpEo3vD5UL7XL+VqzFcjPicmzEUqzHeqzGdESM1zoa2VhaX1+djpfypQsfp2kaTxUtY3VXy5meLWcGDLh91CMGAAAAAAAAgP8rV+dG8/lPYjHGTjsYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoSyKGilk+XajK49FoRkQrIkay7TYj/l6Vz5DmYRs8OJ44AAAA4Ew5/zAexkaMVctpkn/nv5h/72/FW3En1mMl1qMTy3E9/y2g+Nbf2N6a7Wxvzd7OpogY3t3vN/6zU/7D2IFh5D1G8dtD7z1fyrdox41YyddcjjfibnTiejTylplLVTy1uGrezWJKrhbSNEYHSdD1cp4d+S/K+YloH7TBeJ6R4W5GprLYkiKPT++fifrZGcDePU1Ho/vLz4X+e+r+GFPl/Oq+e0n+m6ZF6Vy1JuKp7+yb8/x6GT7UwRzJ3kzM1K6+i/vnPOKLf/zdD2527ty6mWxOnthl9Fhe7L169J/VGaoyUdiM5ZitZeL5gTNxY+2MZ6Kv3b80NuK5bnkxvh3fi8mYiNdjNVbiR7EU67EcE/GtvLRUXs/Z/+P7Z2ph19LrB8U0Up6XoT0xfeF8Md8vppfytmOxEt+Nu3E9luPV/N9MTMdXYy7mYr52hp8bYKRt9Ljr/9Q/+Je/VBayge/nOwPgCd7d/WR5fbqW1/qYO57X1dc0Ii2fLM8c4nm0/9hY2XlkZWfip7V78PR1M9GK7lOiiu7ZKgPDPTPx63xYWevcubV6c+nenn6Tzd77eyV2H/7ZGUiy6+WZ7hix++rI6p7tWTed113o1jX21v2m3a076E4dKT/DfbKnmbzu+Yj4VRltVpfJxvCs7lKtXfZ5q5XXfZymafF5C4Az79yXz420/93+W/u99s/aN9uvtb45+rXRF0Zi+K/DX29ODb3SeCH5fbwXP46Dv6EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHWnv7nVtLnc7y6p5Cmqb3+1QdSyGaEbvW/OXPtW3yd41FxOAdZlsvNCLyNc0oCwM0/1dElGvuP97hvPu4SfhHeU5OJOH7FJKBN271vX7Kwt3PlYfzKE3TEz+c6l1th26elk7tFHzKheoVWZ+oSpoRfVqdynAEnKAr67fvXVl7+52vrNxeenP5zeU783Nz81Pzc6/OXrmx0mmddnjAMcqf9fnnnNOOBAAAAAAAAAAAABjUYH+ck9xaimJNs9dfERzUHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAIFiej+SCSmJ66PJUtb2/NdrKpKmfzoXzLRxHRiIhkIiJ5P2IhiinGa90l/fazGXHtg4+2PyyWmuWUb984+lFsllNMlOFO9N6u1Wtler9ff0nez73+/Q0oKaeh7pqFI/UHn5L/BQAA//+nTAii") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 0s ago: executing program 4 (id=5419): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="ccc042382379c2e4ece2056bd55dd90e22baccf2c53b772c7201d03ba75cd47af65892edb6dc749ccad167362d378a5d99612f731b199e2f1d95f771aa87218df1cb4e65387073b4d9d128d63fd42a12", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) close(r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000001000)={'ah\x00'}, &(0x7f0000000980)=0x1e) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socketpair(0x2, 0x0, 0x124, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a900007f5cbbe0083000000000b09007a150b5d"], 0x0}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x101540) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x30, r2, 0xcc931000) r8 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r8, &(0x7f00000005c0)=[{&(0x7f0000000100)="93857078c9c12367b1e639a8d984", 0xe}, {0x0}], 0x2) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000000)={0x5, 0xe, 0x9, 0x8, "c400523a6f29960fce66e2e7aadce2988b5ec056b7577f87586a324b565ffcbb"}) read$FUSE(r5, 0x0, 0x25) listen(r0, 0x5) kernel console output (not intermixed with test programs): 1491.945260][T17383] usb 2-1: Manufacturer: syz [ 1491.950259][T17383] usb 2-1: SerialNumber: syz [ 1491.988351][T17383] usb 2-1: config 0 descriptor?? [ 1491.996510][T19081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1492.053732][T17383] iuu_phoenix 2-1:0.0: required endpoints missing [ 1492.166178][T19090] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1492.337237][T19093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.347189][T19093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.393326][T15255] usb 2-1: USB disconnect, device number 87 [ 1492.608382][T19098] netlink: 'syz.5.4714': attribute type 7 has an invalid length. [ 1492.616638][T19098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4714'. [ 1492.626559][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4714'. [ 1492.726402][T17383] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1492.779735][T12446] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1492.924895][T17383] usb 5-1: Using ep0 maxpacket: 16 [ 1492.937560][T17383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.949082][T17383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.949351][T12446] usb 3-1: Using ep0 maxpacket: 32 [ 1492.959171][T17383] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1492.978365][T17383] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1492.987805][T17383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.003927][T12446] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1493.013565][T12446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.014800][T17383] usb 5-1: config 0 descriptor?? [ 1493.128034][T12446] usb 3-1: config 0 descriptor?? [ 1493.389730][T12446] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1493.431857][T12446] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1493.512867][T12446] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1493.520745][T12446] usb 3-1: media controller created [ 1493.575920][T17383] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input51 [ 1493.659264][T12446] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1493.739828][T17383] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1494.132983][T17383] usb 5-1: USB disconnect, device number 104 [ 1494.139420][T12446] az6027: usb out operation failed. (-71) [ 1494.140651][T12446] az6027: usb out operation failed. (-71) [ 1494.152568][T12446] stb0899_attach: Driver disabled by Kconfig [ 1494.160210][T12446] az6027: no front-end attached [ 1494.160210][T12446] [ 1494.316444][T12446] az6027: usb out operation failed. (-71) [ 1494.322565][T12446] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1494.333429][T12446] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 1494.583524][T12446] dvb-usb: schedule remote query interval to 400 msecs. [ 1494.590949][T12446] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1494.627930][T19119] xt_TCPMSS: Only works on TCP SYN packets [ 1494.686719][T19110] fido_id[19110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1494.691303][T12446] usb 3-1: USB disconnect, device number 88 [ 1494.966552][T17383] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1495.135670][T12446] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1495.189943][T17383] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1495.201575][T17383] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1495.213580][T17383] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1495.397232][T17383] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1495.406922][T17383] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.413274][T19128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.415074][T17383] usb 8-1: Product: syz [ 1495.430094][T17383] usb 8-1: Manufacturer: syz [ 1495.434955][T17383] usb 8-1: SerialNumber: syz [ 1495.522976][T17383] usb 8-1: config 0 descriptor?? [ 1495.534942][T19119] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1495.549572][T19119] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1495.595175][T19128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.657618][T17383] usb 8-1: ucan: probing device on interface #0 [ 1495.685176][T19129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.854512][T17383] usb 8-1: ucan: device protocol version 327680 is not supported [ 1495.863665][T17383] usb 8-1: ucan: probe failed; try to update the device firmware [ 1496.666202][T12446] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1496.851378][T12446] usb 3-1: Using ep0 maxpacket: 16 [ 1496.874934][T12446] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.885671][T12446] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1496.897026][T12446] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1496.909016][T12446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1496.920513][T12446] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1497.021280][T12446] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1497.030962][T12446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.039492][T12446] usb 3-1: Product: syz [ 1497.043884][T12446] usb 3-1: Manufacturer: syz [ 1497.049202][T12446] usb 3-1: SerialNumber: syz [ 1497.175545][T12446] usb 3-1: config 0 descriptor?? [ 1497.183248][T19142] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1497.206582][T12446] iuu_phoenix 3-1:0.0: required endpoints missing [ 1497.504857][T19154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.514843][T19154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.580653][T17383] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1497.604389][T12446] usb 3-1: USB disconnect, device number 89 [ 1497.758745][T17383] usb 5-1: Using ep0 maxpacket: 32 [ 1497.824868][T17383] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1497.834516][T17383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.863854][T12446] usb 8-1: USB disconnect, device number 22 [ 1497.874836][T17383] usb 5-1: config 0 descriptor?? [ 1498.113600][T17383] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1498.157562][T17383] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1498.166945][T17383] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1499.142837][T19172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1499.276399][T19175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1499.306975][T19174] loop4: detected capacity change from 0 to 2048 [ 1499.358365][T19172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1499.404772][T19174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1499.483557][ T30] audit: type=1800 audit(1750335101.386:125): pid=19174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4741" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1499.495567][T19174] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1499.520930][T19174] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1499.534391][T19174] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1499.534391][T19174] [ 1499.544451][T19174] EXT4-fs (loop4): Total free blocks count 0 [ 1499.550838][T19174] EXT4-fs (loop4): Free/Dirty block details [ 1499.557042][T19174] EXT4-fs (loop4): free_blocks=2415919504 [ 1499.562982][T19174] EXT4-fs (loop4): dirty_blocks=48 [ 1499.568486][T19174] EXT4-fs (loop4): Block reservation details [ 1499.574678][T19174] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 1499.628011][T19181] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1500.276983][T19189] xt_TCPMSS: Only works on TCP SYN packets [ 1500.599334][T12446] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1500.676208][T13507] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1500.839163][T12446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1500.850557][T12446] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1500.863401][T12446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1500.877846][T13507] usb 8-1: Using ep0 maxpacket: 16 [ 1500.923883][T13507] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.934585][T13507] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1500.945929][T13507] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1500.958171][T13507] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1500.969775][T13507] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1501.032701][T12446] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1501.042636][T12446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.051100][T12446] usb 6-1: Product: syz [ 1501.055515][T12446] usb 6-1: Manufacturer: syz [ 1501.056155][T19200] loop2: detected capacity change from 0 to 7 [ 1501.061275][T12446] usb 6-1: SerialNumber: syz [ 1501.134982][T19200] Dev loop2: unable to read RDB block 7 [ 1501.141400][T19200] loop2: AHDI p1 p2 p3 [ 1501.146315][T19200] loop2: partition table partially beyond EOD, truncated [ 1501.148446][T12446] usb 6-1: config 0 descriptor?? [ 1501.154370][T19200] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1501.166363][T19200] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1501.178703][T19189] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1501.211103][T19189] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1501.258894][T13507] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1501.268785][T12446] usb 6-1: ucan: probing device on interface #0 [ 1501.275353][T13507] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.283810][T13507] usb 8-1: Product: syz [ 1501.288438][T13507] usb 8-1: Manufacturer: syz [ 1501.293269][T13507] usb 8-1: SerialNumber: syz [ 1501.431533][T13507] usb 8-1: config 0 descriptor?? [ 1501.440456][T19194] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1501.507451][T12446] usb 6-1: ucan: device protocol version 327680 is not supported [ 1501.515553][T12446] usb 6-1: ucan: probe failed; try to update the device firmware [ 1501.533960][T13507] iuu_phoenix 8-1:0.0: required endpoints missing [ 1501.873061][T19208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.883627][T19208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.050417][T13507] usb 8-1: USB disconnect, device number 23 [ 1503.612766][T12446] usb 6-1: USB disconnect, device number 53 [ 1503.751922][T19231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1503.880612][T19231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1503.946265][T19237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.337948][T19241] loop2: detected capacity change from 0 to 7 [ 1504.361314][T19241] Dev loop2: unable to read RDB block 7 [ 1504.367581][T19241] loop2: AHDI p1 p2 p3 [ 1504.371994][T19241] loop2: partition table partially beyond EOD, truncated [ 1504.380304][T19241] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1504.387564][T19241] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1504.480734][T19245] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1504.844772][T19247] loop2: detected capacity change from 0 to 1024 [ 1504.875582][T19247] EXT4-fs: Ignoring removed nobh option [ 1504.881800][T19247] EXT4-fs: inline encryption not supported [ 1504.966206][T13507] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1505.008883][T19247] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.4764: bad orphan inode 32767 [ 1505.056113][T19247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1505.206034][T13507] usb 6-1: Using ep0 maxpacket: 16 [ 