last executing test programs: 27.09532869s ago: executing program 2 (id=1816): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000480)={0x0, 0x40, 0x2}, &(0x7f00000002c0), &(0x7f00000001c0)) io_uring_enter(r0, 0x219, 0x0, 0x7, 0x0, 0x0) 26.812734286s ago: executing program 2 (id=1818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="0800390000000100080026000816000008009f00060000000800570038"], 0x3c}}, 0x0) 26.76850737s ago: executing program 2 (id=1819): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x41b8123b685f56fd, 0x0) memfd_create(0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000000500000002000000040000000500", @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="16f201ccfe53d95c7ce3e1ee3e7800"/41], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x5b, 0x0, 0x0, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xa9, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400038014000180080001000000000008000200ac1e00010c000280050001000000000002000740000000011c001080080001400000000008000240000000000800034000000000359e560ecfe7cdc8a3c91fa6e918ea6fce10f2fb63146372750d3f5bb818349d5d70150913068a0f72062d0b"], 0x80}}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0'}, 0xb) sendto$inet(r4, &(0x7f0000000780)='+', 0xffc3, 0x0, 0x0, 0x0) 25.78392604s ago: executing program 2 (id=1822): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="000000000000000034001280080001007369740028000280"], 0x54}}, 0x0) 25.67791015s ago: executing program 2 (id=1826): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket(0x10, 0x80003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000340)='wchan\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x94}}, 0x0) 22.5191485s ago: executing program 2 (id=1840): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 10.98848813s ago: executing program 1 (id=1888): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4efad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000082c0)={0x2020}, 0x2020) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 7.17972398s ago: executing program 1 (id=1891): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0xbd4, 0x0, 0x0, 0x20000}, [@TCA_NETEM_CORR={0x10, 0x1, {0x3, 0xa46, 0x2}}]}}}]}, 0x5c}}, 0x8000) 7.022378254s ago: executing program 0 (id=1894): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000000c0)={0x0, 0x0, 0x6, "e89fbc082d6b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xe62390}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) set_robust_list(&(0x7f0000000080), 0xc) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r7, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x24}}, 0x50) 6.814127774s ago: executing program 1 (id=1896): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2) getsockname(r6, &(0x7f0000000d00)=@xdp, &(0x7f0000000c80)=0x80) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x0) r8 = socket(0x1, 0x5, 0x0) recvmmsg$unix(r8, &(0x7f0000003140), 0x0, 0x100, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000200)) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.695235015s ago: executing program 4 (id=1897): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 5.090786932s ago: executing program 1 (id=1898): socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x51, 0x24, 0xe4, 0x40, 0x57c, 0x2200, 0x4629, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0x100, 0x0, [{{0x9, 0x4, 0xfe, 0x1, 0x0, 0x17, 0x44, 0x6a}}]}}]}}, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006e090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90d5943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) 4.912637668s ago: executing program 4 (id=1900): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket(0x10, 0x80003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000340)='wchan\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x94}}, 0x0) 4.050249168s ago: executing program 3 (id=1901): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4efad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000082c0)={0x2020}, 0x2020) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 3.26121477s ago: executing program 0 (id=1902): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0, 0x0, 0x4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) close(r1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x10) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 3.070212707s ago: executing program 3 (id=1903): pipe2(&(0x7f0000000040), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nouser_xattr}]}, 0x1, 0x513, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOt7rW1aSpOmNOk6LYt28T8QQcEnn3wR/AOEZR78A2RgQF/EB1FRRGf0QVDnSpIbp5Mmbd1pm07z+cBpzrn35n7PuSEn98fpvQGMrRci4o2ImIiIlyOimE9P87TYLux3l7t/753ldkoiy976axJJPq23rnZ5MiKud98SUxHxtS9HfDM5HLe5u7exVKtVt/NypVXfqjR3926u15fWqmvVzfn5udcWXl94dWE2yz1WO0u9zE++9Pn3Pv2t3y3++ca329X63EeiEH3tOE3dphc626KnvY22zyLYCEzk7SmMuiIAAJxIex//gxHxic7+fzEmOntzfSZGUTMAAADgtGRfmI5/JxEZAAAAcGmlETEdSVrOxwJMR5peyc8NfDiupbVGs/Wp1cbO5kp7XkQpCunqeq06m48VLkUhaZfn8jG2vfIrfeX5iHgmIr5fvNopl5cbtZURn/sAAACAcXG97/j/H8W0kz/egP8TAAAAAC6u0tACAAAAcFk45AcAAIDLr//4/70R1QMAAAA4E1958812ynrPv155e3dno/H2zZVqc6Nc31kuLze2t8prjcZa55599ePWV2s0tj4Tmzu3Kq1qs1Vp7u4t1hs7m63F9UcegQ0AAACco2c+fvvXSUTsf/ZqJ0V+H0CAR/xh1BUATtPEqCsAjIy7eMP4Koy6AsDIJcfMN3gHAACefDMfPXz9v/f8f+cG4HIz1gcAxo/r/zC+CkYAwlhLI+ID3exTw5YZev3/lyeNkmURd4oHpzi/CAAA52u6k5K0nB8HTEealssRT0ekpSgkq+u16mx+fPCrYuGpdnmu887k2DHDAAAAAAAAAAAAAAAAAAAAAAAAAEBXliWRAQAAAJdaRPqnpHM3/4iZ4kvT/ecHriT/LMYf88KP3vrBraVWa3uuPf1vnWd5XYmI1g/z6a8MfXwYAAAAcNqS/aGzusfp+evcudYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDFw/947y710nnH/8sWIKA2KPxlTndepKETEtb8nMXngfUlETJxC/P13I+LZQfGTeJBlWSmvxaD4V884fqmzaQbHTyPi+inEh3F2u93/vDHo+5fGC53Xwd+/yTw9ruH9X5pHfrbTzw3qf54+tLb6wBjP3f1ZZWj8dyOemxzc//T632RI/BcPre1fWZYdjvGNr+/tDYuf/ThiZuDvT/JIrEqrvlVp7u7dXK8vrVXXqpvz83OvLby+8OrCbGV1vVbN/w6M8b2P/fzBUe2/NiD+b3/T7X+Pav9Lw1ba5z93b937UDdbGBT/xosDf3+nYkj8NP/t+2Seb8+f6eX3u/mDnv/pneePav/KkO1/3Od/44Ttf/mr3/39CRcFAM5Bc3dvY6lWq24fkZk6wTJPYuYXUxeiGv9nJvtO95O7KPV5v5n23urDKb1WXYCKHchk5xZrIi5Ik/+XGWm3BAAAnIGHO/2jrgkAAAAAAAAAAAAAAAAAAACMr/O4nVh/zP3RNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ej/DQAA///M/t/r") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x38, r5, 0x703, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x38}}, 0x0) 3.021703932s ago: executing program 4 (id=1904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000034001280080001007369740028000280"], 0x54}}, 0x0) 2.756457936s ago: executing program 1 (id=1905): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0xbd4, 0x0, 0x0, 0x20000}, [@TCA_NETEM_CORR={0x10, 0x1, {0x3, 0xa46, 0x2}}]}}}]}, 0x5c}}, 0x8000) 2.535422027s ago: executing program 4 (id=1906): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0107000000000000000067000000080001004b000000080006"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.143657573s ago: executing program 0 (id=1907): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2) getsockname(r6, &(0x7f0000000d00)=@xdp, &(0x7f0000000c80)=0x80) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x0) r8 = socket(0x1, 0x5, 0x0) recvmmsg$unix(r8, &(0x7f0000003140), 0x0, 0x100, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000200)) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.982922737s ago: executing program 3 (id=1908): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f00000010c0)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x10, 0x29, 0x37}], 0x10, 0x20040000}], 0x1, 0x40010) 1.784420166s ago: executing program 4 (id=1909): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x80}, {0x6, 0x0, 0xff}]}) socket$inet_dccp(0x2, 0x6, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x1ad) r1 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES64=r0], 0x2b) sendfile(r3, r1, 0x0, 0x4000000053d2) 1.747327419s ago: executing program 1 (id=1910): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0x2, 0x1, 0x0) shutdown(r2, 0x0) ioctl$TIOCCONS(r1, 0x541d) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa}}, 0xffff}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009200)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x8}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 1.209075429s ago: executing program 3 (id=1911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.176586202s ago: executing program 0 (id=1912): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4efad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000082c0)={0x2020}, 0x2020) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 1.119313327s ago: executing program 4 (id=1913): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket(0x10, 0x80003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000340)='wchan\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x94}}, 0x0) 658.249899ms ago: executing program 3 (id=1914): syz_io_uring_setup(0x222f, &(0x7f0000000080)={0x0, 0x0, 0x800}, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x80000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/30}, {&(0x7f0000000380)=""/58}, {&(0x7f0000000440)=""/39}, {&(0x7f0000000540)=""/120}], 0x19, 0x0, 0x0) r2 = getpid() creat(&(0x7f0000000280)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "d9b0db7b77b7ea4df776f6b4061440d6ef44477d5b183973aa0ec402b72eed48529a44fe36e91a79344b777fd81334346ff64025e77fcfbc91e29ed9895d69d06e4dc56bbc6a4879d0b34d9b0f0069f9"}, 0xd8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75825f69643d", @ANYRESDEC=0x0, @ANYRESOCT]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='mountinfo\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x2, 0x4b6, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0}) r6 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r2, r6, 0x7, r1, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x9}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r7, &(0x7f0000004440)={0x2020}, 0x2020) 199.666082ms ago: executing program 0 (id=1915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000034001280080001007369740028000280"], 0x54}}, 0x0) 31.651537ms ago: executing program 3 (id=1916): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0, 0x0, 0x4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) close(r1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x10) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 0s ago: executing program 0 (id=1917): pipe2(&(0x7f0000000040), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nouser_xattr}]}, 0x1, 0x513, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOt7rW1aSpOmNOk6LYt28T8QQcEnn3wR/AOEZR78A2RgQF/EB1FRRGf0QVDnSpIbp5Mmbd1pm07z+cBpzrn35n7PuSEn98fpvQGMrRci4o2ImIiIlyOimE9P87TYLux3l7t/753ldkoiy976axJJPq23rnZ5MiKud98SUxHxtS9HfDM5HLe5u7exVKtVt/NypVXfqjR3926u15fWqmvVzfn5udcWXl94dWE2yz1WO0u9zE++9Pn3Pv2t3y3++ca329X63EeiEH3tOE3dphc626KnvY22zyLYCEzk7SmMuiIAAJxIex//gxHxic7+fzEmOntzfSZGUTMAAADgtGRfmI5/JxEZAAAAcGmlETEdSVrOxwJMR5peyc8NfDiupbVGs/Wp1cbO5kp7XkQpCunqeq06m48VLkUhaZfn8jG2vfIrfeX5iHgmIr5fvNopl5cbtZURn/sAAACAcXG97/j/H8W0kz/egP8TAAAAAC6u0tACAAAAcFk45AcAAIDLr//4/70R1QMAAAA4E1958812ynrPv155e3dno/H2zZVqc6Nc31kuLze2t8prjcZa55599ePWV2s0tj4Tmzu3Kq1qs1Vp7u4t1hs7m63F9UcegQ0AAACco2c+fvvXSUTsf/ZqJ0V+H0CAR/xh1BUATtPEqCsAjIy7eMP4Koy6AsDIJcfMN3gHAACefDMfPXz9v/f8f+cG4HIz1gcAxo/r/zC+CkYAwlhLI+ID3exTw5YZev3/lyeNkmURd4oHpzi/CAAA52u6k5K0nB8HTEealssRT0ekpSgkq+u16mx+fPCrYuGpdnmu887k2DHDAAAAAAAAAAAAAAAAAAAAAAAAAEBXliWRAQAAAJdaRPqnpHM3/4iZ4kvT/ecHriT/LMYf88KP3vrBraVWa3uuPf1vnWd5XYmI1g/z6a8MfXwYAAAAcNqS/aGzusfp+evcudYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDFw/947y710nnH/8sWIKA2KPxlTndepKETEtb8nMXngfUlETJxC/P13I+LZQfGTeJBlWSmvxaD4V884fqmzaQbHTyPi+inEh3F2u93/vDHo+5fGC53Xwd+/yTw9ruH9X5pHfrbTzw3qf54+tLb6wBjP3f1ZZWj8dyOemxzc//T632RI/BcPre1fWZYdjvGNr+/tDYuf/ThiZuDvT/JIrEqrvlVp7u7dXK8vrVXXqpvz83OvLby+8OrCbGV1vVbN/w6M8b2P/fzBUe2/NiD+b3/T7X+Pav9Lw1ba5z93b937UDdbGBT/xosDf3+nYkj8NP/t+2Seb8+f6eX3u/mDnv/pneePav/KkO1/3Od/44Ttf/mr3/39CRcFAM5Bc3dvY6lWq24fkZk6wTJPYuYXUxeiGv9nJvtO95O7KPV5v5n23urDKb1WXYCKHchk5xZrIi5Ik/+XGWm3BAAAnIGHO/2jrgkAAAAAAAAAAAAAAAAAAACMr/O4nVh/zP3RNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ej/DQAA///M/t/r") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x38, r5, 0x703, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): .257035][ T6616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.285842][ T6616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.369071][ T6616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.412748][ T6616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.482113][ T6616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.619757][ T6616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.119679][ T6949] sctp: [Deprecated]: syz.1.848 (pid 6949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.119679][ T6949] Use struct sctp_sack_info instead [ 325.478686][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.515315][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.677445][ T6616] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.686632][ T6616] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.985145][ T6616] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.016740][ T6616] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.183246][ T6791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 327.249324][ T34] device hsr_slave_0 left promiscuous mode [ 327.267469][ T34] device hsr_slave_1 left promiscuous mode [ 327.331623][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.387179][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.456277][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.488121][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.503794][ T34] device batadv0 left promiscuous mode [ 327.509733][ T34] bridge0: port 3(batadv0) entered disabled state [ 327.549045][ T34] device bridge_slave_1 left promiscuous mode [ 327.555985][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.565604][ T34] device bridge_slave_0 left promiscuous mode [ 327.572380][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.604958][ T34] device veth1_macvtap left promiscuous mode [ 327.611428][ T34] device veth0_macvtap left promiscuous mode [ 327.618807][ T34] device veth1_vlan left promiscuous mode [ 327.624905][ T34] device veth0_vlan left promiscuous mode [ 327.654373][ T151] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 327.667001][ T6980] syz.2.854[6980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.667103][ T6980] syz.2.854[6980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.680963][ T6980] netlink: 'syz.2.854': attribute type 3 has an invalid length. [ 327.897063][ T151] usb 4-1: Using ep0 maxpacket: 32 [ 328.045268][ T151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.080396][ T151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.093805][ T151] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 328.354491][ T4456] Bluetooth: hci5: Frame reassembly failed (-84) [ 328.758564][ T151] usb 4-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 328.776066][ T151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.809736][ T151] usb 4-1: config 0 descriptor?? [ 329.893413][ T34] team0 (unregistering): Port device team_slave_1 removed [ 329.978649][ T34] team0 (unregistering): Port device team_slave_0 removed [ 330.028989][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.087446][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.281855][ T3648] Bluetooth: hci5: command 0x1003 tx timeout [ 330.288853][ T3645] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 330.984045][ T7005] sctp: [Deprecated]: syz.2.859 (pid 7005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.984045][ T7005] Use struct sctp_sack_info instead [ 331.034172][ T34] bond0 (unregistering): Released all slaves [ 331.085352][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.860'. [ 331.235550][ T6791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 331.722088][ T151] usb 4-1: can't set config #0, error -71 [ 332.057123][ T151] usb 4-1: USB disconnect, device number 10 [ 332.069611][ T6791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.208065][ T6791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.333929][ T5405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.372361][ T5405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.446017][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 332.483642][ T3714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.524500][ T3714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.547875][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 332.570217][ T7021] loop3: detected capacity change from 0 to 164 [ 332.624170][ T7021] ISOFS: unable to read i-node block [ 332.815308][ T6791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.832667][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.843840][ T27] audit: type=1326 audit(1728427037.898:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 333.496913][ T27] audit: type=1326 audit(1728427037.898:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 333.544417][ T27] audit: type=1326 audit(1728427037.898:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 333.570571][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.581963][ T27] audit: type=1326 audit(1728427037.898:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 333.610352][ T7025] lo speed is unknown, defaulting to 1000 [ 333.761371][ T6791] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.769912][ T27] audit: type=1326 audit(1728427037.898:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 334.252986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.373767][ T27] audit: type=1326 audit(1728427037.898:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 334.394949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.398079][ T27] audit: type=1326 audit(1728427037.898:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 334.430974][ T7032] sctp: [Deprecated]: syz.4.868 (pid 7032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.430974][ T7032] Use struct sctp_sack_info instead [ 334.456953][ T27] audit: type=1326 audit(1728427037.898:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 334.502221][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.510770][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.514388][ T27] audit: type=1326 audit(1728427037.898:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 334.544950][ T27] audit: type=1326 audit(1728427037.898:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 334.658841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.683840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.708533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.720225][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.727399][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.757373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.767182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.782228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.810924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.841298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.861256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.882138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.919327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.955099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.013301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.033733][ T7035] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 335.060737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.109537][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.521667][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.534065][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.558287][ T6791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.621061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.644660][ T3633] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 335.660316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.699354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.714076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.733391][ T6791] device veth0_vlan entered promiscuous mode [ 335.754933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.771239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.792468][ T6791] device veth1_vlan entered promiscuous mode [ 335.839188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.855518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 335.882843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.907093][ T3633] usb 5-1: Using ep0 maxpacket: 32 [ 335.918574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.950722][ T6791] device veth0_macvtap entered promiscuous mode [ 335.981199][ T6791] device veth1_macvtap entered promiscuous mode [ 336.031932][ T3633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.053434][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.074692][ T3633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.094400][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.105115][ T3633] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 336.119391][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.130270][ T3633] usb 5-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 336.139803][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.157250][ T3633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.167137][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.192551][ T3633] usb 5-1: config 0 descriptor?? [ 336.209165][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.245267][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.289729][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.323867][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.351365][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.384883][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.408648][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.423065][ T7060] loop1: detected capacity change from 0 to 2048 [ 336.444445][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.494260][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.535638][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.559059][ T7060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 336.560939][ T6791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.587786][ T6791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.603663][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.616036][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.625471][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.642266][ T6791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.654706][ T6791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.666425][ T6791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.684438][ T6791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.610724][ T3714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.651037][ T6330] EXT4-fs (loop1): unmounting filesystem. [ 339.677153][ T3714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.693159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.837323][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.878039][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.913723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.961581][ T7085] netlink: 100 bytes leftover after parsing attributes in process `syz.3.885'. [ 341.077735][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 341.233083][ T7099] netlink: 36 bytes leftover after parsing attributes in process `syz.1.889'. [ 341.625292][ T7105] syz.1.891[7105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.625395][ T7105] syz.1.891[7105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.667845][ T3633] usbhid 5-1:0.0: can't add hid device: -71 [ 341.697009][ T3633] usbhid: probe of 5-1:0.0 failed with error -71 [ 341.717133][ T3633] usb 5-1: USB disconnect, device number 6 [ 341.733298][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 341.733311][ T27] audit: type=1326 audit(1728427046.788:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d7dff9 code=0x0 [ 341.902258][ T27] audit: type=1326 audit(1728427046.918:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 341.935340][ T7118] netlink: 'syz.0.895': attribute type 10 has an invalid length. [ 341.953823][ T27] audit: type=1326 audit(1728427046.918:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 342.004135][ T27] audit: type=1326 audit(1728427046.918:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 342.038349][ T7118] device geneve0 entered promiscuous mode [ 342.091328][ T27] audit: type=1326 audit(1728427046.918:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 342.169349][ T7118] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 342.185526][ T27] audit: type=1326 audit(1728427046.918:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 342.249738][ T27] audit: type=1326 audit(1728427046.918:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 342.289702][ T27] audit: type=1326 audit(1728427046.918:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 344.385868][ T7128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 346.875156][ T7154] overlayfs: failed to resolve './file2': -2 [ 347.830589][ T3645] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 347.883293][ T7153] dccp_xmit_packet: Payload too large (65475) for featneg. [ 348.157105][ T3688] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 348.204642][ T7160] loop3: detected capacity change from 0 to 1024 [ 348.214006][ T7160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.424012][ T7160] JBD2: no valid journal superblock found [ 349.047034][ T7160] EXT4-fs (loop3): error loading journal [ 349.087511][ T3688] usb 5-1: Using ep0 maxpacket: 32 [ 349.096245][ T7169] loop2: detected capacity change from 0 to 512 [ 349.107769][ T7169] EXT4-fs: Ignoring removed bh option [ 349.114130][ T7160] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 351.364952][ T7169] EXT4-fs error (device loop2): __ext4_iget:5055: inode #15: block 1803188595: comm syz.2.911: invalid block [ 351.582537][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.913'. [ 351.607314][ T3688] usb 5-1: device descriptor read/all, error -71 [ 351.661531][ T7169] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.911: couldn't read orphan inode 15 (err -117) [ 351.760405][ T7169] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 351.812894][ T27] audit: type=1800 audit(1728427056.868:523): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.911" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 351.844454][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 351.913312][ T3649] EXT4-fs (loop2): unmounting filesystem. [ 352.014988][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 356.229953][ T3633] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 356.471322][ T3633] usb 4-1: Using ep0 maxpacket: 32 [ 356.591607][ T3633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.634035][ T3633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.691555][ T3633] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 356.753289][ T3633] usb 4-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 356.774315][ T3633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.814375][ T3633] usb 4-1: config 0 descriptor?? [ 356.997617][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 357.006065][ T3645] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 357.354159][ T27] audit: type=1326 audit(1728427062.408:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.2.936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x0 [ 357.376782][ T3633] usbhid 4-1:0.0: can't add hid device: -71 [ 357.383610][ T3633] usbhid: probe of 4-1:0.0 failed with error -71 [ 357.408524][ T3633] usb 4-1: USB disconnect, device number 11 [ 357.485267][ T7260] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 357.655015][ T7265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.938'. [ 357.780982][ T27] audit: type=1326 audit(1728427062.838:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 357.849157][ T27] audit: type=1326 audit(1728427062.878:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 357.892673][ T27] audit: type=1326 audit(1728427062.878:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 357.942928][ T27] audit: type=1326 audit(1728427062.878:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 358.010764][ T27] audit: type=1326 audit(1728427062.918:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 358.072265][ T27] audit: type=1326 audit(1728427062.928:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 358.122512][ T27] audit: type=1326 audit(1728427062.928:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 358.149013][ T7276] loop3: detected capacity change from 0 to 512 [ 358.165875][ T7276] ext4: Unknown parameter 'nouser_xattr' [ 358.529990][ T27] audit: type=1326 audit(1728427063.588:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 358.583594][ T7285] loop3: detected capacity change from 0 to 128 [ 358.614530][ T27] audit: type=1326 audit(1728427063.608:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 358.937589][ T7289] syz.3.945: attempt to access beyond end of device [ 358.937589][ T7289] loop3: rw=2049, sector=145, nr_sectors = 544 limit=128 [ 359.857335][ T7300] xt_HMARK: spi-set and port-set can't be combined [ 360.207324][ T3648] Bluetooth: hci0: command 0x0406 tx timeout [ 360.272364][ T7302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.950'. [ 360.388035][ T7304] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.951'. [ 360.605556][ T7310] syz.0.953[7310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.605692][ T7310] syz.0.953[7310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.649367][ T7309] syz.4.952[7309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.662284][ T7309] syz.4.952[7309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.676300][ T7309] netlink: 'syz.4.952': attribute type 3 has an invalid length. [ 361.076954][ T3688] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 361.677032][ T7324] loop4: detected capacity change from 0 to 2048 [ 361.766929][ T3688] usb 2-1: Using ep0 maxpacket: 32 [ 361.907131][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.342647][ T7329] lo speed is unknown, defaulting to 1000 [ 362.753983][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.766493][ T3688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.791038][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 362.791054][ T27] audit: type=1326 audit(1728427067.848:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff8d7dff9 code=0x7ffc0000 [ 362.844193][ T7324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 362.863335][ T7324] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 362.901217][ T3688] usb 2-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 362.947054][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.949156][ T27] audit: type=1326 audit(1728427067.888:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff8d7dff9 code=0x7ffc0000 [ 362.970097][ T3688] usb 2-1: config 0 descriptor?? [ 363.034391][ T27] audit: type=1326 audit(1728427067.888:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff8d7dff9 code=0x7ffc0000 [ 363.060019][ T27] audit: type=1326 audit(1728427067.888:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff8d7dff9 code=0x7ffc0000 [ 363.085697][ T27] audit: type=1326 audit(1728427067.888:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff8d7dff9 code=0x7ffc0000 [ 363.091424][ T6616] EXT4-fs (loop4): unmounting filesystem. [ 363.109039][ T7338] netlink: 'syz.0.961': attribute type 6 has an invalid length. [ 363.167648][ T27] audit: type=1326 audit(1728427067.888:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff8d7dff9 code=0x7ffc0000 [ 363.198795][ T3688] usb 2-1: can't set config #0, error -71 [ 363.203055][ T27] audit: type=1326 audit(1728427067.888:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff8d7dff9 code=0x7ffc0000 [ 363.231572][ T27] audit: type=1326 audit(1728427067.888:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff8d7dff9 code=0x7ffc0000 [ 363.238928][ T3688] usb 2-1: USB disconnect, device number 9 [ 363.277743][ T27] audit: type=1326 audit(1728427067.888:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff8d7dff9 code=0x7ffc0000 [ 363.279371][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.963'. [ 363.314808][ T27] audit: type=1326 audit(1728427067.888:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff8d7dff9 code=0x7ffc0000 [ 363.603636][ T7351] loop4: detected capacity change from 0 to 512 [ 365.272209][ T7351] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 365.421040][ T7351] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 365.573392][ T7351] syz.4.962[7351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.573498][ T7351] syz.4.962[7351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.711820][ T7362] loop3: detected capacity change from 0 to 512 [ 365.762830][ T7362] ext4: Unknown parameter 'nouser_xattr' [ 366.387785][ T7374] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 366.482939][ T7374] team0: Device hsr_slave_0 failed to register rx_handler [ 366.610199][ T6616] EXT4-fs (loop4): unmounting filesystem. [ 366.900874][ T7380] loop3: detected capacity change from 0 to 256 [ 367.042169][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.976'. [ 368.588181][ T7406] lo speed is unknown, defaulting to 1000 [ 368.696021][ T7407] overlayfs: failed to resolve './file2': -2 [ 368.735497][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.881566][ T7404] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 368.956544][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.984'. [ 369.235962][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 369.235977][ T27] audit: type=1326 audit(1728427074.288:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 369.312080][ T27] audit: type=1326 audit(1728427074.328:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 369.417046][ T27] audit: type=1326 audit(1728427074.328:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 369.478632][ T7419] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 369.486095][ T27] audit: type=1326 audit(1728427074.328:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 369.514154][ T7422] loop2: detected capacity change from 0 to 128 [ 369.563993][ T27] audit: type=1326 audit(1728427074.328:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 369.650579][ T27] audit: type=1326 audit(1728427074.328:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 369.743957][ T27] audit: type=1326 audit(1728427074.328:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 369.820282][ T27] audit: type=1326 audit(1728427074.328:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34f797c990 code=0x7ffc0000 [ 369.885589][ T27] audit: type=1326 audit(1728427074.328:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 369.968284][ T27] audit: type=1326 audit(1728427074.328:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 370.242389][ T7431] device pim6reg1 entered promiscuous mode [ 370.356334][ T7435] device gretap0 entered promiscuous mode [ 370.378187][ T7435] device batadv_slave_1 entered promiscuous mode [ 370.665833][ T7441] device bond1 entered promiscuous mode [ 370.693224][ T7452] loop2: detected capacity change from 0 to 512 [ 370.701500][ T7452] EXT4-fs: inline encryption not supported [ 370.709894][ T7452] EXT4-fs: Ignoring removed oldalloc option [ 370.713196][ T7441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.781440][ T7452] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1001: Parent and EA inode have the same ino 15 [ 370.812312][ T7452] EXT4-fs (loop2): Remounting filesystem read-only [ 370.823644][ T7452] EXT4-fs error (device loop2): ext4_evict_inode:290: comm syz.2.1001: couldn't truncate inode 15 (err -30) [ 370.851059][ T7452] EXT4-fs (loop2): 1 orphan inode deleted [ 370.867848][ T7452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 370.973605][ T3649] EXT4-fs (loop2): unmounting filesystem. [ 371.050964][ T7461] loop2: detected capacity change from 0 to 512 [ 371.097195][ T7461] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1004: bg 0: block 5: invalid block bitmap [ 371.114211][ T7461] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 371.127181][ T7461] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1004: invalid indirect mapped block 3 (level 2) [ 371.131330][ T7441] bond1 (unregistering): Released all slaves [ 371.153150][ T7461] EXT4-fs (loop2): 1 orphan inode deleted [ 371.161344][ T7461] EXT4-fs (loop2): 1 truncate cleaned up [ 371.167510][ T7461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 371.239558][ T7464] program syz.2.1004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.270026][ T7466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1005'. [ 371.434492][ T7473] device vlan2 entered promiscuous mode [ 371.448212][ T7473] device vlan0 entered promiscuous mode [ 371.456547][ T7473] device vlan0 left promiscuous mode [ 371.730865][ T7470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 371.740121][ T7470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.748402][ T7470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.758762][ T7470] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 371.835343][ T7480] lo speed is unknown, defaulting to 1000 [ 371.862571][ T7481] overlayfs: failed to resolve './file2': -2 [ 371.926496][ T3649] EXT4-fs (loop2): unmounting filesystem. [ 372.273948][ T7488] loop2: detected capacity change from 0 to 2048 [ 372.332525][ T7488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 372.417031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 372.464153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 373.028342][ T7506] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1018'. [ 373.409408][ T3649] EXT4-fs (loop2): unmounting filesystem. [ 373.551829][ T7518] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 374.133073][ T7537] overlayfs: failed to resolve './file2': -2 [ 374.424065][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 374.424086][ T27] audit: type=1326 audit(1728427079.478:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 374.566024][ T7549] lo speed is unknown, defaulting to 1000 [ 375.385591][ T27] audit: type=1326 audit(1728427079.608:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 375.418870][ T27] audit: type=1326 audit(1728427079.608:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 375.450835][ T27] audit: type=1326 audit(1728427079.618:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 375.506520][ T27] audit: type=1326 audit(1728427079.618:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 375.515698][ T7567] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1042'. [ 375.605108][ T27] audit: type=1326 audit(1728427079.618:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 375.714687][ T27] audit: type=1326 audit(1728427079.618:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 375.885254][ T27] audit: type=1326 audit(1728427079.618:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 375.958084][ T27] audit: type=1326 audit(1728427079.618:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd52a17e033 code=0x7ffc0000 [ 376.245670][ T27] audit: type=1326 audit(1728427079.638:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd52a17e033 code=0x7ffc0000 [ 376.635698][ T7583] loop2: detected capacity change from 0 to 512 [ 376.719671][ T7583] ext4: Unknown parameter 'permit_directio' [ 377.786531][ T7598] loop3: detected capacity change from 0 to 128 [ 377.868771][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1055'. [ 377.952713][ T7604] syz.3.1053: attempt to access beyond end of device [ 377.952713][ T7604] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 378.102438][ T7612] capability: warning: `syz.1.1059' uses 32-bit capabilities (legacy support in use) [ 378.118727][ T1273] kworker/u4:5: attempt to access beyond end of device [ 378.118727][ T1273] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 378.320795][ T7619] nftables ruleset with unbound chain [ 378.547127][ T3876] Bluetooth: hci5: Frame reassembly failed (-84) [ 378.610752][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.976743][ T7626] ptrace attach of "./syz-executor exec"[6791] was attempted by "./syz-executor exec"[7626] [ 379.125311][ T7631] device pim6reg1 entered promiscuous mode [ 379.290372][ T7639] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 379.320095][ T7639] team0: Port device netdevsim0 added [ 379.332207][ T7639] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 379.367373][ T7639] team0: Port device netdevsim0 removed [ 379.376695][ T7639] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 379.449963][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 379.461493][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 379.471893][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 379.476645][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 379.476660][ T27] audit: type=1326 audit(1728427084.528:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.2.1072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x0 [ 380.438453][ T3648] Bluetooth: hci5: command 0x1003 tx timeout [ 380.438495][ T3645] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 380.866067][ T27] audit: type=1326 audit(1728427085.918:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 380.937357][ T27] audit: type=1326 audit(1728427085.948:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 381.027354][ T27] audit: type=1326 audit(1728427085.948:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 381.139208][ T27] audit: type=1326 audit(1728427085.948:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 381.162392][ T27] audit: type=1326 audit(1728427085.948:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 381.202525][ T27] audit: type=1326 audit(1728427085.948:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 381.248866][ T7680] hub 1-0:1.0: USB hub found [ 381.274495][ T7680] hub 1-0:1.0: 1 port detected [ 381.326925][ T27] audit: type=1326 audit(1728427085.948:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 381.453462][ T7696] 9pnet_fd: Insufficient options for proto=fd [ 381.522695][ T27] audit: type=1326 audit(1728427085.948:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 381.933191][ T27] audit: type=1326 audit(1728427085.958:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db0d7dff9 code=0x7ffc0000 [ 382.153813][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 382.198875][ T7701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1094'. [ 382.304275][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1098'. [ 382.339011][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1098'. [ 382.622413][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 382.640139][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1106'. [ 383.894703][ T7755] loop4: detected capacity change from 0 to 164 [ 384.044691][ T7755] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 384.094823][ T7755] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 384.247577][ T7762] 9pnet_fd: Insufficient options for proto=fd [ 385.209176][ T7772] lo speed is unknown, defaulting to 1000 [ 387.535480][ T7808] loop2: detected capacity change from 0 to 256 [ 388.735498][ T7827] loop4: detected capacity change from 0 to 128 [ 388.810875][ T7827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 388.825121][ T7827] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 389.282428][ T6616] EXT4-fs (loop4): unmounting filesystem. [ 390.173992][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 390.217924][ T7845] device ip6gretap0 entered promiscuous mode [ 390.336650][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1141'. [ 390.997070][ T3648] Bluetooth: hci1: command 0x0406 tx timeout [ 391.283248][ T7850] lo speed is unknown, defaulting to 1000 [ 391.290050][ T7853] device hsr_slave_0 left promiscuous mode [ 391.296714][ T7853] device hsr_slave_1 left promiscuous mode [ 392.382312][ T7865] loop2: detected capacity change from 0 to 256 [ 392.641025][ T3691] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 393.097032][ T3691] usb 1-1: Using ep0 maxpacket: 8 [ 393.228289][ T3691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.386920][ T3691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.446929][ T3691] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 393.478042][ T3691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.572603][ T3691] usb 1-1: config 0 descriptor?? [ 393.842174][ T7866] device vlan2 entered promiscuous mode [ 393.873053][ T7866] bond0: (slave vlan2): Opening slave failed [ 393.935648][ T7888] loop2: detected capacity change from 0 to 512 [ 393.964923][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 393.964938][ T27] audit: type=1326 audit(1728427099.018:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 394.079461][ T3648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 394.080028][ T7888] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 394.089708][ T3648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 394.100165][ T3691] usbhid 1-1:0.0: can't add hid device: -71 [ 394.105254][ T27] audit: type=1326 audit(1728427099.058:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 394.129783][ T3691] usbhid: probe of 1-1:0.0 failed with error -71 [ 394.131912][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 394.148981][ T27] audit: type=1326 audit(1728427099.058:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 394.172081][ T27] audit: type=1326 audit(1728427099.058:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 394.183387][ T3691] usb 1-1: USB disconnect, device number 5 [ 394.195374][ T27] audit: type=1326 audit(1728427099.058:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 394.224982][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 394.225016][ T7888] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038 (0x7fffffff) [ 394.269972][ T3648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 394.278078][ T3648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 394.334140][ T27] audit: type=1326 audit(1728427099.388:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 394.382966][ T3649] EXT4-fs (loop2): unmounting filesystem. [ 394.386415][ T7893] lo speed is unknown, defaulting to 1000 [ 394.424104][ T27] audit: type=1326 audit(1728427099.388:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 394.536902][ T27] audit: type=1326 audit(1728427099.388:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 394.617766][ T27] audit: type=1326 audit(1728427099.448:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.4.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7ffc0000 [ 394.825223][ T7904] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1164'. [ 394.862853][ T7909] loop2: detected capacity change from 0 to 256 [ 394.881071][ T7904] 0ªX¹¦À: renamed from caif0 [ 394.907276][ T7904] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 395.164518][ T7893] chnl_net:caif_netlink_parms(): no params data found [ 395.487200][ T7918] overlayfs: failed to resolve './file2': -2 [ 395.549582][ T7893] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.583853][ T7893] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.622949][ T7893] device bridge_slave_0 entered promiscuous mode [ 395.668932][ T7893] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.695064][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.713853][ T7921] 9pnet: Could not find request transport: t [ 395.723572][ T7893] device bridge_slave_1 entered promiscuous mode [ 395.796782][ T7893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.824997][ T7893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.884467][ T7893] team0: Port device team_slave_0 added [ 395.901175][ T7893] team0: Port device team_slave_1 added [ 395.951232][ T7893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.970159][ T27] audit: type=1326 audit(1728427101.028:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 395.976948][ T7893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.053703][ T7893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.267727][ T7931] ALSA: seq fatal error: cannot create timer (-22) [ 396.283652][ T7893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.311364][ T7893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.357100][ T48] Bluetooth: hci5: command tx timeout [ 396.368067][ T7893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.395998][ T7929] netlink: 'syz.0.1172': attribute type 10 has an invalid length. [ 396.423120][ T7929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1172'. [ 396.468358][ T7929] bridge0: port 3(batadv0) entered blocking state [ 396.496991][ T7929] bridge0: port 3(batadv0) entered disabled state [ 396.514283][ T7929] device batadv0 entered promiscuous mode [ 396.525439][ T7929] bridge0: port 3(batadv0) entered blocking state [ 396.532180][ T7929] bridge0: port 3(batadv0) entered forwarding state [ 396.594453][ T7927] lo speed is unknown, defaulting to 1000 [ 396.669836][ T4620] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 396.679817][ T4620] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 396.749608][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.789135][ T7893] device hsr_slave_0 entered promiscuous mode [ 396.791905][ T7935] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 396.805751][ T7893] device hsr_slave_1 entered promiscuous mode [ 396.893039][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.045858][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.149759][ T9] bond0: (slave netdevsim0): Releasing backup interface [ 397.186083][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.498032][ T7946] 9pnet_fd: Insufficient options for proto=fd [ 399.006296][ T48] Bluetooth: hci5: command tx timeout [ 399.818017][ T7959] netlink: 'syz.2.1179': attribute type 3 has an invalid length. [ 400.127409][ T7957] netlink: 'syz.3.1178': attribute type 6 has an invalid length. [ 400.466308][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 400.466325][ T27] audit: type=1326 audit(1728427105.528:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 400.557523][ T27] audit: type=1326 audit(1728427105.528:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 400.612927][ T27] audit: type=1326 audit(1728427105.548:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 400.662683][ T27] audit: type=1326 audit(1728427105.548:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 400.688125][ T27] audit: type=1326 audit(1728427105.548:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52a17dff9 code=0x7ffc0000 [ 401.077111][ T48] Bluetooth: hci5: command tx timeout [ 401.477657][ T7893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.500832][ T7968] lo speed is unknown, defaulting to 1000 [ 401.501543][ T7893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.614006][ T7893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.771869][ T7893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.785268][ T7997] loop2: detected capacity change from 0 to 512 [ 401.824733][ T7997] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 401.902877][ T8000] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 401.933680][ T7997] EXT4-fs (loop2): 1 truncate cleaned up [ 401.939774][ T7997] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 401.978373][ T27] audit: type=1804 audit(1728427107.028:792): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1190" name="/newroot/277/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 402.067775][ T8004] netlink: 'syz.4.1191': attribute type 6 has an invalid length. [ 402.378102][ T27] audit: type=1800 audit(1728427107.268:793): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1190" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 402.771131][ T3649] EXT4-fs (loop2): unmounting filesystem. [ 403.149910][ T8012] netlink: 'syz.4.1193': attribute type 3 has an invalid length. [ 403.239289][ T48] Bluetooth: hci5: command tx timeout [ 403.806018][ T7893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.941387][ T8023] loop4: detected capacity change from 0 to 512 [ 403.955344][ T9] device hsr_slave_0 left promiscuous mode [ 403.974612][ T9] device hsr_slave_1 left promiscuous mode [ 403.994903][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.021580][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.039993][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.062820][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.081340][ T9] device bridge_slave_1 left promiscuous mode [ 404.087105][ T8023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 404.097039][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.107661][ T8023] ext4 filesystem being mounted at /61/bus supports timestamps until 2038 (0x7fffffff) [ 404.136446][ T9] device bridge_slave_0 left promiscuous mode [ 404.147291][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.270171][ T9] device veth1_macvtap left promiscuous mode [ 404.276346][ T9] device veth0_macvtap left promiscuous mode [ 404.285998][ T9] device veth1_vlan left promiscuous mode [ 404.296338][ T9] device veth0_vlan left promiscuous mode [ 405.412263][ T9] team0 (unregistering): Port device team_slave_1 removed [ 405.511930][ T9] team0 (unregistering): Port device team_slave_0 removed [ 405.598312][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.695563][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.541472][ T9] bond0 (unregistering): Released all slaves [ 406.641924][ T7893] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.677778][ T8023] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 406.686353][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'. [ 406.699631][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 406.708960][ T8023] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 406.717761][ T8023] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 406.725440][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.733704][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.795702][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.843406][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.863417][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.870606][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.895457][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.904344][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.906753][ T6616] EXT4-fs (loop4): unmounting filesystem. [ 406.913486][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.925728][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.072911][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.091105][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.232334][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.845161][ T7893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 407.856383][ T7893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.143123][ T8057] netlink: 'syz.4.1203': attribute type 6 has an invalid length. [ 408.233641][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 408.256080][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 408.271467][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 408.281104][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 408.289759][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.317009][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.376744][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.582588][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.745775][ T8073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1207'. [ 409.123932][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1207'. [ 409.158486][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 409.180188][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 409.212511][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.247188][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.271005][ T7893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.375320][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.410636][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.434179][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.455327][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.473658][ T8086] syz.2.1213[8086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.473778][ T8086] syz.2.1213[8086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.493839][ T7893] device veth0_vlan entered promiscuous mode [ 409.528244][ T27] audit: type=1326 audit(1728427114.588:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 409.562388][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.589806][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.599177][ T27] audit: type=1326 audit(1728427114.588:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 409.632790][ T27] audit: type=1326 audit(1728427114.588:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 409.675549][ T7893] device veth1_vlan entered promiscuous mode [ 409.701469][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 409.720027][ T27] audit: type=1326 audit(1728427114.588:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 409.720063][ T27] audit: type=1326 audit(1728427114.588:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 409.720091][ T27] audit: type=1326 audit(1728427114.588:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 409.720121][ T27] audit: type=1326 audit(1728427114.658:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 409.720149][ T27] audit: type=1326 audit(1728427114.658:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 409.720177][ T27] audit: type=1326 audit(1728427114.718:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 409.720204][ T27] audit: type=1326 audit(1728427114.718:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f797dff9 code=0x7ffc0000 [ 409.722367][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 409.723080][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.723696][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.784676][ T8094] loop3: detected capacity change from 0 to 512 [ 409.930134][ T8094] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 409.942987][ T7893] device veth0_macvtap entered promiscuous mode [ 409.967329][ T8094] EXT4-fs (loop3): 1 truncate cleaned up [ 409.974201][ T8094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 409.990577][ T7893] device veth1_macvtap entered promiscuous mode [ 410.084262][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.094800][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.104860][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.112248][ T8094] syz.3.1215[8094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.115309][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.115330][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.151575][ T8094] syz.3.1215[8094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.161626][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.195351][ T7893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.215915][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.225309][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.234507][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.248115][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.268779][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.290799][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.311901][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.322928][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.334985][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.346104][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.371670][ T7893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.400003][ T7893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.453255][ T7893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.477138][ T7893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.485899][ T7893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.498108][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.515463][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.413626][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1220'. [ 411.473974][ T8110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1220'. [ 412.136553][ T4020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.145614][ T4020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.160356][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 412.170133][ T4020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.179219][ T4020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.215464][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.444198][ T8126] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 412.444198][ T8126] program syz.1.1155 not setting count and/or reply_len properly [ 412.462464][ T8129] ax25_connect(): syz.2.1227 uses autobind, please contact jreuter@yaina.de [ 412.545360][ T8131] loop4: detected capacity change from 0 to 512 [ 412.619896][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1231'. [ 412.634183][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1231'. [ 412.800606][ T5946] EXT4-fs (loop3): unmounting filesystem. [ 413.944653][ T8131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 414.007823][ T8131] ext4 filesystem being mounted at /69/bus supports timestamps until 2038 (0x7fffffff) [ 414.314192][ T6616] EXT4-fs (loop4): unmounting filesystem. [ 414.711756][ T8163] overlayfs: failed to resolve './file2': -2 [ 414.727264][ T8159] loop3: detected capacity change from 0 to 256 [ 414.941743][ T8159] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 415.310036][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 415.416927][ T3689] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 415.578186][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 415.717141][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 415.806183][ T3689] usb 2-1: Using ep0 maxpacket: 16 [ 416.148130][ T3689] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 416.202417][ T3689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.312802][ T3689] usb 2-1: Product: syz [ 416.375370][ T3689] usb 2-1: Manufacturer: syz [ 416.444161][ T3689] usb 2-1: SerialNumber: syz [ 416.520422][ T3689] r8152-cfgselector 2-1: config 0 descriptor?? [ 416.586159][ T14] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 416.595324][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.604078][ T14] usb 5-1: Product: syz [ 416.609133][ T14] usb 5-1: Manufacturer: syz [ 416.613762][ T14] usb 5-1: SerialNumber: syz [ 416.627791][ T14] usb 5-1: config 0 descriptor?? [ 416.690858][ T8177] loop3: detected capacity change from 0 to 32768 [ 416.707674][ T14] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 416.829875][ T8177] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 416.839844][ T3645] Bluetooth: hci2: command 0x0406 tx timeout [ 416.886878][ T14] usb 5-1: USB disconnect, device number 9 [ 416.897499][ T3876] usb 5-1: Failed to submit usb control message: -71 [ 416.911804][ T3876] usb 5-1: unable to send the bmi data to the device: -71 [ 416.919482][ T3876] usb 5-1: unable to get target info from device [ 416.925962][ T3876] usb 5-1: could not get target info (-71) [ 416.930179][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 416.930192][ T27] audit: type=1800 audit(1728427121.988:820): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1244" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 416.932732][ T3876] usb 5-1: could not probe fw (-71) [ 417.029235][ T3689] r8152-cfgselector 2-1: Unknown version 0x0000 [ 417.039182][ T3689] r8152-cfgselector 2-1: bad CDC descriptors [ 417.058677][ T5946] ocfs2: Unmounting device (7,3) on (node local) [ 417.087395][ T3689] r8152-cfgselector 2-1: Unknown version 0x0000 [ 417.103889][ T3689] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 417.507138][ T14] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 418.302762][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.321610][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.478060][ T14] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 418.494176][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 418.504241][ T14] usb 4-1: SerialNumber: syz [ 418.583691][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1263'. [ 418.612332][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1263'. [ 418.725890][ T8238] loop4: detected capacity change from 0 to 256 [ 418.821337][ T14] usb 4-1: 0:2 : does not exist [ 418.837224][ T14] usb 4-1: unit 5 not found! [ 418.902330][ T14] usb 4-1: USB disconnect, device number 12 [ 418.964413][ T8242] udevd[8242]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 420.175112][ T8276] loop3: detected capacity change from 0 to 128 [ 420.217720][ T8276] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 420.280233][ T8276] sysv_free_block: trying to free block not in datazone [ 420.331212][ T8276] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 420.423443][ T8276] loop3: detected capacity change from 0 to 8 [ 420.452683][ T8289] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 420.497461][ T8276] unable to read inode lookup table [ 420.551152][ T8295] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 420.611267][ T8295] overlayfs: missing 'lowerdir' [ 421.806543][ T8320] loop3: detected capacity change from 0 to 1024 [ 421.838635][ T8320] hfsplus: unable to parse mount options [ 422.230128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 422.239017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 422.428713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 422.437106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 422.445699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 423.098019][ T8242] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 423.557014][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 423.585205][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1306'. [ 423.758902][ T8353] loop3: detected capacity change from 0 to 512 [ 423.818835][ T8353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 423.832514][ T8353] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038 (0x7fffffff) [ 423.849487][ T8353] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.1311: corrupted inode contents [ 423.874317][ T8353] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #2: comm syz.3.1311: mark_inode_dirty error [ 423.890981][ T8353] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.1311: corrupted inode contents [ 423.907558][ T8353] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1311: mark_inode_dirty error [ 424.006978][ T5946] EXT4-fs (loop3): unmounting filesystem. [ 424.049544][ T8362] lo speed is unknown, defaulting to 1000 [ 424.920399][ T14] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 424.940292][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.992843][ T14] usb 3-1: Product: syz [ 425.012878][ T14] usb 3-1: Manufacturer: syz [ 425.631541][ T14] usb 3-1: SerialNumber: syz [ 425.665419][ T14] usb 3-1: config 0 descriptor?? [ 425.951296][ T14] hso 3-1:0.0: Failed to find INT IN ep [ 425.971967][ T14] usb-storage 3-1:0.0: USB Mass Storage device detected [ 426.043023][ T8373] loop4: detected capacity change from 0 to 32768 [ 426.127906][ T6972] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 426.154648][ T14] usb 3-1: USB disconnect, device number 5 [ 426.700132][ T8406] lo speed is unknown, defaulting to 1000 [ 427.182403][ T3734] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 427.547030][ T3734] usb 4-1: Using ep0 maxpacket: 8 [ 427.927470][ T3734] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 427.942349][ T3734] usb 4-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 427.959444][ T3734] usb 4-1: Product: syz [ 427.969462][ T3734] usb 4-1: Manufacturer: syz [ 427.980213][ T3734] usb 4-1: SerialNumber: syz [ 428.018696][ T3734] usb 4-1: config 0 descriptor?? [ 428.069507][ T3734] gspca_main: sq905-2.14.0 probing 2770:9120 [ 428.346901][ T3691] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 428.616909][ T3691] usb 3-1: Using ep0 maxpacket: 8 [ 428.731546][ T8438] loop4: detected capacity change from 0 to 256 [ 428.917781][ T3691] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 428.941711][ T3691] usb 3-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 428.955120][ T3691] usb 3-1: Product: syz [ 428.965231][ T3691] usb 3-1: Manufacturer: syz [ 428.975382][ T3691] usb 3-1: SerialNumber: syz [ 429.013377][ T3691] usb 3-1: config 0 descriptor?? [ 429.068848][ T3691] gspca_main: sq905-2.14.0 probing 2770:9120 [ 429.167045][ T3734] gspca_sq905: bulk read fail (-22) len 0/4 [ 429.173236][ T3734] sq905: probe of 4-1:0.0 failed with error -5 [ 429.376748][ T3734] usb 4-1: USB disconnect, device number 13 [ 429.398735][ T3655] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 429.657105][ T3655] usb 1-1: Using ep0 maxpacket: 8 [ 429.777087][ T3655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.791583][ T3655] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.802109][ T3655] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 430.006696][ T3655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.096522][ T3691] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 431.116777][ T3691] sq905: probe of 3-1:0.0 failed with error -71 [ 431.234658][ T3691] usb 3-1: USB disconnect, device number 6 [ 431.381584][ T8462] loop4: detected capacity change from 0 to 1024 [ 431.477106][ T3655] usb 1-1: config 0 descriptor?? [ 431.478600][ T8462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.823784][ T8445] device vlan2 entered promiscuous mode [ 431.880759][ T3645] Bluetooth: hci4: command 0x0406 tx timeout [ 432.104184][ T3655] usbhid 1-1:0.0: can't add hid device: -71 [ 432.113719][ T3655] usbhid: probe of 1-1:0.0 failed with error -71 [ 432.131779][ T3655] usb 1-1: USB disconnect, device number 6 [ 432.377612][ T8487] lo speed is unknown, defaulting to 1000 [ 433.673321][ T8493] loop3: detected capacity change from 0 to 64 [ 433.781980][ T8493] hfs: unable to parse mount options [ 434.550310][ T8514] overlayfs: failed to resolve './file0': -2 [ 434.615580][ T8522] vivid-003: disconnect [ 434.992402][ T8510] vivid-003: reconnect [ 435.450424][ T8524] kvm [8523]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0xfd0000cd0c [ 435.462637][ T8524] kvm [8523]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x24800009a1a [ 435.919840][ T8543] input: syz0 as /devices/virtual/input/input5 [ 435.946930][ T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 436.141777][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 436.217268][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 436.376993][ T3691] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 436.497899][ T8565] loop4: detected capacity change from 0 to 2048 [ 436.512941][ T8565] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 436.517167][ T14] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 436.545389][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.553796][ T151] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 436.561527][ T14] usb 2-1: Product: syz [ 436.566331][ T14] usb 2-1: Manufacturer: syz [ 436.571653][ T14] usb 2-1: SerialNumber: syz [ 436.573142][ T8566] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 436.585469][ T14] usb 2-1: config 0 descriptor?? [ 436.617950][ T3691] usb 1-1: Using ep0 maxpacket: 8 [ 436.632829][ T8565] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 436.646009][ T14] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 436.654854][ T8565] Remounting filesystem read-only [ 436.665629][ T8565] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 436.681440][ T8565] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 436.691860][ T27] audit: type=1800 audit(1728427141.748:821): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1391" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 436.704193][ T8565] syz.4.1391 (8565) used greatest stack depth: 18328 bytes left [ 436.788722][ T3691] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 436.807749][ T8574] loop4: detected capacity change from 0 to 128 [ 436.809126][ T3691] usb 1-1: config 150 has no interface number 0 [ 436.815089][ T8574] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 436.834578][ T8574] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 436.847061][ T3959] usb 2-1: Failed to submit usb control message: -71 [ 436.847157][ T151] usb 3-1: Using ep0 maxpacket: 8 [ 436.854282][ T3959] usb 2-1: unable to send the bmi data to the device: -71 [ 436.854332][ T3959] usb 2-1: unable to get target info from device [ 436.861996][ T3691] usb 1-1: config 150 interface 204 has no altsetting 0 [ 436.871046][ T3959] usb 2-1: could not get target info (-71) [ 436.901025][ T3691] usb 1-1: config 150 interface 1 has no altsetting 0 [ 436.902057][ T3959] usb 2-1: could not probe fw (-71) [ 436.911298][ T14] usb 2-1: USB disconnect, device number 11 [ 437.027821][ T151] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 437.048554][ T151] usb 3-1: config 150 has no interface number 0 [ 437.055395][ T151] usb 3-1: config 150 interface 204 has no altsetting 0 [ 437.063005][ T151] usb 3-1: config 150 interface 1 has no altsetting 0 [ 437.087102][ T3691] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 437.096227][ T3691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.116937][ T3691] usb 1-1: Product: syz [ 437.121242][ T3691] usb 1-1: Manufacturer: syz [ 437.125948][ T3691] usb 1-1: SerialNumber: syz [ 437.277137][ T151] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 437.293393][ T151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.303943][ T151] usb 3-1: Product: syz [ 