last executing test programs: 11.619177117s ago: executing program 4 (id=1386): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x153) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r2 = shmget$private(0x0, 0xc00000, 0x8, &(0x7f0000000000/0xc00000)=nil) r3 = shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f000035f000/0x4000)=nil) shmat(0x0, &(0x7f000040d000/0x1000)=nil, 0x8fa1e93eb21569a9) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000080)) mlockall(0x6) mmap$binder(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) shmat(0x0, &(0x7f000024d000/0x4000)=nil, 0x7000) shmat(r2, &(0x7f00007b8000/0x1000)=nil, 0x6000) mlockall(0x0) shmctl$SHM_LOCK(r1, 0xb) shmdt(r3) shmat(0x0, &(0x7f0000658000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f00003b7000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000a10000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/132) mlockall(0x0) shmat(0x0, &(0x7f000031d000/0x1000)=nil, 0x0) mlockall(0x0) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000126000/0x1000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) 10.940598376s ago: executing program 2 (id=1389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @local}]}, 0x30}}, 0x0) 10.859840382s ago: executing program 1 (id=1391): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 10.32905929s ago: executing program 2 (id=1392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x1f0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, r4}}, {0x0, 0x0, 0x8, 0x0, 'group_id'}}, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4}}, {0x0, 0x0, 0x1, 0x0, '.'}}, {{0x0, 0x0, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6, 0x0, ',/&\\&-'}}]}, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) faccessat(0xffffffffffffffff, 0x0, 0x0) 10.162141214s ago: executing program 1 (id=1393): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 9.627834117s ago: executing program 1 (id=1396): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) bind$inet(r1, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ppoll(&(0x7f00000000c0)=[{r2}, {r3, 0x1001}], 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000091000000000000000000008500000007000000950000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x90) getsockname(r0, &(0x7f0000000340)=@tipc, &(0x7f00000001c0)=0x80) close_range(r0, 0xffffffffffffffff, 0x0) 9.10002656s ago: executing program 4 (id=1398): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = io_uring_setup(0x336b, &(0x7f00000000c0)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0xc74, 0x2c, 0x0, 0x0, 0x0, {}, [@f_tcindex={{0xc}, {0xc44, 0x2, [@TCA_TCINDEX_ACT={0xc40, 0x7, [@m_police={0xc3c, 0x0, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xc74}}, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$security_ima(0x0, 0x0, 0x0, 0x10, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) close_range(r1, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) 8.992139181s ago: executing program 0 (id=1399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100080001220300090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x90000, 0x519600) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001000011400000300007a000000009700", @ANYRES32=r3, @ANYBLOB='*\''], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0xf7030000, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x20803}}, 0x20}, 0x1, 0xf303000000000000}, 0x0) r5 = epoll_create1(0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xfff, 0x1000000, 0x5, 0xe4a, r1, 0xfff, '\x00', r3, r6, 0x5, 0x4, 0x5, 0x5}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='\x00', 0x2a8884a, 0x0, 0x1, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = dup2(r8, r8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, 0x0, 0x0) bind$inet6(r10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000abd900000000b71181a10f0261000000"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.848155716s ago: executing program 2 (id=1400): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 8.788230766s ago: executing program 3 (id=1401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200e0"], 0x3c}, 0x1, 0x2}, 0x0) 8.713500348s ago: executing program 1 (id=1402): syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x1, 0x218, &(0x7f0000000b00)="$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") prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000000000010de2842110000000000010902240001000000000904000001030000000921000000012205000905810300000000004d98ab"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 7.639063149s ago: executing program 4 (id=1403): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000140), 0x0, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7.581653125s ago: executing program 3 (id=1404): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0', [], 0xa, "b0"}, 0xc) sendfile(r0, r1, &(0x7f0000000240)=0x9, 0x8001) 7.378543356s ago: executing program 2 (id=1405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x13, 0xa10, &(0x7f00000001c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6.558462962s ago: executing program 3 (id=1406): syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5, 0x9d, 0x32, 0x40, 0x5da, 0x80ac, 0x31b5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x72, 0x51, 0x25, 0x0, [], [{{0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xd}}, {{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) 6.557367425s ago: executing program 4 (id=1407): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000100)={0x0, "743fedd3add15c65712ea4c5a112f60f8377ba5089b34f08204569381985d16e9cfd3974fb09fa9fa4ff42a688e0302b715f37ed8ab4cc1e5f75db3bb5cfb510"}) write$UHID_DESTROY(r0, &(0x7f0000000040)={0xa}, 0x4) 5.856523336s ago: executing program 0 (id=1408): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000f0000000000003490f82bf77b2a82a671c1209e6e873b9a19135d607149c68d0daa96906e4da3c227a9acb2c3375c46c0ba56dc4f8d9d38b589d9186011473191ed5f2a8ed07eeacc55e3f2ab18e97b0ec7bf5ba59d120dc6aa8139383d1a56ae44e6f30032482a4f1160b92532ba84de32848e8944e29e7ff15ad8901a8d04"], 0x0, 0x26}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0cb97907081175f37538e486dd"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0xfdef) 5.521532256s ago: executing program 1 (id=1409): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x153) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r2 = shmget$private(0x0, 0xc00000, 0x8, &(0x7f0000000000/0xc00000)=nil) r3 = shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f000035f000/0x4000)=nil) shmat(0x0, &(0x7f000040d000/0x1000)=nil, 0x8fa1e93eb21569a9) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000080)) mlockall(0x6) mmap$binder(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) shmat(0x0, &(0x7f000024d000/0x4000)=nil, 0x7000) shmat(r2, &(0x7f00007b8000/0x1000)=nil, 0x6000) mlockall(0x0) shmctl$SHM_LOCK(r1, 0xb) shmdt(r3) shmat(0x0, &(0x7f0000658000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f00003b7000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000a10000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/132) mlockall(0x0) shmat(0x0, &(0x7f000031d000/0x1000)=nil, 0x0) mlockall(0x0) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000126000/0x1000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) 5.210929546s ago: executing program 2 (id=1410): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[], 0x0, 0x1c4, &(0x7f0000000440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800001000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x11, 0x693, &(0x7f0000000880)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcggXOIEQEhJSpHKGW8XN4lQJiUtPaQ8MmtlZe+3u2ptXO/TziWaf55ln5pnf/OZlXyJrAnxuXTiR9t10cuHEa7eq9sadhZWNOwvXevUkk0laSbtbpLieFB8k59Od8oVqZjNcMWw7v14+e/HDjzc+6rba2RqveukMD7A9yl6sN1Nmk4w15UPYNt4bDzbe5Fa12MxMlbDjvcTBfhtPUm7z46NbPYOUY32Nodc78PQouu+bfbrX/0xyKMlU7w1tvdvZevIR7um+7kXrjy8OAAAAODAO37ud3Mr0fscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5Pm+f9FM7V69dkUvef/T/Q9Y39in8MdbvfIpnqVu60nEQwAAAAAAAAAPF5fupffXSzL6V67LOr/83+5bhypX5/J27mZpazmZG5lMWtZy2rmk8z0DTRxa3FtbXW+t+anZVkOWfP0wDVPjxhw51HsNQAAAAAAAAD83zjXlD/LhUzvcywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBNkYx1i3o60qvPpNVOMpVkolpuPflHr/40u7vfAQAAAMATcPhe7uVWpnvtsqi/8x+tv/dP5e1cz1qWs5aVLOVS/VtA91t/a+POwsrGnYVr1fTZcb/9n636H6f3DKMeMd3fHgZv+Vi9RCeXs1zPOZk38lZWcimtes3KsV48g+N6r4qpONdVlqMl6FJTVnv+q6Y8GGbqjIxvZmSuia3KxrO7Z6L/6DzAlubT2vzl58h95Pzcrlsp/ts7Jod6c5Jnvr93zsfva2ceys5MnO47+47unonkK3/6/Y+urFy/eqVYP3FwTqP7MPmvratmZyYW+jLx4siZuHzz6czETq28sFm/kO/lhzmR2bye1SznJ1nMWpYym+/WtcXmfK5eZ3bP1Pltrdf3imKiOS5jO2L68uFuuVtML9frTmc5P8hbuZSlvFr/O535fCNnciZn+47wCyNc9a0BV/2fhwd//KtNpZPkl015MFR5fbYvr/333Jm6r39OK+Vkd73nHtm9cVP7i02lOhI/b8qDYTMTU9l8l+hF93wvA+MDM/Gb+rZyc+X61dUrizd2jFusD97eK9m++wfnRlKdL89VB6tubT87qr7nB/bN131HNvtaO/t+29ns2+tKnWg+w312pNN134sD+xbqvmN9fVuftz4ty7L7eQuAA+/Q1w5NdP7d+Xvn/c4vOlc6r019Z/Kbky9NZPxv499qz4290nqp+EPez0+z9zd0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTzffeffq4srK0uqOSlmWt4d0PZZK2sm2OX/9S98ySeqHAY0+YLX0+VZSz2mnqdxfYLcfbHfee9Ak/LM5Jk8k4Y+kMjX0/NlZ+aQsy4MR8yiVsnFQ4tmPyr7eloAn4NTatRunbr7z7teXry2+ufTm0vWzZ86cnTt75tWFU5eXV5bmuq/7HSXwOPR9AgcAAAAAAAAAAACeEqP9cU7xcH/bAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAQLpxI+26KzM+dnKvaG3cWVqqpV99a8pMkrSTFbFJ8kJxPd8pM33DFsO2sJxc//Hjjo26r3Uz18q3d1hvNejNlNslYUw4wNWhmeXvYeEU9zo3h442o2NzDKmHHe4mD/fa/AAAA///tbhq7") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 4.633227749s ago: executing program 0 (id=1411): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) close(r4) 4.379305395s ago: executing program 3 (id=1412): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000004c0)={0x1}) 3.94791863s ago: executing program 3 (id=1413): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000014000000f156"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.939899277s ago: executing program 0 (id=1423): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 3.605502505s ago: executing program 0 (id=1414): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@global, @global=@item_4={0x3, 0x1, 0x0, "4fb0eae6"}]}}, 0x0}, 0x0) 3.580888854s ago: executing program 2 (id=1415): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd}, {0xffff}}}, 0x24}}, 0x0) 1.00460698s ago: executing program 1 (id=1416): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = io_uring_setup(0x336b, &(0x7f00000000c0)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0xc74, 0x2c, 0x0, 0x0, 0x0, {}, [@f_tcindex={{0xc}, {0xc44, 0x2, [@TCA_TCINDEX_ACT={0xc40, 0x7, [@m_police={0xc3c, 0x0, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xc74}}, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$security_ima(0x0, 0x0, 0x0, 0x10, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) close_range(r1, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) 978.833013ms ago: executing program 3 (id=1417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) setreuid(0x0, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getpid() creat(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc9}}}}, 0x10) fchdir(r3) mount(0x0, &(0x7f0000001580)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f0000000340)=ANY=[], 0x60) pread64(r5, &(0x7f00000004c0)=""/251, 0xfb, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 931.638924ms ago: executing program 4 (id=1419): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x0, [], 0x5}) 679.030683ms ago: executing program 0 (id=1420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 0s ago: executing program 4 (id=1421): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@hyper}, @hyper, 0x0, 0x8000}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff6, 0xffffbffffffff801}) kernel console output (not intermixed with test programs): .919089][ T5284] cp210x 5-1:0.0: device disconnected [ 575.972744][ T8202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 576.005888][ T8202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 576.091944][ T8202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 576.150502][ T8202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 576.797355][ T8205] Bluetooth: hci0: command tx timeout [ 577.258134][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.480972][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.586064][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.593983][ T5247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.746222][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.754156][ T5247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.786974][ T8301] loop2: detected capacity change from 0 to 256 [ 580.090347][ T8301] FAT-fs (loop2): Directory bread(block 64) failed [ 580.097898][ T8301] FAT-fs (loop2): Directory bread(block 65) failed [ 580.106714][ T8301] FAT-fs (loop2): Directory bread(block 66) failed [ 580.113990][ T8301] FAT-fs (loop2): Directory bread(block 67) failed [ 580.121053][ T8301] FAT-fs (loop2): Directory bread(block 68) failed [ 580.128446][ T8301] FAT-fs (loop2): Directory bread(block 69) failed [ 580.136061][ T8301] FAT-fs (loop2): Directory bread(block 70) failed [ 580.142957][ T8301] FAT-fs (loop2): Directory bread(block 71) failed [ 580.154853][ T8301] FAT-fs (loop2): Directory bread(block 72) failed [ 580.161688][ T8301] FAT-fs (loop2): Directory bread(block 73) failed [ 580.485240][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.682857][ T8306] syz.2.974: attempt to access beyond end of device [ 580.682857][ T8306] loop2: rw=2049, sector=1224, nr_sectors = 16 limit=256 [ 580.784723][ T5247] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 580.815045][ T8301] syz.2.974: attempt to access beyond end of device [ 580.815045][ T8301] loop2: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 580.829312][ T8301] Buffer I/O error on dev loop2, logical block 306, lost async page write [ 580.928985][ T8306] syz.2.974: attempt to access beyond end of device [ 580.928985][ T8306] loop2: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 580.943377][ T8306] Buffer I/O error on dev loop2, logical block 306, lost async page write [ 580.952290][ T8306] syz.2.974: attempt