1505.243050][T13507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.254612][T13507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.265327][T13507] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1505.278760][T13507] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1505.288169][T13507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.372681][T13507] usb 6-1: config 0 descriptor?? [ 1505.483207][T13413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.856952][T13507] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input53 [ 1506.080132][T13507] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1506.152435][T13507] usb 6-1: USB disconnect, device number 54 [ 1507.043507][T19268] fido_id[19268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1507.202750][T19279] loop2: detected capacity change from 0 to 7 [ 1507.212204][T19279] Dev loop2: unable to read RDB block 7 [ 1507.218419][T19279] loop2: AHDI p1 p2 p3 [ 1507.222818][T19279] loop2: partition table partially beyond EOD, truncated [ 1507.232208][T19279] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1507.239457][T19279] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1507.354950][T19285] loop4: detected capacity change from 0 to 512 [ 1507.494760][T19285] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1507.505583][T12446] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1507.696120][T12446] usb 8-1: Using ep0 maxpacket: 32 [ 1507.727839][T12446] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1507.737459][T12446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.858735][T12446] usb 8-1: config 0 descriptor?? [ 1508.107295][T12446] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1509.000486][T19301] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1509.127147][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1509.133828][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1509.526290][T13507] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1509.712161][T19315] loop2: detected capacity change from 0 to 7 [ 1509.720700][T13507] usb 2-1: Using ep0 maxpacket: 16 [ 1509.747771][T19315] Dev loop2: unable to read RDB block 7 [ 1509.753684][T19315] loop2: AHDI p1 p2 p3 [ 1509.759147][T19315] loop2: partition table partially beyond EOD, truncated [ 1509.768346][T19315] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1509.775421][T19315] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1509.799722][T13507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.811643][T13507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.821807][T13507] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1509.835009][T13507] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1509.844559][T13507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.866667][T14065] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1509.942545][T13507] usb 2-1: config 0 descriptor?? [ 1510.072115][T14065] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.082903][T14065] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1510.090182][T14065] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1510.099901][T14065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.242179][T14065] usb 6-1: config 0 descriptor?? [ 1510.249583][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4793'. [ 1510.567048][T13507] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input54 [ 1510.759396][T14065] apple 0003:05AC:027A.000B: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0 [ 1510.797353][T13507] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1510.823780][T13507] usb 2-1: USB disconnect, device number 88 [ 1510.928543][T14065] usb 6-1: USB disconnect, device number 55 [ 1511.655673][T19328] fido_id[19328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1511.874103][T19329] fido_id[19329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1512.744873][T19346] loop2: detected capacity change from 0 to 7 [ 1512.787103][T14428] Dev loop2: unable to read RDB block 7 [ 1512.793151][T14428] loop2: AHDI p1 p2 p3 [ 1512.797824][T14428] loop2: partition table partially beyond EOD, truncated [ 1512.806131][T14428] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1512.813190][T14428] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1512.851813][T19346] Dev loop2: unable to read RDB block 7 [ 1512.857979][T19346] loop2: AHDI p1 p2 p3 [ 1512.862495][T19346] loop2: partition table partially beyond EOD, truncated [ 1512.870925][T19346] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1512.878425][T19346] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1513.216134][T19354] loop2: detected capacity change from 0 to 512 [ 1513.240227][T19354] ext2: Unknown parameter 'smackfsroot' [ 1515.148813][T19380] xt_TCPMSS: Only works on TCP SYN packets [ 1515.446300][T14065] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1515.674656][T14065] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1515.686232][T14065] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1515.698213][T14065] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1515.830979][T14065] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1515.840736][T14065] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.849170][T14065] usb 2-1: Product: syz [ 1515.853563][T14065] usb 2-1: Manufacturer: syz [ 1515.858517][T14065] usb 2-1: SerialNumber: syz [ 1515.898772][T14065] usb 2-1: config 0 descriptor?? [ 1515.915684][T19382] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1515.986385][T19382] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1516.068915][T14065] usb 2-1: ucan: probing device on interface #0 [ 1516.304398][T14065] usb 2-1: ucan: device protocol version 327680 is not supported [ 1516.312849][T14065] usb 2-1: ucan: probe failed; try to update the device firmware [ 1517.391274][T14065] usb 2-1: USB disconnect, device number 89 [ 1518.410796][T19420] loop7: detected capacity change from 0 to 512 [ 1518.557824][T19420] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.4833: iget: bad extended attribute block 1 [ 1518.666869][T19420] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.4833: couldn't read orphan inode 15 (err -117) [ 1518.811072][T19420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1518.886134][T15255] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1519.077505][T15255] usb 3-1: Using ep0 maxpacket: 32 [ 1519.091446][T15255] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1519.101533][T15255] usb 3-1: config 0 has no interface number 0 [ 1519.148466][T15250] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.183356][T15255] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1519.192875][T15255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.201333][T15255] usb 3-1: Product: syz [ 1519.205898][T15255] usb 3-1: Manufacturer: syz [ 1519.210721][T15255] usb 3-1: SerialNumber: syz [ 1519.320074][T15255] usb 3-1: config 0 descriptor?? [ 1519.379471][T15255] smsc95xx v2.0.0 [ 1520.011917][T15255] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1520.023591][T15255] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1520.082979][T15255] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1520.096241][T15255] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1520.135426][T15255] usb 3-1: USB disconnect, device number 90 [ 1521.201707][T19451] xt_TCPMSS: Only works on TCP SYN packets [ 1521.204135][T19452] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1521.274031][T19455] loop4: detected capacity change from 0 to 16 [ 1521.316369][T19455] erofs (device loop4): mounted with root inode @ nid 36. [ 1521.378850][ T30] audit: type=1800 audit(1750335123.276:126): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4846" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 1521.515990][T15255] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1521.700257][ T5856] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1521.735990][T15255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1521.748543][T15255] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1521.766786][T15255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1521.861998][T15255] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1521.872460][T15255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.881431][T15255] usb 3-1: Product: syz [ 1521.886651][T15255] usb 3-1: Manufacturer: syz [ 1521.891482][T15255] usb 3-1: SerialNumber: syz [ 1521.925135][T15255] usb 3-1: config 0 descriptor?? [ 1521.933453][T19451] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1521.946206][ T5856] usb 6-1: Using ep0 maxpacket: 16 [ 1521.982489][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.994308][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1522.004684][ T5856] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1522.017180][T19451] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1522.018086][ T5856] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1522.034689][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.059097][T15255] usb 3-1: ucan: probing device on interface #0 [ 1522.193982][ T5856] usb 6-1: config 0 descriptor?? [ 1522.288786][T15255] usb 3-1: ucan: device protocol version 327680 is not supported [ 1522.297118][T15255] usb 3-1: ucan: probe failed; try to update the device firmware [ 1522.726464][ T5856] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000C/input/input55 [ 1522.878162][ T5856] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1522.975240][ T5856] usb 6-1: USB disconnect, device number 56 [ 1523.357173][T14065] usb 3-1: USB disconnect, device number 91 [ 1523.655102][T19473] fido_id[19473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1525.546405][T15255] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1525.761341][T15255] usb 6-1: config 0 has no interfaces? [ 1525.790999][T15255] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1525.800578][T15255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.809102][T15255] usb 6-1: Product: syz [ 1525.813500][T15255] usb 6-1: Manufacturer: syz [ 1525.818604][T15255] usb 6-1: SerialNumber: syz [ 1525.885991][T15255] usb 6-1: config 0 descriptor?? [ 1526.200606][T19485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.210731][T19485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.293097][T19500] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1526.361269][T15255] usb 6-1: USB disconnect, device number 57 [ 1526.756878][T14065] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1526.811752][T19508] xt_TCPMSS: Only works on TCP SYN packets [ 1526.946327][T14065] usb 2-1: Using ep0 maxpacket: 16 [ 1526.972479][T14065] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.984251][T14065] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.994461][T14065] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1527.007968][T14065] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1527.017438][T14065] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.050300][T14065] usb 2-1: config 0 descriptor?? [ 1527.560206][T14065] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000D/input/input56 [ 1527.654021][T14065] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1527.781021][T14065] usb 2-1: USB disconnect, device number 90 [ 1528.239306][T19519] fido_id[19519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1529.308106][T19527] loop2: detected capacity change from 0 to 2048 [ 1529.357204][T19527] EXT4-fs: Ignoring removed mblk_io_submit option [ 1529.608227][T19527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1529.897270][T19536] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4873: bg 0: block 234: padding at end of block bitmap is not set [ 1529.951521][T19536] EXT4-fs (loop2): Remounting filesystem read-only [ 1530.335914][T13413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.861414][T19551] loop2: detected capacity change from 0 to 512 [ 1530.871101][T19552] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1530.910282][T19551] EXT4-fs: Ignoring removed nobh option [ 1531.190553][ T30] audit: type=1326 audit(1750335133.096:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19542 comm="syz.5.4878" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 1531.459830][T19551] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1531.511437][T19551] EXT4-fs error (device loop2): __ext4_iget:5379: inode #11: block 1: comm syz.2.4880: invalid block [ 1531.540723][T19551] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.4880: couldn't read orphan inode 11 (err -117) [ 1531.568039][T19551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1531.816334][T19567] loop1: detected capacity change from 0 to 1024 [ 1531.822791][T19551] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1531.943401][T19567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1532.055247][T13413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.464546][T19581] loop1: detected capacity change from 0 to 1024 [ 1533.540329][T19581] ext4: Bad value for 'barrier' [ 1533.979248][T19587] loop5: detected capacity change from 0 to 16 [ 1534.064967][T19587] erofs (device loop5): mounted with root inode @ nid 36. [ 1535.844589][T19607] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1536.316727][T15255] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1536.352450][ T30] audit: type=1326 audit(1750335138.246:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19603 comm="syz.2.4899" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x0 [ 1536.371802][T19618] loop7: detected capacity change from 0 to 16 [ 1536.445494][T19618] erofs (device loop7): mounted with root inode @ nid 36. [ 1536.516302][T15255] usb 6-1: Using ep0 maxpacket: 16 [ 1536.584851][T15255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.597394][T15255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.607656][T15255] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1536.620988][T15255] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1536.630637][T15255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.808086][T15255] usb 