437.308198][ T151] usb 3-1: Manufacturer: syz [ 437.312897][ T151] usb 3-1: SerialNumber: syz [ 437.397758][ T3691] usb 1-1: bad CDC descriptors [ 437.403751][ T3691] xr_serial 1-1:150.204: xr_serial converter detected [ 437.407371][ T8579] loop4: detected capacity change from 0 to 32768 [ 437.528495][ T3959] kworker/u4:10: attempt to access beyond end of device [ 437.528495][ T3959] loop4: rw=1, sector=2621792, nr_sectors = 8 limit=32768 [ 437.553820][ T132] blkno = 5002c, nblocks = 1 [ 437.557456][ T3734] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 437.559157][ T132] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 437.559157][ T132] [ 437.581375][ T132] ERROR: (device loop4): remounting filesystem as read-only [ 437.590683][ T151] usb 3-1: bad CDC descriptors [ 437.596388][ T151] xr_serial 3-1:150.204: xr_serial converter detected [ 437.851318][ T8595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1403'. [ 437.866566][ T3734] usb 4-1: Using ep0 maxpacket: 16 [ 437.997638][ T3734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.160904][ T3734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.313933][ T3734] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 438.362735][ T3734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.377027][ T3691] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 438.383977][ T3691] xr_serial: probe of ttyUSB0 failed with error -71 [ 438.401115][ T3734] usb 4-1: config 0 descriptor?? [ 438.416681][ T3691] usb 1-1: USB disconnect, device number 7 [ 438.444497][ T3691] xr_serial 1-1:150.204: device disconnected [ 438.565679][ T8598] device gretap0 entered promiscuous mode [ 438.573349][ T8598] device batadv_slave_1 entered promiscuous mode [ 438.581554][ T8598] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 438.590308][ T8598] Cannot create hsr debugfs directory [ 438.809599][ T151] xr_serial ttyUSB1: Failed to set reg 0x0e: -71 [ 438.873008][ T151] xr_serial: probe of ttyUSB1 failed with error -71 [ 439.094609][ T3734] cp2112 0003:10C4:EA90.0003: unbalanced delimiter at end of report description [ 439.234676][ T3734] cp2112 0003:10C4:EA90.0003: parse failed [ 439.302434][ T3734] cp2112: probe of 0003:10C4:EA90.0003 failed with error -22 [ 439.333503][ T151] usb 3-1: USB disconnect, device number 7 [ 439.341419][ T151] xr_serial 3-1:150.204: device disconnected [ 439.383731][ T3734] usb 4-1: USB disconnect, device number 14 [ 440.054567][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.377269][ T8617] lo speed is unknown, defaulting to 1000 [ 440.429231][ T8624] loop4: detected capacity change from 0 to 512 [ 440.491608][ T8624] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1408: inode #1: comm syz.4.1408: iget: illegal inode # [ 440.506771][ T8624] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1408: error while reading EA inode 1 err=-117 [ 440.597106][ T8624] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1408: inode #1: comm syz.4.1408: iget: illegal inode # [ 440.628242][ T8624] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1408: error while reading EA inode 1 err=-117 [ 440.648454][ T8624] EXT4-fs (loop4): 1 orphan inode deleted [ 440.654236][ T8624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 440.830919][ T6616] EXT4-fs (loop4): unmounting filesystem. [ 442.087491][ T8658] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 442.407100][ T8674] netlink: 'syz.1.1423': attribute type 3 has an invalid length. [ 443.350585][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1435'. [ 443.368600][ T27] audit: type=1326 audit(1728427148.428:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7fc00000 [ 443.390977][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.423311][ T8695] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1436'. [ 443.442852][ T27] audit: type=1326 audit(1728427148.478:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5a61f7dff9 code=0x7fc00000 [ 443.484791][ T27] audit: type=1326 audit(1728427148.478:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x7fc00000 [ 443.507081][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.696918][ T3668] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 444.947131][ T3668] usb 5-1: Using ep0 maxpacket: 8 [ 445.077416][ T3668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.095322][ T3668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.126982][ T3668] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 445.145492][ T3668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.173303][ T3668] usb 5-1: config 0 descriptor?? [ 445.405440][ T8758] loop3: detected capacity change from 0 to 2048 [ 445.452340][ T8758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 445.508029][ T5946] EXT4-fs (loop3): unmounting filesystem. [ 445.526986][ T3668] usbhid 5-1:0.0: can't add hid device: -71 [ 445.547126][ T3668] usbhid: probe of 5-1:0.0 failed with error -71 [ 445.579773][ T3668] usb 5-1: USB disconnect, device number 10 [ 445.618213][ T8766] netlink: 'syz.2.1465': attribute type 4 has an invalid length. [ 445.787493][ T8733] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 445.816301][ T8740] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 446.972042][ T3645] Bluetooth: hci0: command 0x0406 tx timeout [ 446.979244][ T8780] netlink: 'syz.0.1469': attribute type 3 has an invalid length. [ 447.105872][ T8782] overlayfs: failed to resolve './file2': -2 [ 448.318356][ T8792] Bluetooth: MGMT ver 1.22 [ 448.674675][ T8801] input: syz0 as /devices/virtual/input/input6 [ 448.762985][ T8796] loop3: detected capacity change from 0 to 32768 [ 449.032883][ T3645] Bluetooth: hci0: command 0x0406 tx timeout [ 450.026570][ T8815] loop3: detected capacity change from 0 to 32768 [ 450.361961][ T8815] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 450.481107][ T8825] (syz.3.1482,8825,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 450.670682][ T8825] (syz.3.1482,8825,0):ocfs2_get_suballoc_slot_bit:2709 ERROR: read block 47244640256 failed -12 [ 450.737168][ T8825] (syz.3.1482,8825,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -12 [ 450.768925][ T8825] (syz.3.1482,8825,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -12 [ 450.768991][ T8825] (syz.3.1482,8825,1):ocfs2_test_inode_bit:2864 ERROR: status = -12 [ 450.769013][ T8825] (syz.3.1482,8825,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 450.955611][ T5946] ocfs2: Unmounting device (7,3) on (node local) [ 451.201105][ T8840] overlayfs: failed to resolve './file2': -2 [ 451.497370][ T27] audit: type=1326 audit(451.155:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.4.1490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a61f7dff9 code=0x0 [ 452.553450][ T8869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1497'. [ 452.734843][ T8871] overlayfs: failed to resolve './file2': -2 [ 454.011760][ T8886] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1506'. [ 455.007720][ T8889] 9pnet_fd: Insufficient options for proto=fd [ 456.678395][ T8892] syz.4.1504 (8892): drop_caches: 2 [ 456.874853][ T8892] syz.4.1504 (8892): drop_caches: 2 [ 458.036444][ T8919] overlayfs: failed to resolve './file2': -2 [ 458.746952][ T3691] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 458.956963][ T3691] usb 3-1: device descriptor read/64, error -71 [ 459.161227][ T8948] capability: warning: `syz.1.1532' uses deprecated v2 capabilities in a way that may be insecure [ 459.256723][ T3691] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 459.361007][ T8954] overlayfs: failed to resolve './file2': -2 [ 460.222243][ T3691] usb 3-1: device descriptor read/64, error -71 [ 460.357314][ T3691] usb usb3-port1: attempt power cycle [ 460.410207][ T8971] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1539'. [ 461.386913][ T3691] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 461.638429][ T3691] usb 3-1: device not accepting address 10, error -71 [ 461.701131][ T8986] overlayfs: failed to resolve './file2': -2 [ 462.477687][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1546'. [ 462.492790][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 462.606965][ T3655] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 463.178019][ T3655] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.389052][ T3655] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.453037][ T3655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.513343][ T3655] usb 2-1: Product: syz [ 463.541704][ T3655] usb 2-1: Manufacturer: syz [ 463.572885][ T3655] usb 2-1: SerialNumber: syz [ 463.737019][ T151] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 463.988061][ T9031] overlayfs: failed to resolve './file2': -2 [ 464.727989][ T151] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 464.741430][ T151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.753309][ T151] usb 1-1: config 0 descriptor?? [ 464.937220][ T3655] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 464.943864][ T3655] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 464.952009][ T3655] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 465.019352][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 465.066906][ T3691] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 465.156998][ T3655] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 465.195384][ T3655] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 465.234973][ T3655] usb 2-1: USB disconnect, device number 12 [ 465.250097][ T3655] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 465.412394][ T9061] loop4: detected capacity change from 0 to 256 [ 465.467073][ T3691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.484272][ T3691] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 465.504860][ T3691] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 465.530717][ T3691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.558147][ T3691] usb 4-1: config 0 descriptor?? [ 465.613165][ T3691] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 465.624330][ T3691] dvb-usb: bulk message failed: -22 (3/0) [ 465.754967][ T3691] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 465.809956][ T3691] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 465.838407][ T3691] usb 4-1: media controller created [ 465.858620][ T3691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.900255][ T151] ath6kl: Failed to submit usb control message: -110 [ 465.912679][ T151] ath6kl: unable to send the bmi data to the device: -110 [ 465.968517][ T3691] dvb-usb: bulk message failed: -22 (6/0) [ 465.976671][ T151] ath6kl: Unable to send get target info: -110 [ 465.995991][ T3691] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 466.083872][ T3691] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 466.103751][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1577'. [ 466.167722][ T9088] overlayfs: failed to resolve './file2': -2 [ 466.924296][ T3691] dvb-usb: schedule remote query interval to 150 msecs. [ 466.937646][ T3691] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 467.042191][ T151] ath6kl: Failed to init ath6kl core: -110 [ 467.100119][ T151] ath6kl_usb: probe of 1-1:0.0 failed with error -110 [ 467.129658][ T151] usb 1-1: USB disconnect, device number 8 [ 467.141037][ T3655] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 467.153300][ T3668] dvb-usb: bulk message failed: -22 (1/0) [ 467.176961][ T3668] dvb-usb: error while querying for an remote control event. [ 467.389042][ T151] dvb-usb: bulk message failed: -22 (1/0) [ 467.395586][ T151] dvb-usb: error while querying for an remote control event. [ 467.427089][ T3655] usb 3-1: Using ep0 maxpacket: 8 [ 467.587313][ T3655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.609404][ T3655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.633387][ T3655] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 467.637015][ T151] dvb-usb: bulk message failed: -22 (1/0) [ 467.655790][ T3655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.683439][ T3655] usb 3-1: config 0 descriptor?? [ 467.698651][ T48] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 467.728720][ T151] dvb-usb: error while querying for an remote control event. [ 467.745630][ T3052] usb 4-1: USB disconnect, device number 15 [ 468.039829][ T3052] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 468.042172][ T9091] device vlan2 entered promiscuous mode [ 469.017110][ T3655] usbhid 3-1:0.0: can't add hid device: -71 [ 469.024787][ T3655] usbhid: probe of 3-1:0.0 failed with error -71 [ 469.123902][ T9140] overlayfs: failed to resolve './file2': -2 [ 469.135564][ T3655] usb 3-1: USB disconnect, device number 12 [ 469.817133][ T9139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1591'. [ 471.231159][ T9178] 9pnet_fd: Insufficient options for proto=fd [ 472.122505][ T9181] overlayfs: failed to resolve './file2': -2 [ 472.355186][ T48] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 472.365733][ T48] Bluetooth: hci2: Injecting HCI hardware error event [ 472.375025][ T3645] Bluetooth: hci2: hardware error 0x00 [ 472.473386][ T9185] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1607'. [ 472.656574][ T151] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 473.556536][ T151] usb 5-1: Using ep0 maxpacket: 32 [ 473.561857][ T3668] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 473.707138][ T151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.723797][ T151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.733979][ T151] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 473.743681][ T151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.760898][ T151] usb 5-1: config 0 descriptor?? [ 473.822125][ T151] usb 5-1: can't set config #0, error -71 [ 473.837146][ T3668] usb 1-1: Using ep0 maxpacket: 8 [ 473.917882][ T9212] 9pnet_fd: Insufficient options for proto=fd [ 474.437041][ T3645] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 474.582336][ T151] usb 5-1: USB disconnect, device number 11 [ 474.667147][ T3668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.687070][ T3668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.705653][ T3668] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 474.774610][ T3668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.851719][ T3668] usb 1-1: config 0 descriptor?? [ 475.675092][ T9192] device vlan2 entered promiscuous mode [ 476.116540][ T9239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1626'. [ 476.132395][ T3668] usbhid 1-1:0.0: can't add hid device: -71 [ 476.457490][ T3668] usbhid: probe of 1-1:0.0 failed with error -71 [ 476.585346][ T3668] usb 1-1: USB disconnect, device number 9 [ 477.176923][ T3052] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 477.326927][ T3689] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 477.436912][ T3052] usb 4-1: Using ep0 maxpacket: 8 [ 