last executing test programs: 6m50.269180187s ago: executing program 2 (id=15): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 0:* r'], 0xa) 6m49.788268916s ago: executing program 2 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xe, 0x8}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in6=@remote, 0xfffffffe}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'geneve1\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x6c00}, 0x0) userfaultfd(0x801) 6m48.31073539s ago: executing program 2 (id=21): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1a000000040000000101000001"], 0x50) 6m46.052275298s ago: executing program 2 (id=25): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63eced8e46f63f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m44.544095931s ago: executing program 2 (id=32): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip6_tables_targets\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002780), &(0x7f00000027c0)='./file0\x00', 0x0, &(0x7f0000002800)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) getresgid(&(0x7f0000000c40)=0x0, &(0x7f0000000c00), &(0x7f0000000280)) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00010000,user_id=', @ANYRESDEC=r6], 0x0, 0x0, 0x0) 6m42.763949371s ago: executing program 2 (id=38): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x19fb2998, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 6m27.338218334s ago: executing program 32 (id=38): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x19fb2998, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 4m29.147914534s ago: executing program 3 (id=444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="c23bb3", 0x3}], 0x1}}], 0x2, 0x0) 4m27.800296021s ago: executing program 3 (id=447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf250600000008000e005600000008000d000e00000008000100", @ANYRES32=0x0, @ANYBLOB="1eb91ab24777a39154da415008674959568be2bbbca2017a181d46d822dd7d2d9bc472a63eca0ac7ec8ea4039327caf252e1cf6d3c8cec3b0343dab3bc6f09fc14c9a8123f4b14fdb7996653b132826707040f336a5126e3dc6e23b1374d5f4525e69b73ad38c1b6dbbd27faa9c87e8d1bbd05af1e79876f0a4baf7af9a8559b3cd02c2b17f609015c855b98a68a353e34249e92d3508f810885f57981bc1c7847f2613123f8f76a72cd6816ccea0e12ed184dc824f5230c723024e3"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40040) 4m27.40709896s ago: executing program 3 (id=450): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xe, 0x8}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in6=@remote, 0xfffffffe}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'geneve1\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x6c00}, 0x0) userfaultfd(0x801) 4m25.53414041s ago: executing program 3 (id=454): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001cc0)=ANY=[], 0x27) 4m25.129597643s ago: executing program 3 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) sendfile(r0, r1, 0x0, 0x8000002b) 4m23.527074238s ago: executing program 3 (id=466): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x100, 0x5, 0x1, 0x10400, 0x1, 0xffffff80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x9, @void, @value, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000580)=""/204, 0xcc, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioperm(0x1, 0x6, 0xffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000740), 0x8001, 0x501180) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000780)=@usbdevfs_disconnect={0x7f}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x4, 0x7, 0x9, 0x7, 0x7, 0xfffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 4m20.964233396s ago: executing program 1 (id=470): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xe8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x1000000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180)=0xd1, &(0x7f00000001c0)=0x2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r6) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) write$qrtrtun(r0, &(0x7f0000000300)="9cf3547004469332", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m18.218135468s ago: executing program 1 (id=478): syz_open_dev$vbi(0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 4m17.316597255s ago: executing program 1 (id=481): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000040)={0x14, 0x0, 0x0}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40045b17, 0x0) 4m11.999631633s ago: executing program 1 (id=492): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1c, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r2}, 0x10) 4m8.514950575s ago: executing program 1 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x54917000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) close(0xffffffffffffffff) 4m8.340724274s ago: executing program 33 (id=466): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x100, 0x5, 0x1, 0x10400, 0x1, 0xffffff80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x9, @void, @value, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000580)=""/204, 0xcc, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioperm(0x1, 0x6, 0xffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000740), 0x8001, 0x501180) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000780)=@usbdevfs_disconnect={0x7f}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x4, 0x7, 0x9, 0x7, 0x7, 0xfffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 4m7.070515239s ago: executing program 1 (id=502): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4804) 3m51.743556724s ago: executing program 34 (id=502): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4804) 13.377845051s ago: executing program 4 (id=1293): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e21, @broadcast}, 0x11, 0x0, 0x0, 0x0, 0xb7ca, &(0x7f0000000080)='tunl0\x00', 0x80000001, 0x5, 0x2}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000001400)={[{@nombcache}, {@dax}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@max_dir_size_kb}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000480)="$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") openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) inotify_init1(0x0) eventfd2(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x4002}, 0x0, &(0x7f0000000040)={0xbf, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x74489fc0, 0x0, 0x87}, 0x0, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfd, {"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", 0x1000}}, 0x1006) bind$bt_hci(r1, 0x0, 0x0) write$bt_hci(r1, 0x0, 0xe) 11.324473393s ago: executing program 5 (id=1300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x90}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.188363064s ago: executing program 5 (id=1303): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003f40)=[{&(0x7f0000000100)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001fc3ff0f0800c4004aafd4633193b302f117961ebc88e52046c63ec4ceac07b9f22dee8c319fd57521be6a6aaefad1085d3792be4ee7c7113c7f454850b32155304285e64cd7f264b5ecb471ca94f83a7fde076b9f35700d7616502ed37f1965aec0b4d29cec30be6304a7f842d66bde40b571d3665df3225f922827cb8c5b84bc07a417fa1f0519b20abf11b7b25261059533d0"], 0x18, 0x4c0e5}], 0x1, 0x20004010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000001580)="0100000040", 0x5}, {0x0}], 0x2, 0xfffffffd, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x4) syz_usbip_server_init(0x1) 9.807123902s ago: executing program 6 (id=1305): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x62000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.324489053s ago: executing program 6 (id=1307): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 9.07948371s ago: executing program 4 (id=1308): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r0, 0x10, 0x0, 0x7000000) 7.811988165s ago: executing program 4 (id=1311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000d0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000"], 0xfdef) 7.811325936s ago: executing program 5 (id=1312): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xe, 0x8}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in6=@remote, 0xfffffffe}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'geneve1\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x40) 7.658635111s ago: executing program 7 (id=1313): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_l2cap(r1, &(0x7f0000000080), 0xe) listen(r0, 0x9) accept4$vsock_stream(r1, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) 7.564265279s ago: executing program 6 (id=1314): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x1, 0x232, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) futex(&(0x7f000000cffc)=0x4, 0xa, 0x7, 0x0, 0x0, 0x1) io_setup(0x23, &(0x7f0000000280)) r4 = syz_io_uring_setup(0x4b6, 0x0, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000001880)={&(0x7f0000002000)}, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x402, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112d0000000000095000000000000003749b9e4256a1c96e7fca75845388889f8deff1f991398cf4469d26fb4226aa48cda46f6990f07d5152e4ec335735edbbf236ba2cb66d2ad50c74c2e5b08000000000000b9b3f5b58cac569d44d54d2c46c302e269bb308e4ea79b55bfe1bafc321c54a733eb04dee62d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open_by_handle_at(r0, 0x0, 0x0) 7.508907319s ago: executing program 0 (id=1315): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x82201, 0x20) 6.776454933s ago: executing program 5 (id=1316): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='jffs2\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xf500000000000000, 0x1000000}) r4 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0xfffffffc, 0x5, 0x1}) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) 5.622314419s ago: executing program 5 (id=1318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000007000000060000000c000000000000", @ANYRES32, @ANYBLOB="000000000000000000ecf3ff127775bb8e9b103a355df15424ffffffff9d014db4a600e8ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='host1x_cdma_push\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_INFO(0x0, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) open_by_handle_at(r8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000480)='jbd2_shrink_scan_exit\x00', r5}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000091401000000"], 0x18}}, 0x0) 5.492600346s ago: executing program 7 (id=1319): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffff"], 0x0) r0 = semget$private(0x0, 0x207, 0x20) semctl$SETALL(r0, 0x0, 0x11, 0x0) 5.362937363s ago: executing program 8 (id=1320): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000500)={0x0, 0xd52b, 0x10100, 0x0, 0x93}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x1, 0x0, 0xce, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.275575783s ago: executing program 4 (id=1321): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b13, 0x0) 5.092497882s ago: executing program 7 (id=1322): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x7}, 0x4018) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfef4) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @null, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, 0x0, 0x0, 0x800) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 4.874683557s ago: executing program 8 (id=1323): mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x535, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000300)=""/161) 4.86550328s ago: executing program 0 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x4, &(0x7f0000000040)=[{0x15}, {0x2d}, {0x6, 0x4, 0x0, 0x1}, {0x0, 0xa, 0x7, 0x10000}]}) 4.492853964s ago: executing program 6 (id=1325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf250600000008000e005600000008000d000e000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40040) 4.276590428s ago: executing program 8 (id=1326): prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='host1x_cdma_push\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe000000"], 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) 3.757308859s ago: executing program 6 (id=1327): syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x8, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x20008800) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) pipe(0x0) shutdown(r0, 0x1) 3.367980387s ago: executing program 7 (id=1328): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xe, 0x8}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in6=@remote, 0xfffffffe}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'geneve1\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x40) 3.205071833s ago: executing program 8 (id=1329): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650440010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.191714149s ago: executing program 0 (id=1330): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='jffs2\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xf500000000000000, 0x1000000}) r4 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0xfffffffc, 0x5, 0x1}) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) 2.064434723s ago: executing program 7 (id=1331): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_l2cap(r1, &(0x7f0000000080), 0xe) listen(r0, 0x9) accept4$vsock_stream(r1, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) 1.878014787s ago: executing program 8 (id=1332): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 1.877759191s ago: executing program 4 (id=1333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000d0500560008005400000060ec970001983a00fc000018c6ba35"], 0xfdef) 1.516151427s ago: executing program 8 (id=1334): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 1.372385685s ago: executing program 0 (id=1335): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000500)={0x0, 0xd52b, 0x10100, 0x0, 0x93}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x1, 0x0, 0xce, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.088021062s ago: executing program 4 (id=1336): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000050, &(0x7f0000000380)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./control\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 902.691577ms ago: executing program 7 (id=1337): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x1, 0x232, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) futex(&(0x7f000000cffc)=0x4, 0xa, 0x7, 0x0, 0x0, 0x1) io_setup(0x23, &(0x7f0000000280)) r4 = syz_io_uring_setup(0x4b6, 0x0, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000001880)={&(0x7f0000002000)}, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x402, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112d0000000000095000000000000003749b9e4256a1c96e7fca75845388889f8deff1f991398cf4469d26fb4226aa48cda46f6990f07d5152e4ec335735edbbf236ba2cb66d2ad50c74c2e5b08000000000000b9b3f5b58cac569d44d54d2c46c302e269bb308e4ea79b55bfe1bafc321c54a733eb04dee62d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open_by_handle_at(r0, &(0x7f0000000480)=ANY=[], 