6-1: config 0 descriptor?? [ 1537.326633][T15255] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000E/input/input57 [ 1537.380985][T19624] loop7: detected capacity change from 0 to 1024 [ 1537.485957][T15255] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1537.545426][T15255] usb 6-1: USB disconnect, device number 58 [ 1537.890957][T11417] hfsplus: b-tree write err: -5, ino 4 [ 1538.280531][T19631] fido_id[19631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1538.376349][T19637] IPv6: Can't replace route, no match found [ 1539.074541][T19647] loop7: detected capacity change from 0 to 16 [ 1539.161696][T19647] erofs (device loop7): mounted with root inode @ nid 36. [ 1540.869598][ T30] audit: type=1326 audit(1750335142.756:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19660 comm="syz.5.4924" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 1541.017952][T19666] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1541.579239][T19672] loop2: detected capacity change from 0 to 128 [ 1541.725591][T19672] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1541.868655][T19672] ext4 filesystem being mounted at /431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1545.109057][T19684] xt_TCPMSS: Only works on TCP SYN packets [ 1545.396205][T15255] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1545.477076][T19688] loop7: detected capacity change from 0 to 512 [ 1545.513259][T19688] EXT4-fs: Ignoring removed bh option [ 1545.519216][T19688] ext3: Unknown parameter 'fsuuid' [ 1545.630705][T15255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1545.642127][T15255] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1545.653925][T15255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1545.781595][T15255] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1545.791072][T15255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.799453][T15255] usb 2-1: Product: syz [ 1545.803727][T15255] usb 2-1: Manufacturer: syz [ 1545.809154][T15255] usb 2-1: SerialNumber: syz [ 1545.927019][T15255] usb 2-1: config 0 descriptor?? [ 1545.934689][T19684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1545.967242][T19684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1546.046361][T15255] usb 2-1: ucan: probing device on interface #0 [ 1546.233670][T15255] usb 2-1: ucan: device protocol version 327680 is not supported [ 1546.242035][T15255] usb 2-1: ucan: probe failed; try to update the device firmware [ 1546.876864][T14065] usb 2-1: USB disconnect, device number 91 [ 1547.987550][ T30] audit: type=1326 audit(1750335149.886:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1548.010278][ T30] audit: type=1326 audit(1750335149.886:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1548.032847][ T30] audit: type=1326 audit(1750335149.886:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1548.055440][ T30] audit: type=1326 audit(1750335149.886:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1548.078218][ T30] audit: type=1326 audit(1750335149.886:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1548.100608][ T30] audit: type=1326 audit(1750335149.886:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1548.123240][ T30] audit: type=1326 audit(1750335149.886:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1548.145929][ T30] audit: type=1326 audit(1750335149.886:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.5.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1549.061769][T19713] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1549.244327][T13413] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1549.574902][T14065] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1549.775412][T14065] usb 6-1: Using ep0 maxpacket: 16 [ 1549.832238][T14065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.843729][T14065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1549.854024][T14065] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1549.867264][T14065] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1549.876707][T14065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.160062][T14065] usb 6-1: config 0 descriptor?? [ 1550.520500][T19725] loop7: detected capacity change from 0 to 512 [ 1550.690489][T14065] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000F/input/input58 [ 1550.790195][T19725] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 1550.931080][T14065] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1551.000975][T14065] usb 6-1: USB disconnect, device number 59 [ 1551.340150][T13507] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1551.461968][T13507] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1551.592165][T19734] loop4: detected capacity change from 0 to 1024 [ 1552.036297][T19735] fido_id[19735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1553.401452][ T30] audit: type=1326 audit(1750335155.286:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19750 comm="syz.4.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1553.424354][ T30] audit: type=1326 audit(1750335155.306:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19750 comm="syz.4.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1553.447525][ T30] audit: type=1326 audit(1750335155.306:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19750 comm="syz.4.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1553.661946][T19756] fido_id[19756]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1553.962752][ T30] audit: type=1326 audit(1750335155.376:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19750 comm="syz.4.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1553.985942][ T30] audit: type=1326 audit(1750335155.376:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19750 comm="syz.4.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1554.009052][ T30] audit: type=1326 audit(1750335155.376:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19750 comm="syz.4.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1554.031589][ T30] audit: type=1326 audit(1750335155.376:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19750 comm="syz.4.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1554.054312][ T30] audit: type=1326 audit(1750335155.386:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19750 comm="syz.4.4952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1555.196592][T19772] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4959'. [ 1555.273781][T19775] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1557.309475][T19795] loop5: detected capacity change from 0 to 16 [ 1557.426990][T19795] erofs (device loop5): mounted with root inode @ nid 36. [ 1559.260253][T19806] loop5: detected capacity change from 0 to 4096 [ 1559.400527][T19806] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1559.408769][T19806] UDF-fs: Scanning with blocksize 512 failed [ 1559.532022][T19806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1560.314589][T17383] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1560.323159][T12446] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1560.330432][T17383] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1560.345557][T12446] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1560.584281][T17383] usb 5-1: USB disconnect, device number 105 [ 1560.630575][T12446] usb 8-1: USB disconnect, device number 24 [ 1560.719236][T19821] loop4: detected capacity change from 0 to 512 [ 1560.910243][ T5801] Bluetooth: hci2: Malformed Event: 0x2f [ 1561.350772][T19828] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1561.926916][T17383] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1562.116117][T17383] usb 6-1: Using ep0 maxpacket: 16 [ 1562.151194][T17383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1562.162767][T17383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1562.173431][T17383] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1562.186742][T17383] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1562.196738][T17383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.294941][T17383] usb 6-1: config 0 descriptor?? [ 1562.839430][T17383] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0011/input/input59 [ 1562.958349][T17383] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1563.052045][T17383] usb 6-1: USB disconnect, device number 60 [ 1564.006996][T19852] fido_id[19852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1564.449023][T19859] loop5: detected capacity change from 0 to 512 [ 1564.731052][T19859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1564.744420][T19859] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1564.946686][T19869] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1564.986817][T19869] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1565.361328][T15630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1566.418215][T19884] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1566.878832][T19891] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5005'. [ 1567.056145][T17383] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1567.226610][T17383] usb 8-1: Using ep0 maxpacket: 16 [ 1567.270405][T17383] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1567.281840][T17383] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1567.292108][T17383] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1567.305405][T17383] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1567.315089][T17383] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.347840][T17383] usb 8-1: config 0 descriptor?? [ 1567.812886][T17383] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0012/input/input60 [ 1568.037919][T17383] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1568.147026][T17383] usb 8-1: USB disconnect, device number 25 [ 1569.149070][T19902] fido_id[19902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1570.114222][T19916] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5016'. [ 1570.543090][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1570.549890][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1571.266505][T19929] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1571.343028][T19931] loop7: detected capacity change from 0 to 512 [ 1571.378451][T19931] EXT4-fs: Ignoring removed i_version option [ 1571.384928][T19931] EXT4-fs: Ignoring removed mblk_io_submit option [ 1571.394360][T19931] ext4: Unknown parameter 'seclabel' [ 1571.788002][T12446] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1571.966214][T12446] usb 5-1: Using ep0 maxpacket: 16 [ 1572.000721][T12446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1572.012551][T12446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1572.023592][T12446] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1572.037148][T12446] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1572.046569][T12446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.137209][T12446] usb 5-1: config 0 descriptor?? [ 1572.665282][T12446] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input61 [ 1572.868064][T12446] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1572.996575][T12446] usb 5-1: USB disconnect, device number 106 [ 1573.628839][T19943] fido_id[19943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1574.085511][T19951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5030'. [ 1577.071525][T19980] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1577.585260][T17383] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1577.790147][T17383] usb 5-1: Using ep0 maxpacket: 16 [ 1577.847052][T17383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.859361][T17383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.869572][T17383] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1577.882858][T17383] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1577.892255][T17383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.065136][T17383] usb 5-1: config 0 descriptor?? [ 1578.142375][T19987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5043'. [ 1578.548323][T19990] loop2: detected capacity change from 0 to 7 [ 1578.569861][T17383] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input62 [ 1578.619874][T19990] Dev loop2: unable to read RDB block 7 [ 1578.626009][T19990] loop2: unable to read partition table [ 1578.687782][T19990] loop2: partition table beyond EOD, truncated [ 1578.694167][T19990] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1578.872594][T17383] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1578.979332][T17383] usb 5-1: USB disconnect, device number 107 [ 1579.740965][T19993] fido_id[19993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1581.244907][T20008] loop7: detected capacity change from 0 to 1764 [ 1581.937899][T20018] loop2: detected capacity change from 0 to 7 [ 1581.978901][T20018] Dev loop2: unable to read RDB block 7 [ 1581.984925][T20018] loop2: unable to read partition table [ 1582.029141][T20018] loop2: partition table beyond EOD, truncated [ 1582.036072][T20018] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1582.106597][T20023] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1582.626560][T17383] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1582.836957][T17383] usb 5-1: Using ep0 maxpacket: 16 [ 1582.881946][T17383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.893541][T17383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.903884][T17383] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1582.917031][T17383] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1582.926506][T17383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.141612][T17383] usb 5-1: config 0 descriptor?? [ 1583.407193][T20035] syz_tun: entered allmulticast mode [ 1583.460469][T20033] syz_tun: left allmulticast mode [ 1583.691473][T17383] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input63 [ 1583.852719][T17383] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1583.977160][T17383] usb 