477.567121][ T3052] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 477.657439][ T3052] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 477.666673][ T3052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 477.674958][ T3052] usb 4-1: SerialNumber: syz [ 477.707109][ T3689] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 477.724693][ T3052] usb 4-1: config 0 descriptor?? [ 477.997263][ T3689] usb 3-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 478.012073][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.020587][ T3052] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 478.745457][ T3052] usb 4-1: No valid video chain found. [ 478.751341][ T3689] usb 3-1: Product: syz [ 478.760185][ T3052] usb 4-1: USB disconnect, device number 16 [ 478.768438][ T3689] usb 3-1: Manufacturer: syz [ 478.774000][ T3689] usb 3-1: SerialNumber: syz [ 479.216970][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1638'. [ 480.313457][ T3689] qmi_wwan 3-1:1.0: skipping garbage [ 480.357297][ T3689] qmi_wwan: probe of 3-1:1.0 failed with error -22 [ 480.376385][ T3689] usb 3-1: USB disconnect, device number 13 [ 480.416929][ T3668] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 480.616912][ T3052] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 481.426953][ T3668] usb 5-1: Using ep0 maxpacket: 8 [ 481.547145][ T3668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.566899][ T3668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.585157][ T3668] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 481.599636][ T3668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.628073][ T3668] usb 5-1: config 0 descriptor?? [ 481.910860][ T9322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1654'. [ 482.877413][ T9281] device vlan2 entered promiscuous mode [ 483.159277][ T3668] usbhid 5-1:0.0: can't add hid device: -71 [ 483.170018][ T3668] usbhid: probe of 5-1:0.0 failed with error -71 [ 483.201396][ T3668] usb 5-1: USB disconnect, device number 12 [ 483.444503][ T9339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1644'. [ 484.067157][ T3052] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 484.077140][ T3052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.107163][ T3052] usb 4-1: Product: syz [ 484.111636][ T3052] usb 4-1: Manufacturer: syz [ 484.116244][ T3052] usb 4-1: SerialNumber: syz [ 484.139445][ T3052] usb 4-1: config 0 descriptor?? [ 484.406986][ T3052] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 484.419734][ T3052] peak_usb 4-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 484.517209][ T3052] peak_usb: probe of 4-1:0.0 failed with error -71 [ 484.570048][ T3052] usb 4-1: USB disconnect, device number 17 [ 486.258349][ T9379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1669'. [ 486.893071][ T9390] binder: 9388:9390 ioctl 4018620d 0 returned -22 [ 488.986910][ T3668] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 489.015434][ T9430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1689'. [ 489.280349][ T3668] usb 5-1: Using ep0 maxpacket: 16 [ 490.965816][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1698'. [ 491.573537][ T9414] random: crng reseeded on system resumption [ 491.587289][ T3668] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 491.627444][ T3668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.654045][ T3668] usb 5-1: Product: syz [ 491.661426][ T3668] usb 5-1: Manufacturer: syz [ 491.673196][ T3668] usb 5-1: SerialNumber: syz [ 491.693793][ T3668] usb 5-1: config 0 descriptor?? [ 491.830767][ T3668] as10x_usb: device has been detected [ 491.845468][ T3668] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 491.877237][ T3668] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 491.956246][ T3668] as10x_usb: error during firmware upload part1 [ 491.984224][ T3668] Registered device Sky IT Digital Key (green led) [ 492.476221][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 492.576732][ T3668] usb 5-1: USB disconnect, device number 13 [ 492.649684][ T3668] Unregistered device Sky IT Digital Key (green led) [ 492.676623][ T3668] as10x_usb: device has been disconnected [ 494.500303][ T9513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1717'. [ 494.776867][ T9519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1720'. [ 494.839898][ T3668] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 495.185822][ T9535] netlink: 'syz.0.1727': attribute type 8 has an invalid length. [ 496.119107][ T3668] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 496.128555][ T3668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.136685][ T3668] usb 4-1: Product: syz [ 496.141670][ T3668] usb 4-1: Manufacturer: syz [ 496.146301][ T3668] usb 4-1: SerialNumber: syz [ 496.163830][ T3668] usb 4-1: config 0 descriptor?? [ 496.313734][ T9550] can0: slcan on pty29. [ 496.419146][ T3668] hso 4-1:0.0: Failed to find BULK IN ep [ 496.438173][ T3668] usb-storage 4-1:0.0: USB Mass Storage device detected [ 496.632571][ T3668] usb 4-1: USB disconnect, device number 18 [ 496.728863][ T9557] can0 (unregistered): slcan off pty29. [ 499.577989][ T9597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1742'. [ 499.617388][ T9598] netlink: 'syz.1.1741': attribute type 6 has an invalid length. [ 501.538767][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.959400][ T3734] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 504.555600][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 504.603485][ T9653] netlink: 'syz.4.1755': attribute type 6 has an invalid length. [ 504.647117][ T3734] usb 2-1: Using ep0 maxpacket: 8 [ 504.767074][ T3734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.799684][ T3734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.841177][ T3734] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 504.868779][ T3734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.913349][ T3734] usb 2-1: config 0 descriptor?? [ 504.946994][ T3734] usb 2-1: can't set config #0, error -71 [ 504.964471][ T3734] usb 2-1: USB disconnect, device number 13 [ 506.219146][ T9668] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 506.383347][ T9679] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1765'. [ 506.655426][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 508.912747][ T9704] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 508.912747][ T9704] program syz.4.1774 not setting count and/or reply_len properly [ 509.068792][ T3734] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 509.157948][ T9713] netlink: 'syz.4.1777': attribute type 6 has an invalid length. [ 509.516678][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 509.527132][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.534880][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.545519][ T9716] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 509.656886][ T3734] usb 4-1: Using ep0 maxpacket: 8 [ 509.778427][ T3734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.810945][ T3734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.850771][ T3734] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 509.873949][ T3734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.755112][ T3734] usb 4-1: config 0 descriptor?? [ 510.790326][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 510.790839][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'. [ 511.206367][ T9699] device vlan2 entered promiscuous mode [ 513.499645][ T151] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 513.507442][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 513.800805][ T3734] usbhid 4-1:0.0: can't add hid device: -71 [ 513.806971][ T3734] usbhid: probe of 4-1:0.0 failed with error -71 [ 513.817340][ T3734] usb 4-1: USB disconnect, device number 19 [ 513.821285][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 513.853237][ T9757] loop4: detected capacity change from 0 to 512 [ 513.867475][ T9757] ext4: Unknown parameter 'nouser_xattr' [ 513.988116][ T9629] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 514.026810][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 514.262191][ T9764] netlink: 'syz.1.1795': attribute type 6 has an invalid length. [ 515.407052][ T151] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 515.415030][ T151] usb 2-1: can't read configurations, error -71 [ 515.426900][ T14] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 515.434516][ T14] usb 1-1: can't read configurations, error -71 [ 515.469072][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 515.668426][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 516.083650][ T9785] loop3: detected capacity change from 0 to 256 [ 519.006039][ T9812] netlink: 'syz.3.1808': attribute type 6 has an invalid length. [ 519.210117][ T9814] loop4: detected capacity change from 0 to 512 [ 519.285699][ T9814] ext4: Unknown parameter 'nouser_xattr' [ 519.609020][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1812'. [ 521.637995][ T9866] netlink: 'syz.4.1824': attribute type 6 has an invalid length. [ 522.376607][ T3668] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 522.457112][ T151] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 522.458080][ T9872] loop4: detected capacity change from 0 to 16 [ 522.689702][ T9872] erofs: (device loop4): mounted with root inode @ nid 36. [ 522.700607][ T9875] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 523.055393][ T9878] syz.4.1830: attempt to access beyond end of device [ 523.055393][ T9878] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 523.069723][ T9878] syz.4.1830: attempt to access beyond end of device [ 523.069723][ T9878] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 523.090027][ T9878] syz.4.1830: attempt to access beyond end of device [ 523.090027][ T9878] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 523.104850][ T9878] syz.4.1830: attempt to access beyond end of device [ 523.104850][ T9878] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 524.273270][ T9876] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1831'. [ 524.307261][ T3668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.319069][ T151] usb 3-1: Using ep0 maxpacket: 8 [ 524.332760][ T3668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.344624][ T9876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1831'. [ 524.346882][ T3668] usb 1-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 524.389706][ T9876] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 524.433831][ T3668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.442536][ T9892] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1835'. [ 524.457200][ T151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.482328][ T151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.506618][ T3668] usb 1-1: config 0 descriptor?? [ 524.523940][ T151] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 524.534111][ T151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.544337][ T3668] usb 1-1: can't set config #0, error -71 [ 524.560712][ T3668] usb 1-1: USB disconnect, device number 12 [ 524.571777][ T151] usb 3-1: config 0 descriptor?? [ 524.604217][ T151] usb 3-1: can't set config #0, error -71 [ 524.630919][ T151] usb 3-1: USB disconnect, device number 14 [ 524.678348][ T3655] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 525.947393][ T3655] usb 4-1: device descriptor read/all, error -71 [ 526.047533][ T9911] netlink: 'syz.4.1843': attribute type 1 has an invalid length. [ 526.055343][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 526.372525][ T9921] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1847'. [ 526.723541][ T9930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.732988][ T9930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.740603][ T9930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.752116][ T9930] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 529.795116][ T9959] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1859'. [ 530.963234][ T9981] tipc: Started in network mode [ 530.987672][ T9981] tipc: Node identity ac1414aa, cluster identity 4711 [ 531.019194][ T9981] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 531.026976][ T9981] tipc: Enabled bearer , priority 10 [ 531.160447][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 531.306958][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 531.447046][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 531.586905][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 531.727015][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 531.866905][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 532.006932][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 532.245133][ T3668] tipc: Node number set to 2886997162 [ 532.286933][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 532.567020][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 533.096948][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 533.399736][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.409680][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.417402][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.429830][T10005] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 534.116972][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 534.414812][T10014] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1876'. [ 535.166961][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 535.253694][T10031] fuse: Bad value for 'fd' [ 535.310769][T10033] loop4: detected capacity change from 0 to 256 [ 535.558388][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.576013][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.591603][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.605440][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.613469][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 535.621202][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.727246][T10035] lo speed is unknown, defaulting to 1000 [ 536.196905][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 536.597931][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 536.607892][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.617040][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 536.636350][T10050] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 536.801487][T10035] chnl_net:caif_netlink_parms(): no params data found [ 536.885591][T10054] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1890'. [ 537.247126][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 539.943495][ T3645] Bluetooth: hci1: command tx timeout [ 539.981606][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 540.410371][T10035] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.445187][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.525774][T10035] device bridge_slave_0 