to access beyond end of device [ 580.952290][ T8306] loop2: rw=2049, sector=1228, nr_sectors = 4 limit=256 [ 580.972771][ T8306] Buffer I/O error on dev loop2, logical block 307, lost async page write [ 581.089143][ T8306] syz.2.974: attempt to access beyond end of device [ 581.089143][ T8306] loop2: rw=2049, sector=1232, nr_sectors = 536 limit=256 [ 581.106811][ T8306] syz.2.974: attempt to access beyond end of device [ 581.106811][ T8306] loop2: rw=2049, sector=1800, nr_sectors = 128 limit=256 [ 581.158505][ T5247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.166916][ T8202] veth0_vlan: entered promiscuous mode [ 581.170794][ T5247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.190588][ T5247] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 581.200134][ T5247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.229847][ T8306] syz.2.974: attempt to access beyond end of device [ 581.229847][ T8306] loop2: rw=2049, sector=1960, nr_sectors = 2048 limit=256 [ 581.305692][ T5247] usb 5-1: config 0 descriptor?? [ 581.356239][ T8202] veth1_vlan: entered promiscuous mode [ 581.411830][ T8306] syz.2.974: attempt to access beyond end of device [ 581.411830][ T8306] loop2: rw=2049, sector=4008, nr_sectors = 1480 limit=256 [ 581.829580][ T5247] hid-retrode 0003:0403:97C1.0011: unbalanced collection at end of report description [ 581.829801][ T8311] netlink: 'syz.0.978': attribute type 9 has an invalid length. [ 581.848256][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 581.853108][ T5247] hid-retrode 0003:0403:97C1.0011: probe with driver hid-retrode failed with error -22 [ 582.036076][ T8202] veth0_macvtap: entered promiscuous mode [ 582.075491][ T8] usb 5-1: USB disconnect, device number 12 [ 582.139383][ T8202] veth1_macvtap: entered promiscuous mode [ 582.439164][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.450145][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.460907][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.471834][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.484801][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.496091][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.511367][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.523615][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.539786][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.652654][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.664042][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.674395][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.685613][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.695831][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.706657][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.723917][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.736983][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.754030][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.024475][ T8202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.033917][ T8202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.043551][ T8202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.052898][ T8202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.448374][ T1056] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 584.614922][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 584.688060][ T1056] usb 3-1: Using ep0 maxpacket: 32 [ 584.723644][ T1056] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.734973][ T1056] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.822494][ T1056] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 584.831981][ T1056] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 584.840613][ T1056] usb 3-1: Product: syz [ 584.845084][ T1056] usb 3-1: Manufacturer: syz [ 584.946435][ T1056] hub 3-1:4.0: USB hub found [ 584.952174][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 584.969206][ T8] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 584.980117][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.154357][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.163904][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.174746][ T8] usb 1-1: Product: syz [ 585.179084][ T8] usb 1-1: Manufacturer: syz [ 585.184829][ T8] usb 1-1: SerialNumber: syz [ 585.199643][ T1056] hub 3-1:4.0: 2 ports detected [ 585.471314][ T5192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 585.532305][ T5192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 585.538636][ T8] usb 1-1: 0:2 : does not exist [ 585.568166][ T5192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.602033][ T5192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 585.627416][ T5192] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 585.646560][ T5192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 585.759909][ T8] usb 1-1: USB disconnect, device number 16 [ 586.849727][ T5284] hub 3-1:4.0: activate --> -90 [ 587.406296][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 587.465333][ T1056] usb 3-1-port2: config error [ 587.476457][ T4634] usb 3-1: USB disconnect, device number 11 [ 587.756266][ T8205] Bluetooth: hci4: command tx timeout [ 588.383557][ T1056] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 588.469767][ T8361] loop0: detected capacity change from 0 to 47 [ 588.681488][ T1056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.693553][ T1056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.704387][ T1056] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 588.714232][ T1056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.801801][ T1056] usb 5-1: config 0 descriptor?? [ 589.036818][ T8357] netlink: 304 bytes leftover after parsing attributes in process `syz.4.991'. [ 589.633828][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.641686][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.651266][ T8335] bridge_slave_0: entered allmulticast mode [ 589.661029][ T8335] bridge_slave_0: entered promiscuous mode [ 589.798752][ T1056] usb 5-1: string descriptor 0 read error: -71 [ 589.828442][ T1056] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71 [ 589.838201][ T1056] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 589.846911][ T1056] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71 [ 589.856595][ T8205] Bluetooth: hci4: command tx timeout [ 589.862712][ T1056] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 589.871660][ T1056] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 590.066123][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.074101][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.087992][ T8335] bridge_slave_1: entered allmulticast mode [ 590.099252][ T8335] bridge_slave_1: entered promiscuous mode [ 590.320365][ T1056] usb 5-1: USB disconnect, device number 13 [ 590.549660][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.613823][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.008153][ T8335] team0: Port device team_slave_0 added [ 591.099163][ T8335] team0: Port device team_slave_1 added [ 591.439621][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.447175][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.474325][ T8335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.553838][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.998'. [ 591.686827][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.695593][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.726757][ T8335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.919231][ T8205] Bluetooth: hci4: command tx timeout [ 592.548238][ T8335] hsr_slave_0: entered promiscuous mode [ 592.580388][ T8335] hsr_slave_1: entered promiscuous mode [ 592.616671][ T8335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.625219][ T8335] Cannot create hsr debugfs directory [ 592.661597][ T8395] IPv6: sit1: Disabled Multicast RS [ 592.728617][ T4634] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 593.041859][ T4634] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 593.055558][ T4634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.120211][ T4634] usb 5-1: config 0 descriptor?? [ 593.660797][ T4634] mxuport 5-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 593.676108][ T4634] mxuport 5-1:0.0: probe with driver mxuport failed with error -5 [ 593.751160][ T8399] gre0: entered promiscuous mode [ 593.756699][ T8399] vlan2: entered promiscuous mode [ 593.763402][ T8399] vlan2: entered allmulticast mode [ 593.773637][ T8399] gre0: entered allmulticast mode [ 593.824396][ T4634] usb 5-1: USB disconnect, device number 14 [ 593.851855][ T8399] gre0: left allmulticast mode [ 593.858354][ T8399] gre0: left promiscuous mode [ 593.994664][ T8205] Bluetooth: hci4: command tx timeout [ 594.187376][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 594.341676][ T8335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.404147][ T8403] netlink: 'syz.0.1003': attribute type 7 has an invalid length. [ 594.412748][ T8403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1003'. [ 594.432671][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.441246][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.522166][ T8335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.769191][ T8335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.963344][ T8335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.029182][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.037819][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.686418][ T8335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 595.807186][ T8335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 595.916422][ T8335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 596.035310][ T8335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 596.156166][ T8418] loop2: detected capacity change from 0 to 128 [ 596.220736][ T8416] loop4: detected capacity change from 0 to 764 [ 596.262461][ T8419] loop3: detected capacity change from 0 to 256 [ 596.311902][ T8418] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 596.377459][ T8418] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 596.613015][ T8418] fscrypt (loop2, inode 12): Unsupported encryption flags (0x08) [ 596.982791][ T7871] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 597.204266][ T8428] loop4: detected capacity change from 0 to 256 [ 597.934692][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 597.941452][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.157388][ T6113] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.364609][ T6113] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.496025][ T8335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.599037][ T6113] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.740852][ T8335] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.808893][ T6113] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.876512][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.884222][ T5816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.000626][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.008466][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.429447][ T6113] bridge_slave_1: left allmulticast mode [ 599.438393][ T6113] bridge_slave_1: left promiscuous mode [ 599.445081][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.482062][ T6113] bridge_slave_0: left allmulticast mode [ 599.488861][ T6113] bridge_slave_0: left promiscuous mode [ 599.495885][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.993492][ T5182] Bluetooth: hci2: command 0x0406 tx timeout [ 600.150013][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.190876][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.228942][ T6113] bond0 (unregistering): Released all slaves [ 601.231618][ T6113] hsr_slave_0: left promiscuous mode [ 601.272850][ T6113] hsr_slave_1: left promiscuous mode [ 601.326077][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.334781][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.406665][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.414705][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.529383][ T6113] veth1_macvtap: left promiscuous mode [ 601.535962][ T6113] veth0_macvtap: left promiscuous mode [ 601.541948][ T6113] veth1_vlan: left promiscuous mode [ 601.547826][ T6113] veth0_vlan: left promiscuous mode [ 601.568286][ T8444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1018'. [ 602.347450][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 602.357452][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 602.368024][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 602.456982][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 602.468118][ T5182] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 602.482307][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 602.531644][ T8451] loop0: detected capacity change from 0 to 64 [ 603.206167][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 603.244706][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 604.380704][ T8460] loop0: detected capacity change from 0 to 256 [ 604.563546][ T5182] Bluetooth: hci0: command tx timeout [ 604.978100][ T8460] FAT-fs (loop0): Directory bread(block 64) failed [ 604.985273][ T8460] FAT-fs (loop0): Directory bread(block 65) failed [ 604.992297][ T8460] FAT-fs (loop0): Directory bread(block 66) failed [ 604.999681][ T8460] FAT-fs (loop0): Directory bread(block 67) failed [ 605.006905][ T8460] FAT-fs (loop0): Directory bread(block 68) failed [ 605.013845][ T8460] FAT-fs (loop0): Directory bread(block 69) failed [ 605.020789][ T8460] FAT-fs (loop0): Directory bread(block 70) failed [ 605.027730][ T8460] FAT-fs (loop0): Directory bread(block 71) failed [ 605.039764][ T8460] FAT-fs (loop0): Directory bread(block 72) failed [ 605.048012][ T8460] FAT-fs (loop0): Directory bread(block 73) failed [ 605.270162][ T8460] syz.0.1023: attempt to access beyond end of device [ 605.270162][ T8460] loop0: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 605.286788][ T8460] syz.0.1023: attempt to access beyond end of device [ 605.286788][ T8460] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 605.330813][ T8335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.375192][ T29] audit: type=1800 audit(1722709561.399:46): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1023" name="file0" dev="loop0" ino=1048670 res=0 errno=0 [ 605.386594][ T8460] syz.0.1023: attempt to access beyond end of device [ 605.386594][ T8460] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 605.456837][ T29] audit: type=1800 audit(1722709561.509:47): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1023" name="file0" dev="loop0" ino=1048670 res=0 errno=0 [ 605.517820][ T6113] bridge_slave_1: left allmulticast mode [ 605.525958][ T6113] bridge_slave_1: left promiscuous mode [ 605.532742][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.624529][ T6113] bridge_slave_0: left allmulticast mode [ 605.630477][ T6113] bridge_slave_0: left promiscuous mode [ 605.637535][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.377653][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.432687][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.488149][ T6113] bond0 (unregistering): Released all slaves [ 606.598001][ T8447] chnl_net:caif_netlink_parms(): no params data found [ 606.667879][ T8480] loop4: detected capacity change from 0 to 1024 [ 606.680269][ T5182] Bluetooth: hci0: command tx timeout [ 606.911184][ T8480] syz.4.1031: attempt to access beyond end of device [ 606.911184][ T8480] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 607.425369][ T8335] veth0_vlan: entered promiscuous mode [ 607.544959][ T8335] veth1_vlan: entered promiscuous mode [ 607.650483][ T6113] hsr_slave_0: left promiscuous mode [ 607.683749][ T6113] hsr_slave_1: left promiscuous mode [ 607.715136][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.722924][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.782664][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.790998][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.839367][ T6113] veth1_macvtap: left promiscuous mode [ 607.845485][ T6113] veth0_macvtap: left promiscuous mode [ 607.851566][ T6113] veth1_vlan: left promiscuous mode [ 607.858539][ T6113] veth0_vlan: left promiscuous mode [ 608.496828][ T8497] Context (ID=0x0) not attached to queue pair (handle=0x1:0x0) [ 608.715545][ T5182] Bluetooth: hci0: command tx timeout [ 608.912310][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 608.992685][ T8501] loop0: detected capacity change from 0 to 512 [ 609.002986][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 609.140492][ T8501] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 609.341718][ T8501] EXT4-fs (loop0): 1 truncate cleaned up [ 609.350171][ T8501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.499446][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 609.880895][ T8447] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.900175][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.908315][ T8447] bridge_slave_0: entered allmulticast mode [ 609.918197][ T8447] bridge_slave_0: entered promiscuous mode [ 610.068468][ T8447] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.077744][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.085814][ T8447] bridge_slave_1: entered allmulticast mode [ 610.095635][ T8447] bridge_slave_1: entered promiscuous mode [ 610.119825][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.287061][ T8335] veth0_macvtap: entered promiscuous mode [ 610.396781][ T8447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.428373][ T8335] veth1_macvtap: entered promiscuous mode [ 610.534721][ T8447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.800363][ T5182] Bluetooth: hci0: command tx timeout [ 610.859521][ T8447] team0: Port device team_slave_0 added [ 610.909837][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.920971][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.931206][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.941955][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.952178][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.963057][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.983776][ T8335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.042502][ T8447] team0: Port device team_slave_1 added [ 611.245215][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.256176][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.266471][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.277257][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.291106][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.304570][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.321424][ T8335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.336020][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.343437][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.371966][ T8447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.427012][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.434413][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.460921][ T8447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.547581][ T8335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.556874][ T8335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.566155][ T8335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.575402][ T8335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.855388][ T8447] hsr_slave_0: entered promiscuous mode [ 611.890643][ T8447] hsr_slave_1: entered promiscuous mode [ 612.937841][ T8538] loop2: detected capacity change from 0 to 512 [ 612.960912][ T8535] netlink: 'syz.4.1052': attribute type 5 has an invalid length. [ 613.141024][ T8538] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1053: corrupted in-inode xattr: invalid ea_ino [ 613.176929][ T8538] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1053: couldn't read orphan inode 15 (err -117) [ 613.291888][ T8538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.567838][ T8447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 613.656580][ T8447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 613.796445][ T8447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 613.916962][ T8447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 614.018692][ T7871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.169847][ T29] audit: type=1400 audit(1722709570.209:48): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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q: adding VLAN 0 to HW filter on device bond0 [ 615.163541][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 615.430053][ T8447] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.542430][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.550381][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.708966][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.717074][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.241675][ T8572] loop0: detected capacity change from 0 to 1024 [ 616.268457][ T8574] tracefs: Invalid gid '0x00000000ffffffff' [ 617.155179][ T1056] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 617.365747][ T1056] usb 5-1: Using ep0 maxpacket: 8 [ 617.457472][ T1056] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 617.467189][ T1056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.476571][ T1056] usb 5-1: Product: syz [ 617.481011][ T1056] usb 5-1: Manufacturer: syz [ 617.486075][ T1056] usb 5-1: SerialNumber: syz [ 617.527854][ T1056] usb 5-1: config 0 descriptor?? [ 617.551538][ T1056] gspca_main: spca500-2.14.0 probing 046d:0900 [ 617.879187][ T8447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.917207][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'. [ 618.595090][ T8447] veth0_vlan: entered promiscuous mode [ 618.598276][ T8600] loop0: detected capacity change from 0 to 128 [ 618.732583][ T8447] veth1_vlan: entered promiscuous mode [ 618.955881][ T6116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.969712][ T6116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.140258][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.149447][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.328846][ T8447] veth0_macvtap: entered promiscuous mode [ 619.388770][ T8447] veth1_macvtap: entered promiscuous mode [ 619.430840][ T1056] gspca_spca500: reg write: error -71 [ 619.440114][ T1056] gspca_spca500: reg write: error -71 [ 619.452129][ T1056] gspca_spca500: reg write: error -71 [ 619.466219][ T1056] gspca_spca500: reg write: error -71 [ 619.511960][ T1056] gspca_spca500: reg write: error -71 [ 619.562615][ T1056] gspca_spca500: reg write: error -71 [ 619.595282][ T1056] gspca_spca500: reg write: error -71 [ 619.632464][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.643643][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.653903][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.664721][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.682321][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.695291][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.705484][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.717647][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.736671][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.770154][ T8604] loop0: detected capacity change from 0 to 512 [ 619.784913][ T1056] usb 5-1: USB disconnect, device number 15 [ 619.825799][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.838468][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.850758][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.861776][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.873930][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.891008][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.898549][ T8604] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 619.902995][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.920250][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.936527][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.971788][ T8604] EXT4-fs error (device loop0): ext4_get_journal_inode:5740: comm syz.0.1074: inode #67108864: comm syz.0.1074: iget: illegal inode # [ 619.998742][ T8447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.010245][ T8447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.021058][ T8447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.022797][ T8604] EXT4-fs (loop0): no journal found [ 620.031668][ T8447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.370162][ T4634] IPVS: starting estimator thread 0... [ 620.476858][ T8611] IPVS: using max 192 ests per chain, 9600 per kthread [ 621.400570][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 621.552517][ T8628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1081'. [ 621.757136][ T25] usb 1-1: New USB device found, idVendor=04bb, idProduct=0919, bcdDevice=67.93 [ 621.766849][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.776490][ T25] usb 1-1: Product: syz [ 621.780958][ T25] usb 1-1: Manufacturer: syz [ 621.787774][ T25] usb 1-1: SerialNumber: syz [ 621.875768][ T25] usb 1-1: config 0 descriptor?? [ 621.906564][ T25] rndis_host 1-1:0.0: skipping garbage [ 621.912348][ T25] usb 1-1: bad CDC descriptors [ 622.039416][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 622.161342][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1082'. [ 622.275341][ T1056] usb 1-1: USB disconnect, device number 17 [ 622.302402][ T8635] bridge1: port 1(vlan2) entered blocking state [ 622.310110][ T8635] bridge1: port 1(vlan2) entered disabled state [ 622.317443][ T8635] vlan2: entered allmulticast mode [ 622.331314][ T8205] Bluetooth: hci0: command 0x0405 tx timeout [ 622.349513][ T8630] ALSA: seq fatal error: cannot create timer (-19) [ 622.397615][ T8635] vlan2: left allmulticast mode [ 622.416437][ T8633] loop1: detected capacity change from 0 to 1764 [ 622.465312][ T8633] iso9660: Bad value for 'session' [ 623.496724][ T29] audit: type=1326 audit(1722709579.589:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 623.602189][ T8651] loop0: detected capacity change from 0 to 512 [ 623.632567][ T8651] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 623.663441][ T29] audit: type=1326 audit(1722709579.689:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 623.767562][ T8651] EXT4-fs (loop0): 1 truncate cleaned up [ 623.781586][ T8651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.962869][ T8658] loop2: detected capacity change from 0 to 256 [ 624.014005][ T8658] exfat: Deprecated parameter 'utf8' [ 624.149843][ T8651] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 624.278379][ T8658] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 624.588409][ T5187] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /296/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 624.665055][ T5187] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 624.728159][ T5187] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /296/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 624.805777][ T5187] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 624.888842][ T5187] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /296/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 624.960903][ T5187] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 624.993868][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 625.045522][ T5187] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /296/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 625.067209][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.084732][ T5187] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 625.165187][ T5187] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /296/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 625.226039][ T5187] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 625.275844][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 625.287491][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 625.297994][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 625.311081][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.345280][ T1056] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 625.355562][ T8665] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 625.423884][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 