5-1: USB disconnect, device number 108 [ 1584.834275][T20045] fido_id[20045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1584.926566][ T30] audit: type=1326 audit(1750335186.826:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 1584.949519][ T30] audit: type=1326 audit(1750335186.826:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 1585.163159][ T30] audit: type=1326 audit(1750335186.886:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 1585.183705][T20050] loop4: detected capacity change from 0 to 256 [ 1585.186066][ T30] audit: type=1326 audit(1750335186.886:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 1585.214571][ T30] audit: type=1326 audit(1750335186.886:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 1585.238223][ T30] audit: type=1326 audit(1750335186.886:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 1585.260746][ T30] audit: type=1326 audit(1750335186.946:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 1585.283341][ T30] audit: type=1326 audit(1750335186.946:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 1585.305895][ T30] audit: type=1326 audit(1750335186.946:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 1585.328354][ T30] audit: type=1326 audit(1750335186.946:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20046 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7ffc0000 [ 1585.456738][T20050] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1585.468334][T20050] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1585.683527][T20050] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1585.954471][T20053] loop2: detected capacity change from 0 to 7 [ 1585.999904][T20053] Dev loop2: unable to read RDB block 7 [ 1586.006138][T20053] loop2: unable to read partition table [ 1586.026731][T20053] loop2: partition table beyond EOD, truncated [ 1586.033410][T20053] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1587.100411][T20066] syz_tun: entered allmulticast mode [ 1587.111498][T20064] syz_tun: left allmulticast mode [ 1587.739339][T20073] loop4: detected capacity change from 0 to 512 [ 1587.968729][T20073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1587.982130][T20073] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.209209][T20073] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.5078: corrupted xattr block 33: invalid header [ 1588.261804][T20080] loop7: detected capacity change from 0 to 1024 [ 1588.268967][T20073] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.5078: corrupted xattr block 33: invalid header [ 1588.270441][T20073] fscrypt (loop4, inode 15): Error -117 getting encryption context [ 1588.431364][T20080] hfsplus: can't free extent [ 1588.663922][T13621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.307229][T20087] loop2: detected capacity change from 0 to 7 [ 1589.360251][T20087] Dev loop2: unable to read RDB block 7 [ 1589.366529][T20087] loop2: unable to read partition table [ 1589.447716][T20087] loop2: partition table beyond EOD, truncated [ 1589.454410][T20087] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1589.696160][T17383] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1589.948928][T17383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1589.960082][T17383] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1589.971994][T17383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1590.092800][T17383] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1590.102315][T17383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.110591][T17383] usb 3-1: Product: syz [ 1590.114938][T17383] usb 3-1: Manufacturer: syz [ 1590.119934][T17383] usb 3-1: SerialNumber: syz [ 1590.257380][T17383] usb 3-1: config 0 descriptor?? [ 1590.264887][T20090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1590.283169][T20090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1590.339131][T17383] usb 3-1: ucan: probing device on interface #0 [ 1590.556929][T17383] usb 3-1: ucan: device protocol version 327680 is not supported [ 1590.565110][T17383] usb 3-1: ucan: probe failed; try to update the device firmware [ 1590.651407][T20098] syz_tun: entered allmulticast mode [ 1590.733187][T20097] syz_tun: left allmulticast mode [ 1591.176818][T17383] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1591.401667][T12446] usb 3-1: USB disconnect, device number 92 [ 1591.403461][T17383] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 1591.417048][T17383] usb 8-1: config 0 has no interface number 0 [ 1591.423378][T17383] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1591.434930][T17383] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1591.448744][T17383] usb 8-1: config 0 interface 255 has no altsetting 0 [ 1591.456021][T17383] usb 8-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1591.465418][T17383] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.678717][T17383] usb 8-1: config 0 descriptor?? [ 1591.728042][T17383] ums-realtek 8-1:0.255: USB Mass Storage device detected [ 1591.914903][T17383] usb 8-1: USB disconnect, device number 26 [ 1592.294445][T20121] loop2: detected capacity change from 0 to 7 [ 1592.317013][T20121] Dev loop2: unable to read RDB block 7 [ 1592.322960][T20121] loop2: unable to read partition table [ 1592.377511][T20121] loop2: partition table beyond EOD, truncated [ 1592.384057][T20121] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1593.187900][T20131] syz_tun: entered allmulticast mode [ 1593.250077][T20129] syz_tun: left allmulticast mode [ 1593.316382][T20133] loop2: detected capacity change from 0 to 256 [ 1593.370169][T20133] exfat: Deprecated parameter 'namecase' [ 1593.376462][T20133] exfat: Deprecated parameter 'namecase' [ 1593.547981][T20133] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1595.016019][T12446] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1595.231778][T12446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1595.243136][T12446] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1595.255219][T12446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1595.363586][T12446] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1595.373630][T12446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.382029][T12446] usb 6-1: Product: syz [ 1595.386428][T12446] usb 6-1: Manufacturer: syz [ 1595.391242][T12446] usb 6-1: SerialNumber: syz [ 1595.505405][T12446] usb 6-1: config 0 descriptor?? [ 1595.513106][T20145] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1595.539603][T20145] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1595.594448][T12446] usb 6-1: ucan: probing device on interface #0 [ 1595.819416][T12446] usb 6-1: ucan: device protocol version 327680 is not supported [ 1595.827783][T12446] usb 6-1: ucan: probe failed; try to update the device firmware [ 1595.998355][T20155] loop2: detected capacity change from 0 to 7 [ 1596.037351][T20155] Dev loop2: unable to read RDB block 7 [ 1596.043290][T20155] loop2: unable to read partition table [ 1596.088129][T20155] loop2: partition table beyond EOD, truncated [ 1596.094836][T20155] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1596.351333][T12446] usb 6-1: USB disconnect, device number 61 [ 1596.898399][T20162] loop2: detected capacity change from 0 to 128 [ 1596.907006][T20161] syz_tun: entered allmulticast mode [ 1596.972502][T20159] syz_tun: left allmulticast mode [ 1596.979188][T20162] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1597.040052][T20162] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1597.076018][T20162] ext4 filesystem being mounted at /462/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1597.706716][T20162] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1597.948757][T20179] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1598.054727][T13413] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1598.558274][T20188] loop2: detected capacity change from 0 to 7 [ 1598.603446][T20188] Dev loop2: unable to read RDB block 7 [ 1598.609580][T20188] loop2: unable to read partition table [ 1598.653722][T20188] loop2: partition table beyond EOD, truncated [ 1598.660608][T20188] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1599.182727][T20198] syz_tun: entered allmulticast mode [ 1599.247705][T20196] syz_tun: left allmulticast mode [ 1599.424157][T17383] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 1599.656357][T17383] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1599.667806][T17383] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1599.680959][T17383] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1599.739768][T20207] loop4: detected capacity change from 0 to 16 [ 1599.798266][T20207] erofs (device loop4): mounted with root inode @ nid 36. [ 1599.825485][T17383] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1599.834986][T17383] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.843620][T17383] usb 8-1: Product: syz [ 1599.848178][T17383] usb 8-1: Manufacturer: syz [ 1599.853013][T17383] usb 8-1: SerialNumber: syz [ 1599.895916][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 1599.895987][ T30] audit: type=1800 audit(1750335201.796:251): pid=20207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5134" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 1599.968995][T17383] usb 8-1: config 0 descriptor?? [ 1599.977367][T20197] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1599.985128][T20197] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1600.137894][T17383] usb 8-1: ucan: probing device on interface #0 [ 1600.381359][T17383] usb 8-1: ucan: device protocol version 327680 is not supported [ 1600.390244][T17383] usb 8-1: ucan: probe failed; try to update the device firmware [ 1601.268924][T12446] usb 8-1: USB disconnect, device number 27 [ 1601.398013][T20223] loop2: detected capacity change from 0 to 7 [ 1601.450280][T20223] Dev loop2: unable to read RDB block 7 [ 1601.456907][T20223] loop2: unable to read partition table [ 1601.498246][T20223] loop2: partition table beyond EOD, truncated [ 1601.504910][T20223] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1602.346538][T20229] syz_tun: entered allmulticast mode [ 1602.435397][T20228] syz_tun: left allmulticast mode [ 1602.659215][T20233] loop1: detected capacity change from 0 to 16 [ 1602.750320][T20233] erofs (device loop1): mounted with root inode @ nid 36. [ 1602.886134][ T30] audit: type=1800 audit(1750335204.786:252): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5148" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1603.444336][T20240] loop2: detected capacity change from 0 to 2048 [ 1603.583425][T20240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1603.726060][ T30] audit: type=1800 audit(1750335205.616:253): pid=20240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5149" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 1603.836283][T20240] loop2: detected capacity change from 2048 to 0 [ 1603.859664][ C1] I/O error, dev loop2, sector 1415 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 1603.869974][ C1] Buffer I/O error on dev loop2, logical block 1415, lost sync page write [ 1603.890883][T20247] UDF-fs: warning (device loop2): udf_update_inode: IO error syncing udf inode [00000587] [ 1604.185543][T13413] syz-executor: attempt to access beyond end of device [ 1604.185543][T13413] loop2: rw=0, sector=1437, nr_sectors = 1 limit=0 [ 1604.258750][T13413] syz-executor: attempt to access beyond end of device [ 1604.258750][T13413] loop2: rw=0, sector=1437, nr_sectors = 1 limit=0 [ 1604.542874][T13413] syz-executor: attempt to access beyond end of device [ 1604.542874][T13413] loop2: rw=2049, sector=128, nr_sectors = 1 limit=0 [ 1604.556940][T13413] Buffer I/O error on dev loop2, logical block 128, lost sync page write [ 1604.635954][T12446] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1604.855567][T12446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1604.867113][T12446] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1604.879016][T12446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1605.015426][T11417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.058018][T20263] loop4: detected capacity change from 0 to 16 [ 1605.095404][T12446] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1605.105535][T12446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.113944][T12446] usb 2-1: Product: syz [ 1605.118380][T12446] usb 2-1: Manufacturer: syz [ 1605.123092][T12446] usb 2-1: SerialNumber: syz [ 1605.162682][T20263] erofs (device loop4): mounted with root inode @ nid 36. [ 1605.239158][ T30] audit: type=1800 audit(1750335207.146:254): pid=20263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5162" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 1605.266851][T11417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.268858][T12446] usb 2-1: config 0 descriptor?? [ 1605.288685][T20252] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1605.327186][T20252] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1605.390788][T12446] usb 2-1: ucan: probing device on interface #0 [ 1605.517759][T11417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.623555][T12446] usb 2-1: ucan: device protocol version 327680 is not supported [ 1605.631886][T12446] usb 2-1: ucan: probe failed; try to update the device firmware [ 1605.770312][T11417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.239007][T13507] usb 2-1: USB disconnect, device number 92 [ 1606.416681][T11417] bridge_slave_1: left allmulticast mode [ 1606.422672][T11417] bridge_slave_1: left promiscuous mode [ 1606.430010][T11417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.503389][T11417] bridge_slave_0: left allmulticast mode [ 1606.509574][T11417] bridge_slave_0: left promiscuous mode [ 1606.516087][T11417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.623880][T11417] bond_slave_0: left promiscuous mode [ 1606.631324][T11417] bond_slave_1: left promiscuous mode [ 