last executing test programs: 3m17.773157729s ago: executing program 4 (id=2671): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket(0x25, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3m13.988903893s ago: executing program 4 (id=2679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002466c3940841706002fbb0102030109022d00013003b008090400620394982fd7090504030000000e060d0508"], 0x0) 3m9.447598565s ago: executing program 4 (id=2690): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xa) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 3m7.891024635s ago: executing program 4 (id=2696): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={0x0, 0x60}}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r6, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000300766c616e30000000000000000000000008000a00b13640612c14580ec86beb443abe3b98dcfa36d440414ce11dbf95ab6a9c31d2f290cc2ed3b301e93a6052a4dfe4405aa5c5be3fa5966877ee89a19b97501852ae9bb0a7c2cec4e5967866b705f6b9bf41960381ae8f9877ea001224eecc1bfdd248ade4", @ANYRESHEX=r3, @ANYRES64=r6], 0x3c}}, 0x20044084) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {0x1}, {0xffff, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10) 3m2.779336993s ago: executing program 4 (id=2709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f00000007c0)=ANY=[@ANYBLOB='discard=0x0000000000000001,grpquota,iocharset=macromanian,errors=continue,quota,noquota,integrity\x00noquota,umask=0x7fffffffffffffff,umask=0x0000000000000002,nodiscard,iocharset=cp869,errors=continue,discard,dont_appraise,mask=MAY_EXEC,measure,smackfstransmute=errors=continue,func=CREDS_CHECK,audit,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c531e80aec8c2666a00"], 0x1, 0x61c9, &(0x7f000000d7c0)="$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") setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) 3m1.430162026s ago: executing program 4 (id=2713): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 2m45.870230562s ago: executing program 32 (id=2713): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 2m26.381669233s ago: executing program 5 (id=2784): mkdir(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r5, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20044084) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x1}, {0xffff, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m22.738480109s ago: executing program 5 (id=2791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000780)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) 2m21.314470105s ago: executing program 5 (id=2795): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x8100, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 2m19.331188423s ago: executing program 5 (id=2800): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x25, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2m17.268140174s ago: executing program 5 (id=2802): mkdir(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r5, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x20044084) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x1}, {0xffff, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m14.152881248s ago: executing program 5 (id=2807): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000780)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) 1m57.734767741s ago: executing program 33 (id=2807): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000780)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) 1m52.15195866s ago: executing program 1 (id=2843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x30, {0x4, 0xfff0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1m49.559769729s ago: executing program 1 (id=2848): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(0x0, 0x0, 0x0) lseek(r5, 0x1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c040000020000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m48.276224324s ago: executing program 1 (id=2851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@link_local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33c83", 0x30, 0x3a, 0x0, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9b5e, {0xe, 0x6, "90f26f", 0x5, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee01, 0xee00) 1m46.78549008s ago: executing program 1 (id=2854): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1m45.657293627s ago: executing program 1 (id=2858): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000040)="14000000140005b7ffccca38b9000000010860eb", 0x14) 1m41.741755186s ago: executing program 1 (id=2865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000c00)={{0x7, 0x0, 0x400000, 0xffff, 'syz1\x00', 0x1}, 0x0, [0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x204, 0x7ff, 0x2, 0x0, 0x40, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x20000, 0xfffffffffffff4cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe9e, 0x20, 0x0, 0x6, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x6]}) 1m39.930996842s ago: executing program 34 (id=2865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000c00)={{0x7, 0x0, 0x400000, 0xffff, 'syz1\x00', 0x1}, 0x0, [0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x204, 0x7ff, 0x2, 0x0, 0x40, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x20000, 0xfffffffffffff4cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe9e, 0x20, 0x0, 0x6, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x6]}) 16.013327879s ago: executing program 6 (id=3002): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x9e}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) epoll_create(0x8) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x3, 0x9, {}, 0x9, 0x9}) io_uring_enter(r6, 0x3514, 0x6, 0x0, 0x0, 0x21) 14.779476818s ago: executing program 2 (id=3003): socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000004c0)=0x4a9a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0x104) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@delalloc}, {@jqfmt_vfsv1}, {@grpid}, {@nobh}, {@nouid32, 0x2e}], [], 0x2e}, 0x6, 0x46f, &(0x7f0000000580)="$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") 13.34811358s ago: executing program 6 (id=3004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x300}, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setregid(0xee00, 0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 10.096877989s ago: executing program 2 (id=3008): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x6, 0x3, 0x103, 0x0, 0xa0}}, 0x120) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007308000000000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 9.677017836s ago: executing program 3 (id=3009): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x7f, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r0, 0x9) syz_emit_vhci(0x0, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r1, 0x0, 0x0, 0x20044840) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, 0x0) 7.968289429s ago: executing program 3 (id=3011): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f00000005c0)="$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") syz_open_procfs(0x0, &(0x7f0000001180)='pagemap\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r0, 0x10, 0xcf7, 0x2c03) 6.42495444s ago: executing program 0 (id=3013): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000016c0)=ANY=[@ANYBLOB="040e0c790320"], 0xf) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c820fe00fa0001000c09050005000800090b7fdf00060005003e4358efd2dd201c43939b5cf9bf3e4842d86f18b841acd001a07c83a1be1e4eb285d83768ea2377c52a24c1f1f2d4d5d2ee6df7341f0397d381972005fd6f4f4f04dfb8a05798a8201a0d2a8bcb88eb5d15533322389ff8db98754f16d4623754d61e4134f743f5bcd6a7e07e757b6c139344acb2ae069fe0e1b8cef032142b0762c9568f5d93f3e4ca1dd780cc1c262b5cf59256ec895a584831048f63c324155a4a4b3ab5e0a8faf718fadde2fee8d3e956984cd6cc3a83a7eec8aa206aa1960e64f31b92d425f7bd656a6ab24273"], 0x103) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) gettid() prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 6.232244542s ago: executing program 3 (id=3014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xf, 0x7}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x30, {0x4, 0xfff0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 5.784523992s ago: executing program 2 (id=3015): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x25, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 5.519651082s ago: executing program 6 (id=3016): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.503445446s ago: executing program 0 (id=3017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 5.247810157s ago: executing program 3 (id=3018): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 5.139479953s ago: executing program 6 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="31032dbd7000fda600000b00000008000300", @ANYRES32], 0x1c}}, 0x0) 4.390218973s ago: executing program 3 (id=3020): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40) 4.139160391s ago: executing program 0 (id=3021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r5) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f0000000100)='./file0\x00') 4.071155221s ago: executing program 2 (id=3022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 3.188909142s ago: executing program 6 (id=3023): rmdir(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.388264501s ago: executing program 0 (id=3024): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2) fcntl$notify(r0, 0x402, 0x100000000) 2.135522423s ago: executing program 3 (id=3025): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x36, 0x0, @fd_index=0x5, 0x9, 0x0, 0x10, 0x1, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 1.976890026s ago: executing program 2 (id=3026): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d000000950000000000000088f4756552cd36f647e61979a9763ce061c04cd7c926e5e466c67f9d2828487e0a32cc42cc6e37cdf5afb02c7eae43d02f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000a02000000000000000300000d0000000000000000030000000000000003000000030000000300000000000000000000050000000000"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x4e, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) syz_init_net_socket$llc(0x1a, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) 1.933304868s ago: executing program 0 (id=3027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) get_robust_list(r0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x100000000) 292.874354ms ago: executing program 0 (id=3028): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x84082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x26e31f841f2b2d7, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x8000) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x100000000000002d}, 0x81) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200006400300000b035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000818382d8cb04936ece35d9680000340000000011400000011000100"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x800) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) pipe2$9p(0x0, 0x90080) 67.439491ms ago: executing program 2 (id=3029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xf, 0x7}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x30, {0x4, 0xfff0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 0s ago: executing program 6 (id=3030): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): rectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 445.539589][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 445.869238][T11515] loop5: detected capacity change from 0 to 128 [ 445.912962][ T26] usb 5-1: USB disconnect, device number 8 [ 445.928033][ T26] usblp0: removed [ 446.027277][T11519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1894'. [ 446.308476][T11525] tipc: Enabled bearer , priority 0 [ 446.333511][T11521] tipc: Resetting bearer [ 446.463769][ T5897] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 446.648029][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.666290][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.676505][ T5897] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 446.692715][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.712142][ T5897] usb 2-1: config 0 descriptor?? [ 447.160249][ T5897] ryos 0003:1E7D:3138.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 447.320367][ T52] tipc: Node number set to 2130706433 [ 447.366521][ T5897] usb 2-1: USB disconnect, device number 9 [ 447.741454][T11521] tipc: Disabling bearer [ 448.221409][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1905'. [ 448.534298][T11553] loop1: detected capacity change from 0 to 128 [ 448.542305][T11555] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1910'. [ 448.644896][T11562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1913'. [ 448.808809][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1910'. [ 448.841689][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1910'. [ 449.068187][T11578] tipc: Started in network mode [ 449.103873][T11578] tipc: Node identity eaf050eeec59, cluster identity 4711 [ 449.136902][T11578] tipc: Enabled bearer , priority 0 [ 449.150577][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'. [ 449.171438][T11580] netlink: 'syz.2.1917': attribute type 22 has an invalid length. [ 449.220470][T11573] tipc: Resetting bearer [ 450.230687][ T5897] tipc: Node number set to 111759598 [ 450.383272][T11596] __nla_validate_parse: 1 callbacks suppressed [ 450.383298][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1924'. [ 450.660527][T11573] tipc: Disabling bearer [ 450.727196][T11599] netlink: 'syz.2.1925': attribute type 12 has an invalid length. [ 451.260371][ T52] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 451.380137][ T5305] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 451.432863][ T52] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 451.441272][ T52] usb 2-1: config 0 has no interface number 0 [ 451.447449][ T52] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 451.457321][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.469759][ T52] usb 2-1: config 0 descriptor?? [ 451.479951][ T52] cp210x 2-1:0.32: cp210x converter detected [ 451.530173][ T5305] usb 5-1: Using ep0 maxpacket: 8 [ 451.537622][ T5305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.549643][ T5305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.560356][ T5305] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 451.569614][ T5305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.584861][ T5305] usb 5-1: config 0 descriptor?? [ 451.881701][ T52] cp210x 2-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 452.013339][ T5305] usbhid 5-1:0.0: can't add hid device: -71 [ 452.019442][ T5305] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 452.048353][ T5305] usb 5-1: USB disconnect, device number 9 [ 452.138017][ T52] cp210x 2-1:0.32: failed to get vendor val 0x370c size 15: -71 [ 452.166275][ T52] cp210x 2-1:0.32: GPIO initialisation failed: -71 [ 452.205880][ T52] usb 2-1: cp210x converter now attached to ttyUSB0 [ 452.215386][T11632] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1938'. [ 452.245060][ T52] usb 2-1: USB disconnect, device number 10 [ 452.326277][ T52] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 452.375925][ T52] cp210x 2-1:0.32: device disconnected [ 452.430227][ T5895] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 452.548272][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'. [ 452.628877][ T5895] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 452.680265][ T5895] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 452.740581][ T5895] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 452.780232][ T5895] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 452.828447][ T5895] usb 4-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.890099][ T5895] usb 4-1: config 48 interface 0 has no altsetting 0 [ 452.940640][ T5895] usb 4-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 452.960392][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.989110][ T5895] usb 4-1: Product: syz [ 453.001540][ T5895] usb 4-1: Manufacturer: syz [ 453.031718][ T5895] usb 4-1: SerialNumber: syz [ 453.065998][T11649] loop0: detected capacity change from 0 to 128 [ 453.308214][ T5895] usb 4-1: USB disconnect, device number 6 [ 454.010295][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 454.144207][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1957'. [ 454.200143][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 454.212609][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.240186][ T5895] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 454.265879][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.292789][ T5895] usb 5-1: config 0 descriptor?? [ 454.322484][ T5895] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 454.518177][ T5188] bcm5974 5-1:0.0: could not read from device [ 454.563487][ T5895] bcm5974 5-1:0.0: could not read from device [ 454.602924][ T5188] bcm5974 5-1:0.0: could not read from device [ 454.657231][ T5895] input: failed to attach handler mousedev to device input5, error: -5 [ 454.690722][ T5188] bcm5974 5-1:0.0: could not read from device [ 454.703589][ T5895] usb 5-1: USB disconnect, device number 10 [ 454.816539][T11703] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1966'. [ 454.835917][T11703] netlink: 13036 bytes leftover after parsing attributes in process `syz.5.1966'. [ 454.849523][T11703] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1966'. [ 454.940156][ T52] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 455.101431][T11709] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1969'. [ 455.110263][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 455.128522][ T52] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.167521][ T52] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 455.180882][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 455.192360][ T52] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.213125][ T52] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 455.227630][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.240100][ T52] usb 2-1: Product: syz [ 455.244304][ T52] usb 2-1: Manufacturer: syz [ 455.275748][ T52] usb 2-1: SerialNumber: syz [ 455.310368][ T52] usb 2-1: config 0 descriptor?? [ 455.346225][ T52] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 455.550869][ T52] imon:send_packet: packet tx failed (-71) [ 455.621114][ T52] imon 2-1:0.0: panel buttons/knobs setup failed [ 456.700805][ T52] rc_core: IR keymap rc-imon-pad not found [ 456.706925][ T52] Registered IR keymap rc-empty [ 456.713028][ T52] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 456.723683][ T52] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 456.890259][ T52] imon:send_packet: packet tx failed (-71) [ 456.910203][ T52] imon 2-1:0.0: remote input dev register failed [ 456.916877][ T52] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 457.040145][ T52] imon 2-1:0.0: unable to initialize intf0, err 0 [ 457.046707][ T52] imon:imon_probe: failed to initialize context! [ 457.070160][ T52] imon 2-1:0.0: unable to register, err -19 [ 457.095510][ T52] usb 2-1: USB disconnect, device number 11 [ 458.124484][ T5897] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 458.280749][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 458.309526][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.340300][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.368255][ T5897] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 458.410101][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.454441][ T5897] usb 5-1: config 0 descriptor?? [ 458.518100][T11772] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1996'. [ 458.901868][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2000'. [ 458.936157][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 458.955531][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 458.997501][ T5897] usb 5-1: USB disconnect, device number 11 [ 459.437520][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 460.229738][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 460.347604][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 460.623618][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 462.200450][ T5894] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 462.364053][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 462.375730][ T5894] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 462.384688][ T5894] usb 5-1: config 0 has no interface number 0 [ 462.391183][ T5894] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 462.402357][ T5894] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 462.414663][ T5894] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.426432][ T5894] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 462.438694][ T5894] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 462.467545][ T5894] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 462.478545][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.509851][ T5894] usb 5-1: config 0 descriptor?? [ 462.543738][ T5894] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 462.738449][ T5894] usb 5-1: USB disconnect, device number 12 [ 462.776682][ T5894] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 462.806148][T11824] batman_adv: batadv0: Adding interface: ip6gretap1 [ 462.813568][T11824] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.839623][T11824] batman_adv: batadv0: Interface activated: ip6gretap1 [ 463.086696][T11841] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2019'. [ 463.674934][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2027'. [ 463.720227][T11856] netlink: 13036 bytes leftover after parsing attributes in process `syz.3.2027'. [ 463.729469][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2027'. [ 463.850268][T11862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2029'. [ 463.955689][T11862] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2029'. [ 464.123119][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 464.129523][T11878] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 464.171333][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2029'. [ 464.207845][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2029'. [ 464.276616][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 464.424142][T11886] loop1: detected capacity change from 0 to 512 [ 464.449626][T11886] EXT4-fs: Ignoring removed orlov option [ 464.481104][T11886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 464.497985][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 464.535740][T11886] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.2035: casefold flag without casefold feature [ 464.597059][T11886] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.2035: couldn't read orphan inode 15 (err -117) [ 464.623297][T11886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.738175][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.756284][ T5894] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 464.934938][ T5894] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 464.972119][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.990218][ T5894] usb 4-1: Product: syz [ 464.996445][ T5894] usb 4-1: Manufacturer: syz [ 465.001476][ T5894] usb 4-1: SerialNumber: syz [ 465.011371][ T5894] usb 4-1: config 0 descriptor?? [ 465.252673][ T5894] usb-storage 4-1:0.0: USB Mass Storage device detected [ 465.400218][ T5899] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 465.456846][ T5894] usb 4-1: USB disconnect, device number 7 [ 465.560279][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 465.577859][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.603460][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 465.914548][ T5899] usb 6-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 465.925316][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.938502][ T5899] usb 6-1: config 0 descriptor?? [ 466.237864][T11925] syzkaller1: entered promiscuous mode [ 466.273220][T11925] syzkaller1: entered allmulticast mode [ 466.402851][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.437878][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.465854][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.488981][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.507560][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.552141][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.581580][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.619400][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.656422][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.679255][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.696093][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.713144][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.733433][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.755706][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.775511][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.791234][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.808611][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.826359][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.845260][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.861649][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.879973][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.903992][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 466.970873][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.845516][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.854142][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.862112][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.869007][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.875952][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.883834][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.890776][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.897709][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.904718][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.911666][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.918554][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.941272][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.948174][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.990239][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 467.998921][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.032166][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.039070][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.090267][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.097169][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.152007][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.190166][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.227544][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.239417][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.288551][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.356759][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.365223][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.382798][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.420118][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.452175][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.488281][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.505421][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.530325][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.554888][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.600119][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.636693][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.679711][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.705742][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.721819][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.738914][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.749539][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.759128][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.789489][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.826071][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.853547][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.903828][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 468.941065][T11975] __nla_validate_parse: 3 callbacks suppressed [ 468.941089][T11975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2069'. [ 468.961142][ T5899] apple 0003:05AC:0274.0004: unknown main item tag 0x0 [ 469.020636][ T5899] apple 0003:05AC:0274.0004: hidraw0: USB HID v0.00 Device [HID 05ac:0274] on usb-dummy_hcd.5-1/input0 [ 469.072187][ T5305] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 469.085706][ T5899] usb 6-1: USB disconnect, device number 5 [ 469.093257][T11978] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2069'. [ 469.289498][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2069'. [ 469.315759][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 469.520156][ T5305] usb 5-1: Using ep0 maxpacket: 16 [ 469.528066][ T5305] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 469.544710][ T5305] usb 5-1: config 0 has no interface number 0 [ 469.597918][ T5305] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 469.627648][ T5305] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 469.646969][ T5305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.659228][ T5305] usb 5-1: Product: syz [ 469.672367][ T5305] usb 5-1: Manufacturer: syz [ 469.677559][ T5305] usb 5-1: SerialNumber: syz [ 469.942474][ T5305] usb 5-1: config 0 descriptor?? [ 470.741889][T11995] loop1: detected capacity change from 0 to 128 [ 471.035655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 471.138036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 471.232522][ T5305] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.214/input/input9 [ 471.526385][ T5894] usb 5-1: USB disconnect, device number 13 [ 471.625729][T12003] fuse: Bad value for 'fd' [ 471.733603][ T30] audit: type=1326 audit(1742654499.401:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12002 comm="syz.0.2078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3a938d169 code=0x0 [ 471.771271][T12007] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2079'. [ 472.289870][T12025] loop4: detected capacity change from 0 to 512 [ 472.350116][T12025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.390293][T12025] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.878796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 472.982346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 