625.601040][ T1056] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.611857][ T1056] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.628346][ T1056] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.685739][ T1056] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.695443][ T1056] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.704019][ T1056] usb 3-1: Product: syz [ 625.708457][ T1056] usb 3-1: Manufacturer: syz [ 625.713590][ T1056] usb 3-1: SerialNumber: syz [ 625.744117][ T1056] usb 3-1: bad CDC descriptors [ 625.986341][ T5816] usb 3-1: USB disconnect, device number 12 [ 626.496617][ T8681] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 627.004212][ T6116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.012516][ T6116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.289671][ T6116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.298433][ T6116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.060282][ T5816] usb 2-1: USB disconnect, device number 15 [ 628.068844][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1099'. [ 628.434292][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.629386][ T3023] bond0: (slave netdevsim3): Releasing backup interface [ 628.690165][ T3023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.877019][ T3023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.085612][ T3023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.287990][ T3023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.583878][ T3023] bridge_slave_1: left allmulticast mode [ 629.589845][ T3023] bridge_slave_1: left promiscuous mode [ 629.596882][ T3023] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.362979][ T3023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.544333][ T3023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.579180][ T8702] loop1: detected capacity change from 0 to 256 [ 630.627690][ T3023] bond0 (unregistering): Released all slaves [ 630.662585][ T3023] bond1 (unregistering): Released all slaves [ 630.779761][ T8706] loop3: detected capacity change from 0 to 1024 [ 630.821523][ T8706] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 630.832081][ T8706] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 630.860578][ T8705] loop2: detected capacity change from 0 to 1024 [ 630.920411][ T8702] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 630.980385][ T8705] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-13, ino=12). Please run e2fsck to fix. [ 631.016276][ T8705] EXT4-fs (loop2): mount failed [ 631.017095][ T8706] EXT4-fs (loop3): invalid journal inode [ 631.027747][ T8706] EXT4-fs (loop3): can't get journal size [ 631.050024][ T8706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 631.183015][ T8205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 631.198319][ T8205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 631.210031][ T8205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 631.260472][ T8205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 631.281314][ T8205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 631.292165][ T8205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 631.538963][ T8447] EXT4-fs error (device loop3): __ext4_iget:4985: inode #15: block 1803188595: comm syz-executor: invalid block [ 631.614394][ T8447] EXT4-fs error (device loop3): __ext4_iget:4985: inode #15: block 1803188595: comm syz-executor: invalid block [ 631.901210][ T3023] hsr_slave_0: left promiscuous mode [ 631.918718][ T3023] hsr_slave_1: left promiscuous mode [ 631.956507][ T3023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.972654][ T3023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.051576][ T3023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.060007][ T3023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.118942][ T3023] veth1_macvtap: left promiscuous mode [ 632.125103][ T3023] veth0_macvtap: left promiscuous mode [ 632.127164][ T8717] loop2: detected capacity change from 0 to 1024 [ 632.130936][ T3023] veth1_vlan: left promiscuous mode [ 632.143234][ T3023] veth0_vlan: left promiscuous mode [ 632.184698][ T8717] hfsplus: unable to find HFS+ superblock [ 632.195176][ T8721] loop4: detected capacity change from 0 to 1024 [ 633.108485][ T8725] loop4: detected capacity change from 0 to 128 [ 633.273465][ T3023] team0 (unregistering): Port device team_slave_1 removed [ 633.311278][ T3023] team0 (unregistering): Port device team_slave_0 removed [ 633.370923][ T8725] Invalid ELF header len 1 [ 633.443933][ T29] audit: type=1804 audit(1722709589.459:51): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1115" name="/newroot/45/file0/bus" dev="loop4" ino=1048684 res=1 errno=0 [ 633.475636][ T8205] Bluetooth: hci2: command tx timeout [ 634.181746][ T8447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.475489][ T3023] IPVS: stop unused estimator thread 0... [ 635.002421][ T3023] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.141011][ T3023] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.319387][ T3023] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.460507][ T3023] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.513756][ T8205] Bluetooth: hci2: command tx timeout [ 635.530091][ T8712] chnl_net:caif_netlink_parms(): no params data found [ 635.814866][ T3023] bridge_slave_1: left allmulticast mode [ 635.820841][ T3023] bridge_slave_1: left promiscuous mode [ 635.828146][ T3023] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.885103][ T3023] bridge_slave_0: left allmulticast mode [ 635.891058][ T3023] bridge_slave_0: left promiscuous mode [ 635.898015][ T3023] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.514186][ T3023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.563855][ T3023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.608058][ T3023] bond0 (unregistering): Released all slaves [ 636.832886][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 637.463930][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.482455][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 637.496716][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.598011][ T5182] Bluetooth: hci2: command tx timeout [ 637.767953][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.780484][ T5182] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 637.792078][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 638.141057][ T3023] hsr_slave_0: left promiscuous mode [ 638.172973][ T3023] hsr_slave_1: left promiscuous mode [ 638.195665][ T3023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.203716][ T3023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.246629][ T3023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.256996][ T3023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.342849][ T3023] veth1_macvtap: left promiscuous mode [ 638.353609][ T3023] veth0_macvtap: left promiscuous mode [ 638.359687][ T3023] veth1_vlan: left promiscuous mode [ 638.365533][ T3023] veth0_vlan: left promiscuous mode [ 639.311024][ T3023] team0 (unregistering): Port device team_slave_1 removed [ 639.370114][ T3023] team0 (unregistering): Port device team_slave_0 removed [ 639.597263][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.605344][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.613415][ T8712] bridge_slave_0: entered allmulticast mode [ 639.622791][ T8712] bridge_slave_0: entered promiscuous mode [ 639.664531][ T1056] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 639.673679][ T8205] Bluetooth: hci2: command tx timeout [ 639.710143][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.718803][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.727475][ T8712] bridge_slave_1: entered allmulticast mode [ 639.738949][ T8712] bridge_slave_1: entered promiscuous mode [ 639.930854][ T8205] Bluetooth: hci0: command tx timeout [ 640.014510][ T8712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.059218][ T8712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.116142][ T1056] usb 3-1: config 0 has no interfaces? [ 640.140169][ T1056] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 640.149818][ T1056] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 640.162700][ T1056] usb 3-1: SerialNumber: syz [ 640.208161][ T1056] usb 3-1: config 0 descriptor?? [ 640.475120][ T8712] team0: Port device team_slave_0 added [ 640.524848][ T8712] team0: Port device team_slave_1 added [ 640.748269][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.755727][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.785873][ T8712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.841646][ T1056] usb 3-1: USB disconnect, device number 13 [ 640.916074][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.923697][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.949800][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.956827][ T8712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.437469][ T8712] hsr_slave_0: entered promiscuous mode [ 641.462372][ T8712] hsr_slave_1: entered promiscuous mode [ 641.521008][ T8744] chnl_net:caif_netlink_parms(): no params data found [ 641.993757][ T8205] Bluetooth: hci0: command tx timeout [ 642.135422][ T8761] loop1: detected capacity change from 0 to 4096 [ 642.185489][ T8761] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 643.059801][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.068429][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.080261][ T8744] bridge_slave_0: entered allmulticast mode [ 643.091557][ T8744] bridge_slave_0: entered promiscuous mode [ 643.231600][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.239929][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.248075][ T8744] bridge_slave_1: entered allmulticast mode [ 643.260697][ T8744] bridge_slave_1: entered promiscuous mode [ 643.472290][ T8712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 643.554047][ T8744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.565558][ T8712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 643.608126][ T8744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.632515][ T8712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 643.695084][ T8712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 643.696228][ T8785] program syz.1.1131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.977483][ T8744] team0: Port device team_slave_0 added [ 644.079781][ T8744] team0: Port device team_slave_1 added [ 644.088336][ T5182] Bluetooth: hci0: command tx timeout [ 644.194563][ T8791] loop4: detected capacity change from 0 to 128 [ 644.254632][ T8791] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 644.262900][ T8791] FAT-fs (loop4): Filesystem has been set read-only [ 644.418858][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.426372][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.454834][ T8744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.488671][ T8789] loop2: detected capacity change from 0 to 764 [ 644.530664][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.538999][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.569078][ T8744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.635676][ T8788] Symlink component flag not implemented [ 644.781550][ T8793] loop1: detected capacity change from 0 to 164 [ 644.862260][ T8793] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 645.084444][ T8744] hsr_slave_0: entered promiscuous mode [ 645.108480][ T8744] hsr_slave_1: entered promiscuous mode [ 645.153514][ T8744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.161357][ T8744] Cannot create hsr debugfs directory [ 645.681844][ T8803] loop1: detected capacity change from 0 to 164 [ 645.710909][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.742532][ T8803] Unable to read rock-ridge attributes [ 645.946893][ T8712] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.064711][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.072553][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.087521][ T5182] Bluetooth: hci1: command 0x0406 tx timeout [ 646.162001][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.169988][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.183453][ T8205] Bluetooth: hci0: command tx timeout [ 646.601658][ T8744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 646.635294][ T8744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 646.660709][ T8744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 646.703595][ T8744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 647.549482][ T8712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.582520][ T8744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.719593][ T8744] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.772560][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.780617][ T5816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.874858][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.882709][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.061161][ T8712] veth0_vlan: entered promiscuous mode [ 648.177233][ T8712] veth1_vlan: entered promiscuous mode [ 648.498936][ T8712] veth0_macvtap: entered promiscuous mode [ 648.538646][ T8712] veth1_macvtap: entered promiscuous mode [ 648.631070][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.645681][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.659990][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.672098][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.682362][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.693386][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.709219][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.813087][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.824245][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.834526][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.845334][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.857589][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.872051][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.892189][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.979832][ T8712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.989201][ T8712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.000671][ T8712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.010375][ T8712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.333022][ T8744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.650838][ T8744] veth0_vlan: entered promiscuous mode [ 649.733058][ T8744] veth1_vlan: entered promiscuous mode [ 650.014462][ T8744] veth0_macvtap: entered promiscuous mode [ 650.074721][ T8744] veth1_macvtap: entered promiscuous mode [ 650.217202][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.230126][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.241134][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.252017][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.262365][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.273339][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.283624][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.298105][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.315440][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.379031][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.389955][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.404043][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.416157][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.426420][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.439037][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.449358][ T8744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.460177][ T8744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.476469][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.531911][ T8744] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.541426][ T8744] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.551755][ T8744] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.561088][ T8744] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.614433][ T6116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.622563][ T6116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.707363][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.716681][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.373903][ T4580] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 653.463566][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 653.605089][ T4580] usb 5-1: Using ep0 maxpacket: 8 [ 653.659849][ T4580] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 653.669484][ T4580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.682199][ T4580] usb 5-1: Product: syz [ 653.688545][ T4580] usb 5-1: Manufacturer: syz [ 653.693651][ T4580] usb 5-1: SerialNumber: syz [ 653.739582][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 653.801524][ T4580] usb 5-1: config 0 descriptor?? [ 653.845556][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.857103][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.870652][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.883078][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.908832][ T4580] gspca_main: se401-2.14.0 probing 047d:5003 [ 653.971989][ T25] usb 2-1: config 0 descriptor?? [ 654.469804][ T25] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 654.521272][ T25] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 654.554612][ T25] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 654.569281][ T25] microsoft 0003:045E:07DA.0013: no inputs found [ 654.579513][ T25] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 654.828406][ T4580] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 654.936354][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.944869][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.071337][ T25] usb 2-1: USB disconnect, device number 16 [ 655.165300][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.173621][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.858886][ T4580] gspca_se401: Wrong descriptor type [ 655.890270][ T8867] loop2: detected capacity change from 0 to 4096 [ 655.896531][ T8872] loop0: detected capacity change from 0 to 512 [ 655.921094][ T8867] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 656.004746][ T8872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.018439][ T8872] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.192770][ T25] usb 5-1: USB disconnect, device number 16 [ 656.245614][ T8867] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 656.474159][ T8712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.496169][ T8867] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 656.545359][ T8867] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 656.593933][ T8867] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 656.639873][ T8867] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 656.690215][ T8882] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 656.811331][ T8867] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 656.905219][ T8867] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 656.963653][ T8867] ntfs3: loop2: ino=0, ntfs_iget5 [ 658.137896][ T8886] loop3: detected capacity change from 0 to 4096 [ 658.156995][ T8886] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 658.171777][ T8886] ntfs3: loop3: Failed to load $MFT. [ 658.585758][ T8906] nft_compat: unsupported protocol 1 [ 658.839148][ T8906] loop0: detected capacity change from 0 to 512 [ 658.871396][ T8906] EXT4-fs: Ignoring removed bh option [ 658.932930][ T8906] EXT4-fs error (device loop0): __ext4_iget:4985: inode #15: block 1803188595: comm syz.0.1164: invalid block [ 658.969268][ T8906] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1164: couldn't read orphan inode 15 (err -117) [ 659.007728][ T8906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.008424][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 659.316378][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 659.392538][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.397354][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.404958][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.415683][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.428211][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 659.445603][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.553868][ T25] usb 3-1: config 0 descriptor?? [ 659.590280][ T8712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.076286][ T25] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 660.129364][ T25] microsoft 0003:045E:07DA.0014: No inputs registered, leaving [ 660.181106][ T25] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 660.193472][ T25] microsoft 0003:045E:07DA.0014: no inputs found [ 660.200110][ T25] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 660.242229][ T8921] loop0: detected capacity change from 0 to 512 [ 660.412462][ T8921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.426250][ T8921] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.720995][ T25] usb 3-1: USB disconnect, device number 14 [ 660.824000][ T4580] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 660.847288][ T8930] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 660.893702][ T8930] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 61 with error 28 [ 660.906659][ T8930] EXT4-fs (loop0): This should not happen!! Data will be lost [ 660.906659][ T8930] [ 660.916872][ T8930] EXT4-fs (loop0): Total free blocks count 0 [ 660.923283][ T8930] EXT4-fs (loop0): Free/Dirty block details [ 660.929451][ T8930] EXT4-fs (loop0): free_blocks=65280 [ 660.935576][ T8930] EXT4-fs (loop0): dirty_blocks=89 [ 660.940986][ T8930] EXT4-fs (loop0): Block reservation details [ 660.952171][ T8930] EXT4-fs (loop0): i_reserved_data_blocks=89 [ 661.110822][ T4580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.124609][ T4580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.135374][ T4580] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 661.144926][ T4580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.201817][ T4580] usb 4-1: config 0 descriptor?? [ 661.443666][ T5182] Bluetooth: hci6: command 0x0406 tx timeout [ 661.732154][ T4580] asus 0003:0B05:17E0.0015: unknown main item tag 0x0 [ 661.740557][ T4580] asus 0003:0B05:17E0.0015: item fetching failed at offset 5/7 [ 661.801142][ T4580] asus 0003:0B05:17E0.0015: Asus hid parse failed: -22 [ 661.808992][ T4580] asus 0003:0B05:17E0.0015: probe with driver asus failed with error -22 [ 661.947864][ T8712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.033482][ T4580] usb 4-1: USB disconnect, device number 10 [ 662.824661][ T5242] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 663.068542][ T5242] usb 2-1: Using ep0 maxpacket: 8 [ 663.154051][ T5242] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 663.163631][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.171949][ T5242] usb 2-1: Product: syz [ 663.176707][ T5242] usb 2-1: Manufacturer: syz [ 663.181582][ T5242] usb 2-1: SerialNumber: syz [ 663.287832][ T5242] usb 2-1: config 0 descriptor?? [ 663.371196][ T5242] gspca_main: se401-2.14.0 probing 047d:5003 [ 664.233610][ T5242] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 664.347142][ T29] audit: type=1326 audit(1722709620.339:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7fc00000 [ 664.446014][ T8971] loop2: detected capacity change from 0 to 256 [ 664.551698][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 664.705365][ T8973] loop3: detected capacity change from 0 to 256 [ 664.795691][ T29] audit: type=1326 audit(1722709620.889:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.4.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7fc00000 [ 664.941772][ T29] audit: type=1800 audit(1722709620.999:54): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1180" name="bus" dev="loop3" ino=1048692 res=0 errno=0 [ 665.203970][ T5242] gspca_se401: Wrong descriptor type [ 665.395928][ T8977] loop2: detected capacity change from 0 to 512 [ 665.501221][ T4580] usb 2-1: USB disconnect, device number 17 [ 665.501472][ T8978] loop0: detected capacity change from 0 to 256 [ 665.625143][ T8977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.638513][ T8977] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.688260][ T8986] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 665.775456][ T8978] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 666.110643][ T7871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.499087][ T8997] tmpfs: Bad value for 'mpol' [ 666.587667][ T9001] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1188'. [ 666.684429][ T8999] loop2: detected capacity change from 0 to 512 [ 666.704435][ T5242] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 666.757274][ T8999] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1185: corrupted in-inode xattr: bad e_name length [ 666.830572][ T8999] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1185: couldn't read orphan inode 15 (err -117) [ 666.851799][ T8999] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.872997][ T8999] EXT4-fs warning (device loop2): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 666.935847][ T5242] usb 5-1: config 0 has no interfaces? [ 666.941822][ T5242] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 666.951745][ T5242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.013617][ T5242] usb 5-1: config 0 descriptor?? [ 667.375743][ T5242] usb 5-1: USB disconnect, device number 17 [ 667.513395][ T9008] loop0: detected capacity change from 0 to 2048 [ 667.590188][ T9008] EXT4-fs error (device loop0): __ext4_fill_super:5435: inode #2: comm syz.0.1189: casefold flag without casefold feature [ 667.649776][ T7871] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 667.722177][ T9008] EXT4-fs (loop0): get root inode failed [ 667.728653][ T9008] EXT4-fs (loop0): mount failed [ 667.792802][ T9004] loop3: detected capacity change from 0 to 4096 [ 667.833825][ T9004] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 668.098337][ T29] audit: type=1326 audit(1722709624.159:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.0.1189" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x0 [ 668.339283][ T9004] ntfs3: loop3: ino=1d, "file1" attr_set_size [ 668.346598][ T9004] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 668.604938][ T9022] netlink: 'syz.4.1195': attribute type 21 has an invalid length. [ 668.613572][ T9022] netlink: 'syz.4.1195': attribute type 11 has an invalid length. [ 670.252614][ T9044] loop1: detected capacity change from 0 to 256 [ 670.390253][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'. [ 670.462870][ T9044] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 670.915256][ T9050] netlink: 'syz.0.1203': attribute type 15 has an invalid length. [ 671.313416][ T5242] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 671.358584][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 671.507657][ T5242] usb 1-1: device descriptor read/64, error -71 [ 671.807972][ T5242] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 671.993400][ T5242] usb 1-1: device descriptor read/64, error -71 [ 672.012242][ T1056] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 672.115887][ T5242] usb usb1-port1: attempt power cycle [ 672.245238][ T1056] usb 5-1: Using ep0 maxpacket: 16 [ 672.287205][ T1056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 672.355656][ T1056] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 672.365232][ T1056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.373785][ T1056] usb 5-1: Product: syz [ 672.378213][ T1056] usb 5-1: Manufacturer: syz [ 672.383066][ T1056] usb 5-1: SerialNumber: syz [ 672.459331][ T1056] usb 5-1: config 0 descriptor?? [ 672.497718][ T1056] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 672.604781][ T5242] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 672.652366][ T5242] usb 1-1: device descriptor read/8, error -71 [ 672.780971][ T9077] loop2: detected capacity change from 0 to 512 [ 672.814340][ T25] usb 5-1: USB disconnect, device number 18 [ 672.914814][ T9077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 672.998797][ T9077] EXT4-fs (loop2): 1 truncate cleaned up [ 