1607.121357][T11417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1607.205232][T11417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1607.251780][T11417] bond0 (unregistering): Released all slaves [ 1607.850372][T11417] hsr_slave_0: left promiscuous mode [ 1607.861078][T11417] hsr_slave_1: left promiscuous mode [ 1607.868869][T11417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.876686][T11417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.968423][T11417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.976457][T11417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.061769][T11417] veth1_macvtap: left promiscuous mode [ 1608.068571][T11417] veth0_macvtap: left promiscuous mode [ 1608.074612][T11417] veth1_vlan: left promiscuous mode [ 1608.080360][T11417] veth0_vlan: left promiscuous mode [ 1608.160319][T20274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5167'. [ 1608.443061][T20279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5167'. [ 1608.955485][T18941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1608.986522][T18941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1609.003966][T18941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1609.067613][T18941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1609.080312][T18941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1609.616243][T11417] team0 (unregistering): Port device team_slave_1 removed [ 1609.646968][T11417] team0 (unregistering): Port device team_slave_0 removed [ 1610.269865][T20302] syz_tun: entered allmulticast mode [ 1610.282223][T20298] syz_tun: left allmulticast mode [ 1611.079569][T20316] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1611.156252][T18941] Bluetooth: hci4: command tx timeout [ 1611.247496][T17383] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1611.489977][T17383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1611.501282][T17383] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1611.513947][T17383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1611.644915][T17383] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1611.654863][T17383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.663355][T17383] usb 5-1: Product: syz [ 1611.667826][T17383] usb 5-1: Manufacturer: syz [ 1611.672644][T17383] usb 5-1: SerialNumber: syz [ 1611.781728][T17383] usb 5-1: config 0 descriptor?? [ 1611.789702][T20311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1611.826813][T20311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1611.826965][T20287] chnl_net:caif_netlink_parms(): no params data found [ 1611.868670][T17383] usb 5-1: ucan: probing device on interface #0 [ 1612.156976][T17383] usb 5-1: ucan: device protocol version 327680 is not supported [ 1612.165945][T17383] usb 5-1: ucan: probe failed; try to update the device firmware [ 1613.193752][T17383] usb 5-1: USB disconnect, device number 109 [ 1613.238035][T18941] Bluetooth: hci4: command tx timeout [ 1613.458471][T20287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.466313][T20287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.474155][T20287] bridge_slave_0: entered allmulticast mode [ 1613.483685][T20287] bridge_slave_0: entered promiscuous mode [ 1613.531732][T20287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.539745][T20287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.547608][T20287] bridge_slave_1: entered allmulticast mode [ 1613.556935][T20287] bridge_slave_1: entered promiscuous mode [ 1613.938195][T20347] syz_tun: entered allmulticast mode [ 1613.951333][T20346] syz_tun: left allmulticast mode [ 1613.994462][T20287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.067779][T20287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.509108][T20287] team0: Port device team_slave_0 added [ 1614.575634][T20287] team0: Port device team_slave_1 added [ 1614.603269][T20354] loop4: detected capacity change from 0 to 128 [ 1614.674256][T20354] vfat: Bad value for 'gid' [ 1614.679328][T20354] vfat: Bad value for 'gid' [ 1614.983077][T20287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1614.991082][T20287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.017811][T20287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.166504][T20287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.173823][T20287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.200503][T20287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.317215][T18941] Bluetooth: hci4: command tx timeout [ 1615.416526][T20361] loop7: detected capacity change from 0 to 2048 [ 1615.673381][T20361] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1615.704145][T20287] hsr_slave_0: entered promiscuous mode [ 1615.713203][T20287] hsr_slave_1: entered promiscuous mode [ 1615.763880][T20364] loop4: detected capacity change from 0 to 1024 [ 1615.808576][T20364] EXT4-fs: Ignoring removed oldalloc option [ 1615.933816][T20364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1615.965089][T20361] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1616.193621][T15250] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.792485][T13621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.396464][T18941] Bluetooth: hci4: command tx timeout [ 1617.654837][T20287] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1617.808715][T20287] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1617.899102][T20287] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1617.937089][T20388] syz_tun: entered allmulticast mode [ 1617.987102][T20287] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1618.045572][T20387] syz_tun: left allmulticast mode [ 1618.277046][ T5856] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1618.527664][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1618.539042][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1618.551554][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1618.673016][ T5856] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1618.683378][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.691917][ T5856] usb 2-1: Product: syz [ 1618.696407][ T5856] usb 2-1: Manufacturer: syz [ 1618.701225][ T5856] usb 2-1: SerialNumber: syz [ 1618.716002][T20400] loop7: detected capacity change from 0 to 512 [ 1618.812658][ T5856] usb 2-1: config 0 descriptor?? [ 1618.827186][T20392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1618.835153][T20392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1618.948704][ T5856] usb 2-1: ucan: probing device on interface #0 [ 1619.238062][ T5856] usb 2-1: ucan: device protocol version 327680 is not supported [ 1619.246248][ T5856] usb 2-1: ucan: probe failed; try to update the device firmware [ 1619.327789][T17383] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1619.580456][T20406] loop4: detected capacity change from 0 to 2048 [ 1619.643188][T17383] usb 6-1: config 0 has no interfaces? [ 1619.724732][T20287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1619.748609][T17383] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1619.758117][T17383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.766697][T17383] usb 6-1: Product: syz [ 1619.771089][T17383] usb 6-1: Manufacturer: syz [ 1619.776024][T17383] usb 6-1: SerialNumber: syz [ 1619.800338][ T5856] usb 2-1: USB disconnect, device number 93 [ 1619.838019][T17383] usb 6-1: config 0 descriptor?? [ 1619.889314][T20287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1619.954827][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.962450][T11417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.026622][T20406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1620.086015][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.093661][T11417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1620.172675][ T30] audit: type=1800 audit(1750335222.046:255): pid=20406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5202" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 1621.172561][T17383] usb 6-1: USB disconnect, device number 62 [ 1622.687028][T20441] syz_tun: entered allmulticast mode [ 1622.720854][T20287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1622.771060][T20438] syz_tun: left allmulticast mode [ 1623.629839][T20455] loop1: detected capacity change from 0 to 512 [ 1623.857737][T20455] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1623.907716][T20455] EXT4-fs (loop1): mount failed [ 1624.676693][T17383] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1624.927744][T17383] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1624.939020][T17383] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1624.950968][T17383] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1625.048964][T17383] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1625.058324][T17383] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.067093][T17383] usb 8-1: Product: syz [ 1625.071397][T17383] usb 8-1: Manufacturer: syz [ 1625.077262][T17383] usb 8-1: SerialNumber: syz [ 1625.194796][T17383] usb 8-1: config 0 descriptor?? [ 1625.201716][T20468] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1625.220420][T20468] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1625.299187][T17383] usb 8-1: ucan: probing device on interface #0 [ 1625.572139][T17383] usb 8-1: ucan: device protocol version 327680 is not supported [ 1625.581393][T17383] usb 8-1: ucan: probe failed; try to update the device firmware [ 1625.787051][T20287] veth0_vlan: entered promiscuous mode [ 1625.888360][T20287] veth1_vlan: entered promiscuous mode [ 1626.152314][T20287] veth0_macvtap: entered promiscuous mode [ 1626.240471][T20287] veth1_macvtap: entered promiscuous mode [ 1626.476360][T20287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1626.540169][T20287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.677052][T20287] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.686298][T20287] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.695279][T20287] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.705051][T20287] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.705441][T19459] usb 8-1: USB disconnect, device number 28 [ 1627.147767][T17383] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1627.422474][T17383] usb 6-1: config 0 has no interfaces? [ 1627.438640][T17383] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1627.448088][T17383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.456492][T17383] usb 6-1: Product: syz [ 1627.460870][T17383] usb 6-1: Manufacturer: syz [ 1627.465811][T17383] usb 6-1: SerialNumber: syz [ 1627.589784][T17383] usb 6-1: config 0 descriptor?? [ 1628.434169][T20508] syz_tun: entered allmulticast mode [ 1628.497092][T20507] syz_tun: left allmulticast mode [ 1628.649276][T14065] usb 6-1: USB disconnect, device number 63 [ 1629.305540][T20519] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1629.444134][T20520] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1629.644927][T20522] loop4: detected capacity change from 0 to 1024 [ 1630.583192][T20527] loop5: detected capacity change from 0 to 2048 [ 1630.785892][T20527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1631.382040][T20527] netlink: 900 bytes leftover after parsing attributes in process `syz.5.5228'. [ 1631.469051][T20554] syz_tun: entered allmulticast mode [ 1631.507905][T20552] syz_tun: left allmulticast mode [ 1631.989182][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1631.996356][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1631.998197][T15630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1632.258853][T20570] syz_tun: entered allmulticast mode [ 1632.856818][T14065] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1632.866580][T20562] syz_tun: left allmulticast mode [ 1633.140111][T14065] usb 2-1: config 0 has no interfaces? [ 1633.187175][T14065] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1633.197175][T14065] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.205316][T14065] usb 2-1: Product: syz [ 1633.209787][T14065] usb 2-1: Manufacturer: syz [ 1633.214526][T14065] usb 2-1: SerialNumber: syz [ 1633.343985][T14065] usb 2-1: config 0 descriptor?? [ 1633.671314][T20569] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.875525][T14065] usb 2-1: USB disconnect, device number 94 [ 1634.033562][T11414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.041910][T11414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.387534][T15241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.395612][T15241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.319874][T20592] loop1: detected capacity change from 0 to 2048 [ 1635.412116][T20594] syz_tun: entered allmulticast mode [ 1635.420685][T20594] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1635.679726][T20592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1635.779304][T20592] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1635.869935][T20601] loop8: detected capacity change from 0 to 512 [ 1635.898964][T20592] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 1635.912158][T20592] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1635.912158][T20592] [ 1635.924634][T20592] EXT4-fs (loop1): Total free blocks count 0 [ 1635.931569][T20592] EXT4-fs (loop1): Free/Dirty block details [ 1635.937874][T20592] EXT4-fs (loop1): free_blocks=66060288 [ 1635.943650][T20592] EXT4-fs (loop1): dirty_blocks=32 [ 1635.949120][T20592] EXT4-fs (loop1): Block reservation details [ 1635.955319][T20592] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 1635.966834][T20601] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1636.256503][T20601] EXT4-fs (loop8): 1 truncate cleaned up [ 1636.264499][T20601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1636.568231][T11399] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1636.753787][ T30] audit: type=1326 audit(1750335238.626:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20607 comm="syz.4.5245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1636.777073][ T30] audit: type=1326 