474.224307][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.698437][T12056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2095'. [ 474.874802][T12056] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2095'. [ 474.901260][T12058] loop3: detected capacity change from 0 to 512 [ 475.063017][T12058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.120541][T12058] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.233957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 475.836259][T12078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2095'. [ 475.889185][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2095'. [ 476.055601][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.115960][T12081] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2100'. [ 476.313954][T12087] loop3: detected capacity change from 0 to 512 [ 476.331357][T12087] EXT4-fs: Ignoring removed orlov option [ 476.344573][T12087] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 476.365665][T12087] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.2101: casefold flag without casefold feature [ 476.384141][T12087] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.2101: couldn't read orphan inode 15 (err -117) [ 476.426691][T12087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.825662][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.324534][T12136] loop0: detected capacity change from 0 to 512 [ 478.392309][T12136] EXT4-fs: Ignoring removed orlov option [ 478.440104][T12136] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 478.540873][T12136] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.2122: casefold flag without casefold feature [ 478.591075][T12142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2125'. [ 478.600717][T12136] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.2122: couldn't read orphan inode 15 (err -117) [ 478.669063][T12136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.710264][T12148] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2125'. [ 478.956252][T12159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 479.008369][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.008723][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 479.360300][ T5899] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 479.560476][ T5899] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.582657][ T5899] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 479.609525][ T5899] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 479.643000][ T5899] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 479.658278][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 479.680276][ T5899] usb 6-1: SerialNumber: syz [ 479.695244][ T5899] cdc_ether 6-1:1.0: skipping garbage [ 479.720353][ T5899] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 479.761170][ T5899] usb-storage 6-1:1.0: USB Mass Storage device detected [ 479.811807][ T5899] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 481.527696][ T5899] usb 6-1: USB disconnect, device number 6 [ 481.851761][T12190] loop1: detected capacity change from 0 to 128 [ 482.076042][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2140'. [ 482.377126][T12206] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2145'. [ 482.517906][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2140'. [ 484.290238][ T5899] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 484.464493][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.481318][ T5899] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.500530][ T5899] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 484.538321][ T5899] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 484.553842][T12238] netlink: 'syz.1.2156': attribute type 20 has an invalid length. [ 484.558069][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 484.582110][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 484.592824][ T5899] usb 4-1: SerialNumber: syz [ 484.611568][ T5899] cdc_ether 4-1:1.0: skipping garbage [ 484.617115][ T5899] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 484.645994][ T5899] usb-storage 4-1:1.0: USB Mass Storage device detected [ 484.666854][ T5899] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 485.363395][ T5895] IPVS: starting estimator thread 0... [ 485.490820][T12255] IPVS: using max 16 ests per chain, 38400 per kthread [ 486.121612][T12257] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2161'. [ 486.198380][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2163'. [ 486.324903][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2163'. [ 486.388658][T12269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2164'. [ 486.464298][T12272] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2164'. [ 486.672550][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2163'. [ 487.156429][ T5895] usb 4-1: USB disconnect, device number 8 [ 487.922223][T12309] __nla_validate_parse: 3 callbacks suppressed [ 487.922250][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 488.167913][T12320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2183'. [ 488.810316][ T52] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 489.246605][ T52] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.258136][ T52] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 489.271437][ T52] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 489.286067][ T52] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 489.295579][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 489.304037][ T52] usb 2-1: SerialNumber: syz [ 489.315757][ T52] cdc_ether 2-1:1.0: skipping garbage [ 489.322369][ T52] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 490.446791][ T52] usb-storage 2-1:1.0: USB Mass Storage device detected [ 491.407498][ T52] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 491.582626][T12359] loop4: detected capacity change from 0 to 512 [ 491.674668][T12359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.731847][T12359] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.685495][ T52] usb 2-1: USB disconnect, device number 12 [ 493.998126][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.548950][T12400] loop4: detected capacity change from 0 to 128 [ 494.733145][T12403] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2214'. [ 495.620217][ T5895] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 495.733969][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2216'. [ 495.819671][ T5895] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.869373][ T5895] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 496.057838][ T5895] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 496.073026][T12423] loop1: detected capacity change from 0 to 512 [ 496.097117][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 496.162565][ T5895] usb 6-1: SerialNumber: syz [ 496.291839][T12423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.377807][T12423] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.387077][ T5895] cdc_ether 6-1:1.0: skipping garbage [ 496.483747][ T5895] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 496.514860][ T5895] usb-storage 6-1:1.0: USB Mass Storage device detected [ 497.561024][ T5895] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 497.660636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 497.865328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 499.192556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 499.202936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 499.276421][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 499.400451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 499.487992][ T5895] usb 6-1: USB disconnect, device number 7 [ 499.532110][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 499.624619][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.867412][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 499.942751][T12474] loop1: detected capacity change from 0 to 128 [ 499.990456][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'. [ 501.971730][T12507] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2248'. [ 502.040160][ T5894] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 502.250482][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.290870][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'. [ 502.310272][ T5894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 502.347541][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2252'. [ 502.373181][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 503.101180][ T5895] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 503.348804][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 503.357664][ T5894] usb 4-1: SerialNumber: syz [ 503.531428][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'. [ 503.622937][ T5895] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 503.667676][ T5895] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 503.726589][ T5894] cdc_ether 4-1:1.0: skipping garbage [ 503.740456][ T5894] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 503.758712][ T5894] usb-storage 4-1:1.0: USB Mass Storage device detected [ 503.780166][ T5895] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 503.784902][ T5894] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 503.934597][ T5895] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 503.944722][ T5895] usb 5-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.957848][ T5895] usb 5-1: config 48 interface 0 has no altsetting 0 [ 503.966984][ T5895] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 503.976177][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.959156][ T5895] usb 5-1: Product: syz [ 504.975483][ T5895] usb 5-1: Manufacturer: syz [ 504.981140][ T5895] usb 5-1: SerialNumber: syz [ 506.157039][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.969775][ T5895] usb 5-1: USB disconnect, device number 14 [ 507.623673][ T5894] usb 4-1: USB disconnect, device number 9 [ 507.872734][T12559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2261'. [ 508.030185][T11633] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 508.090518][T12566] fuse: Bad value for 'fd' [ 508.170159][T11633] usb 6-1: device descriptor read/64, error -71 [ 508.420298][T11633] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 508.580216][T11633] usb 6-1: device descriptor read/64, error -71 [ 508.627382][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 508.701115][T11633] usb usb6-port1: attempt power cycle [ 509.234561][T11633] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 509.593303][T11633] usb 6-1: device descriptor read/8, error -71 [ 509.972475][T12589] loop3: detected capacity change from 0 to 256 [ 509.981919][T12588] tipc: Enabling of bearer rejected, failed to enable media [ 510.079713][T12589] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 510.105585][T11633] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 510.161737][T11633] usb 6-1: device descriptor read/8, error -71 [ 510.178368][T12589] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 510.251712][T12589] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 510.263503][T12589] UDF-fs: Scanning with blocksize 512 failed [ 510.305037][T12589] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 510.315233][T11633] usb usb6-port1: unable to enumerate USB device [ 510.373297][T12589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.475139][ T30] audit: type=1326 audit(1742654543.140:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3a938d169 code=0x0 [ 514.052723][T12616] loop5: detected capacity change from 0 to 512 [ 514.059727][T12616] EXT4-fs: Ignoring removed orlov option [ 514.061801][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2280'. [ 514.108770][T12617] netlink: 13036 bytes leftover after parsing attributes in process `syz.0.2280'. [ 514.125075][T12616] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 514.410210][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2280'. [ 514.434220][T12616] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.2279: casefold flag without casefold feature [ 514.470548][T12616] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.2279: couldn't read orphan inode 15 (err -117) [ 514.559218][T12616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.736386][ T5851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.806130][T12632] loop0: detected capacity change from 0 to 128 [ 514.939377][T12638] tipc: Enabling of bearer rejected, failed to enable media [ 515.951437][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 516.786548][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 517.026461][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 517.219961][T12665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2292'. [ 517.786266][ T5142] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 517.795949][ T5142] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 517.879288][T12682] netlink: 13036 bytes leftover after parsing attributes in process `syz.3.2297'. [ 518.953599][T12696] tipc: Enabling of bearer rejected, failed to enable media [ 519.569715][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2308'. [ 519.861175][T12721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2311'. [ 519.867485][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2310'. [ 522.383756][T11633] libceph: connect (1)[c::]:6789 error -101 [ 522.557136][T11633] libceph: mon0 (1)[c::]:6789 connect error [ 522.622207][T12736] ceph: No mds server is up or the cluster is laggy [ 524.670726][T12756] tipc: Enabled bearer , priority 0 [ 524.881042][T12755] tipc: Disabling bearer [ 524.936389][T12766] fuse: Bad value for 'fd' [ 525.296437][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 525.321825][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2326'. [ 525.376286][T12776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2327'. [ 526.670233][T12784] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2331'. [ 527.500445][ T5894] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 527.670299][ T5894] usb 4-1: device descriptor read/64, error -71 [ 528.057286][ T5894] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 528.210149][ T5894] usb 4-1: device descriptor read/64, error -71 [ 528.331204][ T5894] usb usb4-port1: attempt power cycle [ 528.716555][ T5894] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 528.761876][ T5894] usb 4-1: device descriptor read/8, error -71 [ 529.020167][ T5894] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 529.061395][ T5894] usb 4-1: device descriptor read/8, error -71 [ 529.202491][ T5894] usb usb4-port1: unable to enumerate USB device [ 529.209678][T12808] loop0: detected capacity change from 0 to 512 [ 529.302890][T12808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.325807][T12808] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.150115][T12820] tipc: Started in network mode [ 530.174726][T12820] tipc: Node identity ea7bd941790b, cluster identity 4711 [ 530.209516][T12820] tipc: Enabled bearer , priority 0 [ 530.272779][T12819] tipc: Disabling bearer [ 530.430432][ T5894] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 530.455898][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2342'. [ 530.548789][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2343'. [ 530.644107][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 