673.007104][ T9077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.020392][ T5242] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 673.156353][ T5242] usb 1-1: device descriptor read/8, error -71 [ 673.286536][ T5242] usb usb1-port1: unable to enumerate USB device [ 674.261441][ T7871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.385684][ T6116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.619363][ T6116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.834008][ T6116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.025748][ T6116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.348831][ T6116] bridge_slave_1: left allmulticast mode [ 675.362124][ T6116] bridge_slave_1: left promiscuous mode [ 675.369496][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.426159][ T6116] bridge_slave_0: left allmulticast mode [ 675.432168][ T6116] bridge_slave_0: left promiscuous mode [ 675.439165][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.025769][ T6116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.084929][ T6116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.123900][ T6116] bond0 (unregistering): Released all slaves [ 676.556176][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 676.901413][ T6116] hsr_slave_0: left promiscuous mode [ 676.963921][ T6116] hsr_slave_1: left promiscuous mode [ 677.007507][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.015518][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.106280][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.114253][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.152426][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 677.162351][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 677.172562][ T5182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 677.181127][ T6116] veth1_macvtap: left promiscuous mode [ 677.187404][ T6116] veth0_macvtap: left promiscuous mode [ 677.193625][ T6116] veth1_vlan: left promiscuous mode [ 677.199369][ T6116] veth0_vlan: left promiscuous mode [ 677.390365][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 677.416691][ T5182] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 677.426296][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 678.436866][ T6116] team0 (unregistering): Port device team_slave_1 removed [ 678.490287][ T6116] team0 (unregistering): Port device team_slave_0 removed [ 679.331435][ T6116] IPVS: stop unused estimator thread 0... [ 679.602827][ T5182] Bluetooth: hci1: command tx timeout [ 680.124585][ T9110] chnl_net:caif_netlink_parms(): no params data found [ 680.417956][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 681.020003][ T9153] loop3: detected capacity change from 0 to 1024 [ 681.195447][ T29] audit: type=1800 audit(1722709637.259:56): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1243" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 681.506112][ T6116] hfsplus: b-tree write err: -5, ino 4 [ 681.571677][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.580381][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.588477][ T9110] bridge_slave_0: entered allmulticast mode [ 681.601172][ T9110] bridge_slave_0: entered promiscuous mode [ 681.675445][ T5182] Bluetooth: hci1: command tx timeout [ 681.701979][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.710068][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.718220][ T9110] bridge_slave_1: entered allmulticast mode [ 681.723676][ T9160] loop1: detected capacity change from 0 to 1024 [ 681.727767][ T9110] bridge_slave_1: entered promiscuous mode [ 682.010841][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.082614][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.352918][ T9110] team0: Port device team_slave_0 added [ 682.408164][ T9110] team0: Port device team_slave_1 added [ 682.468675][ T11] hfsplus: b-tree write err: -5, ino 4 [ 682.644144][ T9173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1249'. [ 682.701202][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.708914][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.735605][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.896713][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.904113][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.930839][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.320328][ T9110] hsr_slave_0: entered promiscuous mode [ 683.366111][ T9110] hsr_slave_1: entered promiscuous mode [ 683.407919][ T9110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.416285][ T9110] Cannot create hsr debugfs directory [ 683.753467][ T5182] Bluetooth: hci1: command tx timeout [ 684.257597][ T9187] loop4: detected capacity change from 0 to 2048 [ 684.368716][ T9187] EXT4-fs (loop4): mounted filesystem 00000000-b500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.476186][ T9187] EXT4-fs error (device loop4): ext4_lookup:1815: inode #12: comm syz.4.1255: deleted inode referenced: 14 [ 684.735025][ T9110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 684.839441][ T9110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 684.851892][ T7990] EXT4-fs (loop4): unmounting filesystem 00000000-b500-0000-0000-000000000000. [ 684.912906][ T9110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 684.977513][ T9110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 685.568153][ T9205] 9pnet_fd: Insufficient options for proto=fd [ 685.607503][ T29] audit: type=1326 audit(1722709641.649:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 685.632554][ T29] audit: type=1326 audit(1722709641.649:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 685.655929][ T29] audit: type=1326 audit(1722709641.659:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 685.678463][ T29] audit: type=1326 audit(1722709641.659:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 685.700850][ T29] audit: type=1326 audit(1722709641.669:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 685.726164][ T29] audit: type=1326 audit(1722709641.799:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 685.749310][ T29] audit: type=1326 audit(1722709641.799:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 685.853550][ T5182] Bluetooth: hci1: command tx timeout [ 685.887850][ T29] audit: type=1326 audit(1722709641.929:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 685.910761][ T29] audit: type=1326 audit(1722709641.929:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.114620][ T9205] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 686.122157][ T9205] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 686.225820][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 686.225900][ T29] audit: type=1326 audit(1722709642.319:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.299576][ T29] audit: type=1326 audit(1722709642.359:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.322374][ T29] audit: type=1326 audit(1722709642.359:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.345017][ T9214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1268'. [ 686.358518][ T29] audit: type=1326 audit(1722709642.369:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.380900][ T29] audit: type=1326 audit(1722709642.369:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.403501][ T29] audit: type=1326 audit(1722709642.379:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.426079][ T29] audit: type=1326 audit(1722709642.379:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.451134][ T29] audit: type=1326 audit(1722709642.379:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.474644][ T29] audit: type=1326 audit(1722709642.389:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.497259][ T29] audit: type=1326 audit(1722709642.389:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 686.658076][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.880068][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.002942][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.010847][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.123706][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.131525][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.921909][ T9231] loop4: detected capacity change from 0 to 512 [ 687.980315][ T9231] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 689.076522][ T9243] loop3: detected capacity change from 0 to 1024 [ 689.194607][ T9243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.299811][ T9250] loop0: detected capacity change from 0 to 128 [ 689.365488][ T9250] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 689.414864][ T9250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.519139][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.805209][ T8744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.033219][ T9110] veth0_vlan: entered promiscuous mode [ 690.044477][ T9255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1284'. [ 690.122474][ T9110] veth1_vlan: entered promiscuous mode [ 690.216505][ T9257] loop1: detected capacity change from 0 to 512 [ 690.252709][ T9257] EXT4-fs: Ignoring removed orlov option [ 690.302263][ T9257] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1283: Attempting to read directory block (0) that is past i_size (256) [ 690.318384][ T9257] EXT4-fs (loop1): Remounting filesystem read-only [ 690.327344][ T9257] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 690.341981][ T9257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.511253][ T9260] tipc: Started in network mode [ 690.511273][ T8335] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.518485][ T9260] tipc: Node identity ac1414aa, cluster identity 4711 [ 690.538923][ T9260] tipc: Enabled bearer , priority 10 [ 690.618549][ T9110] veth0_macvtap: entered promiscuous mode [ 690.695602][ T9110] veth1_macvtap: entered promiscuous mode [ 690.851513][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.866917][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.877544][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.888476][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.898778][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.909615][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.919942][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.930891][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.956734][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.963258][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 691.024905][ T9265] loop4: detected capacity change from 0 to 128 [ 691.069830][ T9265] qnx6: unable to read the first superblock [ 691.106528][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.117615][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.127889][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.138763][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.149080][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.166425][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.178375][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.189371][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.205956][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.221174][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 691.246717][ T9110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.262505][ T9110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.271884][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 691.283775][ T9110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.292872][ T9110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.298524][ T25] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 691.311433][ T25] usb 4-1: New USB device strings: Mfr=69, Product=0, SerialNumber=3 [ 691.320004][ T25] usb 4-1: Manufacturer: syz [ 691.325065][ T25] usb 4-1: SerialNumber: syz [ 691.417148][ T25] usb 4-1: config 0 descriptor?? [ 691.528644][ T25] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 691.654485][ T25] tipc: Node number set to 2886997162 [ 691.720534][ T9268] loop1: detected capacity change from 0 to 64 [ 691.742099][ T9263] loop3: detected capacity change from 0 to 16 [ 691.757937][ T9263] erofs: Unknown parameter 'ÿÿÿÿ' [ 691.820432][ T4580] usb 4-1: USB disconnect, device number 11 [ 693.384150][ T4580] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 693.572891][ T9292] loop0: detected capacity change from 0 to 128 [ 693.646359][ T4580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 4 [ 693.658122][ T4580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 13368, setting to 1023 [ 693.670096][ T4580] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 693.679856][ T4580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.718947][ T4580] usb 4-1: config 0 descriptor?? [ 693.992089][ T4580] ath6kl: Failed to submit usb control message: -71 [ 693.999478][ T4580] ath6kl: unable to send the bmi data to the device: -71 [ 694.006953][ T4580] ath6kl: Unable to send get target info: -71 [ 694.038605][ T4580] ath6kl: Failed to init ath6kl core: -71 [ 694.050847][ T4580] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 694.175642][ T4580] usb 4-1: USB disconnect, device number 12 [ 694.527947][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 694.617318][ T9300] loop1: detected capacity change from 0 to 2048 [ 694.725194][ T9302] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 694.805943][ T10] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 694.815689][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 694.829161][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.844452][ T10] usb 1-1: config 1 has no interface number 1 [ 694.850876][ T10] usb 1-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 694.866368][ T10] usb 1-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 694.880841][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 694.936834][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 694.951586][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.964273][ T10] usb 1-1: Product: syz [ 694.968718][ T10] usb 1-1: Manufacturer: syz [ 694.974277][ T10] usb 1-1: SerialNumber: syz [ 695.193052][ T9288] loop4: detected capacity change