audit(1750335238.626:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20607 comm="syz.4.5245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1637.007113][ T30] audit: type=1326 audit(1750335238.736:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20607 comm="syz.4.5245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1637.032021][ T30] audit: type=1326 audit(1750335238.736:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20607 comm="syz.4.5245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1637.056262][ T30] audit: type=1326 audit(1750335238.736:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20607 comm="syz.4.5245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1637.080603][ T30] audit: type=1326 audit(1750335238.736:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20607 comm="syz.4.5245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1637.103061][ T30] audit: type=1326 audit(1750335238.736:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20607 comm="syz.4.5245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1637.125414][ T30] audit: type=1326 audit(1750335238.736:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20607 comm="syz.4.5245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1637.149348][ T30] audit: type=1326 audit(1750335238.736:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20607 comm="syz.4.5245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1637.173715][ T30] audit: type=1326 audit(1750335238.736:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20607 comm="syz.4.5245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 1637.284763][T20287] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1637.386077][T20287] EXT4-fs (loop8): Remounting filesystem read-only [ 1638.002404][T20287] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1638.030980][T11399] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.241067][T11399] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.397147][T11399] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.570546][T11399] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.726150][T20631] syz_tun: entered allmulticast mode [ 1639.109358][T11399] bridge_slave_1: left allmulticast mode [ 1639.115376][T11399] bridge_slave_1: left promiscuous mode [ 1639.122227][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.189039][T11399] bridge_slave_0: left allmulticast mode [ 1639.198473][T11399] bridge_slave_0: left promiscuous mode [ 1639.204992][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.726908][T11399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.745097][T11399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.766902][T11399] bond0 (unregistering): Released all slaves [ 1639.788773][T20621] syz_tun: left allmulticast mode [ 1640.321207][T11399] hsr_slave_0: left promiscuous mode [ 1640.352031][T11399] hsr_slave_1: left promiscuous mode [ 1640.360813][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1640.368825][T11399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.402194][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1640.410164][T11399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.464003][T11399] veth1_macvtap: left promiscuous mode [ 1640.470018][T11399] veth0_macvtap: left promiscuous mode [ 1640.476226][T11399] veth1_vlan: left promiscuous mode [ 1640.481780][T11399] veth0_vlan: left promiscuous mode [ 1641.346338][T11399] team0 (unregistering): Port device team_slave_1 removed [ 1641.473107][T11399] team0 (unregistering): Port device team_slave_0 removed [ 1641.730429][T20649] loop4: detected capacity change from 0 to 4096 [ 1641.798456][T20649] EXT4-fs: Ignoring removed i_version option [ 1641.804783][T20649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1642.065950][T20649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1642.117465][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1642.132298][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1642.159567][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1642.212992][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1642.229549][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1643.008770][T13621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.327798][T20675] syz_tun: entered allmulticast mode [ 1643.394802][T20672] syz_tun: left allmulticast mode [ 1644.372729][ T5801] Bluetooth: hci4: command tx timeout [ 1644.407291][T20660] chnl_net:caif_netlink_parms(): no params data found [ 1645.081290][T20696] loop4: detected capacity change from 0 to 256 [ 1645.131587][T20696] exfat: Invalid uid '0x00000000ffffffff' [ 1646.153574][T20660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.161851][T20660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.169737][T20660] bridge_slave_0: entered allmulticast mode [ 1646.178965][T20660] bridge_slave_0: entered promiscuous mode [ 1646.211716][T20711] syz_tun: entered allmulticast mode [ 1646.262904][T20708] loop1: detected capacity change from 0 to 2048 [ 1646.283459][T20660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.291119][T20660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.299018][T20660] bridge_slave_1: entered allmulticast mode [ 1646.308250][T20660] bridge_slave_1: entered promiscuous mode [ 1646.424278][T20708] loop1: p1 < > p3 [ 1646.436328][ T5801] Bluetooth: hci4: command tx timeout [ 1646.477617][T20708] loop1: p3 size 134217728 extends beyond EOD, truncated [ 1646.943120][T20660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.057540][T20660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.154223][T20725] syz_tun: entered allmulticast mode [ 1647.536160][T20660] team0: Port device team_slave_0 added [ 1647.635918][T20660] team0: Port device team_slave_1 added [ 1647.643938][T20730] loop1: detected capacity change from 0 to 1024 [ 1647.749919][T20730] EXT4-fs: Ignoring removed nobh option [ 1647.755997][T20730] EXT4-fs: Ignoring removed bh option [ 1647.838926][T20720] syz_tun: left allmulticast mode [ 1647.999108][T20730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.082818][T15255] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1648.141015][T20660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.149840][T20660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.177181][T20660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.340791][T15255] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.351418][T15255] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1648.368573][T20660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.375837][T20660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.402543][T20660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.535250][ T5801] Bluetooth: hci4: command tx timeout [ 1648.547237][T15255] usb 8-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1648.556709][T15255] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.564963][T15255] usb 8-1: Product: syz [ 1648.569528][T15255] usb 8-1: Manufacturer: syz [ 1648.574297][T15255] usb 8-1: SerialNumber: syz [ 1648.628368][T15255] usb 8-1: config 0 descriptor?? [ 1648.738063][T14353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.899239][T15255] usb 8-1: USB disconnect, device number 29 [ 1649.331064][T20660] hsr_slave_0: entered promiscuous mode [ 1649.342495][T20660] hsr_slave_1: entered promiscuous mode [ 1649.828947][T20750] loop5: detected capacity change from 0 to 256 [ 1649.905402][T20750] exfat: Invalid uid '0x00000000ffffffff' [ 1650.606874][ T5801] Bluetooth: hci4: command tx timeout [ 1650.888495][T20660] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1650.977556][T20660] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1651.091325][T20660] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1651.200865][T20660] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1652.262025][T20777] loop7: detected capacity change from 0 to 2048 [ 1652.399269][T20777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1652.412533][T20777] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1652.573526][T20660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1652.614275][T20777] fs-verity: sha512 using implementation "sha512-generic" [ 1652.826141][T20660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1652.971144][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.978914][T11417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1653.139135][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.146730][T11417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1653.492525][T15250] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.193064][T20799] loop4: detected capacity change from 0 to 1024 [ 1654.336289][T20807] syz_tun: entered allmulticast mode [ 1654.357923][T20799] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1654.365214][T20799] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1654.631563][T20799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1655.138403][T13621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1655.299664][T20660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1655.536650][T20819] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1656.521715][T20840] loop5: detected capacity change from 0 to 128 [ 1656.662637][T20840] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1656.784455][T20840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1656.998661][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1656.998737][ T30] audit: type=1800 audit(1750335258.886:273): pid=20840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5303" name="file1" dev="loop5" ino=104 res=0 errno=0 [ 1657.193456][T20847] loop7: detected capacity change from 0 to 1024 [ 1657.245925][T20846] loop1: detected capacity change from 0 to 2048 [ 1657.351416][T20846] loop1: p1 < > p3 [ 1657.397217][T20846] loop1: p3 size 134217728 extends beyond EOD, truncated [ 1657.929867][T13599] udevd[13599]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1657.937353][T13667] udevd[13667]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1658.288922][T20660] veth0_vlan: entered promiscuous mode [ 1658.395458][T20660] veth1_vlan: entered promiscuous mode [ 1658.746419][T20660] veth0_macvtap: entered promiscuous mode [ 1658.824649][T20866] loop5: detected capacity change from 0 to 512 [ 1658.874516][T20660] veth1_macvtap: entered promiscuous mode [ 1659.069854][T20866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1659.084452][T20866] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1659.109614][T20660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1659.233367][T20660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1659.324757][T20660] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.334707][T20660] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.335151][T20869] loop4: detected capacity change from 0 to 2048 [ 1659.343893][T20660] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.359693][T20660] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.678010][T20869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1659.893074][T15630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.271868][T13621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.266275][T15255] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1662.490854][T15255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1662.502419][T15255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1662.513040][T15255] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1662.522523][T15255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.702983][T15255] usb 5-1: config 0 descriptor?? [ 1663.051359][T20924] loop7: detected capacity change from 0 to 8 [ 1663.292207][T15255] hid-generic 0003:04F3:0754.0016: collection stack underflow [ 1663.300532][T15255] hid-generic 0003:04F3:0754.0016: item 0 2 0 12 parsing failed [ 1663.420535][T15255] hid-generic 0003:04F3:0754.0016: probe with driver hid-generic failed with error -22 [ 1663.440719][T20924] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1663.449900][T20924] SQUASHFS error: Failed to read block 0x1c0: -5 [ 1663.457403][T20924] SQUASHFS error: Unable to read metadata cache entry [1be] [ 1665.397195][T15255] usb 5-1: USB disconnect, device number 110 [ 1666.415375][T20943] loop4: detected capacity change from 0 to 1764 [ 1666.908497][T20950] loop1: detected capacity change from 0 to 1024 [ 1667.568745][T20958] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1668.091717][T11387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.099896][T11387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.238411][T15255] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1668.338378][T20736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.346822][T20736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.416206][T15255] usb 5-1: Using ep0 maxpacket: 16 [ 1668.463787][T15255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.475554][T15255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.486421][T15255] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1668.499801][T15255] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1668.509236][T15255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.714314][T15255] usb 5-1: config 0 descriptor?? [ 1669.191574][T15255] usbhid 5-1:0.0: can't add hid device: -71 [ 1669.199230][T15255] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1669.272379][T15255] usb 5-1: USB disconnect, device number 111 [ 1670.034653][T20986] loop9: detected capacity change from 0 to 1024 [ 1670.523199][T20990] loop4: detected capacity change from 0 to 512 [ 1670.992772][T20990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1671.010208][T20990] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1671.675103][T13621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1671.730346][T21005] Illegal XDP return value 4294967274 on prog (id 283) dev syz_tun, expect packet loss! [ 1671.818241][T21007] syz_tun: entered