531.143494][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.204023][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.242469][ T5894] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 531.275010][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.294055][T12834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2345'. [ 531.327334][ T5894] usb 6-1: config 0 descriptor?? [ 533.042226][ T5894] usbhid 6-1:0.0: can't add hid device: -71 [ 533.070181][ T5894] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 533.103816][ T5894] usb 6-1: USB disconnect, device number 12 [ 534.476024][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.896133][T12870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2359'. [ 535.944746][T12866] tipc: Enabled bearer , priority 0 [ 536.382294][T12876] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2360'. [ 537.338580][T12865] tipc: Disabling bearer [ 537.893401][T12883] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2361'. [ 538.165375][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2364'. [ 538.960506][ T5899] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 539.224178][T11633] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 539.563341][T11633] usb 6-1: Using ep0 maxpacket: 8 [ 539.726162][T11633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.884683][T11633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.951203][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 539.985669][ T5899] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 540.000642][ T5899] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 540.032368][ T5899] usb 4-1: config 250 has no interfaces? [ 540.066977][ T5899] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 540.107956][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 540.157163][ T5899] usb 4-1: Product: syz [ 540.190395][ T5899] usb 4-1: SerialNumber: syz [ 540.309146][T11633] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 540.392990][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2375'. [ 540.403555][T11633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.751460][T11633] usb 6-1: config 0 descriptor?? [ 542.021200][T11633] usbhid 6-1:0.0: can't add hid device: -71 [ 542.027864][T11633] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 542.042052][T11633] usb 6-1: USB disconnect, device number 13 [ 542.946726][T12932] tipc: Enabled bearer , priority 0 [ 543.021505][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2381'. [ 543.085760][T11633] usb 4-1: USB disconnect, device number 14 [ 544.987618][T12950] loop1: detected capacity change from 0 to 128 [ 545.300476][T12958] bridge_slave_0: left allmulticast mode [ 545.310647][T12958] bridge_slave_0: left promiscuous mode [ 545.324101][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.392015][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 545.518492][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'. [ 546.458410][T12958] bridge_slave_1: left allmulticast mode [ 546.561734][T12958] bridge_slave_1: left promiscuous mode [ 546.578803][T12977] syz.0.2392 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 546.620741][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.653674][T12958] bond0: (slave bond_slave_0): Releasing backup interface [ 546.756120][T12958] bond0: (slave bond_slave_1): Releasing backup interface [ 547.039930][T12958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.062946][T12958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.170293][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2394'. [ 548.056921][T12958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.108914][T12958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.219613][T12958] bond2: (slave batadv1): Releasing active interface [ 548.226664][T12958] batadv1: left promiscuous mode [ 548.240885][T12958] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 548.249269][T12958] batman_adv: batadv0: Removing interface: ip6gretap1 [ 548.310146][ T5894] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 548.480539][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 548.487797][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.513310][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.537940][ T5894] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 548.547826][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.554083][T12992] tipc: Enabling of bearer rejected, failed to enable media [ 548.599335][ T5894] usb 6-1: config 0 descriptor?? [ 548.920988][T11633] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 549.050827][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2398'. [ 549.080158][T11633] usb 5-1: Using ep0 maxpacket: 8 [ 549.126151][T11633] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 549.780410][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 549.788428][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 549.798805][ T5894] usbhid 6-1:0.0: can't add hid device: -71 [ 549.809101][ T5894] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 549.823387][ T5894] usb 6-1: USB disconnect, device number 14 [ 549.850830][T11633] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 549.965181][T11633] usb 5-1: config 250 has no interfaces? [ 550.001838][T11633] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 550.027561][T11633] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 550.050173][T11633] usb 5-1: Product: syz [ 550.054595][T11633] usb 5-1: SerialNumber: syz [ 550.296528][T13005] loop3: detected capacity change from 0 to 512 [ 550.375247][T13005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.390441][T13005] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.971537][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.740431][ T5894] usb 5-1: USB disconnect, device number 15 [ 553.048014][T13034] loop4: detected capacity change from 0 to 128 [ 553.189913][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2409'. [ 553.253207][T13039] loop5: detected capacity change from 0 to 512 [ 553.294707][T13039] EXT4-fs: Ignoring removed orlov option [ 553.314638][T13032] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 553.343448][T13039] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 553.371583][T13032] batman_adv: batadv0: Removing interface: ip6gretap1 [ 553.426445][T13039] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.2411: casefold flag without casefold feature [ 553.446715][T13039] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.2411: couldn't read orphan inode 15 (err -117) [ 553.455931][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2409'. [ 553.529278][T13039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.625902][ T5851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.950169][ T52] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 554.027456][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2413'. [ 554.594935][ T52] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 554.659934][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.765736][ T52] usb 4-1: config 0 descriptor?? [ 554.827222][ T52] cp210x 4-1:0.0: cp210x converter detected [ 555.051294][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'. [ 555.237877][ T52] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 555.490256][ T52] usb 4-1: cp210x converter now attached to ttyUSB0 [ 555.681785][ T5894] usb 4-1: USB disconnect, device number 15 [ 555.763599][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 555.841371][T13080] block device autoloading is deprecated and will be removed. [ 556.764577][ T5894] cp210x 4-1:0.0: device disconnected [ 558.287825][T13102] loop3: detected capacity change from 0 to 512 [ 558.329620][T13102] EXT4-fs: Ignoring removed orlov option [ 558.400695][T13102] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 558.469135][T13102] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.2428: casefold flag without casefold feature [ 558.541935][T13102] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.2428: couldn't read orphan inode 15 (err -117) [ 558.602168][T13102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.739853][T13109] bridge_slave_0: left allmulticast mode [ 558.745860][T13109] bridge_slave_0: left promiscuous mode [ 558.752343][T13109] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.879731][T13109] bridge_slave_1: left allmulticast mode [ 558.990230][T13109] bridge_slave_1: left promiscuous mode [ 559.120562][T13109] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.158378][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.376517][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 559.593939][T13109] bond0: (slave bond_slave_0): Releasing backup interface [ 559.871034][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2432'. [ 559.945974][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2432'. [ 560.081600][T13109] bond0: (slave bond_slave_1): Releasing backup interface [ 560.162746][T13109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.198102][T13109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.219993][T13109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.250388][T13109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.313874][T13109] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 560.335089][T13109] batman_adv: batadv0: Removing interface: ip6gretap1 [ 561.137500][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2436'. [ 562.610779][T11633] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 562.708657][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 562.740442][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 562.853377][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 562.898674][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 563.705542][T11633] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 563.716460][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 563.716628][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 563.998253][T11633] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 564.009414][T11633] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 564.020621][T11633] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 564.030580][T11633] usb 2-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.043745][T11633] usb 2-1: config 48 interface 0 has no altsetting 0 [ 564.053029][T11633] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 564.062483][T11633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.081466][T13149] ceph: No mds server is up or the cluster is laggy [ 564.229722][T11633] usb 2-1: Product: syz [ 564.267700][T11633] usb 2-1: Manufacturer: syz [ 564.281617][T11633] usb 2-1: SerialNumber: syz [ 564.395935][T11633] usb 2-1: can't set config #48, error -71 [ 564.428204][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 564.444614][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 564.445896][T11633] usb 2-1: USB disconnect, device number 13 [ 564.646358][T13172] loop1: detected capacity change from 0 to 512 [ 564.667638][T13172] EXT4-fs: Ignoring removed orlov option [ 564.760185][T13172] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 564.804560][T13172] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.2446: casefold flag without casefold feature [ 564.944742][T13172] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.2446: couldn't read orphan inode 15 (err -117) [ 565.001576][T13172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.410454][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2448'. [ 566.705114][T13190] loop5: detected capacity change from 0 to 32768 [ 567.771386][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.334034][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.391234][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2453'. [ 568.685750][T13208] tipc: Resetting bearer [ 568.719376][ T8151] tipc: Resetting bearer [ 568.763520][T13203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2454'. [ 568.814366][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2454'. [ 569.159488][T13223] fuse: Bad value for 'fd' [ 569.179451][ T5305] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 569.697025][ T5305] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 569.751709][ T5305] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 569.825372][ T5305] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 569.882493][ T5305] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 569.949969][ T5305] usb 4-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.016338][ T5305] usb 4-1: config 48 interface 0 has no altsetting 0 [ 570.045487][T13229] tipc: Enabling of bearer rejected, already enabled [ 570.078016][ T5305] usb 4-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 570.092013][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.108050][ T5305] usb 4-1: Product: syz [ 570.190334][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 570.205680][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 570.403599][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2465'. [ 571.085820][ T5305] usb 4-1: Manufacturer: syz [ 571.095760][ T5305] usb 4-1: SerialNumber: syz [ 571.130850][T13236] ceph: No mds server is up or the cluster is laggy [ 571.408909][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 571.431620][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 572.645745][ T5305] usb 4-1: USB disconnect, device number 16 [ 572.914287][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'. [ 573.040169][ T5897] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 573.222433][ T5897] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 573.265867][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.331878][ T5897] usb 6-1: config 0 descriptor?? [ 573.383335][ T5897] cp210x 6-1:0.0: cp210x converter detected [ 574.359788][ T5897] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 574.448314][T13284] tipc: Enabled bearer , priority 0 [ 574.600287][T13283] tipc: Disabling bearer [ 574.606656][ T5897] usb 6-1: cp210x converter now attached to ttyUSB0 [ 574.798944][ T5897] usb 6-1: USB disconnect, device number 15 [ 574.900382][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2479'. [ 575.690565][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 575.713157][ T5897] cp210x 6-1:0.0: device disconnected [ 576.953079][T13313] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2485'. [ 577.170402][ T5897] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 577.202145][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2485'. [ 577.233382][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 577.360191][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 577.384923][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.433097][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.491242][ T5897] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 577.545222][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.609932][ T5897] usb 6-1: config 0 descriptor?? [ 578.287575][T13299] loop3: detected capacity change from 0 to 32768 [ 578.594193][T13299] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 578.796266][ T5897] usbhid 6-1:0.0: can't add hid device: -71 [ 578.803923][ T5897] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 578.837521][ T5897] usb 6-1: USB disconnect, device number 16 [ 579.055958][ T5848] (syz-executor,5848,0):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 579.134681][ T5848] ocfs2: Unmounting device (7,3) on (node local) [ 580.288314][T13342] tipc: Enabling of bearer rejected, failed to enable media [ 580.605148][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2496'. [ 581.453982][T13356] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2499'. [ 581.520207][ T5897] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 581.575352][T13364] fuse: Bad value for 'fd' [ 581.732461][ T5897] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 581.772150][ T5897] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 581.783854][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 581.840152][ T5897] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 581.895023][ T5897] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 582.899634][ T5897] usb 5-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.913368][ T5897] usb 5-1: config 48 interface 0 has no altsetting 0 [ 582.925327][ T5897] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 582.934520][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.944001][ T5897] usb 5-1: Product: syz [ 582.948230][ T5897] usb 5-1: Manufacturer: syz [ 583.080399][ T5897] usb 5-1: SerialNumber: syz [ 583.511297][T11633] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 583.806665][ T5897] usb 5-1: USB disconnect, device number 16 [ 584.650210][T11633] usb 4-1: Using ep0 maxpacket: 8 [ 584.690613][T11633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.720217][T11633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.760147][T11633] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 584.769270][T11633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.098493][T11633] usb 4-1: config 0 descriptor?? [ 585.246275][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2514'. [ 586.419892][T11633] usbhid 4-1:0.0: can't add hid device: -71 [ 586.497051][T11633] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 586.895123][T11633] usb 4-1: USB disconnect, device number 17 [ 589.021019][T13437] loop0: detected capacity change from 0 to 512 [ 589.126611][T13437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.210307][T13437] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.310209][T11633] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 589.687088][T11633] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 589.839770][T11633] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 589.997720][T11633] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 590.091762][T11633] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 590.122195][T11633] usb 4-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.173277][T11633] usb 4-1: config 48 interface 0 has no altsetting 0 [ 590.204000][T13450] tipc: Enabled bearer , priority 0 [ 590.215048][T11633] usb 4-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 590.271811][T11633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.308773][T11633] usb 4-1: Product: syz [ 590.318758][T11633] usb 4-1: Manufacturer: syz [ 590.340736][T11633] usb 4-1: SerialNumber: syz [ 590.351164][T13446] tipc: Resetting bearer [ 590.368958][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.595808][T11633] usb 4-1: USB disconnect, device number 18 [ 592.200735][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2530'. [ 592.735725][ T52] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 592.966325][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 592.989034][ T52] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 593.006042][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.045908][ T52] usb 2-1: config 0 descriptor?? [ 593.059326][ T52] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 593.308141][ T52] usb 2-1: Detected FT232A [ 593.317144][ T52] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 593.345582][ T52] usb 2-1: USB disconnect, device number 14 [ 594.313770][ T52] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 594.324320][ T52] ftdi_sio 2-1:0.0: device disconnected [ 594.710251][ T5895] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 594.901677][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 594.919592][ T5895] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 594.929771][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.946825][ T5895] usb 4-1: config 0 descriptor?? [ 595.187131][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 595.207904][ T5895] asix 4-1:0.0: probe with driver asix failed with error -32 [ 595.645890][T13446] tipc: Disabling bearer [ 596.266750][T13501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2542'. [ 596.467686][ T5899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 596.650490][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 596.672403][ T5899] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 596.699243][ T5899] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 596.740759][ T5899] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 596.769718][ T5899] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 596.837999][ T5899] usb 2-1: config 250 has no interface number 0 [ 596.866299][ T5899] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 596.939625][ T5899] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 596.979203][ T5899] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 597.789939][ T5899] usb 2-1: config 250 interface 228 has no altsetting 0 [ 597.811936][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 597.822105][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 598.231722][ T5899] usb 2-1: Product: syz [ 598.235967][ T5899] usb 2-1: SerialNumber: syz [ 598.288981][ T5894] usb 4-1: USB disconnect, device number 19 [ 598.339456][ T5899] hub 2-1:250.228: bad descriptor, ignoring hub [ 598.392937][ T5899] hub 2-1:250.228: probe with driver hub failed with error -5 [ 599.494473][T13517] loop4: detected capacity change from 0 to 32768 [ 600.535026][ T5912] usb 2-1: USB disconnect, device number 15 [ 601.300286][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2550'. [ 601.520098][T13517] read_mapping_page failed! [ 601.525057][T13517] jfs_mount: dbMount failed w/rc = -5 [ 601.532142][T13517] Mount JFS Failure: -5 [ 602.391507][T13538] UHID_CREATE from different security context by process 1167 (syz.1.2555), this is not allowed. [ 602.416714][T13538] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 603.234909][T13540] fuse: Bad value for 'fd' [ 603.893182][T13549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2558'. [ 606.000479][ T5899] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 606.028013][T13568] loop1: detected capacity change from 0 to 512 [ 606.202816][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 606.251979][ T5899] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 606.306221][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.412256][T13568] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2564: corrupted in-inode xattr: invalid ea_ino [ 606.429669][T13569] loop3: detected capacity change from 0 to 32768 [ 606.444000][ T5899] usb 5-1: config 0 descriptor?? [ 606.503133][T13568] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.2564: couldn't read orphan inode 15 (err -117) [ 606.872997][T13568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.916386][ T5899] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 606.970602][ T5899] asix 5-1:0.0: probe with driver asix failed with error -32 [ 607.233139][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.635412][ T5899] usb 5-1: USB disconnect, device number 17 [ 608.693589][T13585] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 608.755899][T13585] batman_adv: batadv0: Removing interface: ip6gretap1 [ 609.576463][T13602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2567'. [ 611.049374][T13603] siw: device registration error -23 [ 611.327249][T13585] tipc: Resetting bearer [ 613.286246][T13626] loop4: detected capacity change from 0 to 64 [ 615.196517][T13649] siw: device registration error -23 [ 616.603142][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2586'. [ 618.635963][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 618.650392][ T5912] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 618.667419][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 618.677806][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 618.684579][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 618.786467][T13684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2589'. [ 618.825935][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'. [ 618.840914][ T5912] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 618.870547][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.877005][T13683] loop5: detected capacity change from 0 to 512 [ 618.925974][ T5912] usb 4-1: config 0 descriptor?? [ 618.953649][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 619.143587][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 619.256274][T13683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.265321][ T5912] cp210x 4-1:0.0: cp210x converter detected [ 619.344539][T13683] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.371504][T13679] ceph: No mds server is up or the cluster is laggy [ 620.405722][ T5912] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 620.452809][ T5851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.655125][ T5912] usb 4-1: cp210x converter now attached to ttyUSB0 [ 621.652216][ T5895] usb 4-1: USB disconnect, device number 20 [ 621.693854][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 621.725135][ T5895] cp210x 4-1:0.0: device disconnected [ 621.899738][T13707] loop1: detected capacity change from 0 to 64 [ 623.615809][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2603'. [ 624.530265][ T52] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 624.585762][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 624.646345][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 624.749341][ T52] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 624.829688][ T52] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 624.936820][ T52] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 624.951011][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 624.957383][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 624.987101][ T52] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 625.049821][ T52] usb 4-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.086743][T13741] loop1: detected capacity change from 0 to 128 [ 625.104032][ T52] usb 4-1: config 48 interface 0 has no altsetting 0 [ 625.136888][ T52] usb 4-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 625.170305][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.190127][ T52] usb 4-1: Product: syz [ 625.204911][ T52] usb 4-1: Manufacturer: syz [ 625.221906][ T52] usb 4-1: SerialNumber: syz [ 625.249135][T13734] ceph: No mds server is up or the cluster is laggy [ 625.488739][ T52] usb 4-1: USB disconnect, device number 21 [ 625.645294][T13747] bridge_slave_0: left allmulticast mode [ 625.663854][T13747] bridge_slave_0: left promiscuous mode [ 626.101410][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.658510][T13747] bridge_slave_1: left allmulticast mode [ 626.736240][T13747] bridge_slave_1: left promiscuous mode [ 626.776086][T13747] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.934035][T13747] bond0: (slave bond_slave_0): Releasing backup interface [ 627.006370][T13747] bond_slave_0: left promiscuous mode [ 627.016743][T13750] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2613'. [ 627.034013][T13747] bond0: (slave bond_slave_1): Releasing backup interface [ 627.054037][T13747] bond_slave_1: left promiscuous mode [ 627.072349][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2613'. [ 628.136950][T13774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2619'. [ 629.419166][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.968124][T13799] loop4: detected capacity change from 0 to 128 [ 631.617859][T13807] loop1: detected capacity change from 0 to 32768 [ 633.464368][T13826] loop3: detected capacity change from 0 to 512 [ 633.880744][T13826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.178487][T13826] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.548167][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.564103][T13853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2635'. [ 643.098373][T13902] loop1: detected capacity change from 0 to 32768 [ 644.143481][T13914] siw: device registration error -23 [ 645.455164][T13921] siw: device registration error -23 [ 647.190227][T13923] loop4: detected capacity change from 0 to 512 [ 647.361426][T13923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.431502][T13923] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.704357][ T5142] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 647.855732][ T5142] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 649.354344][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.511546][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2672'. [ 652.075323][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'. [ 652.111923][T13969] loop1: detected capacity change from 0 to 64 [ 652.370743][ T5894] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 652.392983][T13973] syzkaller1: entered promiscuous mode [ 652.422745][T13973] syzkaller1: entered allmulticast mode [ 652.582119][ T5894] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 652.608205][ T5894] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 652.627487][ T5894] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 653.869977][ T5894] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 653.880642][ T5894] usb 5-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.893830][ T5894] usb 5-1: config 48 interface 0 has no altsetting 0 [ 653.911952][ T5894] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 653.925283][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.947612][ T5894] usb 5-1: Product: syz [ 653.960873][ T5894] usb 5-1: Manufacturer: syz [ 653.965544][ T5894] usb 5-1: SerialNumber: syz [ 653.977964][T13987] loop1: detected capacity change from 0 to 512 [ 654.632039][ T5894] usb 5-1: USB disconnect, device number 18 [ 654.651396][T13987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.673911][T13987] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.447278][T14004] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2687'. [ 657.728541][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.770412][T14014] loop5: detected capacity change from 0 to 16 [ 657.834316][T14014] erofs (device loop5): mounted with root inode @ nid 36. [ 657.901074][ T5142] erofs (device loop5): failed to decompress -26 in[46, 0] out[9000] [ 657.931529][T14014] erofs (device loop5): failed to decompress -26 in[46, 4050] out[8192] [ 657.960442][T14014] erofs (device loop5): read error -117 @ 0 of nid 89 [ 657.973980][ T30] audit: type=1800 audit(1742654710.630:959): pid=14014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2691" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 658.579249][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 658.646351][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2696'. [ 658.782300][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2696'. [ 