from 0 to 8192 [ 695.281877][ T9288] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 695.295732][ T9288] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 695.325726][ T9288] REISERFS (device loop4): using ordered data mode [ 695.332666][ T9288] reiserfs: using flush barriers [ 695.406800][ T9288] REISERFS warning (device loop4): sh-458 journal_init_dev: cannot init journal device unknown-block(7,4): -16 [ 695.419196][ T9288] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device [ 695.447097][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 695.527513][ T10] hub 1-1:1.3: bad descriptor, ignoring hub [ 695.535087][ T10] hub 1-1:1.3: probe with driver hub failed with error -5 [ 695.559555][ T9288] REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 695.615505][ T10] usb 1-1: USB disconnect, device number 22 [ 697.550761][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.559348][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.748800][ T9330] blktrace: Concurrent blktraces are not allowed on sg0 [ 697.786824][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.795399][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.675059][ T9340] pimreg: entered allmulticast mode [ 698.766148][ T9340] dvmrp5: entered allmulticast mode [ 698.852698][ T9340] pimreg: left allmulticast mode [ 698.858969][ T9340] dvmrp5: left allmulticast mode [ 699.075759][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'. [ 699.759449][ T9349] loop4: detected capacity change from 0 to 512 [ 699.780613][ T9349] ext4: Unknown parameter 'noacl' [ 700.332184][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 700.533602][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 700.657869][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.670280][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 700.686637][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 700.700168][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 700.709388][ T9360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1319'. [ 700.720619][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.796043][ T8] usb 3-1: config 0 descriptor?? [ 700.815936][ T9356] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 700.896475][ T8] hub 3-1:0.0: USB hub found [ 701.205323][ T8] hub 3-1:0.0: 2 ports detected [ 702.515104][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 702.804257][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 702.945917][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 702.956140][ T10] usb 1-1: config 179 has no interface number 0 [ 702.964496][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 702.978390][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 703.007426][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 703.023037][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 703.052410][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 703.072438][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 703.083034][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.142153][ T9381] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 703.575848][ T5284] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 703.595624][ T4580] usb 3-1: USB disconnect, device number 15 [ 703.972039][ T9390] netlink: 'syz.3.1332': attribute type 21 has an invalid length. [ 704.272623][ T9388] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 705.770628][ T4634] usb 1-1: USB disconnect, device number 23 [ 705.770835][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 705.863661][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 706.093441][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 706.135706][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.147310][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.157634][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 706.167193][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.229878][ T10] usb 4-1: config 0 descriptor?? [ 706.560433][ T9409] loop4: detected capacity change from 0 to 1024 [ 706.600563][ T9409] hfsplus: unable to parse mount options [ 706.767830][ T10] nzxt-smart2 0003:1E71:200F.0016: unknown main item tag 0xe [ 706.844258][ T10] nzxt-smart2 0003:1E71:200F.0016: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.3-1/input0 [ 707.004123][ T10] usb 4-1: USB disconnect, device number 13 [ 707.752645][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 707.879878][ T9429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 707.887666][ T9429] IPv6: NLM_F_CREATE should be set when creating new route [ 707.975001][ T9428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 707.982644][ T9428] IPv6: NLM_F_CREATE should be set when creating new route [ 708.156199][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 708.329735][ T9429] loop4: detected capacity change from 0 to 256 [ 708.397284][ T9429] msdos: Unknown parameter 'noÄq¯êIìØnodots' [ 708.641447][ T9426] loop1: detected capacity change from 0 to 4096 [ 708.713565][ T9426] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 708.758714][ T9426] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 708.903853][ T9440] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 709.713840][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 709.946544][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 710.020042][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 710.029833][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.038328][ T10] usb 4-1: Product: syz [ 710.042781][ T10] usb 4-1: Manufacturer: syz [ 710.047825][ T10] usb 4-1: SerialNumber: syz [ 710.114254][ T10] usb 4-1: config 0 descriptor?? [ 710.409195][ T10] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 710.418876][ T10] eb 9a 3b 80 9b e4 7a f0 [ 710.424447][ T10] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 710.641162][ T4634] usb 4-1: USB disconnect, device number 14 [ 711.432291][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 711.432393][ T29] audit: type=1326 audit(1722709667.519:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 711.461936][ T29] audit: type=1326 audit(1722709667.519:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 711.543772][ T29] audit: type=1326 audit(1722709667.599:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 711.566454][ T29] audit: type=1326 audit(1722709667.599:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 711.589120][ T29] audit: type=1326 audit(1722709667.599:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 711.611671][ T29] audit: type=1326 audit(1722709667.619:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 711.638722][ T29] audit: type=1326 audit(1722709667.659:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 711.662616][ T29] audit: type=1326 audit(1722709667.659:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 711.685367][ T29] audit: type=1326 audit(1722709667.699:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 711.707928][ T29] audit: type=1326 audit(1722709667.699:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 712.066633][ T9475] loop0: detected capacity change from 0 to 2048 [ 712.114052][ T9475] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 712.235163][ T9482] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 712.263551][ T9475] NILFS (loop0): corrupt root inode [ 712.608948][ T9484] loop4: detected capacity change from 0 to 1764 [ 712.636230][ T8205] Bluetooth: hci4: command 0x0406 tx timeout [ 714.234671][ T9507] loop0: detected capacity change from 0 to 256 [ 714.280324][ T9507] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 714.291790][ T9507] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 714.438772][ T9507] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 714.472152][ T9511] loop1: detected capacity change from 0 to 256 [ 714.505111][ T9511] exfat: Deprecated parameter 'namecase' [ 714.506258][ T4580] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 714.592614][ T9511] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 714.753350][ T4580] usb 5-1: Using ep0 maxpacket: 16 [ 714.778836][ T4580] usb 5-1: config 0 interface 0 has no altsetting 0 [ 714.849243][ T4580] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 714.858995][ T4580] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 714.867632][ T4580] usb 5-1: Product: syz [ 714.872083][ T4580] usb 5-1: Manufacturer: syz [ 714.879022][ T4580] usb 5-1: SerialNumber: syz [ 714.956720][ T4580] usb 5-1: config 0 descriptor?? [ 715.237147][ T4580] usb 5-1: selecting invalid altsetting 1 [ 715.348776][ T4580] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 715.397103][ T4580] usb 5-1: USB disconnect, device number 19 [ 715.669166][ T4634] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 715.722223][ T9521] loop0: detected capacity change from 0 to 512 [ 715.723356][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 715.910885][ T4634] usb 3-1: Using ep0 maxpacket: 16 [ 715.954006][ T4634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 715.965307][ T4634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 715.983493][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 716.013819][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.025321][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.041674][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 716.049179][ T4634] usb 3-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=53.f0 [ 716.052744][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.060332][ T4634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.077002][ T4634] usb 3-1: Product: syz [ 716.081507][ T4634] usb 3-1: Manufacturer: syz [ 716.086459][ T4634] usb 3-1: SerialNumber: syz [ 716.125631][ T9525] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1382'. [ 716.143011][ T4634] usb 3-1: config 0 descriptor?? [ 716.161996][ T4634] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 716.170144][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 716.176118][ T10] usb 2-1: config 0 descriptor?? [ 716.180381][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 716.191482][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 716.199805][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 716.208688][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 716.217121][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 716.234162][ T10] hub 2-1:0.0: USB hub found [ 716.286898][ T4634] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 716.298201][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 716.307470][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 716.319445][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 716.329091][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 716.337512][ T4634] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 716.404249][ T4634] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 716.501640][ T10] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 716.567690][ T4634] usb 3-1: USB disconnect, device number 16 [ 716.626549][ T4634] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 716.693242][ T4634] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 716.705530][ T4634] keyspan 3-1:0.0: device disconnected [ 716.793868][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 716.800796][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 716.886997][ T10] usb 2-1: USB disconnect, device number 18 [ 717.510347][ T9532] loop3: detected capacity change from 0 to 1764 [ 717.547223][ T9532] iso9660: Unknown parameter '' [ 717.874969][ T9532] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 717.961941][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 717.962033][ T29] audit: type=1326 audit(1722709674.029:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.3.1385" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x0 [ 718.574384][ T29] audit: type=1326 audit(1722709674.609:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.2.1392" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0 [ 718.707595][ T9553] loop3: detected capacity change from 0 to 256 [ 719.082614][ T9553] FAT-fs (loop3): Directory bread(block 64) failed [ 719.090013][ T9553] FAT-fs (loop3): Directory bread(block 65) failed [ 719.097253][ T9553] FAT-fs (loop3): Directory bread(block 66) failed [ 719.104320][ T9553] FAT-fs (loop3): Directory bread(block 67) failed [ 719.116894][ T9553] FAT-fs (loop3): Directory bread(block 68) failed [ 719.125529][ T9553] FAT-fs (loop3): Directory bread(block 69) failed [ 719.132525][ T9553] FAT-fs (loop3): Directory bread(block 70) failed [ 719.139461][ T9553] FAT-fs (loop3): Directory bread(block 71) failed [ 719.146590][ T9553] FAT-fs (loop3): Directory bread(block 72) failed [ 719.153544][ T9553] FAT-fs (loop3): Directory bread(block 73) failed [ 719.219232][ T5284] kernel read not supported for file /newroot/73 (pid: 5284 comm: kworker/0:6) [ 719.997519][ T29] audit: type=1326 audit(1722709676.009:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 720.021763][ T29] audit: type=1326 audit(1722709676.009:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 720.056089][ T29] audit: type=1326 audit(1722709676.009:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 720.079498][ T29] audit: type=1326 audit(1722709676.019:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 720.102803][ T29] audit: type=1326 audit(1722709676.019:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 720.126009][ T29] audit: type=1326 audit(1722709676.059:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 720.156427][ T29] audit: type=1326 audit(1722709676.069:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 720.164641][ T4634] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 720.186163][ T29] audit: type=1326 audit(1722709676.089:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.4.1398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 720.315422][ T9568] loop1: detected capacity change from 0 to 256 [ 720.401547][ T9568] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 720.426739][ T4634] usb 1-1: Using ep0 maxpacket: 32 [ 720.527318][ T4634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 