allmulticast mode [ 1671.878628][T21006] syz_tun: left allmulticast mode [ 1672.124653][T21010] xt_TCPMSS: Only works on TCP SYN packets [ 1672.485980][ T9261] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1672.605905][T21013] loop4: detected capacity change from 0 to 1024 [ 1672.651038][ T9261] usb 6-1: device descriptor read/64, error -71 [ 1672.910302][ T9261] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1673.094636][ T9261] usb 6-1: device descriptor read/64, error -71 [ 1673.210790][ T9261] usb usb6-port1: attempt power cycle [ 1673.493160][T21022] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1673.619585][ T9261] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1673.678243][ T9261] usb 6-1: device descriptor read/8, error -71 [ 1673.937354][ T9261] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1674.014905][ T9261] usb 6-1: device descriptor read/8, error -71 [ 1674.070302][T21027] loop4: detected capacity change from 0 to 2048 [ 1674.106670][T15255] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1674.131720][ T9261] usb usb6-port1: unable to enumerate USB device [ 1674.161702][T21027] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1674.174968][T21030] loop7: detected capacity change from 0 to 1024 [ 1674.246500][T21030] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1674.272336][T21027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1674.283760][T21030] EXT4-fs (loop7): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1674.316884][T15255] usb 10-1: Using ep0 maxpacket: 16 [ 1674.352008][T15255] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.363764][T15255] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.374154][T15255] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1674.387798][T15255] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1674.397366][T15255] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.490070][T15255] usb 10-1: config 0 descriptor?? [ 1674.513256][T21030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1674.957594][T15255] usbhid 10-1:0.0: can't add hid device: -71 [ 1674.964438][T15255] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1675.051017][T15255] usb 10-1: USB disconnect, device number 2 [ 1675.647071][T21030] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 1676.115158][T15250] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1677.676237][T15255] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1677.800415][T21074] xt_TCPMSS: Only works on TCP SYN packets [ 1677.817989][T21071] loop4: detected capacity change from 0 to 1764 [ 1677.901877][T21071] iso9660: Unknown parameter 'àò:ûAmÚÚŸ ¹½¬ù' [ 1677.912510][T15255] usb 8-1: Using ep0 maxpacket: 32 [ 1677.944989][T15255] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1678.015791][T15255] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1678.025324][T15255] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.034399][T15255] usb 8-1: Product: syz [ 1678.040950][T15255] usb 8-1: Manufacturer: syz [ 1678.046631][T15255] usb 8-1: SerialNumber: syz [ 1678.135911][T19459] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1678.179462][T15255] usb 8-1: config 0 descriptor?? [ 1678.190099][T21067] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1678.270947][T15255] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input65 [ 1678.348019][T19459] usb 10-1: device descriptor read/64, error -71 [ 1678.626701][T19459] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1678.663135][T19321] usb 8-1: USB disconnect, device number 30 [ 1678.663188][ C0] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1678.812023][T19459] usb 10-1: device descriptor read/64, error -71 [ 1678.941848][T19459] usb usb10-port1: attempt power cycle [ 1679.239162][T21088] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1679.338076][T19459] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1679.372321][T19459] usb 10-1: device descriptor read/8, error -71 [ 1679.648717][T19459] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1679.717290][T15255] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1679.730938][T19459] usb 10-1: device descriptor read/8, error -71 [ 1679.866954][T19459] usb usb10-port1: unable to enumerate USB device [ 1679.916862][T15255] usb 6-1: Using ep0 maxpacket: 16 [ 1679.939778][T15255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.952657][T15255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.963222][T15255] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1679.976977][T15255] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1679.986763][T15255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.000700][T15255] usb 6-1: config 0 descriptor?? [ 1680.457332][T15255] usbhid 6-1:0.0: can't add hid device: -71 [ 1680.464872][T15255] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1680.540379][T15255] usb 6-1: USB disconnect, device number 68 [ 1681.705081][T21107] loop5: detected capacity change from 0 to 512 [ 1681.939336][T21107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1681.953639][T21107] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1682.659804][T15630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1682.821567][T21116] loop9: detected capacity change from 0 to 4096 [ 1682.875062][T21116] EXT4-fs: Ignoring removed mblk_io_submit option [ 1683.037920][T21116] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1683.189205][T21125] loop4: detected capacity change from 0 to 7 [ 1683.224592][T21125] Dev loop4: unable to read RDB block 7 [ 1683.231644][T21125] loop4: unable to read partition table [ 1683.301428][T21125] loop4: partition table beyond EOD, truncated [ 1683.308632][T21125] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1683.593738][T20660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1684.772667][T21139] xt_TCPMSS: Only works on TCP SYN packets [ 1685.114827][T15255] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1685.130694][T21144] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1685.327284][T15255] usb 5-1: device descriptor read/64, error -71 [ 1685.367984][T18941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1685.409467][T18941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1685.425218][T18941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1685.449692][T18941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1685.477015][T18941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1685.602053][T15255] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 1685.736276][T15255] usb 5-1: device descriptor read/64, error -71 [ 1685.827013][T19321] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1685.847393][T15255] usb usb5-port1: attempt power cycle [ 1686.025947][T19321] usb 10-1: Using ep0 maxpacket: 16 [ 1686.038623][T19321] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.050121][T19321] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.062134][T19321] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1686.075505][T19321] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1686.085071][T19321] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.286056][T15255] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 1686.337238][T15255] usb 5-1: device descriptor read/8, error -71 [ 1686.382991][T19321] usb 10-1: config 0 descriptor?? [ 1686.550466][T21160] loop5: detected capacity change from 0 to 1024 [ 1686.595038][T21160] EXT4-fs: Ignoring removed oldalloc option [ 1686.602843][T21160] EXT4-fs: Ignoring removed bh option [ 1686.635897][T15255] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1686.683575][T15255] usb 5-1: device descriptor read/8, error -71 [ 1686.764535][T21160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1686.807224][T15255] usb usb5-port1: unable to enumerate USB device [ 1686.962733][T19321] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0017/input/input66 [ 1687.136040][T21148] chnl_net:caif_netlink_parms(): no params data found [ 1687.223958][T19321] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1687.557049][T18941] Bluetooth: hci5: command tx timeout [ 1687.716186][T19321] usb 10-1: USB disconnect, device number 7 [ 1688.177731][T21172] loop7: detected capacity change from 0 to 1764 [ 1688.221685][T21168] fido_id[21168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1688.266938][T21172] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000000' [ 1688.528812][T11414] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.636866][T15630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1688.750083][T11414] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.994196][T11414] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.635888][T18941] Bluetooth: hci5: command tx timeout [ 1689.989081][T21148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.996743][T21148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.004560][T21148] bridge_slave_0: entered allmulticast mode [ 1690.014120][T21148] bridge_slave_0: entered promiscuous mode [ 1690.230529][T21148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.238280][T21148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.246380][T21148] bridge_slave_1: entered allmulticast mode [ 1690.255591][T21148] bridge_slave_1: entered promiscuous mode [ 1690.296369][T11414] bridge_slave_1: left allmulticast mode [ 1690.302289][T11414] bridge_slave_1: left promiscuous mode [ 1690.309080][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.366562][T11414] bridge_slave_0: left allmulticast mode [ 1690.372472][T11414] bridge_slave_0: left promiscuous mode [ 1690.379151][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.018033][T11414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.050343][T11414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.071747][T11414] bond0 (unregistering): Released all slaves [ 1691.408529][T20972] syz_tun (unregistering): left allmulticast mode [ 1691.517291][T21148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1691.618103][T21148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.732759][T18941] Bluetooth: hci5: command tx timeout [ 1691.970322][T21193] loop7: detected capacity change from 0 to 256 [ 1692.107410][T21148] team0: Port device team_slave_0 added [ 1692.175387][T11414] hsr_slave_0: left promiscuous mode [ 1692.231563][T11414] hsr_slave_1: left promiscuous mode [ 1692.242015][T11414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1692.250051][T11414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.265415][T21193] loop7: detected capacity change from 0 to 512 [ 1692.321215][T11414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1692.329663][T11414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1692.361463][T21193] ext2: Unknown parameter 'smackfsroot' [ 1692.391791][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1692.407108][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1692.419116][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1692.467861][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1692.480888][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1692.495189][T11414] veth1_macvtap: left promiscuous mode [ 1692.502947][T11414] veth0_macvtap: left promiscuous mode [ 1692.509122][T11414] veth1_vlan: left promiscuous mode [ 1692.514671][T11414] veth0_vlan: left promiscuous mode [ 1692.654269][T21193] loop7: detected capacity change from 0 to 512 [ 1692.785554][T21200] loop4: detected capacity change from 0 to 1024 [ 1692.810530][T21204] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1693.013328][T21193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1693.026669][T21193] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1693.298142][T11414] team0 (unregistering): Port device team_slave_1 removed [ 1693.316111][T19321] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1693.410172][T11414] team0 (unregistering): Port device team_slave_0 removed [ 1693.445858][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1693.452648][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1693.486952][T11417] hfsplus: b-tree write err: -5, ino 4 [ 1693.556107][T19321] usb 10-1: Using ep0 maxpacket: 16 [ 1693.573484][T19321] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.585015][T19321] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.596066][T19321] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1693.610210][T19321] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1693.619735][T19321] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.770899][T19321] usb 10-1: config 0 descriptor?? [ 1693.814463][ T5801] Bluetooth: hci5: command tx timeout [ 1693.906641][T21148] team0: Port device team_slave_1 added [ 1694.040696][T15250] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.200071][T21213] xt_TCPMSS: Only works on TCP SYN packets [ 1694.370828][T19321] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0018/input/input67 [ 1694.497346][T21212] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1694.587873][T19321] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1694.639540][T21148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.646972][T21148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.666972][T21212] usb 5-1: device descriptor read/64, error -71 [ 1694.673521][T21148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.757935][ T5801] Bluetooth: hci0: command tx timeout [ 1694.818012][T21148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.825211][T21148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.841777][T19321] usb 10-1: USB disconnect, device number 8 [ 1694.852565][T21148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.985390][T21212] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1695.030619][T11414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.058469][T21217] fido_id[21217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1695.174044][T11414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.176940][T21212] usb 