659.853855][T14052] loop5: detected capacity change from 0 to 32768 [ 662.409650][T14067] siw: device registration error -23 [ 662.570175][ T52] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 662.805810][ T52] usb 6-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 662.858376][ T52] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 662.899139][ T52] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 662.950368][ T5895] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 662.986720][ T52] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 663.060439][ T52] usb 6-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.124640][ T52] usb 6-1: config 48 interface 0 has no altsetting 0 [ 663.142302][ T52] usb 6-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 663.160334][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 663.170446][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.193627][ T5895] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 663.212358][ T5895] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 663.230854][ T52] usb 6-1: Product: syz [ 663.250363][ T52] usb 6-1: Manufacturer: syz [ 663.255031][ T52] usb 6-1: SerialNumber: syz [ 663.260814][ T5895] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 663.285505][ T5895] usb 2-1: config 250 has no interface number 0 [ 663.293000][ T5895] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 663.321067][ T5895] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 663.375777][ T5895] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 663.638971][T14077] loop4: detected capacity change from 0 to 32768 [ 663.673212][ T52] usb 6-1: USB disconnect, device number 17 [ 663.997196][ T5895] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 664.330150][ T5895] usb 2-1: config 250 interface 228 has no altsetting 0 [ 664.370203][ T5895] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 664.400161][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 664.408456][ T5895] usb 2-1: Product: syz [ 664.450366][ T5895] usb 2-1: SerialNumber: syz [ 664.473378][ T5895] hub 2-1:250.228: bad descriptor, ignoring hub [ 664.479705][ T5895] hub 2-1:250.228: probe with driver hub failed with error -5 [ 665.815346][ T5895] usb 2-1: USB disconnect, device number 16 [ 667.298918][T14100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2717'. [ 667.430620][T14103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2718'. [ 667.703283][T14112] siw: device registration error -23 [ 671.375148][T14135] siw: device registration error -23 [ 672.601531][T14143] siw: device registration error -23 [ 675.083901][T14155] loop0: detected capacity change from 0 to 512 [ 675.148828][T14155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.173289][T14155] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.082051][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.111015][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2734'. [ 683.499213][T13912] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 683.510018][T13912] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 683.518831][T13912] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 683.538888][T13912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 683.556478][T13912] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 683.569371][T13912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 683.617096][T14208] loop1: detected capacity change from 0 to 512 [ 683.784290][T14208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.877111][T14208] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.778411][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.993240][T13297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.168680][T14221] siw: device registration error -23 [ 685.825536][ T5142] Bluetooth: hci6: command tx timeout [ 686.252287][T13297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.391104][T14205] chnl_net:caif_netlink_parms(): no params data found [ 686.455542][T14229] loop3: detected capacity change from 0 to 32768 [ 687.064199][T13297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.190154][T14234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2752'. [ 687.302307][T13297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.452370][T14205] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.459796][T14205] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.487696][T14205] bridge_slave_0: entered allmulticast mode [ 687.507812][T14205] bridge_slave_0: entered promiscuous mode [ 687.521430][T14205] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.538768][T14205] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.547807][T14205] bridge_slave_1: entered allmulticast mode [ 687.556135][T14205] bridge_slave_1: entered promiscuous mode [ 687.819584][T14205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.900781][T13912] Bluetooth: hci6: command tx timeout [ 687.953751][T14205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.032169][T14246] loop0: detected capacity change from 0 to 16 [ 688.112522][T14246] erofs (device loop0): mounted with root inode @ nid 36. [ 688.211265][T13912] erofs (device loop0): failed to decompress -26 in[46, 0] out[9000] [ 688.245618][T14246] erofs (device loop0): failed to decompress -26 in[46, 4050] out[8192] [ 688.418981][T14246] erofs (device loop0): read error -117 @ 0 of nid 89 [ 688.596477][ T30] audit: type=1800 audit(1742654751.265:960): pid=14246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2756" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 689.161781][T14205] team0: Port device team_slave_0 added [ 689.980268][T13912] Bluetooth: hci6: command tx timeout [ 690.149310][T14205] team0: Port device team_slave_1 added [ 690.499888][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.907871][T14272] siw: device registration error -23 [ 691.362165][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 692.160504][T13912] Bluetooth: hci6: command tx timeout [ 692.330856][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2765'. [ 694.479796][T14304] loop1: detected capacity change from 0 to 32768 [ 695.583078][T13297] bond0 (unregistering): Released all slaves [ 695.721780][T13297] bond1 (unregistering): Released all slaves [ 695.816962][T14261] tipc: Resetting bearer [ 695.876703][T14205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.894793][T14205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.920855][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.940269][T14205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.006496][T13297] tipc: Left network mode [ 696.031413][T14205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.058791][T14205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.210175][T14205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.422312][T14205] hsr_slave_0: entered promiscuous mode [ 697.442813][T14205] hsr_slave_1: entered promiscuous mode [ 697.632232][T14205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.689089][T14205] Cannot create hsr debugfs directory [ 698.120399][T13297] hsr_slave_0: left promiscuous mode [ 698.139515][T13297] hsr_slave_1: left promiscuous mode [ 698.749445][T13297] veth1_vlan: left promiscuous mode [ 698.800536][T13297] veth0_vlan: left promiscuous mode [ 699.160537][ T5895] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 699.330240][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 699.349451][T14366] loop1: detected capacity change from 0 to 512 [ 699.361111][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.380823][ T5895] usb 4-1: config 0 has no interfaces? [ 699.394707][ T5895] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 699.426956][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.444124][ T5895] usb 4-1: config 0 descriptor?? [ 699.479556][T14366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.509119][T14366] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.736014][ T5895] usb 4-1: USB disconnect, device number 22 [ 700.371446][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.513194][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2784'. [ 702.020994][T14388] loop0: detected capacity change from 0 to 32768 [ 702.317976][ T5894] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 702.495177][ T5894] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 702.580152][ T5894] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 702.631713][ T5894] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 702.665344][ T5894] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 702.703539][ T5894] usb 2-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.738327][ T5894] usb 2-1: config 48 interface 0 has no altsetting 0 [ 702.759441][ T5894] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 702.796842][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.805827][ T5894] usb 2-1: Product: syz [ 702.810914][ T5894] usb 2-1: Manufacturer: syz [ 702.836914][ T5894] usb 2-1: SerialNumber: syz [ 702.973993][ T52] infiniband syz2: ib_query_port failed (-19) [ 703.181047][ T5894] usb 2-1: USB disconnect, device number 17 [ 703.543185][T14402] loop3: detected capacity change from 0 to 16 [ 703.578349][T14402] erofs (device loop3): mounted with root inode @ nid 36. [ 704.323194][T13912] erofs (device loop3): failed to decompress -26 in[46, 0] out[9000] [ 704.334896][T14402] erofs (device loop3): failed to decompress -26 in[46, 4050] out[8192] [ 704.392098][T14205] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 704.422019][T14402] erofs (device loop3): read error -117 @ 0 of nid 89 [ 704.484029][ T30] audit: type=1800 audit(1742654767.155:961): pid=14402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2792" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 704.521561][T14205] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 704.657045][T14205] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 704.745054][T14205] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 705.569909][T14430] siw: device registration error -23 [ 706.549703][T14205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.017232][T14205] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.131871][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.139017][ T6251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.572382][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.579548][ T6251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.055051][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2802'. [ 711.640372][ T5894] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 711.857083][ T5894] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 711.908182][T14205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.925271][ T5894] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 711.982826][ T5894] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 712.025301][ T5894] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 712.096393][ T5894] usb 2-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.188127][ T5894] usb 2-1: config 48 interface 0 has no altsetting 0 [ 712.242793][ T5894] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 712.281563][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.324414][ T5894] usb 2-1: Product: syz [ 712.362951][ T5894] usb 2-1: Manufacturer: syz [ 712.381019][ T5894] usb 2-1: SerialNumber: syz [ 712.634896][ T5894] usb 2-1: USB disconnect, device number 18 [ 712.951908][T14205] veth0_vlan: entered promiscuous mode [ 713.021204][T14205] veth1_vlan: entered promiscuous mode [ 713.615270][T14205] veth0_macvtap: entered promiscuous mode [ 713.940701][T14205] veth1_macvtap: entered promiscuous mode [ 714.393872][T14205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.453418][T14205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.509532][T14205] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.547597][T14205] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.577219][T14205] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.828687][T14205] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.961538][ T8111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.969431][ T8111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.381646][T13912] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 716.538337][T13912] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 716.621291][ T8136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.629205][ T8136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.597791][T13912] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 720.607324][T13912] Bluetooth: hci4: Injecting HCI hardware error event [ 720.618840][T13912] Bluetooth: hci4: hardware error 0x00 [ 720.722309][T14564] siw: device registration error -23 [ 722.736778][T13912] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 723.158248][T14578] fuse: Bad value for 'fd' [ 724.692183][T14591] loop3: detected capacity change from 0 to 32768 [ 727.171304][T14604] fuse: Bad value for 'fd' [ 731.182902][T14633] loop0: detected capacity change from 0 to 32768 [ 731.196622][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2836'. [ 731.579031][T14639] loop3: detected capacity change from 0 to 64 [ 732.557571][T14639] overlay: ./file2 is not a directory [ 732.970135][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 733.014522][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 733.028757][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 733.044642][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 733.052804][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 733.067918][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 733.626968][ T6775] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.980452][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2840'. [ 733.999405][ T6775] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.556588][ T6775] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.669939][T14679] siw: device registration error -23 [ 735.678189][ T5142] Bluetooth: hci1: command tx timeout [ 736.482766][ T6775] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.665799][T14684] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2849'. [ 736.826886][ T30] audit: type=1326 audit(1742654799.495:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.0.2850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3a938d169 code=0x0 [ 736.836973][T14683] bridge_slave_0: left allmulticast mode [ 736.856587][T14683] bridge_slave_0: left promiscuous mode [ 736.863085][T14683] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.701441][T14696] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2849'. [ 737.740269][ T5142] Bluetooth: hci1: command tx timeout [ 737.790748][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2849'. [ 737.814882][T14683] bridge_slave_1: left allmulticast mode [ 738.069310][T14683] bridge_slave_1: left promiscuous mode [ 738.077588][T14683] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.091685][T14683] bond0: (slave bond_slave_0): Releasing backup interface [ 739.142618][T14683] bond0: (slave bond_slave_1): Releasing backup interface [ 739.371931][T14683] team0: Port device team_slave_0 removed [ 739.393608][T14708] loop1: detected capacity change from 0 to 512 [ 739.428905][T14683] team0: Port device team_slave_1 removed [ 