0x0) 828.543541ms ago: executing program 0 (id=1338): mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x535, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000300)=""/161) 571.90255ms ago: executing program 5 (id=1339): sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000300)=@assoc_value, &(0x7f0000000400)=0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000c80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f00000006c0)=""/26, 0x1a}, 0x100) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001400)}, {&(0x7f0000002400)="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", 0xd90}, {&(0x7f0000003400)="34d41d7d7ef2bf34ba7db92b4bb69107021f3ba0c61767bee5408455bf1855e73f2831b7d7b3a9b589afb40bb69cd8239a6a509251486c2115dd96a0c1405ee10f8e7e46c0dadc1766e31fb5cec154b8779d6a611ef9e3215a97e9c30c804f5a9bf6d3e02434fbd59b4399587ebea60997d76214e92616237c9b758680dfad42b5a5921bf5cd8db979b6cc6ee85beb5866c06ebdcd7e7a4a3ce534830292b5571796acb002406e4152aab06e8b903f23b6243036f476f0b00961f06b4490774faf5504bfd11c7ff27bbbc378a1468d4403afe312cb0a53d82f00547c7e3e42cba8fcc0b2a35865fa179e73189c5c41c94dd7816a6775883c4e7c58f349e61d85d147bdeedd41bd6c76ca266eb206be35f1c328499ff0e93f889cc9182eb5bfbf7b2b4a6fc31bc1610eae62fab1adfa1b3167b424f55149fa95f5e7b8ef0d6689d7589e4665c45757d5fc529a7ff2cdfc07e6c40e12715160c5413cda5555744bdb324778240daf6c413fc4e5dc548e74aacd78a6f1008f8f1d92dfe13f41e03dc047afd2ae339dc443125745392d59b79793a4d3ee317ec10e9e24b47d5caf5ddc22faa1a0c9c81521c6af4e49a5b6f88779a825410459cd213693dc540fe05082184e4a5771eac51ae4ae8979030a972a6ec070d7d0c85f04480bdd104daeaccc3740b0b4af7c7b2556ecfd01875b615099a819610ae483953f43bdef6693ea09c5aef91ac3fd0b6650994eb2e3a89ceba6f710b2c80aadb41d3a2d7cf6b64cefaef669e5fff9711b757069f491f9211628fee22ff4e128ec90805fc26c6c42e694a2319dfe1e6aadf72c826120374fe8d59bc306c2bd241bd2974ff5012a02d025634300d1a50bdd7f6d8891e75d776a16d20e8f8ccc95adc69484fe323cce9ddc8450599ab6183fd19e967d17657ba710d9001b1a55b3a1d9b21886980f684616d964adca48e4a52d54f375d21526fb4684189b83eb23ac0b89bbcf98ff52ee5b5acd593cd9f411ba8f129bfa197727e52d37716e956760906a2f682746c03cbd89b53d64894215d1b6f339fca5146c3bf40d2e2ff9b8615ad9ee8fb6de73f7fc49aa59cf4b362d46aecf4e2f894a0f3afca36f0a73076d57bbdedf293258f2ef66c92d31ba86687795db73093ab9fcd2c1c17338d828716ff1efa7375ca21ed7dba13a95eef9c75fa81cbc0335b91a68fe09a7263a6de605eb76687ea60997a6c47904c42e34ee42414956b3361cc5f96f0334ea112ea7a7979b3e50a7d8a2b585962950eeda430fc14531f84e6d3551017aa2a2954b0d278a8da3e3a13cd446573ec572722aaff473310b5394174f0b24ebd6ff2b0d26e208a948ea1ef05842bfa9264bf02d6270f066105d0daa1f67014ccee9ccf687f09ccf537c37dabfd6b7db6b0f32d879b7d5a35dc1dedd53e09178e6bb2698e13a853450e859813766dd94d7f6451a7e10a9239445ae66eda0228aafb39d6c6cc12202df2f7f0c635e8454155acf8eeb1ce034e2e9c05dc6b2603d99f691bfce7455a62821b507f03c827670efb4fd7f5d6cf2760399ac3cc6f13cab1e1984390a1d98834fee3f7ec86119cca532a1bd80549d59111b92b08fb676420f71e351286fbd3f0c0025cbbb6254022d5b2ca318108c2d3772be01a197b58a0b79da6bc46f83b19d3b3402d7839e79c00d43433aa9ebaedb338a1170095e0182968dfd474469323656643cb24e25bc7c0a098d936a9990a56189072b514f36f2e19df4f7f5ee994c2baa86a4b85be784010bc8258619e7b8f7dfeb99d7d3f6c0c2d4b22bd05c3b6d2a24f32c453e422ea0cbc6352dfb07650f54c8bc7f7918c31af12608cb78bb93989dc1476d7cc788a7ae27fcd3befcf8a7a7f19095f6c2aac1301e554b495b28aafd1b50679ea12238a79085688fa2ce362142e54ab0a56aa71558594cfba9557690a986714a0cf75547cae7da6bc70c9afe797b6cd02440ac9ff8795e34c78c6a0d821758e4a8fd95da5be704e3c67ac6fcf88c7dd58dda56cc9b9507b8c48ada9095dd42d24a7905403a13e02b87e757569d01e12ac4b42df3482eb0126a54e5ca30d5e90e222fb685cf3e909a1c69521b5eabb68310ceaab2b0252fa8ea387e043e8dc17ba024cd24acb53c26e7e7ba61fc871e5afe7ccf0e3352b22afd88f5cc2642d79c4668eb72c8265cdcb0cf84792f18171c3d6d3cc6adcede76e5255668978765a5c508f07d62166edbd6c93eb704c2943c65937f2f9fc3cb263a34d2667ea96b0105f5823ae8f4f8a90b3a05fddeacc84d59c7ba19e116bab878fc4f6e88207a22a7ea852626027ce04157bb6331cb1120fda963c108ede9b99b4719fd5cfecf812bf4ce98bcd9ad401d88ea31bfe254f2da39bc644fb08d2d057c81b7397b02edc441d8d52a07877ebc5d3716568619eef164fd3e4b57ac647a7627d61ffe1aaecff655ea749dcb0a2485e69659e64b2c1d941308ae3ffbd0a71c8f1dd6c000b8b16bfa4ecac1b25de05cf680a5d6424c8719ff38e81b39eec4231cbd397f26971a0bbf1249dd3e60063112063c2fa1d81eddf6e8b90c8f8f120634c02c7e3ed4994876c95a18686f1b47ae5d94e9d69c98a6a6e574570407280274c45cbc1e7bc0669f475426dcb2df3214bd00557c62c1c7c93566b9503416355ff92923eb0b7bfa93814e0f11c11e8751182a079a93e5c2dcab2ef27b3874d9f47cab9e47d8a8a5588abddcabe6b243ee0a8df1f4922cec24eded08220969c78506812680f61512e04deab74030fb3b9ec49c832ca8576c57312e760330d432eee09cc7d126e546abc82526c373701574a0518bcf3eee7c964e64d2d192978f9268adb2caf329b26e6eefb222c24a6d1887aa53958d93073896e3d27a76e7baed8c5de8a88dc58c59394cc946c0d61c79b9be1aa9ea4b48ff0841f9efa8b5ecfb42dc263ec308d462c52749a7acf86521936ce2024ea243fa27ee89c053a79a4becea556476c166ca529ab17eecefe363704c7a161cf79075d29a0751da3ad4fe3a00d7f1c2caad3a915bc39501049aaf8f1241402978b8c0414f2d85f7e774f0e89f90ac5f9cd63f3fc19dce5101b291f83f3fdbad6b28d4f74d8903e51b84aa6cb3f9f3f987af270de1e6b12d446fc563b24a73dabed02cc264a46fb82d4baa26e417a5d393dd937d34ab5744888f961facade8cfcf4908b4b50fdf5ebb8a12d09e210dfa32bd1453281213ef1b81c0524b02a4a52de617bd1f7ddf273fcb255202ac415acf6cdd629e6b5136d31ed1431377d79af1c2caa490f82dc136fdf298b8d8c979e1a13373a60c03142e9c82552928525b581cdc100422194ec88883f8536c9bb3ba9d92c5e9a0e6a0b09e1af1c32ca2eb8fc09eb36ed49f430f0ba09cef72123128b7a3beafd867570b4ddb3a6aa1b00f9fc096f39dea52a807395bdb0e5015d971ef821a59b89da13e95d184d1762c450542bbb497c6a4f6547576edb55dbb9b130a70291d2a3be2182f42aac2305bb4c150e48dc6321ac763a468ee879e55efd451517bd175668e3f7e63d42e7eaa8b967088c26fafe4cb1e7c0c42bef486917428d4c69060f692a1a9949fc292b339e657ab015b4b1c7db7a0874278cbf8b9b80e3401755faedb63dd90c1d52e5599c7269e0cd9a19b2569c2ff6e0be49dbde09d8af0cb546c9ed6ab9d43248717b8f578ef9746779f9aa3c1053008f41c7c0ec68accc327e564bce10f2d4ce9fa2ebbf23375976317ce5b9d2a77da6bba6778e9faeb7cb595765f88c55fb7995d5d7927bfe4b89f811d44078fb860a865b9e40286bd3c45974b0d28ccc8bd109fb81d6c1770a4190b443b8a82bcda36ededabd095566516b394dab7e6c368cc7ab32c89dd0a306f0475b7166a4282b3f22562fbe23f505c331f6212347a2fc7c7cea89493a0a9566d4d0230660364dbde4661d5b04a5f3d01e57daf754c8299a1f2b9491f224f944611174c164898b58c3be80d648de80d7860ec7c033a8ceca5b689e4d098a5e517db260d0475d97b02e8765ba4d2b830e624b500e2ac1cf4b36d07e8514000aab22728e97b3c653181497509cb17a95a67ba1c64135032ad9949632684a949a34f2430e13312da8d44c99b9955d1e0e99aebed2de13deeb105ac2a438e8be4aa76cc7352217d3880133efeac9b66f1bcb3afb9c65cb9e0b304bdd5c1138be056945fd390201f3459c45956af3200118bbabbe3567b45e97c227dae4a84032a055ac29f7a54d5357afea26acf488ce398c60fc39350d4e432c392e6f8ef802aa3053b58beee42cb45a139bd2aafec5946f7abe3d3b438799120e3891c8947110434555bf49d2ba93e35b5fd2a723d4c8a775e4159f6d878f46a4e8ccc9a2bbf03d5dc05556b8ad8e1dc7a08db60a10e0c7357598ae233f484079859ff1d14819cfb04a0c242a0a1a2852895dbafe2a1f73d54d1bc893ecf196b68a1200b2762c5d71f5aa4a68c1b2a6651579827fa08f77eb302c0a309412f260bf039a52e737c0e03aded9bed228c6fe649b43359df50484d77119645044f3808b7ee44e1de90575770bef665adfd2f1284608dd6b2c5bb5141e3be6c092f88804c8a24ca64295916580dcd55b1a3e39a66a93501b8bf7bb94a64da0c6f92d877ca2ab3002b64b50a16524cb17c49eca7946cb62cc5c1ee12632486ac536afebea6d59b5306648b3335658f8e6e667fccb41e73ef5ec4980e0d42b706f724f1613eda35a2ac51002e75ab9c788c6b19cc4a6e0ceb87f32237ef39d09b52a0af840e9b7b09f87c597587c08d470ed2cb686e09497d52828278b4160ec53a42953f71b5fdfe76e80954a0e80422f35b54547505aef434db25c39c5edf3278c1e0f0362831cddf20d2a5c107357d8544189d67940b5e5e59a0c4049099b8e1d6f976cf9af5340492787136f34dfb778699ae128206ed3b454b73bb830e2912474693380909d77901e9eb3375f698fa4df82319a15b05b3fe144643394bbc07b74f0dddf53419ab2f8bef0b6ce2128d82d1d7246591a5bcde136fd1730c2d648106c269a8f796835921c2a38444bb0517c4556ed8d5acdec1206e89b1ab780b91e32d1638219df4b88638896117ed80f5c75c318766183b7361c3c2c58080ab4ffd00c539ef378e8d2e7bf5dd7b9be1f3da6dafbe88d54ff0273c493bf806d82eb65485f8515a8186d7dd6d5241b80370f89269e3f24a89ed474aae97c07d165daae12010306df709b82b1907e9b813553be9cb96c93fd952772c2fa33a29018cdd719c84a88cfa595e418647313b5b66fe8f517e7d962b41e64a2dbf311d14e2ee3acf1eaa69b21364a618610f2a5379999e2b600311cff8b4ecabd67e37c82159e85cbfd0cf81c202c234df266d49769d98c2114e136af47c0301a2b1e761c58b89c568476f351435832dc8d8ba2a94948a22f77eaa5c3eaa63a561f14dea8d9810df92a239d637d7797b57065c1cee2b4ad64b39da5c7072d19d636e8780586d9287e587917df17e77160f77fdca98f7926d7b66b4f97d9f929f7c8ace06e0b180424a118e39da235da1d9ca676d57fa6b72f8e7af1f1a95e420245839dcf4d1376c9e869f9c891cbcf64b0f4de8", 0xf81}, {0x0}, {&(0x7f0000004400)="521f463712d92fa45102bed3b6c212fd4ddf8277ccba9ce530ef2e3e658a4590943785e085842f323089080d1ceeb1e36f113ae4c3c277b2207a43cc408381e65a4065984c10db76820f54379a06e0c67f441ff3aff882234a577570eb09e8fd03f008eeb0a7de271e3565909c0635a9cecc192d0b559059525b4525f5178887630d4e8309f26e42d23debb04e71958c2d9373276cb20b5b3443bbb63508961927a052166645649a0f542d973d9df16132d5b457d3c20df4cc0e71820a19183aacb2fbd9345d83b104bf1a8e1ecfd986eb6120ef66d7c195dbf6fb3f87bf58a6148e18c4dd6670125b7c57b90f6e27b87ee5a50932211d7edb14b2fb51cd2828d3c30415a96ec4249b5b5ddd6ff34cd977ef83b4bf92329c36d8e7456433b3917564eef974965294789d6b94f35f07e52334b30faf8c64e1b372d31a9b56c8d54110eb054c301a721d93732b7b609e16cb7a65bdd22905adadefaddad63690fd8276902e409728ac189a8571294d2329a568daab2a086ab872a27d04515839fda8ba890376072185a4ce41472004945b9abaa25bef87e314b2168d67a4cda52b1460c5554ce51b42c074c1ce957be16d1a2c97e59f527ace6ad6b15a796f3f8ed726b7085b4fa3ccb449768eb1333a9f41ff8092e278a0701d387760e1c4b33f3ae1b0bd18d3d23532e7c251c23c41e0971bca09afded798dfefa826b2bbb5519657819ff5cd05ce308e504a518ab7a643868a1923bcdac02ddb66c2c379dbac57b56ef9b0c9e5622f2ef0728ad5c413e060872ad5f266adf5b2027d7e017a47293a19ea9f95579a010b8aca0aecb01082505d3dda44829f83c1280907e206f03511b2779701cd56b06bc2649ce934dddc04ed5ce9dd7d589c47d9ebfc6fddb7602b485f30593b9a427aaf9af3033ca80fe39f4cc6edb94200e89a82cba1ebee9bff53ef6bcbfd6523064e276e859325703353754dce08669935e4acd77d79e55e231a478d7d7a9803cf664d61af190e5bf053c25deca8f627f96f6ba63aba9eac8f828a8550ba73ae08e9c6d17651e0d2ad091d6f232f0679ee9ef85a58556880e932314f1379e7ec0c86e6c4a31ce7274aaf556202c1d1dca1115a6369c464593e60be76a76edf80486985929d00c70d77a4d5d0715ec0582b6d7831e37bd9a2f82464914505c22a4d6c12eca5baf92dcf434b0cbc1432afb407dc98321484d4876607ac9e681dfbe09f97fc53bc7de0b9c6710ac99e042f98b12798507aa941cafe61f23c71f5f607dccd4a045401ec143bf7eb943aee0d15954bf0bbd97eb9fae8eb7de15fd7d5741415e269b8b76800bd25187078ab55d1e1255efe82169b0062940d757b20001fa70ef9faa61e4d38ce4550f736ec3b81d4b8a69bacc1c8e4f4c9c97e724dc469408f703a9555584eea711168656d893b708d9477a16540980255028b65f07b3bbd33733cc5709418cfd284c9e2e3bd9d6700560432f30ede520ba406cf751a5330c28e9e080663dad1423617178b17f8a84a4945dc3aa9be35bca9a3a791a81a7d2fb473c312f46d02d44369dee4b1d3731ecea1f65051ae6f3818118b45c1fffe586650d9580a5ea089c3865f96f961a36210d8ff14324fb2773bef2bcd321f0a3cfd5c635b0ac9f5d35459e966a8f9845acec54b7e3b05ffdb8d422e3cfa98e0a037a1cc5bce1738c230ff80e398fd7e1bf8e85aeec91b785426e6c7291718357e0f92db5e1b895c4b718bce1767da0aa37dd7b2074a9598fe9e8c927866ea1bc7bce343bca46731bbb783c072365feb0c315c283155ac3e563c0fce8974d863de12289d1299940e4f230af2ff2560e794b0ec212393af605c4ffe61e5b324ebc9af6f128de461a0b0f84dfdf76f89bfd6fc493cb596e6645693f18ac59400be7ac19a25aee7b2dba5e0d9aa21804612d7870adb44fc279e52e8bd51cbf138b938c2eb891e9b0103d13bdae268e6d25962c12bb533976a1d16303266dfde62e735ff109f0d8cd62483e89aaf83f99f983c1f783505542f2d8619591b13b4150c71ff89bf794d7f510b98a275ddf0017479d24c25a1e2341ee461991d7bc338957a6fb5663ba78f8c821ec5eaf6c1c940cdce8a3c1d2919ea4e87e380c41e43a755a7d2d99f1b868d8393d97ba08dfc360b839561fdb78c52ae9c165b96e64a75ce75e913913113d157c7b5bb235a55fdc1dd943e3812fb281bc59e2bf31fcd6ee18f570b6e5c62f4b05485ea9c6787dc92645c31db72d82b6a2e6a9bc260af193010929e9504815875bff85e1401058e53f263006647e907dd3146c9255c3d7986134d7b705ccbf9231bcaa00f6958380f3cf4df97fcee0ca8d80a4ffdbb1694e801ca32190d68ac542e48bd7ed787ad307adb4a48cbc193ce26902b589e76ce4cafe38b2a72570371f0f83ecde62733da12f6da1027bcb86a1d23e736ddee5adbc9aca42f0082bee26bc02f16dd669aa6536ec9988a5906c87149921c16cc053d2a32e646e71eec3fa8714a29bea29e761af35015a51b611ac6c21576386e9c6ead50f02f14ef4f83ae1df9f49364656db7d0d7dcaca968f83d8eded23c8fd40d54b9f359c16f479aa693b693cd2a70ebb9425e5503f461923de6fe5187824f9975a818d642a494e2eeefdcd1214cbb4b8c39c3f44142d794858d81d2ec64e4a07b8f7599fa55392be82346ef8544d22a7235700f1fbc2749227db054335522e77f4f82c3f99c9e04f5d501be877bed91313e7fc8ff71bf3f45b80e527e96016ecba08a32faa66773a7d0b1ac9eb14e56578a27875211a9eb2e41c32f05a05ff6c59c1475122b8ef444008cce0937511b067edf3b9a1d99ee14d1a00e79c49b9ab6f37c566fafddef6221cd8cbcae0825b660383a7515a50699c484fe3eca149dffda6c9d94f627f9bc3ca00578ace76fbad2f2d36432d3b01ccc98bd2c28dfd4231d0b7f6c392b86bd2884a09b7c5da39790d61c72acbece7e2758d4d7747f17bd92e17adb9178f56cb8878c4ebd8ed32ed7a5cf62955330f94985c31c961a31349fcbf40713999e4a40b1db28ea26c135b9c888952371ffca141665bcf32561817ea3cd71136d7bcf0d1917dc10e78643b12af59c2507cd6e9197626ea1abfe23d0d3834a57e77e38a3cc0f580de9f4d2cb07d11c028498b971f50ee9183762a3d2fb84524b35c5b5cf502d883db09ceaa53410641ed366ff93fd48e59d1f52e63997eda44771c737d24f789526f51676013b4718027d03808d796b028afbb808418baa92798695fed8916b2672a52694d9eb935a4d60441da4737df4d287b11c5f02f25622143f704be27623c7ce3343edb695d973029dcf50459b6ca0b987d57dd7be3a5fec663fc850177775eb9a0b0ea886963dab3fb8822fbffaea2c3b241e07b9beb218014df33d19288104d1010c7b789e6f0cd72d2812ed6bfdf77a7a28138af7dcbd179380a8e38f2ddfdfa4e0d3a7c1d3a6aa62cd5ea1992ca95d2e5b876c993007f5bd4b62b8ae2aec3737e6c415c621ec6d0cb976b9733cae648447650227552d6dbbff607b52bc43aa9714e11a417a94574265238482aa2530eb6d682dad0323c93b005285c3d22f51916601975f6486b7804524ce0e9795c0b7003436ee7f7625d4323a181d50e1524230c9ddbc3c65b4d7c207970c86686ac3a94ffdbfe841a544a9727cb446ee8e2ffb9b9c10ef11291111595b3bbf618526bf432545b66264be9ddc014a74c66fe70db84dd3e065862ac4c78fe18b13ea7477ac3d7dbd36687b5888a76ce25ae70e16f26bec926234cde6b06942085627ef0d8be8b2caf5caffb2c8ae6ac8a08f0b51458637b6ab3b3fec547f580f459c72855baf3839c91363e959ac5f27ffd734d32be902ec61013e430f7e4ec85c20d703dbcc295fc036adbe959fa499fee31e4dd0fb259854f781d2651d6e781ec4283be1532eaef664645c7dff94693168e116620553b5d0925ad263c1266ed0522265e94bef47e3be5b4d547cdbf78b678cbed2503873172f96ca40243054b384253eb51c28f1011a8427ef90d5bc225310f7b9b31c924e403942f1571ad499d4c7c7e93fe382b748fb6089ef8230d6d78761075b28c2bae2f23709df8c452cceb172b84ac65976645ebc30ed0186b2a7c45f0b068ade01540cefd67d79f49376461009488e00d2d380b05dd431113b9a14a5a2645bb467c51a444d354f244f750ce20f7fe6241ceb049003ccf543a950ab1a0cf1ede478819592a954978b6224f63c8dea9c1aeeaef47c5c3700539a5d2d527c793b3537ee5fc0ac009c9b14780c32d7c8d7e3b0e77829b6f44a4e58c2a5fce2a227d4595931c3fd162c3ec75fc46882fc355aaa8edebd8b11eb12a60838e67ab06ddbb4ef78d106c8b9895c10aef2c0f9a566e0d32ff64592e073ff4a980658f696bd494380a7ab713afaec0ec1782567b63f5b8a418bc7b52949252a3ac95e48a36a39388e202f978617f18dd8bb98f6da9ee78e142c50262f6d986fff7a4f75862b0e4d2665533c736af17550145dcaefcc8346fe7e6c8bc36882c371e2ad19389f2ae3e4da0c98949297615a57cae81bbd192662f74697a915933783c430e3604caa47afcb1fe557092e1ec7575789ae244cf4da1d3a1536f172713ae9a7797dfe4fbc95a4e69f3f577a896bb93a2e4431ff36a0286f16c93d2a1fca51b80f7e821fefd3cda90f038feaca4701ac1bdbf0e8bd438a705c3e2c15fc33f05285e8975be9d1ed3cdada47327d0b13b3a3102e1262ae0e71aa62b76d7b5d7fede591fa5e62a69414b40bfe3827857a5986a58c21ae9ffda740db6b63cd24237e781d87d2b65da44ced23fa9c478f24154e8f87299485e39c0b8f127e7d4caa0cd169f2cd7e595550807be3f1bdadb59778678746927516f528f896be026d0ac8795c3d0dbc89efd6875f5d3c4a8b5b21919bf0e825436ec98fc86a6a1fc362b3f3abd5a00b5e6cd6d2ddd6e445aa3b0ff63cd6b00803e0b8216c0ab1f27ed35ee268b07858e3b09bb309ca67b9814331367a4fd1d06cf27817b07bf28e2f0d1d95e3abf7197bed5dbe3a18b23702dad19f339b6d237fd7999f52addf96e554f399ff54717d4fecdf07e8a1500c38c1daeea0d64650662e243d2d75a560cf888deed8471c72235a0e0e46763079ad3547c5c942e2d68c5c885e0263c0de23681c805bffe553719c14d47ea2cb2835a720b4d3c815b073e8b63800c902d52e0ad5832a4476a2668cab5694ec222d700ca4b1374ac6fd749ee831f47a2d8ac306ac2d36b0cbc73a21873023e5a57f7a93727fb9b8c84e4850a400d185877714eaa3c5fcd4287645730550a6baf842db5c588d919364b538ae92063f7546e4c0fab196224b23d76e561c2c8c5e800206db9d4daeecf676d7503c5e1b8c8ed99b2f5d6ad5a432b6aa798b0ca948dd4ce6faf63953fcd25a11c18507d4ce5036fc32bd31ebdde21def9fbcf1a881cba7ed3ddea1bd4b484c9b890115f95a128af5e03a58ecef92dbf44ccd6495a7ff10190ab7d120d87ebd9a9271d84b7196fbca6644c648e831b6a3366b8ceeed2e08dfcf83f87143bc28dee1f95200949fff18882d084b2fb1e79db0c3907f33460ee8e1ade5b23da625b0d7360e0d026780ad5df236ac96ad6c918953f32f2da2b3041d8c51ba585e6bc4e261639c87b2caa3f90c90068b6f25f3943ec8fa6dcd179b2a38334c2569ae5ae27e9562253844ede72dc2805f11bd0a882f0ee93132f399577318", 