5-1: device descriptor read/64, error -71 [ 1695.315279][T21212] usb usb5-port1: attempt power cycle [ 1695.476343][T11414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.716177][T21212] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1695.772394][T21212] usb 5-1: device descriptor read/8, error -71 [ 1695.858313][T21148] hsr_slave_0: entered promiscuous mode [ 1695.868274][T21148] hsr_slave_1: entered promiscuous mode [ 1695.876951][T21148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1695.884750][T21148] Cannot create hsr debugfs directory [ 1696.036385][T21226] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1696.066398][T21212] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 1696.126571][T21212] usb 5-1: device descriptor read/8, error -71 [ 1696.270590][T21212] usb usb5-port1: unable to enumerate USB device [ 1696.576297][T11414] bridge_slave_1: left allmulticast mode [ 1696.582395][T11414] bridge_slave_1: left promiscuous mode [ 1696.591076][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.648621][T11414] bridge_slave_0: left allmulticast mode [ 1696.654539][T11414] bridge_slave_0: left promiscuous mode [ 1696.661716][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.836882][ T5801] Bluetooth: hci0: command tx timeout [ 1697.130503][T21239] loop9: detected capacity change from 0 to 512 [ 1697.187700][T21239] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1697.320644][T11414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.342794][T21239] EXT4-fs (loop9): 1 truncate cleaned up [ 1697.351638][T21239] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1697.457627][T11414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1697.515310][T11414] bond0 (unregistering): Released all slaves [ 1697.956702][T21197] chnl_net:caif_netlink_parms(): no params data found [ 1698.151121][T21251] loop7: detected capacity change from 0 to 1024 [ 1698.353676][T21251] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1698.367973][T21251] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1698.507983][T21251] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1698.546708][T21251] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1698.560162][T21251] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1698.560162][T21251] [ 1698.571256][T21251] EXT4-fs (loop7): Total free blocks count 0 [ 1698.578512][T21251] EXT4-fs (loop7): Free/Dirty block details [ 1698.584732][T21251] EXT4-fs (loop7): free_blocks=4293918720 [ 1698.590791][T21251] EXT4-fs (loop7): dirty_blocks=80 [ 1698.596263][T21251] EXT4-fs (loop7): Block reservation details [ 1698.602710][T21251] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 1698.848206][T11414] hsr_slave_0: left promiscuous mode [ 1698.862988][T11414] hsr_slave_1: left promiscuous mode [ 1698.870952][T11414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1698.879096][T11414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.896296][T11414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1698.903332][T15250] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1698.903943][T11414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.928131][ T5801] Bluetooth: hci0: command tx timeout [ 1698.985596][T11414] veth1_macvtap: left promiscuous mode [ 1698.991735][T11414] veth0_macvtap: left promiscuous mode [ 1698.998206][T11414] veth1_vlan: left promiscuous mode [ 1699.003775][T11414] veth0_vlan: left promiscuous mode [ 1699.486336][T21264] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1699.561539][T11414] team0 (unregistering): Port device team_slave_1 removed [ 1699.673005][T11414] team0 (unregistering): Port device team_slave_0 removed [ 1700.316048][T15255] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1700.496073][T15255] usb 8-1: Using ep0 maxpacket: 16 [ 1700.521309][T15255] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.532857][T15255] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.543003][T15255] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1700.556371][T15255] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1700.565765][T15255] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.568846][T21275] loop4: detected capacity change from 0 to 16 [ 1700.584955][T15255] usb 8-1: config 0 descriptor?? [ 1700.651281][T21275] erofs (device loop4): mounted with root inode @ nid 36. [ 1701.006316][ T5801] Bluetooth: hci0: command tx timeout [ 1701.109207][T15255] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0019/input/input68 [ 1701.139043][T21197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.146797][T21197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.157813][T21197] bridge_slave_0: entered allmulticast mode [ 1701.166999][T21197] bridge_slave_0: entered promiscuous mode [ 1701.352055][T15255] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1701.459580][T15255] usb 8-1: USB disconnect, device number 31 [ 1701.461562][T21197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.473597][T21197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.481543][T21197] bridge_slave_1: entered allmulticast mode [ 1701.490799][T21197] bridge_slave_1: entered promiscuous mode [ 1701.927813][T20660] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1702.092442][T21283] loop4: detected capacity change from 0 to 1764 [ 1702.153827][T21197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.246981][T21282] fido_id[21282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1702.251738][T21197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.701225][T21148] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1702.729566][T21291] xt_TCPMSS: Only works on TCP SYN packets [ 1702.887600][T21148] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1702.953485][T21197] team0: Port device team_slave_0 added [ 1702.991478][T21148] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1703.062131][T21197] team0: Port device team_slave_1 added [ 1703.080900][T19321] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 1703.112836][T21148] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1703.266125][T19321] usb 8-1: device descriptor read/64, error -71 [ 1703.287637][T21197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.294933][T21197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.322949][T21197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.460297][T21197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.468402][T21197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.495007][T21197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.528223][T19321] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 1703.686455][T19321] usb 8-1: device descriptor read/64, error -71 [ 1703.808664][T19321] usb usb8-port1: attempt power cycle [ 1703.903097][ T5801] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 1704.002242][T21197] hsr_slave_0: entered promiscuous mode [ 1704.012017][T21197] hsr_slave_1: entered promiscuous mode [ 1704.020728][T21197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1704.028593][T21197] Cannot create hsr debugfs directory [ 1704.196990][T19321] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 1704.268063][T19321] usb 8-1: device descriptor read/8, error -71 [ 1704.279499][T21148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.511081][T19321] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 1704.601012][T19321] usb 8-1: device descriptor read/8, error -71 [ 1704.607660][T21148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.702521][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.710165][T14452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.768262][T19321] usb usb8-port1: unable to enumerate USB device [ 1704.868014][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.875839][T14452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1705.213619][T21314] loop9: detected capacity change from 0 to 1024 [ 1705.452526][T21316] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 1705.566435][T21314] ===================================================== [ 1705.573852][T21314] BUG: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 1705.582805][T21314] hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 1705.588857][T21314] __hfsplus_brec_find+0x274/0x840 [ 1705.594256][T21314] hfsplus_brec_find+0x4df/0x9f0 [ 1705.599715][T21314] hfsplus_delete_all_attrs+0x255/0x420 [ 1705.605464][T21314] hfsplus_delete_cat+0x1302/0x13d0 [ 1705.611122][T21314] hfsplus_unlink+0x526/0xd70 [ 1705.616310][T21314] vfs_unlink+0x616/0xab0 [ 1705.620857][T21314] do_unlinkat+0x6e6/0xe50 [ 1705.625482][T21314] __ia32_sys_unlinkat+0x1a5/0x210 [ 1705.630997][T21314] ia32_sys_call+0x3d22/0x42c0 [ 1705.636107][T21314] __do_fast_syscall_32+0xb0/0x150 [ 1705.641415][T21314] do_fast_syscall_32+0x38/0x80 [ 1705.646594][T21314] do_SYSENTER_32+0x1f/0x30 [ 1705.651289][T21314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1705.660247][T21314] [ 1705.662685][T21314] Uninit was created at: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1705.667863][T21314] __kmalloc_noprof+0x95f/0x1310 [ 1705.673000][T21314] hfsplus_find_init+0x90/0x1d0 [ 1705.678252][T21314] hfsplus_delete_all_attrs+0xc0/0x420 [ 1705.683898][T21314] hfsplus_delete_cat+0x1302/0x13d0 [ 1705.689510][T21314] hfsplus_unlink+0x526/0xd70 [ 1705.694389][T21314] vfs_unlink+0x616/0xab0 [ 1705.700050][T21314] do_unlinkat+0x6e6/0xe50 [ 1705.704706][T21314] __ia32_sys_unlinkat+0x1a5/0x210 [ 1705.710277][T21314] ia32_sys_call+0x3d22/0x42c0 [ 1705.715207][T21314] __do_fast_syscall_32+0xb0/0x150 [ 1705.720783][T21314] do_fast_syscall_32+0x38/0x80 [ 1705.725926][T21314] do_SYSENTER_32+0x1f/0x30 [ 1705.730613][T21314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1705.737449][T21314] [ 1705.739898][T21314] CPU: 1 UID: 0 PID: 21314 Comm: syz.9.5418 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(undef) [ 1705.752402][T21314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1705.765218][T21314] ===================================================== [ 1705.773023][T21314] Disabling lock debugging due to kernel taint [ 1705.779624][T21314] Kernel panic - not syncing: kmsan.panic set ... [ 1705.786205][T21314] CPU: 1 UID: 0 PID: 21314 Comm: syz.9.5418 Tainted: G B 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(undef) [ 1705.800152][T21314] Tainted: [B]=BAD_PAGE [ 1705.804437][T21314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1705.814660][T21314] Call Trace: [ 1705.818064][T21314] [ 1705.821112][T21314] __dump_stack+0x26/0x30 [ 1705.825643][T21314] dump_stack_lvl+0x53/0x270 [ 1705.830438][T21314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1705.836485][T21314] dump_stack+0x1e/0x25 [ 1705.840828][T21314] panic+0x4bd/0xd50 [ 1705.844977][T21314] kmsan_report+0x31c/0x320 [ 1705.849704][T21314] ? __msan_warning+0x1b/0x30 [ 1705.854576][T21314] ? hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 1705.860523][T21314] ? __hfsplus_brec_find+0x274/0x840 [ 1705.866033][T21314] ? hfsplus_brec_find+0x4df/0x9f0 [ 1705.871388][T21314] ? hfsplus_delete_all_attrs+0x255/0x420 [ 1705.877292][T21314] ? hfsplus_delete_cat+0x1302/0x13d0 [ 1705.882868][T21314] ? hfsplus_unlink+0x526/0xd70 [ 1705.887921][T21314] ? vfs_unlink+0x616/0xab0 [ 1705.892635][T21314] ? do_unlinkat+0x6e6/0xe50 [ 1705.897434][T21314] ? __ia32_sys_unlinkat+0x1a5/0x210 [ 1705.902947][T21314] ? ia32_sys_call+0x3d22/0x42c0 [ 1705.908062][T21314] ? __do_fast_syscall_32+0xb0/0x150 [ 1705.913543][T21314] ? do_fast_syscall_32+0x38/0x80 [ 1705.918757][T21314] ? do_SYSENTER_32+0x1f/0x30 [ 1705.923616][T21314] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1705.930336][T21314] ? kmsan_get_metadata+0xfb/0x160 [ 1705.935670][T21314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1705.941705][T21314] ? kmsan_get_metadata+0xfb/0x160 [ 1705.947034][T21314] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1705.953506][T21314] ? kmsan_get_metadata+0xfb/0x160 [ 1705.958836][T21314] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1705.965299][T21314] ? kmsan_get_metadata+0xfb/0x160 [ 1705.970619][T21314] __msan_warning+0x1b/0x30 [ 1705.975306][T21314] hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 1705.981083][T21314] __hfsplus_brec_find+0x274/0x840 [ 1705.986402][T21314] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 1705.992706][T21314] hfsplus_brec_find+0x4df/0x9f0 [ 1705.997846][T21314] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 1706.004162][T21314] hfsplus_delete_all_attrs+0x255/0x420 [ 1706.009897][T21314] hfsplus_delete_cat+0x1302/0x13d0 [ 1706.015334][T21314] hfsplus_unlink+0x526/0xd70 [ 1706.020207][T21314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1706.026225][T21314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1706.032235][T21314] ? __pfx_hfsplus_unlink+0x10/0x10 [ 1706.037616][T21314] vfs_unlink+0x616/0xab0 [ 1706.042154][T21314] do_unlinkat+0x6e6/0xe50 [ 1706.046790][T21314] __ia32_sys_unlinkat+0x1a5/0x210 [ 1706.052110][T21314] ia32_sys_call+0x3d22/0x42c0 [ 1706.057026][T21314] __do_fast_syscall_32+0xb0/0x150 [ 1706.062317][T21314] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1706.068198][T21314] do_fast_syscall_32+0x38/0x80 [ 1706.073210][T21314] do_SYSENTER_32+0x1f/0x30 [ 1706.077867][T21314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1706.084386][T21314] RIP: 0023:0xf7f45539 [ 1706.088591][T21314] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1706.108400][T21314] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 000000000000012d [ 1706.116993][T21314] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 1706.125122][T21314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1706.133251][T21314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1706.141355][T21314] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1706.149456][T21314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1706.157585][T21314] [ 1706.160998][T21314] Kernel Offset: disabled [ 1706.165396][T21314] Rebooting in 86400 seconds..