739.452079][T14708] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2854: corrupted in-inode xattr: invalid ea_ino [ 739.480087][T14683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.511364][T14683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.529236][T14708] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.2854: couldn't read orphan inode 15 (err -117) [ 739.552653][T14683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.564680][T14706] loop0: detected capacity change from 0 to 32768 [ 739.564768][T14708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.580308][T14683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.820757][ T5142] Bluetooth: hci1: command tx timeout [ 740.292003][ T5844] EXT4-fs error (device loop1): htree_dirblock_to_tree:1109: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 740.372780][ T5844] EXT4-fs error (device loop1): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 15 [ 740.422799][ T5844] EXT4-fs error (device loop1): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 15 [ 740.638128][T14716] fuse: Bad value for 'fd' [ 741.900158][ T5142] Bluetooth: hci1: command tx timeout [ 743.172816][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.801600][T14741] siw: device registration error -23 [ 744.938432][T14746] siw: device registration error -23 [ 745.923584][T14747] loop0: detected capacity change from 0 to 32768 [ 747.211492][T14753] loop3: detected capacity change from 0 to 32768 [ 747.225683][T14755] siw: device registration error -23 [ 749.183849][T14765] siw: device registration error -23 [ 750.750369][T14768] siw: device registration error -23 [ 751.098488][T13912] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 751.112850][T13912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.125489][T13912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.135736][T13912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 751.153806][T13912] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 751.163182][T13912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 752.124285][T14780] loop0: detected capacity change from 0 to 64 [ 752.710508][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.686743][T13912] Bluetooth: hci3: command tx timeout [ 754.137894][T14787] loop3: detected capacity change from 0 to 32768 [ 755.744509][T13912] Bluetooth: hci3: command tx timeout [ 755.828937][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 755.880282][ T6775] bond0 (unregistering): left promiscuous mode [ 755.887592][ T6775] bond0 (unregistering): Released all slaves [ 755.916244][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 756.069716][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 756.111456][ T6775] bond1 (unregistering): Released all slaves [ 756.197387][T14793] tipc: Resetting bearer [ 757.936699][T13912] Bluetooth: hci3: command tx timeout [ 758.183333][T14648] chnl_net:caif_netlink_parms(): no params data found [ 758.223682][T14828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2885'. [ 758.860689][T14841] siw: device registration error -23 [ 760.610367][T14843] siw: device registration error -23 [ 761.015279][T13912] Bluetooth: hci3: command tx timeout [ 762.106004][T14860] loop3: detected capacity change from 0 to 32768 [ 762.141250][T14856] siw: device registration error -23 [ 762.751509][T14849] ceph: No mds server is up or the cluster is laggy [ 762.770887][T14515] libceph: connect (1)[c::]:6789 error -101 [ 762.950947][ T6775] dummy0: left promiscuous mode [ 763.328973][T14515] libceph: mon0 (1)[c::]:6789 connect error [ 763.450511][ T6775] hsr_slave_0: left promiscuous mode [ 763.529953][ T6775] hsr_slave_1: left promiscuous mode [ 763.595102][ T6775] veth1_macvtap: left promiscuous mode [ 763.624597][ T6775] veth0_macvtap: left promiscuous mode [ 763.643386][ T6775] veth1_vlan: left promiscuous mode [ 763.659244][ T6775] veth0_vlan: left promiscuous mode [ 766.686613][T14896] siw: device registration error -23 [ 769.499862][T14901] siw: device registration error -23 [ 770.365129][T14907] loop3: detected capacity change from 0 to 32768 [ 772.002592][T14919] siw: device registration error -23 [ 773.373973][T14929] siw: device registration error -23 [ 775.226827][T14948] siw: device registration error -23 [ 776.908377][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2914'. [ 778.379501][T14648] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.603984][T14648] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.470203][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2915'. [ 779.564301][T14648] bridge_slave_0: entered allmulticast mode [ 779.572024][T14648] bridge_slave_0: entered promiscuous mode [ 779.815926][T14976] siw: device registration error -23 [ 780.400324][T14648] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.267850][T14648] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.276718][T14648] bridge_slave_1: entered allmulticast mode [ 781.296792][T14648] bridge_slave_1: entered promiscuous mode [ 781.816042][T14648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.941535][T14648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.461917][T14769] chnl_net:caif_netlink_parms(): no params data found [ 782.716152][T14648] team0: Port device team_slave_0 added [ 782.743606][T14648] team0: Port device team_slave_1 added [ 784.009206][T14648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.058950][T14648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.128045][T14648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.158616][ T6775] IPVS: stop unused estimator thread 0... [ 784.323776][T14648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.341934][T14648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.380283][T14648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.601696][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.892247][T15015] loop6: detected capacity change from 0 to 32768 [ 784.903587][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.913891][T14769] bridge_slave_0: entered allmulticast mode [ 784.959208][T14769] bridge_slave_0: entered promiscuous mode [ 785.586762][T14769] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.642233][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.662991][T14769] bridge_slave_1: entered allmulticast mode [ 785.677162][T14769] bridge_slave_1: entered promiscuous mode [ 786.023464][T14648] hsr_slave_0: entered promiscuous mode [ 786.029874][T14648] hsr_slave_1: entered promiscuous mode [ 786.089221][T14648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.135708][T14648] Cannot create hsr debugfs directory [ 786.699764][ T6775] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.761139][T14769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.791969][T14769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.488802][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 790.620363][ T6775] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.714597][T14769] team0: Port device team_slave_0 added [ 790.760446][T14769] team0: Port device team_slave_1 added [ 791.296853][T15064] siw: device registration error -23 [ 792.020683][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 792.072914][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 792.081128][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 792.095303][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 792.107502][ T5142] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 792.228314][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 792.493989][T15067] loop3: detected capacity change from 0 to 32768 [ 792.786446][ T6775] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.157033][T15069] loop0: detected capacity change from 0 to 32768 [ 793.836517][T14769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.864196][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.000734][T14769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.083755][ T6775] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.131636][T14769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.161289][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.330428][T14769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.381784][ T5142] Bluetooth: hci5: command tx timeout [ 794.886559][T15077] loop6: detected capacity change from 0 to 32768 [ 796.177304][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2937'. [ 796.460713][ T5142] Bluetooth: hci5: command tx timeout [ 796.707171][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2937'. [ 796.789440][T14769] hsr_slave_0: entered promiscuous mode [ 796.810942][T14769] hsr_slave_1: entered promiscuous mode [ 796.817069][T14769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.844902][T14769] Cannot create hsr debugfs directory [ 797.540291][ T5897] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 797.712888][ T5897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.732056][ T5897] usb 7-1: config 0 has no interfaces? [ 797.737853][ T5897] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 797.747335][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.762956][ T5897] usb 7-1: config 0 descriptor?? [ 797.976614][ T5897] usb 7-1: string descriptor 0 read error: -71 [ 798.024705][ T5897] usb 7-1: USB disconnect, device number 2 [ 798.051012][ T6775] bond0 (unregistering): Released all slaves [ 798.258113][T15120] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2943'. [ 798.311773][ T6775] bond1 (unregistering): Released all slaves [ 798.550307][ T5142] Bluetooth: hci5: command tx timeout [ 799.155478][T15122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2943'. [ 799.220646][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2943'. [ 799.404925][T15130] loop3: detected capacity change from 0 to 512 [ 799.493643][T15114] tipc: Resetting bearer [ 799.573591][T15130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.587007][T15130] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 799.696363][ T6775] tipc: Left network mode [ 800.650814][ T5142] Bluetooth: hci5: command tx timeout [ 801.142435][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.986082][T15159] fuse: Bad value for 'fd' [ 803.423945][T14769] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 803.491032][T15059] chnl_net:caif_netlink_parms(): no params data found [ 803.560931][T14769] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 803.642575][T15167] fuse: Bad value for 'fd' [ 804.914012][ T6775] hsr_slave_0: left promiscuous mode [ 804.960259][ T6775] hsr_slave_1: left promiscuous mode [ 805.017441][ T6775] veth1_vlan: left promiscuous mode [ 805.056415][ T6775] veth0_vlan: left promiscuous mode [ 808.172080][T13912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 808.185992][T13912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 808.194683][T13912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 808.221914][T13912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 808.320795][T13912] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 808.328172][T13912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.648697][T15205] loop3: detected capacity change from 0 to 64 [ 808.736032][T15205] overlayfs: failed to resolve './file2': -2 [ 810.299464][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2960'. [ 811.000153][T15203] Bluetooth: hci1: command tx timeout [ 811.732343][ T26] libceph: connect (1)[c::]:6789 error -101 [ 811.738415][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 811.841846][T14769] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 811.984414][T15216] ceph: No mds server is up or the cluster is laggy [ 812.010799][ T26] libceph: connect (1)[c::]:6789 error -101 [ 812.021329][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 812.356051][T15059] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.403765][T15059] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.457013][T15059] bridge_slave_0: entered allmulticast mode [ 812.507033][T15059] bridge_slave_0: entered promiscuous mode [ 812.618969][T15059] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.646127][T15059] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.730339][T15059] bridge_slave_1: entered allmulticast mode [ 812.766512][T15059] bridge_slave_1: entered promiscuous mode [ 813.600415][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.620660][T15203] Bluetooth: hci1: command tx timeout [ 813.746424][T15241] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 814.185131][T15248] fuse: Bad value for 'fd' [ 815.196155][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2970'. [ 815.815272][T15203] Bluetooth: hci1: command tx timeout [ 815.896437][T15059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.959226][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 815.997849][T15059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.112203][T15261] loop6: detected capacity change from 0 to 1024 [ 816.234608][T15261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.285997][T15261] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.302080][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 816.477083][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2972'. [ 816.498447][T15261] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 816.567868][T15261] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 816.626107][T15261] EXT4-fs (loop6): This should not happen!! Data will be lost [ 816.626107][T15261] [ 816.658613][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 816.677374][T15261] EXT4-fs (loop6): Total free blocks count 0 [ 816.697143][T15261] EXT4-fs (loop6): Free/Dirty block details [ 816.718548][T15261] EXT4-fs (loop6): free_blocks=4293918720 [ 816.746567][ T6775] IPVS: stop unused estimator thread 0... [ 816.772490][T15261] EXT4-fs (loop6): dirty_blocks=48 [ 816.794773][T15261] EXT4-fs (loop6): Block reservation details [ 816.816817][T15261] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 817.145691][T15285] overlayfs: failed to resolve './file2': -2 [ 817.155750][T14205] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.199256][T15059] team0: Port device team_slave_0 added [ 817.228038][T15059] team0: Port device team_slave_1 added [ 817.545397][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 817.549041][T15294] loop6: detected capacity change from 0 to 128 [ 817.552248][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 817.713586][T15059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.902273][T15203] Bluetooth: hci1: command tx timeout [ 818.086441][T14515] libceph: connect (1)[c::]:6789 error -101 [ 818.100223][T14515] libceph: mon0 (1)[c::]:6789 connect error [ 818.110237][T15059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.138563][T15059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.253463][T15307] loop0: detected capacity change from 0 to 64 [ 818.304912][T15295] ceph: No mds server is up or the cluster is laggy [ 818.407482][T15307] overlayfs: failed to resolve './file2': -2 [ 818.818149][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 818.830734][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 819.090372][T15294] »»»»»»7: renamed from lo (while UP) [ 819.149727][T15059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.210372][T15059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.263781][T15059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.478401][T15320] loop6: detected capacity change from 0 to 1024 [ 819.546813][T15309] warning: `syz.2.2981' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 819.571338][T15320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.583958][T15320] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 820.146774][T15320] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 820.338286][T15320] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 820.404600][T15320] EXT4-fs (loop6): This should not happen!! Data will be lost [ 820.404600][T15320] [ 820.477163][T15320] EXT4-fs (loop6): Total free blocks count 0 [ 820.483463][T15320] EXT4-fs (loop6): Free/Dirty block details [ 820.489390][T15320] EXT4-fs (loop6): free_blocks=4293918720 [ 820.495196][T15320] EXT4-fs (loop6): dirty_blocks=48 [ 820.500450][T15320] EXT4-fs (loop6): Block reservation details [ 820.506539][T15320] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 820.725188][T15059] hsr_slave_0: entered promiscuous mode [ 820.755181][T15059] hsr_slave_1: entered promiscuous mode [ 820.779899][T15059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.788731][T15059] Cannot create hsr debugfs directory [ 820.899117][T14205] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.347259][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2989'. [ 822.539259][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'. [ 822.784358][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2989'. [ 823.256882][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 823.392694][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 823.694784][T15365] ceph: No mds server is up or the cluster is laggy [ 823.828372][ T26] libceph: connect (1)[c::]:6789 error -101 [ 823.840262][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 824.123898][T15384] loop6: detected capacity change from 0 to 512 [ 824.130894][T15384] EXT4-fs: Ignoring removed nobh option [ 824.137128][T15384] ext4: Unknown parameter 'nouid32..' [ 824.859766][T15200] chnl_net:caif_netlink_parms(): no params data found [ 825.855682][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 827.053943][ T6775] bridge_slave_1: left allmulticast mode [ 827.078983][ T6775] bridge_slave_1: left promiscuous mode [ 827.126542][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.042399][ T6775] bridge_slave_0: left allmulticast mode [ 828.062604][ T6775] bridge_slave_0: left promiscuous mode [ 828.084667][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.117949][ T6775] bridge_slave_1: left allmulticast mode [ 828.142758][ T6775] bridge_slave_1: left promiscuous mode [ 828.185220][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.203191][ T6775] bridge_slave_0: left allmulticast mode [ 828.240148][ T6775] bridge_slave_0: left promiscuous mode [ 828.259187][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.211395][ T6775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.270827][ T6775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.308417][ T6775] bond0 (unregistering): Released all slaves [ 829.340660][ T6775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.392531][ T6775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.440108][ T6775] bond0 (unregistering): Released all slaves [ 833.167501][ T6775] hsr_slave_0: left promiscuous mode [ 833.347998][ T6775] hsr_slave_1: left promiscuous mode [ 833.386453][ T6775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.442794][ T6775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.838937][ T6775] hsr_slave_0: left promiscuous mode [ 833.880613][ T6775] hsr_slave_1: left promiscuous mode [ 834.850747][ T6775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.809018][ T6775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.152521][T15468] siw: device registration error -23 [ 838.163307][T15473] loop3: detected capacity change from 0 to 1024 [ 838.177103][ T6775] team0 (unregistering): Port device team_slave_1 removed [ 838.290168][ T6775] team0 (unregistering): Port device team_slave_0 removed [ 838.326205][T15473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 838.373358][T15473] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.490110][T15473] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 838.512279][T15473] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 838.641483][T15473] EXT4-fs (loop3): This should not happen!! Data will be lost [ 838.641483][T15473] [ 839.389798][T15473] EXT4-fs (loop3): Total free blocks count 0 [ 839.434677][T15473] EXT4-fs (loop3): Free/Dirty block details [ 839.468726][T15473] EXT4-fs (loop3): free_blocks=4293918720 [ 839.481620][T15473] EXT4-fs (loop3): dirty_blocks=48 [ 839.530308][T15473] EXT4-fs (loop3): Block reservation details [ 839.543076][T15473] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 839.666469][T15203] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 839.674732][T15203] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 839.723600][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.885132][ T6775] team0 (unregistering): Port device team_slave_1 removed [ 839.956596][ T6775] team0 (unregistering): Port device team_slave_0 removed [ 840.249857][T15200] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.257354][T15200] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.264769][T15200] bridge_slave_0: entered allmulticast mode [ 840.272747][T15200] bridge_slave_0: entered promiscuous mode [ 840.330521][T15200] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.361216][T15200] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.381741][T15200] bridge_slave_1: entered allmulticast mode [ 840.394071][T15200] bridge_slave_1: entered promiscuous mode [ 840.462302][T15059] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 840.852708][T15200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.865238][T15200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.880246][T15059] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 840.907330][T15059] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 842.278442][T15059] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 842.451154][T15511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 842.478381][T15200] team0: Port device team_slave_0 added [ 843.612139][T15200] team0: Port device team_slave_1 added [ 843.711869][T15521] loop6: detected capacity change from 0 to 512 [ 843.760712][T15521] EXT4-fs: Ignoring removed oldalloc option [ 843.821417][T15521] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 843.964193][T15521] EXT4-fs (loop6): 1 truncate cleaned up [ 844.001539][T15200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.008518][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.046120][T15521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.092992][T15200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.112181][T15200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.136207][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.584996][T15200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.630208][T15521] loop6: detected capacity change from 512 to 64 [ 845.889087][T15200] hsr_slave_0: entered promiscuous mode [ 845.971169][T15200] hsr_slave_1: entered promiscuous mode [ 845.977291][T15200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.019641][T14205] ------------[ cut here ]------------ [ 846.025298][T14205] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 846.045260][T15200] Cannot create hsr debugfs directory [ 846.070230][T14205] WARNING: CPU: 0 PID: 14205 at ./include/linux/fs.h:802 __ext4_iget+0x3aa2/0x4310 [ 846.079629][T14205] Modules linked in: [ 846.083704][T14205] CPU: 0 UID: 0 PID: 14205 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 846.094979][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 846.105373][T14205] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 846.110862][T14205] Code: e8 63 07 49 ff c6 05 38 27 da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 00 5c 85 8b 48 8b b5 f8 fe ff ff e8 3f 38 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 d0 45 ab ff e9 f6 e6 ff ff e8 a6 44 [ 846.130762][T14205] RSP: 0018:ffffc9000505f810 EFLAGS: 00010286 [ 846.136870][T14205] RAX: 0000000000000000 RBX: ffff888058512a5c RCX: ffffffff817a2269 [ 846.145228][T14205] RDX: ffff88803033bc00 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 846.153398][T14205] RBP: ffffc9000505f960 R08: 0000000000000001 R09: 0000000000000000 [ 846.161565][T14205] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001d [ 846.169628][T14205] R13: 0000000000000000 R14: 0000000000002000 R15: ffff888058512a50 [ 846.177720][T14205] FS: 00005555641f2500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 846.186760][T14205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.193654][T14205] CR2: 0000001b3041fffc CR3: 0000000063bae000 CR4: 0000000000350ef0 [ 846.201808][T14205] Call Trace: [ 846.205127][T14205] [ 846.208084][T14205] ? __warn+0xea/0x3c0 [ 846.212356][T14205] ? __ext4_iget+0x3aa2/0x4310 [ 846.217173][T14205] ? report_bug+0x3c0/0x580 [ 846.221826][T14205] ? handle_bug+0x54/0xa0 [ 846.226189][T14205] ? exc_invalid_op+0x17/0x50 [ 846.231082][T14205] ? asm_exc_invalid_op+0x1a/0x20 [ 846.236164][T14205] ? __warn_printk+0x199/0x350 [ 846.241194][T14205] ? __warn_printk+0x1a6/0x350 [ 846.246004][T14205] ? __ext4_iget+0x3aa2/0x4310 [ 846.251049][T14205] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 846.256481][T14205] ? __pfx___ext4_iget+0x10/0x10 [ 846.261663][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.267371][T14205] ? kfree+0x260/0x4d0 [ 846.271566][T14205] ext4_lookup+0x37e/0x730 [ 846.276043][T14205] ? __pfx_ext4_lookup+0x10/0x10 [ 846.281115][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.286817][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.292571][T14205] __lookup_slow+0x252/0x470 [ 846.297210][T14205] ? __pfx___lookup_slow+0x10/0x10 [ 846.302441][T14205] ? walk_component+0x342/0x5b0 [ 846.307360][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.313130][T14205] ? lookup_fast+0x153/0x5f0 [ 846.317786][T14205] walk_component+0x350/0x5b0 [ 846.322851][T14205] path_lookupat+0x17f/0x770 [ 846.327507][T14205] filename_lookup+0x221/0x5f0 [ 846.332509][T14205] ? __pfx_filename_lookup+0x10/0x10 [ 846.337852][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.343819][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.349516][T14205] ? getname_flags.part.0+0x1c5/0x550 [ 846.355247][T14205] user_path_at+0x3a/0x60 [ 846.359640][T14205] __x64_sys_umount+0x10b/0x1a0 [ 846.364772][T14205] ? __pfx___x64_sys_umount+0x10/0x10 [ 846.370248][T14205] do_syscall_64+0xcd/0x250 [ 846.374814][T14205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.380845][T14205] RIP: 0033:0x7fa22538e497 [ 846.385292][T14205] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 846.405000][T14205] RSP: 002b:00007fffc45eb6e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 846.413520][T14205] RAX: ffffffffffffffda RBX: 00007fa22540e08c RCX: 00007fa22538e497 [ 846.421572][T14205] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc45eb7a0 [ 846.429574][T14205] RBP: 00007fffc45eb7a0 R08: 0000000000000000 R09: 0000000000000000 [ 846.437754][T14205] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc45ec890 [ 846.445973][T14205] R13: 00007fa22540e08c R14: 00000000000ce713 R15: 00007fffc45eea50 [ 846.454129][T14205] [ 846.457196][T14205] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 846.464513][T14205] CPU: 0 UID: 0 PID: 14205 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 846.475470][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 846.485537][T14205] Call Trace: [ 846.488822][T14205] [ 846.491762][T14205] dump_stack_lvl+0x3d/0x1f0 [ 846.496392][T14205] panic+0x71d/0x800 [ 846.500312][T14205] ? __pfx_panic+0x10/0x10 [ 846.504759][T14205] ? show_trace_log_lvl+0x29d/0x3d0 [ 846.510006][T14205] ? check_panic_on_warn+0x1f/0xb0 [ 846.515152][T14205] ? __ext4_iget+0x3aa2/0x4310 [ 846.519942][T14205] check_panic_on_warn+0xab/0xb0 [ 846.524909][T14205] __warn+0xf6/0x3c0 [ 846.528829][T14205] ? __ext4_iget+0x3aa2/0x4310 [ 846.533625][T14205] report_bug+0x3c0/0x580 [ 846.538000][T14205] handle_bug+0x54/0xa0 [ 846.542175][T14205] exc_invalid_op+0x17/0x50 [ 846.546707][T14205] asm_exc_invalid_op+0x1a/0x20 [ 846.551594][T14205] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 846.556997][T14205] Code: e8 63 07 49 ff c6 05 38 27 da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 00 5c 85 8b 48 8b b5 f8 fe ff ff e8 3f 38 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 d0 45 ab ff e9 f6 e6 ff ff e8 a6 44 [ 846.576626][T14205] RSP: 0018:ffffc9000505f810 EFLAGS: 00010286 [ 846.582721][T14205] RAX: 0000000000000000 RBX: ffff888058512a5c RCX: ffffffff817a2269 [ 846.590715][T14205] RDX: ffff88803033bc00 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 846.598704][T14205] RBP: ffffc9000505f960 R08: 0000000000000001 R09: 0000000000000000 [ 846.606692][T14205] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001d [ 846.614678][T14205] R13: 0000000000000000 R14: 0000000000002000 R15: ffff888058512a50 [ 846.622679][T14205] ? __warn_printk+0x199/0x350 [ 846.627472][T14205] ? __warn_printk+0x1a6/0x350 [ 846.632262][T14205] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 846.637666][T14205] ? __pfx___ext4_iget+0x10/0x10 [ 846.642662][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.648343][T14205] ? kfree+0x260/0x4d0 [ 846.652456][T14205] ext4_lookup+0x37e/0x730 [ 846.656908][T14205] ? __pfx_ext4_lookup+0x10/0x10 [ 846.661897][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.667574][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.673252][T14205] __lookup_slow+0x252/0x470 [ 846.677869][T14205] ? __pfx___lookup_slow+0x10/0x10 [ 846.683014][T14205] ? walk_component+0x342/0x5b0 [ 846.687906][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.693578][T14205] ? lookup_fast+0x153/0x5f0 [ 846.698203][T14205] walk_component+0x350/0x5b0 [ 846.702917][T14205] path_lookupat+0x17f/0x770 [ 846.707548][T14205] filename_lookup+0x221/0x5f0 [ 846.712349][T14205] ? __pfx_filename_lookup+0x10/0x10 [ 846.717668][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.723380][T14205] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.729054][T14205] ? getname_flags.part.0+0x1c5/0x550 [ 846.734462][T14205] user_path_at+0x3a/0x60 [ 846.738830][T14205] __x64_sys_umount+0x10b/0x1a0 [ 846.743722][T14205] ? __pfx___x64_sys_umount+0x10/0x10 [ 846.749144][T14205] do_syscall_64+0xcd/0x250 [ 846.753693][T14205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.759620][T14205] RIP: 0033:0x7fa22538e497 [ 846.764047][T14205] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 846.783676][T14205] RSP: 002b:00007fffc45eb6e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 846.792115][T14205] RAX: ffffffffffffffda RBX: 00007fa22540e08c RCX: 00007fa22538e497 [ 846.800102][T14205] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc45eb7a0 [ 846.808118][T14205] RBP: 00007fffc45eb7a0 R08: 0000000000000000 R09: 0000000000000000 [ 846.816106][T14205] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc45ec890 [ 846.824092][T14205] R13: 00007fa22540e08c R14: 00000000000ce713 R15: 00007fffc45eea50 [ 846.832098][T14205] [ 846.835331][T14205] Kernel Offset: disabled [ 846.839729][T14205] Rebooting in 86400 seconds..