0xff0}, {0x0}], 0x6, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}, 0x8000) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="204bc3cdf9b517b8c18390e55623591400000025"], 0x14}], 0x1}, 0x5) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 100.490946ms ago: executing program 0 (id=1340): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x7}, 0x4018) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfef4) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @null, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, 0x0, 0x0, 0x800) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 0s ago: executing program 6 (id=1341): prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='host1x_cdma_push\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe000000"], 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) kernel console output (not intermixed with test programs): erface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.462161][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.484553][ T5911] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 211.530603][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 211.565798][ T5911] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.646173][ T5911] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.678949][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.726430][ T5911] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 212.019065][ T6867] mmap: syz.6.275 (6867) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.036753][ T5895] usb 1-1: USB disconnect, device number 4 [ 214.105220][ T6897] autofs: Unknown parameter './file1' [ 215.903374][ T6910] loop5: detected capacity change from 0 to 8 [ 215.910622][ T6910] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 215.932388][ T6910] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 215.939025][ T6910] PKCS7: Only support pkcs7_signedData type [ 216.056232][ T6915] loop0: detected capacity change from 0 to 1024 [ 216.727325][ T6921] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 216.733870][ T6921] hfsplus: xattr searching failed [ 216.748678][ T6921] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 216.755217][ T6921] hfsplus: xattr searching failed [ 216.764250][ T6921] hfsplus: catalog searching failed [ 217.301767][ T5952] hfsplus: b-tree write err: -5, ino 4 [ 218.283728][ T6929] loop3: detected capacity change from 0 to 512 [ 218.332651][ T6929] EXT4-fs (loop3): Test dummy encryption mode enabled [ 218.381000][ T6929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.503596][ T6929] EXT4-fs (loop3): 1 truncate cleaned up [ 218.597832][ T6929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.777343][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.160700][ T6993] loop4: detected capacity change from 0 to 8 [ 223.177503][ T6993] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 223.188724][ T6993] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 223.195335][ T6993] PKCS7: Only support pkcs7_signedData type [ 227.439491][ T7048] loop3: detected capacity change from 0 to 8 [ 227.446642][ T7048] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 227.458015][ T7048] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 227.464602][ T7048] PKCS7: Only support pkcs7_signedData type [ 229.528039][ T7070] loop5: detected capacity change from 0 to 32768 [ 229.602850][ T7070] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 229.616547][ T7072] loop4: detected capacity change from 0 to 1024 [ 229.634404][ T7070] (syz.5.343,7070,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 229.648507][ T7070] ocfs2: Unmounting device (7,5) on (node local) [ 230.302236][ T7085] loop6: detected capacity change from 0 to 16 [ 230.389806][ T7085] erofs (device loop6): mounted with root inode @ nid 36. [ 231.194233][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'. [ 231.585918][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 231.592511][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 231.599561][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 231.607183][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 231.614449][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 231.851701][ T7095] erofs (device loop6): read error -117 @ 0 of nid 36 [ 231.858881][ T7095] erofs (device loop6): failed to readdir of logical block 0 of nid 36 [ 232.087295][ T7098] loop5: detected capacity change from 0 to 8 [ 232.094354][ T7098] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 232.115986][ T7098] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 232.122984][ T7098] PKCS7: Only support pkcs7_signedData type [ 235.005781][ T7122] loop6: detected capacity change from 0 to 32768 [ 235.316441][ T7122] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 235.339645][ T7122] (syz.6.359,7122,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 235.355777][ T7122] ocfs2: Unmounting device (7,6) on (node local) [ 238.088082][ T7143] loop6: detected capacity change from 0 to 8 [ 238.095409][ T7143] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 238.106753][ T7143] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 238.113325][ T7143] PKCS7: Only support pkcs7_signedData type [ 239.492738][ T7152] loop3: detected capacity change from 0 to 16 [ 239.555159][ T7152] erofs (device loop3): mounted with root inode @ nid 36. [ 240.523997][ T7160] erofs (device loop3): read error -117 @ 0 of nid 36 [ 240.559141][ T7160] erofs (device loop3): failed to readdir of logical block 0 of nid 36 [ 241.088057][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.373'. [ 241.983954][ T7172] loop6: detected capacity change from 0 to 1024 [ 242.868064][ T7189] loop1: detected capacity change from 0 to 8 [ 242.875386][ T7189] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 242.887141][ T7189] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 242.893800][ T7189] PKCS7: Only support pkcs7_signedData type [ 244.486921][ T7205] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 245.785372][ T7220] loop0: detected capacity change from 0 to 40427 [ 245.804818][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 246.232259][ T7220] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 246.240170][ T7220] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 246.353114][ T7220] F2FS-fs (loop0): invalid crc value [ 246.639455][ T7220] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 246.646738][ T7220] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 248.073291][ T7248] loop6: detected capacity change from 0 to 16 [ 248.137510][ T7248] erofs (device loop6): mounted with root inode @ nid 36. [ 248.564797][ T7253] erofs (device loop6): read error -117 @ 0 of nid 36 [ 248.587805][ T7253] erofs (device loop6): failed to readdir of logical block 0 of nid 36 [ 248.966011][ T7258] loop4: detected capacity change from 0 to 8 [ 248.973209][ T7258] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 248.985409][ T7258] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 248.991977][ T7258] PKCS7: Only support pkcs7_signedData type [ 251.543571][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.404'. [ 252.124552][ T7295] syzkaller0: entered promiscuous mode [ 252.165697][ T7295] syzkaller0: entered allmulticast mode [ 252.372791][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 252.406856][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 252.423170][ T7307] loop0: detected capacity change from 0 to 8 [ 252.430634][ T7307] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 252.442270][ T7307] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 252.448894][ T7307] PKCS7: Only support pkcs7_signedData type [ 253.063172][ T7317] loop6: detected capacity change from 0 to 16 [ 253.141861][ T7317] erofs (device loop6): mounted with root inode @ nid 36. [ 253.626182][ T7320] erofs (device loop6): read error -117 @ 0 of nid 36 [ 253.633281][ T7320] erofs (device loop6): failed to readdir of logical block 0 of nid 36 [ 255.695860][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'. [ 256.119488][ T7350] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 256.463240][ T7361] 9pnet_virtio: no channels available for device syz [ 256.856771][ T7370] loop4: detected capacity change from 0 to 8 [ 256.864764][ T7370] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 256.877593][ T7370] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 256.884167][ T7370] PKCS7: Only support pkcs7_signedData type [ 256.917184][ T7368] block device autoloading is deprecated and will be removed. [ 258.347188][ T7383] tun0: tun_chr_ioctl cmd 1074025675 [ 258.372518][ T7383] tun0: persist enabled [ 258.395236][ T7383] tun0: tun_chr_ioctl cmd 1074025675 [ 258.401306][ T7383] tun0: persist disabled [ 258.544790][ T7387] loop6: detected capacity change from 0 to 16 [ 258.635052][ T7387] erofs (device loop6): mounted with root inode @ nid 36. [ 259.109038][ T7390] erofs (device loop6): read error -117 @ 0 of nid 36 [ 259.116773][ T7390] erofs (device loop6): failed to readdir of logical block 0 of nid 36 [ 260.035647][ T7404] autofs: Unknown parameter 'fdfile1' [ 261.216595][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'. [ 262.423816][ T7436] loop0: detected capacity change from 0 to 8 [ 262.430836][ T7436] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 262.443114][ T7436] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 262.449657][ T7436] PKCS7: Only support pkcs7_signedData type [ 263.645451][ T7452] loop0: detected capacity change from 0 to 16 [ 263.731592][ T7452] erofs (device loop0): mounted with root inode @ nid 36. [ 264.741996][ T7461] erofs (device loop0): read error -117 @ 0 of nid 36 [ 264.806837][ T7461] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 265.350426][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.357258][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.552776][ T7472] autofs: Unknown parameter 'fdfile1' [ 266.311200][ T7489] loop4: detected capacity change from 0 to 8 [ 266.318965][ T7489] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 266.356288][ T7489] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 266.363126][ T7489] PKCS7: Only support pkcs7_signedData type [ 266.394311][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.456'. [ 267.492535][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 267.509655][ T7508] loop6: detected capacity change from 0 to 1024 [ 267.684343][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 267.776572][ T5895] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 267.815733][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.045695][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.454808][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.594047][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.646794][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.685203][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.070078][ T7510] loop5: detected capacity change from 0 to 32768 [ 269.129537][ T5895] usb 5-1: usb_control_msg returned -32 [ 269.136512][ T7510] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 269.159823][ T7510] (syz.5.464,7510,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 269.237081][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 269.290094][ T7510] ocfs2: Unmounting device (7,5) on (node local) [ 269.584073][ T5895] usb 5-1: USB disconnect, device number 4 [ 270.239862][ T7538] autofs: Unknown parameter 'fdfile1' [ 270.729088][ T7541] loop4: detected capacity change from 0 to 16 [ 270.767454][ T7541] erofs (device loop4): mounted with root inode @ nid 36. [ 271.245139][ T7546] erofs (device loop4): read error -117 @ 0 of nid 36 [ 271.262681][ T7546] erofs (device loop4): failed to readdir of logical block 0 of nid 36 [ 271.596257][ T7548] loop5: detected capacity change from 0 to 8 [ 271.603524][ T7548] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 271.617404][ T7548] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 271.624069][ T7548] PKCS7: Only support pkcs7_signedData type [ 272.721866][ T5856] Bluetooth: hci6: command 0x0406 tx timeout [ 272.906644][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 274.003217][ T7523] warn_alloc: 1 callbacks suppressed [ 274.003240][ T7523] syz.6.463: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 274.088506][ T7523] CPU: 0 UID: 0 PID: 7523 Comm: syz.6.463 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 274.088561][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.088609][ T7523] Call Trace: [ 274.088621][ T7523] [ 274.088635][ T7523] dump_stack_lvl+0x16c/0x1f0 [ 274.088707][ T7523] warn_alloc+0x248/0x3a0 [ 274.088773][ T7523] ? __pfx_warn_alloc+0x10/0x10 [ 274.088852][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.088901][ T7523] ? __get_vm_area_node+0x1b9/0x300 [ 274.088948][ T7523] ? __get_vm_area_node+0x1e5/0x300 [ 274.089009][ T7523] __vmalloc_node_range_noprof+0x1110/0x1540 [ 274.089062][ T7523] ? nfnetlink_rcv_msg+0x9fc/0x1200 [ 274.089098][ T7523] ? netlink_rcv_skb+0x16d/0x440 [ 274.089174][ T7523] ? hash_netport_create+0x3ec/0x1250 [ 274.089254][ T7523] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 274.089311][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.089361][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.089411][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.089467][ T7523] __kvmalloc_node_noprof+0x2ff/0x600 [ 274.089527][ T7523] ? hash_netport_create+0x3ec/0x1250 [ 274.089600][ T7523] ? hash_netport_create+0x3ec/0x1250 [ 274.089677][ T7523] ? hash_netport_create+0x3ec/0x1250 [ 274.089739][ T7523] hash_netport_create+0x3ec/0x1250 [ 274.089808][ T7523] ? __pfx___nla_validate+0x3/0x10 [ 274.089869][ T7523] ? __pfx_hash_netport_create+0x10/0x10 [ 274.089939][ T7523] ip_set_create+0x7e4/0x14d0 [ 274.089996][ T7523] ? __pfx_ip_set_create+0x10/0x10 [ 274.090086][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.090144][ T7523] nfnetlink_rcv_msg+0x9fc/0x1200 [ 274.090201][ T7523] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 274.090237][ T7523] ? kmem_cache_free+0x2d4/0x4d0 [ 274.090372][ T7523] netlink_rcv_skb+0x16d/0x440 [ 274.090434][ T7523] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 274.090476][ T7523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.090535][ T7523] ? __pfx_aa_get_newest_label+0x10/0x10 [ 274.090611][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.090658][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.090704][ T7523] ? security_capable+0x7e/0x260 [ 274.090743][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.090790][ T7523] ? ns_capable+0xd7/0x110 [ 274.090846][ T7523] nfnetlink_rcv+0x1b3/0x430 [ 274.090883][ T7523] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 274.090917][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.090964][ T7523] ? netlink_deliver_tap+0x1ae/0xd30 [ 274.091032][ T7523] netlink_unicast+0x53d/0x7f0 [ 274.091101][ T7523] ? __pfx_netlink_unicast+0x10/0x10 [ 274.091159][ T7523] ? __lock_acquire+0xaa4/0x1ba0 [ 274.091210][ T7523] netlink_sendmsg+0x8d1/0xdd0 [ 274.091281][ T7523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.091340][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.091409][ T7523] ____sys_sendmsg+0xa98/0xc70 [ 274.091447][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.091493][ T7523] ? copy_msghdr_from_user+0x10a/0x160 [ 274.091551][ T7523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.091606][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.091653][ T7523] ? __lock_acquire+0xaa4/0x1ba0 [ 274.091696][ T7523] ___sys_sendmsg+0x134/0x1d0 [ 274.091754][ T7523] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.091835][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.091921][ T7523] __sys_sendmsg+0x16d/0x220 [ 274.091976][ T7523] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.092026][ T7523] ? __pfx___schedule+0x10/0x10 [ 274.092076][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.092122][ T7523] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.092204][ T7523] do_syscall_64+0xcd/0x260 [ 274.092270][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.092309][ T7523] RIP: 0033:0x7f3822b8e169 [ 274.092338][ T7523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.092376][ T7523] RSP: 002b:00007f3823954038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.092411][ T7523] RAX: ffffffffffffffda RBX: 00007f3822db6160 RCX: 00007f3822b8e169 [ 274.092436][ T7523] RDX: c951349034062a20 RSI: 0000200000000040 RDI: 0000000000000006 [ 274.092461][ T7523] RBP: 00007f3822c10a68 R08: 0000000000000000 R09: 0000000000000000 [ 274.092485][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.092507][ T7523] R13: 0000000000000000 R14: 00007f3822db6160 R15: 00007ffc5a7484b8 [ 274.092557][ T7523] [ 275.306520][ T47] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 275.460872][ T7523] Mem-Info: [ 275.493534][ T7523] active_anon:13213 inactive_anon:0 isolated_anon:0 [ 275.493534][ T7523] active_file:3601 inactive_file:38398 isolated_file:0 [ 275.493534][ T7523] unevictable:768 dirty:138 writeback:0 [ 275.493534][ T7523] slab_reclaimable:9938 slab_unreclaimable:103153 [ 275.493534][ T7523] mapped:38929 shmem:7451 pagetables:1186 [ 275.493534][ T7523] sec_pagetables:0 bounce:0 [ 275.493534][ T7523] kernel_misc_reclaimable:0 [ 275.493534][ T7523] free:1307206 free_pcp:274 free_cma:0 [ 275.693170][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 275.755715][ T47] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 275.776898][ T47] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.883041][ T7523] Node 0 active_anon:52952kB inactive_anon:0kB active_file:14404kB inactive_file:153516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159716kB dirty:552kB writeback:0kB shmem:28268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12004kB pagetables:4844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.208212][ T7523] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.252487][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.264249][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.275504][ T47] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.288999][ T7523] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.326661][ T47] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.337779][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.348849][ T7523] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 276.368996][ T7523] Node 0 DMA32 free:1289056kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:65616kB inactive_anon:0kB active_file:14716kB inactive_file:151944kB unevictable:1536kB writepending:580kB present:3129332kB managed:2541664kB mlocked:0kB bounce:0kB free_pcp:5976kB local_pcp:1232kB free_cma:0kB [ 276.479762][ T7523] lowmem_reserve[]: 0 0 1 1 1 [ 276.509337][ T7523] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 276.650129][ T47] usb 2-1: usb_control_msg returned -32 [ 276.661851][ T47] usbtmc 2-1:16.0: can't read capabilities [ 276.672492][ T7523] lowmem_reserve[]: 0 0 0 0 0 [ 276.677311][ T7523] Node 1 Normal free:3904956kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.746642][ T7523] lowmem_reserve[]: 0 0 0 0 0 [ 276.761752][ T7523] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.867037][ T7523] Node 0 DMA32: 26*4kB (UME) 1151*8kB (UME) 1330*16kB (UE) 629*32kB (UME) 1170*64kB (UE) 827*128kB (UM) 484*256kB (UME) 257*512kB (UE) 85*1024kB (UME) 6*2048kB (UME) 171*4096kB (UM) = 1286688kB [ 276.897015][ T7523] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 276.963372][ T7523] Node 1 Normal: 227*4kB (UE) 66*8kB (UME) 36*16kB (UME) 241*32kB (UME) 101*64kB (UME) 29*128kB (UME) 12*256kB (UM) 8*512kB (UME) 7*1024kB (UME) 4*2048kB (UE) 943*4096kB (M) = 3904956kB [ 277.463307][ T7523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.507495][ T7523] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.570952][ T7523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.706444][ T7523] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.782521][ T7523] 50933 total pagecache pages [ 277.802543][ T7523] 0 pages in swap cache [ 277.806783][ T7523] Free swap = 124996kB [ 277.856716][ T7523] Total swap = 124996kB [ 277.871573][ T7523] 2097051 pages RAM [ 277.891477][ T7523] 0 pages HighMem/MovableOnly [ 277.922648][ T7523] 429593 pages reserved [ 277.926882][ T7523] 0 pages cma reserved [ 278.295248][ T7622] loop0: detected capacity change from 0 to 64 [ 278.304145][ T7620] loop5: detected capacity change from 0 to 8 [ 278.312166][ T7620] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 278.323907][ T7620] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 278.330477][ T7620] PKCS7: Only support pkcs7_signedData type [ 278.383263][ T7624] loop4: detected capacity change from 0 to 16 [ 278.410617][ T7624] erofs (device loop4): mounted with root inode @ nid 36. [ 278.916001][ T47] usb 2-1: USB disconnect, device number 3 [ 279.107264][ T7627] erofs (device loop4): read error -117 @ 0 of nid 36 [ 279.268742][ T7627] erofs (device loop4): failed to readdir of logical block 0 of nid 36 [ 279.522739][ T5911] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 279.812721][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 279.995169][ T5911] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.167464][ T5911] usb 1-1: config 0 has no interface number 0 [ 280.369521][ T5911] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.668475][ T5911] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 280.939535][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.894128][ T5911] usb 1-1: config 0 descriptor?? [ 281.999422][ T5911] usb 1-1: can't set config #0, error -71 [ 282.014858][ T5911] usb 1-1: USB disconnect, device number 5 [ 282.350059][ T55] Bluetooth: hci6: connection err: -111 [ 284.346620][ T7664] lo speed is unknown, defaulting to 1000 [ 284.426342][ T7664] lo speed is unknown, defaulting to 1000 [ 284.543433][ T7664] lo speed is unknown, defaulting to 1000 [ 285.007500][ T7674] loop6: detected capacity change from 0 to 8 [ 285.014705][ T7674] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 285.028373][ T7674] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 285.035169][ T7674] PKCS7: Only support pkcs7_signedData type [ 285.613314][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.623485][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.631562][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.641560][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.651043][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.895991][ T7683] loop6: detected capacity change from 0 to 64 [ 286.256732][ T7687] loop0: detected capacity change from 0 to 1024 [ 286.600720][ T5911] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 287.762178][ T5856] Bluetooth: hci2: command tx timeout [ 287.940429][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 288.146820][ T5911] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.413738][ T5911] usb 7-1: config 0 has no interface number 0 [ 289.415130][ T7687] hfsplus: failed to load extents file [ 289.419911][ T5911] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.481067][ T5911] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 289.515010][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.633831][ T5911] usb 7-1: config 0 descriptor?? [ 289.822756][ T5856] Bluetooth: hci2: command tx timeout [ 289.897040][ T5911] usb 7-1: can't set config #0, error -71 [ 289.978340][ T5911] usb 7-1: USB disconnect, device number 3 [ 290.117937][ T7705] loop5: detected capacity change from 0 to 16 [ 290.241515][ T7705] erofs (device loop5): mounted with root inode @ nid 36. [ 290.381502][ T7664] infiniband sz1: set active [ 290.603736][ T7664] infiniband sz1: added lo [ 290.611738][ T7664] sz1: rxe_create_cq: returned err = -12 [ 290.630380][ T7664] infiniband sz1: Couldn't create ib_mad CQ [ 290.888438][ T7664] infiniband sz1: Couldn't open port 1 [ 291.338753][ T47] lo speed is unknown, defaulting to 1000 [ 291.430656][ T7664] RDS/IB: sz1: added [ 291.456337][ T7664] smc: adding ib device sz1 with port count 1 [ 291.507380][ T7664] smc: ib device sz1 port 1 has pnetid [ 291.628845][ T5937] lo speed is unknown, defaulting to 1000 [ 291.673011][ T7664] lo speed is unknown, defaulting to 1000 [ 291.717614][ T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 291.834743][ T7679] chnl_net:caif_netlink_parms(): no params data found [ 291.902773][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 291.908099][ T5856] Bluetooth: hci2: command tx timeout [ 291.921296][ T47] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 291.940086][ T47] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.970368][ T47] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.990693][ T47] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.026546][ T47] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.080443][ T47] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.137548][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.053209][ T47] usb 1-1: GET_CAPABILITIES returned 0 [ 293.134417][ T47] usbtmc 1-1:16.0: can't read capabilities [ 293.381619][ T3388] usb 1-1: USB disconnect, device number 6 [ 293.605845][ T6563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.007489][ T5856] Bluetooth: hci2: command tx timeout [ 294.092917][ T7746] loop4: detected capacity change from 0 to 8 [ 294.100019][ T7746] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 294.974884][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.353903][ T7760] Zero length message leads to an empty skb [ 295.697121][ T6563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.862087][ T7664] lo speed is unknown, defaulting to 1000 [ 295.910282][ T7766] loop0: detected capacity change from 0 to 64 [ 296.068132][ T7770] loop5: detected capacity change from 0 to 1024 [ 296.089657][ T6563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.292194][ T5937] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 297.371625][ T6563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.576965][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 297.838768][ T5937] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.897091][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.902396][ T5937] usb 1-1: config 0 has no interface number 0 [ 297.905399][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.920579][ T7679] bridge_slave_0: entered allmulticast mode [ 297.995281][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.528'. [ 298.095764][ T5937] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.472357][ T5937] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 298.554726][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.702845][ T7679] bridge_slave_0: entered promiscuous mode [ 298.723627][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.730989][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.749845][ T7679] bridge_slave_1: entered allmulticast mode [ 298.797560][ T7679] bridge_slave_1: entered promiscuous mode [ 298.834981][ T5937] usb 1-1: config 0 descriptor?? [ 298.874235][ T5937] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 298.936719][ T7802] loop4: detected capacity change from 0 to 16 [ 298.992242][ T7802] erofs (device loop4): mounted with root inode @ nid 36. [ 299.018330][ T47] usb 1-1: USB disconnect, device number 7 [ 299.092531][ T5895] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 299.495627][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.505075][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 299.514526][ T7811] erofs (device loop4): read error -117 @ 0 of nid 36 [ 299.521337][ T7811] erofs (device loop4): failed to