entered promiscuous mode [ 540.535279][T10035] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.542653][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.551365][T10035] device bridge_slave_1 entered promiscuous mode [ 540.996983][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 542.018449][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 542.036906][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 542.084375][T10035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.091958][ T3645] Bluetooth: hci1: command tx timeout [ 542.193917][T10035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.325071][T10035] team0: Port device team_slave_0 added [ 542.333357][T10035] team0: Port device team_slave_1 added [ 542.354032][T10035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.361896][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.389046][T10035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.402333][T10035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.411178][T10035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.442866][T10035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.473723][T10035] device hsr_slave_0 entered promiscuous mode [ 542.481336][T10035] device hsr_slave_1 entered promiscuous mode [ 542.487762][ T14] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 542.496966][ T3689] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 542.505692][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.507200][ T3655] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 542.515710][ T14] usb 1-1: config 0 descriptor?? [ 542.526720][T10035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.534854][T10035] Cannot create hsr debugfs directory [ 542.623647][ T3876] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.724564][ T3876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.738277][ T3689] usb 5-1: Using ep0 maxpacket: 8 [ 542.795446][ T3876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.866179][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.877799][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.884324][ T3876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.888664][ T3689] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 542.908212][ T3655] usb 2-1: config 252 has an invalid interface number: 254 but max is 0 [ 542.916597][ T3655] usb 2-1: config 252 has no interface number 0 [ 542.923462][ T3655] usb 2-1: config 252 interface 254 has no altsetting 0 [ 542.930799][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.946994][ T3689] usb 5-1: config 0 descriptor?? [ 543.084091][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 543.107838][ T3655] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 543.117478][ T3655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.125535][ T3655] usb 2-1: Product: syz [ 543.130233][ T3655] usb 2-1: Manufacturer: syz [ 543.134922][ T3655] usb 2-1: SerialNumber: syz [ 543.141200][ T14] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 543.163477][ T14] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 543.180990][ T14] asix: probe of 1-1:0.0 failed with error -71 [ 543.194750][ T14] usb 1-1: USB disconnect, device number 13 [ 543.325843][ T3655] bfusb: probe of 2-1:252.254 failed with error -5 [ 543.365547][T10084] device vlan3 entered promiscuous mode [ 543.379521][T10084] device nlmon0 entered promiscuous mode [ 543.402616][T10084] device nlmon0 left promiscuous mode [ 543.497362][T10085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.511116][T10085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.570053][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 543.581036][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 543.588800][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 543.600206][T10097] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 543.640520][T10085] device nlmon0 entered promiscuous mode [ 543.646309][T10085] device vlan2 entered promiscuous mode [ 543.652143][ T3689] usbhid 5-1:0.0: can't add hid device: -71 [ 543.659896][ T3689] usbhid: probe of 5-1:0.0 failed with error -71 [ 543.671890][ T3689] usb 5-1: USB disconnect, device number 14 [ 543.692134][T10085] device nlmon0 left promiscuous mode [ 543.778969][ T3655] usb 2-1: USB disconnect, device number 16 [ 544.116999][ T3645] Bluetooth: hci1: command tx timeout [ 544.116999][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 544.127599][T10116] loop3: detected capacity change from 0 to 512 [ 544.137664][T10116] ext4: Unknown parameter 'nouser_xattr' [ 544.174681][T10058] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 544.349684][T10121] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1904'. [ 545.156983][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 546.010854][T10035] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 546.197690][ T3645] Bluetooth: hci1: command tx timeout [ 546.207079][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 546.263783][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 546.302923][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1911'. [ 546.323701][T10035] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 546.347863][T10150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 546.349386][ T3668] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 546.365566][T10150] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 546.431850][T10035] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 546.444807][T10035] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 546.667086][ T3668] usb 5-1: Using ep0 maxpacket: 8 [ 546.681032][T10155] fuse: Bad value for 'fd' [ 546.787098][ T3668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.803564][ T3668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.821730][ T3668] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 546.831100][ T3668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.841083][ T3668] usb 5-1: config 0 descriptor?? [ 547.051942][T10160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1915'. [ 547.123853][T10147] device vlan3 entered promiscuous mode [ 547.188390][T10147] device nlmon0 entered promiscuous mode [ 547.204423][T10147] device nlmon0 left promiscuous mode [ 547.246990][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 548.286885][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 549.316972][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 550.366933][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 653.976739][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 653.983743][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P46/1:b..l [ 653.992141][ C1] (detected by 1, t=10502 jiffies, g=48077, q=220 ncpus=2) [ 653.999521][ C1] task:kworker/u4:3 state:R running task stack:22328 pid:46 ppid:2 flags:0x00004000 [ 654.011789][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 654.019650][ C1] Call Trace: [ 654.022937][ C1] [ 654.025879][ C1] __schedule+0x143f/0x4570 [ 654.030428][ C1] ? release_firmware_map_entry+0x186/0x186 [ 654.036331][ C1] ? print_irqtrace_events+0x210/0x210 [ 654.042038][ C1] ? mark_lock+0x9a/0x340 [ 654.046543][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 654.052768][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 654.057898][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 654.063655][ C1] irqentry_exit+0x53/0x80 [ 654.068084][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 654.074117][ C1] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 654.079422][ C1] Code: 2b 00 74 08 4c 89 f7 e8 3f ac 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 654.099041][ C1] RSP: 0018:ffffc90000b77900 EFLAGS: 00000206 [ 654.105403][ C1] RAX: 0000000000000001 RBX: 1ffff9200016ef2c RCX: 1ffff9200016eecc [ 654.113942][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c14c0 RDI: ffffffff8b5d7180 [ 654.121944][ C1] RBP: ffffc90000b77a48 R08: dffffc0000000000 R09: fffffbfff223ba45 [ 654.129940][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200016ef28 [ 654.137921][ C1] R13: dffffc0000000000 R14: ffffc90000b77960 R15: 0000000000000246 [ 654.145928][ C1] ? read_lock_is_recursive+0x10/0x10 [ 654.151331][ C1] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 654.156994][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 654.162123][ C1] ? batadv_primary_if_get_selected+0x3f0/0x510 [ 654.168488][ C1] batadv_iv_ogm_schedule+0x43b/0x1090 [ 654.173962][ C1] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 654.179616][ C1] ? batadv_iv_ogm_schedule+0x41a/0x1090 [ 654.185270][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 654.192593][ C1] ? batadv_send_skb_packet+0x417/0x660 [ 654.198254][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 654.205504][ C1] ? process_one_work+0x7a9/0x11d0 [ 654.210833][ C1] process_one_work+0x8a9/0x11d0 [ 654.215814][ C1] ? worker_detach_from_pool+0x260/0x260 [ 654.221473][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 654.227057][ C1] ? kthread_data+0x4e/0xc0 [ 654.231690][ C1] ? wq_worker_running+0x97/0x190 [ 654.236743][ C1] worker_thread+0xa47/0x1200 [ 654.241484][ C1] kthread+0x28d/0x320 [ 654.245593][ C1] ? worker_clr_flags+0x190/0x190 [ 654.250732][ C1] ? kthread_blkcg+0xd0/0xd0 [ 654.255546][ C1] ret_from_fork+0x1f/0x30 [ 654.260007][ C1] [ 654.263123][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10338 jiffies! g48077 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 654.275561][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=23636 [ 654.283480][ C1] rcu: rcu_preempt kthread starved for 10339 jiffies! g48077 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 654.294856][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 654.305096][ C1] rcu: RCU grace-period kthread stack dump: [ 654.310987][ C1] task:rcu_preempt state:I stack:27128 pid:16 ppid:2 flags:0x00004000 [ 654.320299][ C1] Call Trace: [ 654.323582][ C1] [ 654.326532][ C1] __schedule+0x143f/0x4570 [ 654.331135][ C1] ? _raw_spin_unlock+0x40/0x40 [ 654.336025][ C1] ? release_firmware_map_entry+0x186/0x186 [ 654.341929][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 654.347501][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 654.353465][ C1] ? _raw_spin_unlock+0x40/0x40 [ 654.358333][ C1] schedule+0xbf/0x180 [ 654.362412][ C1] schedule_timeout+0x1b9/0x300 [ 654.367364][ C1] ? console_conditional_schedule+0x40/0x40 [ 654.373296][ C1] ? update_process_times+0x1b0/0x1b0 [ 654.378790][ C1] ? prepare_to_swait_event+0x329/0x350 [ 654.384398][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 654.389281][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 654.395483][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 654.400727][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 654.405524][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 654.411453][ C1] ? finish_swait+0xcf/0x1e0 [ 654.416063][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 654.420676][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 654.425795][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 654.432144][ C1] ? __kthread_parkme+0x168/0x1c0 [ 654.437189][ C1] kthread+0x28d/0x320 [ 654.441267][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 654.446399][ C1] ? kthread_blkcg+0xd0/0xd0 [ 654.451008][ C1] ret_from_fork+0x1f/0x30 [ 654.455453][ C1] [ 654.458475][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 654.464809][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.112-syzkaller #0 [ 654.472534][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 654.482685][ C1] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 654.488509][ C1] Code: ac d9 f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 a4 6b e0 f6 0f 1f 44 00 00 e8 ba a8 d9 f6 0f 00 2d 93 90 b6 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 5b 2b 31 f7 [ 654.508401][ C1] RSP: 0018:ffffc90000177b80 EFLAGS: 000002d3 [ 654.514494][ C1] RAX: ffffffff8ab10686 RBX: 0000000000000000 RCX: ffff888017ff1dc0 [ 654.522471][ C1] RDX: 0000000000000000 RSI: ffffffff8b0c0340 RDI: ffffffff8b5d7180 [ 654.530449][ C1] RBP: ffffc90000177c10 R08: ffffffff8ab10668 R09: ffffed1002ffe3b9 [ 654.538692][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200002ef70 [ 654.546670][ C1] R13: ffff88801a764004 R14: ffffc90000177ba0 R15: dffffc0000000000 [ 654.554649][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 654.563674][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.570282][ C1] CR2: 00007f42d67e66c0 CR3: 000000001d7a9000 CR4: 00000000003506e0 [ 654.578261][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 654.586328][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 654.594318][ C1] Call Trace: [ 654.597603][ C1] [ 654.600466][ C1] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 654.606809][ C1] ? print_other_cpu_stall+0x150c/0x1640 [ 654.612581][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 654.617542][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 654.622791][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 654.628019][ C1] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 654.633498][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 654.638364][ C1] ? hrtimer_run_queues+0x163/0x450 [ 654.643666][ C1] ? update_process_times+0x147/0x1b0 [ 654.649060][ C1] ? tick_sched_timer+0x386/0x550 [ 654.654364][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 654.659952][ C1] ? __hrtimer_run_queues+0x5a7/0xe50 [ 654.665364][ C1] ? hrtimer_interrupt+0x980/0x980 [ 654.670503][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 654.676597][ C1] ? hrtimer_interrupt+0x392/0x980 [ 654.681743][ C1] ? __sysvec_apic_timer_interrupt+0x156/0x580 [ 654.687912][ C1] ? sysvec_apic_timer_interrupt+0x8c/0xb0 [ 654.693814][ C1] [ 654.696748][ C1] [ 654.699683][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 654.705867][ C1] ? acpi_idle_do_entry+0xe8/0x340 [ 654.711086][ C1] ? acpi_idle_do_entry+0x106/0x340 [ 654.716403][ C1] ? acpi_idle_do_entry+0x10f/0x340 [ 654.721706][ C1] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 654.726913][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 654.733023][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 654.738705][ C1] acpi_idle_enter+0x352/0x4f0 [ 654.743522][ C1] cpuidle_enter_state+0x516/0xf80 [ 654.748915][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 654.754314][ C1] ? tick_nohz_idle_stop_tick+0x238/0xad0 [ 654.760297][ C1] cpuidle_enter+0x59/0x90 [ 654.765715][ C1] do_idle+0x3ce/0x680 [ 654.769819][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 654.775043][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 654.781274][ C1] ? schedule_idle+0x57/0x90 [ 654.785905][ C1] cpu_startup_entry+0x3d/0x60 [ 654.790695][ C1] start_secondary+0xe4/0xf0 [ 654.795296][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 654.801309][ C1]