720.544601][ T4634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 720.558788][ T4634] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 720.569458][ T4634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.630845][ T4634] usb 1-1: config 0 descriptor?? [ 720.654520][ T9563] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 720.686540][ T4634] hub 1-1:0.0: USB hub found [ 720.851845][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.862104][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.884051][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 720.961772][ T9563] vlan0: entered promiscuous mode [ 720.967353][ T9563] vlan0: entered allmulticast mode [ 721.102004][ T9563] veth0_vlan: entered allmulticast mode [ 721.109461][ T9563] vlan0: left promiscuous mode [ 721.115905][ T9563] vlan0: left allmulticast mode [ 721.121019][ T9563] veth0_vlan: left allmulticast mode [ 721.138170][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 721.209534][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.221107][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.231395][ T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 721.240936][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.324276][ T10] usb 2-1: config 0 descriptor?? [ 721.611887][ T4634] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 721.692023][ T4634] usbhid 1-1:0.0: can't add hid device: -71 [ 721.699589][ T4634] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 721.812848][ T4634] usb 1-1: USB disconnect, device number 24 [ 721.868559][ T10] hid-steam 0003:28DE:1142.0017: item fetching failed at offset 2/5 [ 721.917287][ T10] hid-steam 0003:28DE:1142.0017: steam_probe:parse of hid interface failed [ 721.926775][ T10] hid-steam 0003:28DE:1142.0017: probe with driver hid-steam failed with error -22 [ 721.971370][ T9580] loop2: detected capacity change from 0 to 1764 [ 722.006748][ T9580] iso9660: Unknown parameter 'ÿ' [ 722.105099][ T10] usb 2-1: USB disconnect, device number 19 [ 722.167593][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.175797][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.189799][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.200249][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.209636][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.219017][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.228213][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.236275][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.244230][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.251947][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.259903][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.267773][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.275664][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.289490][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.298912][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.307582][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.315496][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.323372][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.331097][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.339093][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.346965][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.354872][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.362609][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.370467][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.378322][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.392136][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.401929][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.409853][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.417795][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.425640][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.433504][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.441259][ T1056] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 722.518224][ T1056] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 722.643879][ T5816] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 722.686412][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 722.856749][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 722.868513][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 722.882027][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 722.893015][ T5816] usb 4-1: New USB device found, idVendor=05da, idProduct=80ac, bcdDevice=31.b5 [ 722.903050][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.955944][ T5816] usb 4-1: config 0 descriptor?? [ 722.965789][ T25] usb 5-1: config 0 has no interfaces? [ 722.971967][ T25] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 722.981401][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.010726][ T5816] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 5 is not bulk. [ 723.020803][ T5816] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 13 is not bulk. [ 723.031038][ T5816] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 9 is not bulk. [ 723.041150][ T5816] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 723.055764][ T25] usb 5-1: config 0 descriptor?? [ 723.198243][ T5816] usb 4-1: USB disconnect, device number 15 [ 723.528592][ T9596] loop2: detected capacity change from 0 to 512 [ 723.549732][ T9596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 723.581978][ T9596] EXT4-fs (loop2): 1 truncate cleaned up [ 723.590280][ T9596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.925588][ T9110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.964810][ T5816] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 725.056486][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.230223][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.263508][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.275593][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.285902][ T5816] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 725.295755][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.333902][ T5247] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 725.336179][ T5816] usb 4-1: config 0 descriptor?? [ 725.465167][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.508788][ T4634] usb 5-1: USB disconnect, device number 20 [ 725.604220][ T5247] usb 1-1: Using ep0 maxpacket: 16 [ 725.651928][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.666354][ T5247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.666644][ T5247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.666813][ T5247] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 725.667076][ T5247] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 725.667257][ T5247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.801241][ T5247] usb 1-1: config 0 descriptor?? [ 725.896289][ T5816] lg-g15 0003:046D:C222.0019: item fetching failed at offset 0/11 [ 725.931412][ T5816] lg-g15 0003:046D:C222.0019: probe with driver lg-g15 failed with error -22 [ 726.162880][ T11] bridge_slave_1: left allmulticast mode [ 726.169365][ T11] bridge_slave_1: left promiscuous mode [ 726.169834][ T5816] usb 4-1: USB disconnect, device number 16 [ 726.186902][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.227222][ T11] bridge_slave_0: left allmulticast mode [ 726.235706][ T11] bridge_slave_0: left promiscuous mode [ 726.246699][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.605087][ T5247] shield 0003:0955:7214.001A: item fetching failed at offset 1/5 [ 726.624600][ T5247] shield 0003:0955:7214.001A: Parse failed [ 726.631185][ T5247] shield 0003:0955:7214.001A: probe with driver shield failed with error -22 [ 726.864893][ T5816] usb 1-1: USB disconnect, device number 25 [ 726.903060][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.965279][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.039381][ T11] bond0 (unregistering): Released all slaves [ 727.690008][ T11] hsr_slave_0: left promiscuous mode [ 727.761997][ T11] hsr_slave_1: left promiscuous mode [ 727.824272][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.832469][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.949438][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.958443][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.007320][ T11] veth1_macvtap: left promiscuous mode [ 728.021356][ T11] veth0_macvtap: left promiscuous mode [ 728.027902][ T11] veth1_vlan: left promiscuous mode [ 728.033950][ T11] veth0_vlan: left promiscuous mode [ 728.472192][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 728.472283][ T29] audit: type=1326 audit(1722709684.459:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 728.514321][ T29] audit: type=1326 audit(1722709684.549:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 728.542993][ T29] audit: type=1326 audit(1722709684.549:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 728.565912][ T29] audit: type=1326 audit(1722709684.549:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 728.588638][ T29] audit: type=1326 audit(1722709684.609:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 728.614753][ T29] audit: type=1326 audit(1722709684.609:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 728.641754][ T29] audit: type=1326 audit(1722709684.609:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 728.670336][ T3456] ===================================================== [ 728.678039][ T3456] BUG: KMSAN: uninit-value in n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 728.687056][ T3456] n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 728.693688][ T3456] tty_port_default_lookahead_buf+0x144/0x210 [ 728.700658][ T3456] flush_to_ldisc+0x8ec/0xdb0 [ 728.706680][ T3456] process_scheduled_works+0xae0/0x1c40 [ 728.713217][ T3456] worker_thread+0xea5/0x1520 [ 728.718585][ T3456] kthread+0x3dd/0x540 [ 728.723553][ T3456] ret_from_fork+0x6d/0x90 [ 728.729164][ T3456] ret_from_fork_asm+0x1a/0x30 [ 728.744503][ T3456] [ 728.750009][ T3456] Uninit was created at: [ 728.754978][ T3456] __kmalloc_noprof+0x661/0xf30 [ 728.760668][ T3456] __tty_buffer_request_room+0x36e/0x6d0 [ 728.767395][ T3456] __tty_insert_flip_string_flags+0x140/0x570 [ 728.777123][ T3456] uart_insert_char+0x39e/0xa10 [ 728.783426][ T3456] serial8250_read_char+0x1a7/0x5d0 [ 728.789545][ T3456] serial8250_handle_irq+0x77a/0xb80 [ 728.796716][ T3456] serial8250_default_handle_irq+0x120/0x2b0 [ 728.803454][ T3456] serial8250_interrupt+0xc5/0x360 [ 728.809403][ T3456] __handle_irq_event_percpu+0x118/0xca0 [ 728.815926][ T3456] handle_irq_event+0xef/0x2c0 [ 728.821376][ T3456] handle_edge_irq+0x340/0xfb0 [ 728.827234][ T3456] __common_interrupt+0x97/0x1f0 [ 728.841281][ T3456] common_interrupt+0x8f/0xa0 [ 728.849700][ T3456] asm_common_interrupt+0x2b/0x40 [ 728.855693][ T3456] [ 728.858744][ T3456] CPU: 0 UID: 0 PID: 3456 Comm: kworker/u8:20 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 728.870642][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 728.881602][ T3456] Workqueue: events_unbound flush_to_ldisc [ 728.888510][ T3456] ===================================================== [ 728.896398][ T3456] Disabling lock debugging due to kernel taint [ 728.903502][ T3456] Kernel panic - not syncing: kmsan.panic set ... [ 728.910085][ T3456] CPU: 0 UID: 0 PID: 3456 Comm: kworker/u8:20 Tainted: G B 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 728.922761][ T3456] Tainted: [B]=BAD_PAGE [ 728.927031][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 728.937262][ T3456] Workqueue: events_unbound flush_to_ldisc [ 728.943355][ T3456] Call Trace: [ 728.946764][ T3456] [ 728.949809][ T3456] dump_stack_lvl+0x216/0x2d0 [ 728.954700][ T3456] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 728.960751][ T3456] dump_stack+0x1e/0x30 [ 728.965106][ T3456] panic+0x4e2/0xcd0 [ 728.969188][ T3456] ? kmsan_get_metadata+0x91/0x1c0 [ 728.974542][ T3456] kmsan_report+0x2c7/0x2d0 [ 728.979279][ T3456] ? up_read+0x74/0x1e0 [ 728.983616][ T3456] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 728.989654][ T3456] ? __msan_warning+0x95/0x120 [ 728.994621][ T3456] ? n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 729.000625][ T3456] ? tty_port_default_lookahead_buf+0x144/0x210 [ 729.007107][ T3456] ? flush_to_ldisc+0x8ec/0xdb0 [ 729.012173][ T3456] ? process_scheduled_works+0xae0/0x1c40 [ 729.018102][ T3456] ? worker_thread+0xea5/0x1520 [ 729.023170][ T3456] ? kthread+0x3dd/0x540 [ 729.027630][ T3456] ? ret_from_fork+0x6d/0x90 [ 729.032399][ T3456] ? ret_from_fork_asm+0x1a/0x30 [ 729.037558][ T3456] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 729.044152][ T3456] ? kvm_set_cpu_l1tf_flush_l1d+0x1f/0x30 [ 729.050121][ T3456] ? common_interrupt+0x5b/0xa0 [ 729.055198][ T3456] ? __pfx_n_tty_lookahead_flow_ctrl+0x10/0x10 [ 729.061554][ T3456] ? n_tty_receive_char_flow_ctrl+0x64/0x440 [ 729.067738][ T3456] ? kmsan_get_metadata+0x13e/0x1c0 [ 729.073188][ T3456] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 729.079232][ T3456] ? kmsan_get_metadata+0x13e/0x1c0 [ 729.084652][ T3456] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 729.090703][ T3456] __msan_warning+0x95/0x120 [ 729.095521][ T3456] n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 729.101357][ T3456] ? __pfx_n_tty_lookahead_flow_ctrl+0x10/0x10 [ 729.107711][ T3456] tty_port_default_lookahead_buf+0x144/0x210 [ 729.114047][ T3456] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 729.120869][ T3456] flush_to_ldisc+0x8ec/0xdb0 [ 729.125754][ T3456] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 729.132607][ T3456] ? __pfx_flush_to_ldisc+0x10/0x10 [ 729.138024][ T3456] process_scheduled_works+0xae0/0x1c40 [ 729.143827][ T3456] worker_thread+0xea5/0x1520 [ 729.148746][ T3456] kthread+0x3dd/0x540 [ 729.153042][ T3456] ? __pfx_worker_thread+0x10/0x10 [ 729.158403][ T3456] ? __pfx_kthread+0x10/0x10 [ 729.163220][ T3456] ret_from_fork+0x6d/0x90 [ 729.167836][ T3456] ? __pfx_kthread+0x10/0x10 [ 729.172648][ T3456] ret_from_fork_asm+0x1a/0x30 [ 729.177649][ T3456] [ 729.182386][ T3456] Kernel Offset: disabled [ 729.186800][ T3456] Rebooting in 86400 seconds..