readdir of logical block 0 of nid 36 [ 299.542534][ T5895] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 299.565781][ T5895] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.584615][ T7664] lo speed is unknown, defaulting to 1000 [ 299.589174][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.632190][ T5895] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.698219][ T5895] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.931147][ T5895] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.002146][ T5895] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 300.058716][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.352698][ T5895] usb 6-1: GET_CAPABILITIES returned 0 [ 300.370720][ T5895] usbtmc 6-1:16.0: can't read capabilities [ 300.485598][ T7679] team0: Port device team_slave_0 added [ 300.525768][ T7679] team0: Port device team_slave_1 added [ 300.568339][ T5895] usb 6-1: USB disconnect, device number 2 [ 300.876904][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.917933][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.126833][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.136743][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.145539][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.155077][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.164618][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.307756][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.353072][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.377029][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.503073][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.213453][ T6563] bridge_slave_1: left allmulticast mode [ 302.225683][ T6563] bridge_slave_1: left promiscuous mode [ 302.251855][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.345605][ T6563] bridge_slave_0: left allmulticast mode [ 302.351282][ T6563] bridge_slave_0: left promiscuous mode [ 302.372096][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.272594][ T55] Bluetooth: hci5: command tx timeout [ 304.108917][ T6563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.125923][ T6563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.156114][ T6563] bond0 (unregistering): Released all slaves [ 304.241803][ T7664] lo speed is unknown, defaulting to 1000 [ 304.398533][ T7679] hsr_slave_0: entered promiscuous mode [ 304.444435][ T7679] hsr_slave_1: entered promiscuous mode [ 304.473137][ T7679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.519893][ T7679] Cannot create hsr debugfs directory [ 305.071015][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.543'. [ 305.364518][ T55] Bluetooth: hci5: command tx timeout [ 306.460250][ T7874] loop5: detected capacity change from 0 to 16 [ 306.500689][ T7874] erofs (device loop5): mounted with root inode @ nid 36. [ 306.839483][ T7879] erofs (device loop5): read error -117 @ 0 of nid 36 [ 306.851741][ T7879] erofs (device loop5): failed to readdir of logical block 0 of nid 36 [ 307.318418][ T7664] lo speed is unknown, defaulting to 1000 [ 307.423593][ T55] Bluetooth: hci5: command tx timeout [ 307.903457][ T47] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 307.924634][ T7864] syz.6.544 (7864): drop_caches: 2 [ 308.083801][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 308.118443][ T47] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 308.184641][ T47] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.217011][ T47] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.240009][ T47] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.264707][ T47] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.341031][ T47] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.389579][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.398863][ T7893] loop5: detected capacity change from 0 to 512 [ 308.420918][ T7893] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 308.560278][ T7893] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 308.926128][ T7893] EXT4-fs (loop5): 1 truncate cleaned up [ 308.942930][ T47] usb 1-1: GET_CAPABILITIES returned 0 [ 308.948524][ T47] usbtmc 1-1:16.0: can't read capabilities [ 308.959580][ T7679] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 308.971388][ T7893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.281005][ T7679] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 309.305371][ T47] usb 1-1: USB disconnect, device number 8 [ 309.452193][ T7679] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 309.512828][ T55] Bluetooth: hci5: command tx timeout [ 309.559162][ T7824] lo speed is unknown, defaulting to 1000 [ 309.567422][ T7679] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 309.740741][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.428440][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.557801][ T7679] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.620525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.627800][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.738459][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.745699][ T7227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.010356][ T7664] lo speed is unknown, defaulting to 1000 [ 312.159401][ T7824] chnl_net:caif_netlink_parms(): no params data found [ 312.188816][ T7940] input: syz0 as /devices/virtual/input/input5 [ 312.283372][ T7679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.918034][ T7952] loop0: detected capacity change from 0 to 16 [ 312.927537][ T7664] lo speed is unknown, defaulting to 1000 [ 313.018350][ T7952] erofs (device loop0): mounted with root inode @ nid 36. [ 313.988796][ T7962] erofs (device loop0): read error -117 @ 0 of nid 36 [ 313.995964][ T7962] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 314.199202][ T7965] loop5: detected capacity change from 0 to 512 [ 314.221614][ T7824] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.232218][ T7965] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 314.249537][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.287428][ T7824] bridge_slave_0: entered allmulticast mode [ 314.346540][ T7824] bridge_slave_0: entered promiscuous mode [ 314.355996][ T7965] EXT4-fs (loop5): 1 truncate cleaned up [ 314.377343][ T7824] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.393591][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.400856][ T7824] bridge_slave_1: entered allmulticast mode [ 314.406363][ T47] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 314.457417][ T7965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.525280][ T7824] bridge_slave_1: entered promiscuous mode [ 314.782621][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 314.790648][ T47] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 314.814348][ T47] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.857989][ T47] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.898416][ T47] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.918665][ T47] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.939749][ T47] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.032520][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 315.103045][ T5937] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 315.122566][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.152690][ T5937] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 315.214964][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.354741][ T47] usb 7-1: GET_CAPABILITIES returned 0 [ 315.407918][ T47] usbtmc 7-1:16.0: can't read capabilities [ 315.426200][ T7824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.534278][ T7824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.573074][ T47] usb 7-1: USB disconnect, device number 4 [ 315.710998][ T7961] loop4: detected capacity change from 0 to 32768 [ 315.992993][ T7961] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 316.102294][ T7961] (syz.4.561,7961,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 316.245223][ T7961] ocfs2: Unmounting device (7,4) on (node local) [ 317.080329][ T6563] hsr_slave_0: left promiscuous mode [ 317.152772][ T6563] hsr_slave_1: left promiscuous mode [ 317.159103][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.213816][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.266820][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.302580][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.346126][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 317.354094][ T5937] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 317.362869][ T5937] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 317.378816][ T6563] veth1_macvtap: left promiscuous mode [ 317.386892][ T6563] veth0_macvtap: left promiscuous mode [ 317.393399][ T6563] veth1_vlan: left promiscuous mode [ 317.398768][ T6563] veth0_vlan: left promiscuous mode [ 317.689609][ T8009] capability: warning: `syz.6.572' uses 32-bit capabilities (legacy support in use) [ 318.280429][ T8018] loop6: detected capacity change from 0 to 512 [ 318.298981][ T8018] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 318.369730][ T8018] EXT4-fs (loop6): 1 truncate cleaned up [ 318.410111][ T8018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.431328][ T8021] loop0: detected capacity change from 0 to 16 [ 318.440173][ T8021] erofs (device loop0): mounted with root inode @ nid 36. [ 318.874735][ T8025] erofs (device loop0): read error -117 @ 0 of nid 36 [ 318.913381][ T8025] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 319.357897][ T6235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.742791][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 319.742820][ T5937] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 319.772524][ T5937] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 319.863189][ T5911] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 320.032617][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 320.060371][ T5911] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 320.090778][ T5911] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.137362][ T5911] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.211164][ T5911] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.299278][ T5911] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.418569][ T5911] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 320.645684][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.875908][ T6563] team0 (unregistering): Port device team_slave_1 removed [ 320.926463][ T5911] usb 7-1: GET_CAPABILITIES returned 0 [ 320.932126][ T5911] usbtmc 7-1:16.0: can't read capabilities [ 321.047799][ T6563] team0 (unregistering): Port device team_slave_0 removed [ 321.388635][ T5911] usb 7-1: USB disconnect, device number 5 [ 321.902953][ T5937] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 321.904315][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 321.909068][ T5937] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 321.941015][ T8032] loop0: detected capacity change from 0 to 32768 [ 322.010689][ T8032] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 322.020227][ T5911] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 322.053327][ T8032] (syz.0.578,8032,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 322.115557][ T8032] ocfs2: Unmounting device (7,0) on (node local) [ 322.195147][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 322.232804][ T5911] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 322.255045][ T5911] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.281711][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.310897][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.345645][ T5911] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.362657][ T5897] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 322.370294][ T5911] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.390086][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.543061][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 322.574338][ T5897] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 322.604559][ T5897] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 322.619975][ T5897] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.632258][ T5897] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 322.663583][ T5911] usb 6-1: usb_control_msg returned -32 [ 322.677311][ T5897] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.679931][ T5911] usbtmc 6-1:16.0: can't read capabilities [ 322.726740][ T7824] team0: Port device team_slave_0 added [ 322.752041][ T5897] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 322.769146][ T7824] team0: Port device team_slave_1 added [ 322.785399][ T5897] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 322.807643][ T5897] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.826620][ T5897] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 322.843210][ T5897] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.885044][ T5897] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 322.910539][ T5897] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 322.943507][ T5897] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.981219][ T5897] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 323.014608][ T5897] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.040101][ T5897] usb 7-1: string descriptor 0 read error: -22 [ 323.046741][ T5897] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 323.063659][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.150791][ T5897] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 323.333872][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 323.354317][ T8045] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 323.364068][ T10] usb 7-1: USB disconnect, device number 6 [ 323.417638][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.440386][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.492516][ T7824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.630925][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.642023][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.668810][ T7824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.910390][ T7824] hsr_slave_0: entered promiscuous mode [ 323.923786][ T7824] hsr_slave_1: entered promiscuous mode [ 323.940461][ T7824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.952944][ T7824] Cannot create hsr debugfs directory [ 323.973280][ T7679] veth0_vlan: entered promiscuous mode [ 324.096012][ T7679] veth1_vlan: entered promiscuous mode [ 325.588525][ T5897] usb 6-1: USB disconnect, device number 3 [ 325.664461][ T7679] veth0_macvtap: entered promiscuous mode [ 325.825276][ T55] Bluetooth: hci6: command 0x0406 tx timeout [ 325.895548][ T5937] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 325.902064][ T5937] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 325.931083][ T8079] No control pipe specified [ 326.297802][ T8083] loop5: detected capacity change from 0 to 8 [ 326.306113][ T8083] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 326.412726][ T5897] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 326.713151][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 326.793483][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.886309][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.993829][ T5897] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 327.002542][ T5897] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.012521][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.022546][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.033075][ T5897] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.046410][ T5897] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.056610][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.327487][ T7679] veth1_macvtap: entered promiscuous mode [ 327.441631][ T5897] usb 7-1: GET_CAPABILITIES returned 0 [ 327.445750][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.484863][ T5897] usbtmc 7-1:16.0: can't read capabilities [ 327.499306][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.521696][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.819525][ T10] usb 7-1: USB disconnect, device number 7 [ 327.868270][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.926294][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.954266][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.996777][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.015751][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.040146][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.071130][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.124108][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.156346][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.262666][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.310026][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.352475][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.382631][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.428034][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.449925][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.473093][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.503131][ T7679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.538678][ T8086] loop0: detected capacity change from 0 to 32768 [ 328.549892][ T7679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.580127][ T8086] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 328.593996][ T7679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.659748][ T8086] (syz.0.594,8086,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 328.669415][ T7679] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.720237][ T7679] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.790357][ T8107] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 328.797196][ T8107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 328.809209][ T8107] vhci_hcd vhci_hcd.0: Device attached [ 328.828595][ T7679] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.843796][ T8086] ocfs2: Unmounting device (7,0) on (node local) [ 328.858385][ T7679] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.062669][ T5897] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 329.343380][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.600'. [ 329.415485][ T7824] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 329.422699][ T5937] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 329.423872][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.428772][ T5937] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 329.478675][ T8108] vhci_hcd: connection reset by peer [ 329.499197][ T6563] vhci_hcd: stop threads [ 329.509864][ T6563] vhci_hcd: release socket [ 329.516911][ T6563] vhci_hcd: disconnect device [ 329.647588][ T7824] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 329.724697][ T7824] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 329.850676][ T7824] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 330.521254][ T7824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.625188][ T7824] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.668767][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.675993][ T7227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.711198][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.718414][ T6562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.655838][ T7824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.663443][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 331.682477][ T5937] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 331.688688][ T5937] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 332.112928][ T5898] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 332.186683][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 332.365841][ T5898] usb 7-1: Using ep0 maxpacket: 8 [ 332.501183][ T5898] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 332.611581][ T5898] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.654219][ T5898] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.694541][ T5898] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.889239][ T5898] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.932615][ T5898] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 332.941707][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.234595][ T6563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.245266][ T5898] usb 7-1: usb_control_msg returned -32 [ 333.250907][ T5898] usbtmc 7-1:16.0: can't read capabilities [ 333.276084][ T6563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.294111][ T5937] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 333.334894][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.473137][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 333.504159][ T5937] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 333.523634][ T5937] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.554249][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.555797][ T5937] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.599365][ T5937] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.627668][ T5937] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.657890][ T5937] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.684007][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.744363][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.860740][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.893088][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.923383][ T5937] usb 5-1: GET_CAPABILITIES returned 0 [ 333.939140][ T5937] usbtmc 5-1:16.0: can't read capabilities [ 333.959584][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.116210][ T7824] veth0_vlan: entered promiscuous mode [ 334.136832][ T5896] usb 5-1: USB disconnect, device number 5 [ 334.216391][ T5897] vhci_hcd: vhci_device speed not set [ 334.745017][ T7824] veth1_vlan: entered promiscuous mode [ 335.087922][ T8181] MTD: Couldn't look up '': -22 [ 335.791785][ T7824] veth0_macvtap: entered promiscuous mode [ 335.915512][ T5911] usb 7-1: USB disconnect, device number 8 [ 335.991824][ T7824] veth1_macvtap: entered promiscuous mode [ 336.012211][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 337.775442][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.012755][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.023840][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.034533][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.044673][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.275010][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.286006][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.312759][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.322998][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.335476][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.345675][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.356529][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.368579][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.400260][ T12] bridge_slave_1: left allmulticast mode [ 338.423082][ T12] bridge_slave_1: left promiscuous mode [ 338.428905][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.618301][ T12] bridge_slave_0: left allmulticast mode [ 338.645655][ T12] bridge_slave_0: left promiscuous mode [ 338.670485][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.282630][ T5898] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 340.492667][ T8234] MTD: Couldn't look up '': -22 [ 341.453007][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 341.490710][ T5898] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 341.540079][ T5898] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.606407][ T5898] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.632531][ T5897] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 341.922689][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 341.962965][ T5897] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 342.069815][ T5897] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.208955][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.280176][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.340502][ T5897] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.409066][ T5897] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 342.454930][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.565904][ T5898] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.579535][ T5898] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.594658][ T5898] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 342.603775][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.740342][ T5897] usb 7-1: GET_CAPABILITIES returned 0 [ 342.767857][ T5897] usbtmc 7-1:16.0: can't read capabilities [ 342.829865][ T5898] usb 6-1: usb_control_msg returned -32 [ 342.858919][ T5898] usbtmc 6-1:16.0: can't read capabilities [ 342.946774][ T3388] usb 7-1: USB disconnect, device number 9 [ 344.154700][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.636'. [ 344.164364][ T8264] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 344.171989][ T8264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.249080][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.288307][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.373603][ T12] bond0 (unregistering): Released all slaves [ 344.568767][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.652675][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.687860][ T5911] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 344.721289][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.753085][ T5896] usb 6-1: USB disconnect, device number 4 [ 344.772950][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.822937][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.892646][ T5911] usb 8-1: Using ep0 maxpacket: 8 [ 344.897781][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.920712][ T5911] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 344.942139][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.969748][ T5911] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 344.980336][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.990931][ T5911] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.011395][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.022175][ T5911] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.037726][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.054361][ T5911] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.078174][ T7824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.094872][ T5911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.120380][ T7824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.159566][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.185296][ T7824] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.249700][ T7824] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.272558][ T7824] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.307286][ T7824] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.452561][ T5911] usb 8-1: GET_CAPABILITIES returned 0 [ 345.478461][ T5911] usbtmc 8-1:16.0: can't read capabilities [ 345.480056][ T8249] loop4: detected capacity change from 0 to 32768 [ 345.585916][ T8249] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 345.896701][ T8249] (syz.4.631,8249,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 345.985949][ T5896] usb 8-1: USB disconnect, device number 2 [ 347.283789][ T8249] ocfs2: Unmounting device (7,4) on (node local) [ 348.888325][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.932651][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.196682][ T6563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.252530][ T6563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.403776][ T8314] autofs: Unknown parameter 'fd0x0000000000000000' [ 349.432847][ T47] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 349.618006][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 349.633624][ T47] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 349.686849][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.731836][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.768745][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.833789][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.890850][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 350.032650][ T12] hsr_slave_0: left promiscuous mode [ 350.189019][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.353060][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 351.175757][ T47] usb 5-1: GET_CAPABILITIES returned 0 [ 351.181330][ T47] usbtmc 5-1:16.0: can't read capabilities [ 351.373172][ T12] hsr_slave_1: left promiscuous mode [ 351.403405][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.449491][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.743464][ T47] usb 5-1: USB disconnect, device number 6 [ 351.848818][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.943857][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.724933][ T8346] loop7: detected capacity change from 0 to 32768 [ 352.846842][ T12] veth1_macvtap: left promiscuous mode [ 352.852632][ T12] veth0_macvtap: left promiscuous mode [ 352.858433][ T12] veth1_vlan: left promiscuous mode [ 352.865021][ T12] veth0_vlan: left promiscuous mode [ 352.876023][ T8346] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 352.913586][ T8346] (syz.7.656,8346,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 352.950686][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 352.999368][ T8346] ocfs2: Unmounting device (7,7) on (node local) [ 354.486929][ T8374] loop6: detected capacity change from 0 to 1024 [ 354.893419][ T8379] netlink: 64 bytes leftover after parsing attributes in process `syz.7.666'. [ 357.544543][ T12] team0 (unregistering): Port device team_slave_1 removed [ 357.700026][ T12] team0 (unregistering): Port device team_slave_0 removed [ 358.128944][ T8394] autofs: Unknown parameter 'fd0x0000000000000000' [ 358.352357][ T6593] smc: removing ib device sz1 [ 358.368224][ T5897] lo speed is unknown, defaulting to 1000 [ 358.378794][ T5897] sz1: Port: 1 Link DOWN [ 359.124468][ T5937] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 359.662572][ T5937] usb 6-1: Using ep0 maxpacket: 8 [ 359.687662][ T5937] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 359.743390][ T5937] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.812532][ T5937] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.870756][ T5937] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.952504][ T5937] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.239493][ T5937] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.249110][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.284558][ T8422] netlink: 'syz.4.678': attribute type 3 has an invalid length. [ 360.334630][ T8422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.678'. [ 360.632122][ T5937] usb 6-1: GET_CAPABILITIES returned 0 [ 360.672011][ T5937] usbtmc 6-1:16.0: can't read capabilities [ 360.701620][ T8431] process 'syz.8.679' launched './file0' with NULL argv: empty string added [ 360.978460][ T5937] usb 6-1: USB disconnect, device number 5 [ 361.532681][ T3388] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 362.453173][ T3388] usb 7-1: Using ep0 maxpacket: 32 [ 362.478441][ T3388] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 362.502280][ T3388] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 362.524920][ T3388] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 362.596676][ T3388] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 362.627832][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 363.554602][ T3388] usb 7-1: config 0 interface 0 has no altsetting 0 [ 363.575479][ T3388] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 363.642555][ T3388] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 363.651063][ T3388] usb 7-1: Product: syz [ 363.715072][ T3388] usb 7-1: Manufacturer: syz [ 363.719753][ T3388] usb 7-1: SerialNumber: syz [ 363.841556][ T3388] usb 7-1: config 0 descriptor?? [ 363.875143][ T3388] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 363.991875][ T3388] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 364.343335][ T10] usb 7-1: USB disconnect, device number 10 [ 364.568279][ T10] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 364.588728][ T8476] autofs: Unknown parameter 'fd0x0000000000000000' [ 365.350566][ T8490] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 367.724376][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 367.862515][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 367.953340][ T8535] loop7: detected capacity change from 0 to 8 [ 367.960448][ T8535] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 368.072585][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 368.094238][ T9] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 368.124870][ T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 368.144807][ T8539] loop0: detected capacity change from 0 to 1024 [ 368.200002][ T9] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 368.260542][ T9] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 368.333763][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 368.888609][ T8548] hfsplus: xattr searching failed [ 368.895875][ T8547] hfsplus: xattr searching failed [ 368.972644][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 369.304995][ T7696] hfsplus: b-tree write err: -5, ino 4 [ 369.314269][ T9] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 369.342130][ T9] usb 9-1: Product: syz [ 369.346604][ T9] usb 9-1: Manufacturer: syz [ 369.352957][ T9] usb 9-1: SerialNumber: syz [ 369.403959][ T9] usb 9-1: config 0 descriptor?? [ 369.609433][ T9] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 369.741099][ T9] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 369.836446][ T9] usb 9-1: USB disconnect, device number 2 [ 369.922079][ T9] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 370.403032][ T8579] Invalid logical block size (2) [ 370.598739][ T8582] fuse: Bad value for 'fd' [ 370.604910][ T8582] fuse: Bad value for 'fd' [ 371.303142][ T8584] syz.7.719 uses obsolete (PF_INET,SOCK_PACKET) [ 371.419138][ T8584] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 372.023932][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'. [ 372.069228][ T8605] loop8: detected capacity change from 0 to 512 [ 372.147700][ T8610] loop5: detected capacity change from 0 to 8 [ 372.154959][ T8610] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 372.262642][ T8605] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 372.422123][ T8605] EXT4-fs (loop8): 1 truncate cleaned up [ 372.580640][ T8605] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.019566][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.328627][ T8640] fuse: Bad value for 'fd' [ 374.337363][ T8640] fuse: Bad value for 'fd' [ 374.642728][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.732'. [ 375.194692][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.736'. [ 377.025870][ T8681] loop6: detected capacity change from 0 to 8 [ 377.034112][ T8681] squashfs: Unknown parameter '0xffffffffffffffff6v{VŁ}P/<' [ 377.392078][ T8679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.746'. [ 377.877673][ T8692] loop6: detected capacity change from 0 to 512 [ 377.922553][ T8692] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 378.003956][ T8692] EXT4-fs (loop6): 1 truncate cleaned up [ 378.046227][ T8692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.113877][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cfad800: rx timeout, send abort [ 378.132797][ T5897] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 378.492381][ T8706] fuse: Bad value for 'fd' [ 378.499095][ T8706] fuse: Bad value for 'fd' [ 378.615342][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cfac800: rx timeout, send abort [ 378.623898][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cfad800: abort rx timeout. Force session deactivation [ 379.116242][ T5897] usb 9-1: Using ep0 maxpacket: 8 [ 379.123630][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cfac800: abort rx timeout. Force session deactivation [ 379.219212][ T5897] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 379.281770][ T5897] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 379.342742][ T5897] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.435955][ T5897] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.526037][ T5897] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.575362][ T8718] 9pnet_virtio: no channels available for device syz [ 379.592367][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.679817][ T6235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.913976][ T5897] usb 9-1: GET_CAPABILITIES returned 0 [ 379.938751][ T5897] usbtmc 9-1:16.0: can't read capabilities [ 380.142752][ T5896] usb 9-1: USB disconnect, device number 3 [ 381.470802][ T8741] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 381.703154][ T8752] sp0: Synchronizing with TNC [ 382.094497][ T8764] fuse: Bad value for 'fd' [ 382.101454][ T8764] fuse: Bad value for 'fd' [ 382.663971][ T8769] loop4: detected capacity change from 0 to 512 [ 382.721220][ T8769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 382.849295][ T8769] EXT4-fs (loop4): 1 truncate cleaned up [ 382.865576][ T8769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.878353][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803046cc00: rx timeout, send abort [ 383.367599][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803046f800: rx timeout, send abort [ 383.378472][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803046cc00: abort rx timeout. Force session deactivation [ 383.423159][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 383.875955][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803046f800: abort rx timeout. Force session deactivation [ 384.027155][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.313401][ T5898] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 384.492567][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 384.511234][ T5898] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 384.532391][ T5898] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 384.560075][ T5898] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.592551][ T5898] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.653939][ T5898] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.710310][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.962674][ T5898] usb 6-1: GET_CAPABILITIES returned 0 [ 384.968765][ T5898] usbtmc 6-1:16.0: can't read capabilities [ 385.167146][ T5898] usb 6-1: USB disconnect, device number 6 [ 385.378746][ T8835] fuse: Bad value for 'fd' [ 385.384720][ T8835] fuse: Bad value for 'fd' [ 386.439744][ T8841] loop7: detected capacity change from 0 to 512 [ 386.512505][ T8841] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 386.601386][ T8841] EXT4-fs (loop7): 1 truncate cleaned up [ 386.620003][ T8841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.885701][ T7679] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.243192][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.250440][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.405710][ T8887] fuse: Bad value for 'fd' [ 388.411661][ T8887] fuse: Bad value for 'fd' [ 389.158459][ T8891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.802'. [ 389.184614][ T8891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.802'. [ 390.478306][ T8923] loop6: detected capacity change from 0 to 512 [ 390.558408][ T8923] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 390.626771][ T8923] EXT4-fs (loop6): 1 truncate cleaned up [ 390.666181][ T8927] tipc: Started in network mode [ 390.678516][ T8923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.699775][ T8927] tipc: Node identity ffffff7f0000000009, cluster identity 4711 [ 392.060876][ T8940] fuse: Bad value for 'fd' [ 392.067879][ T8940] fuse: Bad value for 'fd' [ 392.436824][ T6235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.313667][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.8.824'. [ 396.069567][ T8995] loop7: detected capacity change from 0 to 512 [ 396.251084][ T9003] loop6: detected capacity change from 0 to 524287999 [ 396.321739][ T9003] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 396.377858][ T8995] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 396.404673][ T9003] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 396.421524][ T9003] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 396.482903][ T8995] EXT4-fs (loop7): 1 truncate cleaned up [ 396.492937][ T9003] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.638977][ T9010] fuse: Bad value for 'fd' [ 396.740705][ T9010] fuse: Bad value for 'fd' [ 396.852995][ T9003] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 396.982605][ T9003] Buffer I/O error on dev loop6, logical block 1, async page read [ 396.992093][ T8995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.042914][ T9003] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.124831][ T9003] Buffer I/O error on dev loop6, logical block 2, async page read [ 397.193096][ T9003] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.309783][ T9003] Buffer I/O error on dev loop6, logical block 3, async page read [ 398.230803][ T7679] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.313484][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'. [ 399.435687][ T9036] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 400.822317][ T9057] loop0: detected capacity change from 0 to 1024 [ 401.587251][ T9068] fuse: Bad value for 'fd' [ 401.593758][ T9068] fuse: Bad value for 'fd' [ 403.960855][ T5896] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 404.068263][ T9093] fuse: Bad value for 'fd' [ 404.457190][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.7.857'. [ 404.485780][ T5896] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.142654][ T5896] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 405.151627][ T5896] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 405.222517][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.270576][ T5896] usb 7-1: config 0 descriptor?? [ 405.333436][ T5896] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 405.340401][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 405.465616][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 405.543859][ T5896] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 405.577276][ T5896] usb 7-1: media controller created [ 405.631956][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.748295][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 405.807282][ T5896] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 405.895730][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 405.982861][ T5896] dvb-usb: schedule remote query interval to 150 msecs. [ 405.989895][ T5896] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 406.202768][ T9127] loop7: detected capacity change from 0 to 1024 [ 406.213417][ T47] dvb-usb: bulk message failed: -22 (1/0) [ 406.219471][ T47] dvb-usb: error while querying for an remote control event. [ 406.233398][ T5896] usb 7-1: USB disconnect, device number 11 [ 407.641906][ T5896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 409.350561][ T9171] kAFS: No cell specified [ 410.095095][ T9191] loop8: detected capacity change from 0 to 1024 [ 410.348748][ T9199] orangefs: client-core tried to read wrong size [ 412.423005][ T5896] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 412.499559][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.896'. [ 412.952967][ T5896] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 412.961645][ T5896] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 413.447075][ T5896] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 413.589219][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 413.662578][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 413.752837][ T5896] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 413.762237][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 413.808754][ T5896] usb 7-1: Product: syz [ 413.862941][ T5896] usb 7-1: Manufacturer: syz [ 413.884354][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 413.889782][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 413.912973][ T5896] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 413.918974][ T5896] cdc_wdm 7-1:1.0: Unknown control protocol [ 414.218348][ T9243] netlink: 'syz.4.899': attribute type 39 has an invalid length. [ 414.916974][ T5896] usb 7-1: USB disconnect, device number 12 [ 414.975171][ T9257] loop7: detected capacity change from 0 to 1024 [ 416.239047][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.269955][ T9265] bond0: (slave rose0): Enslaving as an active interface with an up link [ 416.422030][ T9280] ======================================================= [ 416.422030][ T9280] WARNING: The mand mount option has been deprecated and [ 416.422030][ T9280] and is ignored by this kernel. Remove the mand [ 416.422030][ T9280] option from the mount to silence this warning. [ 416.422030][ T9280] ======================================================= [ 416.482870][ T9280] 9pnet_virtio: no channels available for device syz [ 419.922870][ T9317] nvme_fabrics: missing parameter 'transport=%s' [ 419.970129][ T9326] loop8: detected capacity change from 0 to 1024 [ 420.072793][ T9317] nvme_fabrics: missing parameter 'nqn=%s' [ 421.577729][ T9353] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 423.136036][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 425.056318][ T9395] loop0: detected capacity change from 0 to 1024 [ 425.840256][ T9405] nvme_fabrics: missing parameter 'transport=%s' [ 426.101005][ T9405] nvme_fabrics: missing parameter 'nqn=%s' [ 426.211419][ T9412] netlink: 48 bytes leftover after parsing attributes in process `syz.0.939'. [ 430.003909][ T9431] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 430.332610][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 430.552566][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 430.617380][ T47] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 430.632996][ T47] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 430.642169][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.727285][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 430.758315][ T9471] loop7: detected capacity change from 0 to 1024 [ 430.768330][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 430.816639][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.916596][ T47] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 431.178323][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.187328][ T47] usb 5-1: Product: syz [ 431.191520][ T47] usb 5-1: Manufacturer: syz [ 431.197120][ T47] usb 5-1: SerialNumber: syz [ 431.205153][ T47] usb 5-1: config 0 descriptor?? [ 431.309575][ T9474] netlink: 48 bytes leftover after parsing attributes in process `syz.7.957'. [ 432.232827][ T47] usb 5-1: can't set config #0, error -71 [ 432.340754][ T47] usb 5-1: USB disconnect, device number 7 [ 432.369260][ T9482] netlink: 256 bytes leftover after parsing attributes in process `syz.5.959'. [ 433.546056][ T9515] loop5: detected capacity change from 0 to 1024 [ 433.902575][ T47] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 434.321036][ T9527] netlink: 48 bytes leftover after parsing attributes in process `syz.5.972'. [ 434.795024][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 434.853826][ T47] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 434.932577][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.967057][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.964'. [ 435.022915][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.077115][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.128121][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.200649][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.252791][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.527957][ T47] usb 5-1: GET_CAPABILITIES returned 0 [ 435.561350][ T47] usbtmc 5-1:16.0: can't read capabilities [ 435.794327][ T47] usb 5-1: USB disconnect, device number 8 [ 436.083215][ T9548] netlink: 256 bytes leftover after parsing attributes in process `syz.7.980'. [ 437.112709][ T47] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 437.304870][ T47] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 437.324097][ T47] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 437.346334][ T47] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.373608][ T47] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 437.392027][ T47] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 437.407084][ T47] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 437.420717][ T47] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 437.525199][ T47] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.552745][ T47] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 437.643672][ T47] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 437.697947][ T47] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 437.764414][ T47] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 437.801396][ T47] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.822953][ T47] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 437.834592][ T47] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 437.850238][ T47] usb 6-1: string descriptor 0 read error: -22 [ 437.893323][ T47] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 437.984572][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.028497][ T47] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 438.374628][ T10] usb 6-1: USB disconnect, device number 7 [ 438.540928][ T9586] MTD: Couldn't look up '': -22 [ 439.330574][ T9589] loop0: detected capacity change from 0 to 1024 [ 439.867082][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.989'. [ 440.911204][ T5898] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 441.396593][ T5898] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 441.433923][ T5898] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 441.477874][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 441.562698][ T5898] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 441.562758][ T5898] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 441.571543][ T5898] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 441.571591][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 441.571628][ T5898] usb 6-1: Product: syz [ 441.571656][ T5898] usb 6-1: Manufacturer: syz [ 441.579252][ T5898] cdc_wdm 6-1:1.0: skipping garbage [ 441.579281][ T5898] cdc_wdm 6-1:1.0: skipping garbage [ 441.581497][ T5898] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 441.581526][ T5898] cdc_wdm 6-1:1.0: Unknown control protocol [ 441.962610][ T47] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 442.122506][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 442.171533][ T47] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 442.191469][ T47] usb 5-1: config 0 has no interface number 0 [ 442.279090][ T47] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.291827][ T5937] usb 6-1: USB disconnect, device number 8 [ 442.361366][ T47] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 442.404592][ T47] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 442.457960][ T47] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 442.522790][ T47] usb 5-1: Product: syz [ 442.527008][ T47] usb 5-1: SerialNumber: syz [ 442.806238][ T47] usb 5-1: config 0 descriptor?? [ 443.127719][ T9644] MTD: Couldn't look up '': -22 [ 443.564067][ T47] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 443.596578][ T47] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 443.903679][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 444.185685][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 444.193547][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 444.200706][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 444.207841][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 444.215019][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 444.222165][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 444.229482][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 444.236527][ T5937] usb 5-1: USB disconnect, device number 9 [ 444.242358][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 444.242385][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 444.372089][ T5937] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 445.144209][ T9669] loop0: detected capacity change from 0 to 1024 [ 445.562410][ T9678] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1014'. [ 445.655454][ T9680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1009'. [ 446.380098][ T9683] Bluetooth: MGMT ver 1.23 [ 449.019516][ T9725] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1029'. [ 449.519431][ T9738] loop8: detected capacity change from 0 to 1024 [ 449.693623][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.700002][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.742055][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1032'. [ 453.084326][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1046'. [ 453.652789][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 454.155425][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.216265][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 454.276735][ T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 454.327262][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.396529][ T10] usb 6-1: config 0 descriptor?? [ 454.540195][ T9809] loop4: detected capacity change from 0 to 512 [ 454.639107][ T9809] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 454.701805][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 454.722524][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 454.801832][ T9814] MTD: Couldn't look up '': -22 [ 455.340286][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 455.413676][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 455.479400][ T10] usb 6-1: media controller created [ 455.531580][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.642750][ T9809] EXT4-fs (loop4): 1 truncate cleaned up [ 455.699381][ T9809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.906598][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 455.940093][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 455.985644][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 456.763951][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 456.771682][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 456.896683][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.904426][ T10] usb 6-1: USB disconnect, device number 9 [ 457.503290][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 459.014818][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1062'. [ 459.067938][ T9853] random: crng reseeded on system resumption [ 459.567610][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1067'. [ 459.629531][ T9865] openvswitch: netlink: Flow actions attr not present in new flow. [ 459.768654][ T30] audit: type=1800 audit(1744954544.241:2): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1068" name="bus" dev="overlay" ino=1052 res=0 errno=0 [ 460.127330][ T9877] loop5: detected capacity change from 0 to 512 [ 460.236689][ T9877] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 460.250492][ T9878] MTD: Couldn't look up '': -22 [ 460.367799][ T9877] EXT4-fs (loop5): 1 truncate cleaned up [ 460.383527][ T9877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.900171][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.215844][ T9902] loop5: detected capacity change from 0 to 32768 [ 463.284545][ T9902] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 463.299444][ T9902] (syz.5.1076,9902,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 463.316594][ T9902] ocfs2: Unmounting device (7,5) on (node local) [ 463.603421][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 464.136908][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 464.193770][ T9931] openvswitch: netlink: Flow actions attr not present in new flow. [ 464.453199][ T9929] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 464.706056][ T9942] loop4: detected capacity change from 0 to 512 [ 464.805789][ T9942] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 465.858221][ T9942] EXT4-fs (loop4): 1 truncate cleaned up [ 465.869942][ T9942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.502098][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.101437][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 468.598561][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1090'. [ 470.843797][T10028] MTD: Couldn't look up '': -22 [ 471.153249][T10014] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 471.173465][T10034] loop7: detected capacity change from 0 to 512 [ 471.281026][T10034] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 471.432791][T10034] EXT4-fs (loop7): 1 truncate cleaned up [ 471.501096][T10034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.824571][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 472.928341][ T7679] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.554818][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 473.649240][T10071] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 473.655930][T10071] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.738014][T10071] vhci_hcd vhci_hcd.0: Device attached [ 473.792410][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.844902][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 473.888506][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.941033][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.972606][ T3388] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 474.002585][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 474.020511][T10074] vhci_hcd: connection closed [ 474.023452][ T6593] vhci_hcd: stop threads [ 474.068461][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.072619][ T6593] vhci_hcd: release socket [ 474.088661][ T6593] vhci_hcd: disconnect device [ 474.175442][ T10] usb 7-1: config 0 descriptor?? [ 474.245170][T10064] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 474.612619][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 474.748140][ T10] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 474.860628][ T10] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 474.954337][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 474.980503][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 475.027151][ T9] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 475.050535][ T9] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 475.092756][ T9] usb 9-1: Product: syz [ 475.097043][ T9] usb 9-1: Manufacturer: syz [ 475.101728][ T9] usb 9-1: SerialNumber: syz [ 475.106734][ T10] usb 7-1: USB disconnect, device number 13 [ 475.191236][ T9] usb 9-1: config 0 descriptor?? [ 475.591645][ T10] usb 9-1: USB disconnect, device number 4 [ 475.645091][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 477.134211][T10105] loop0: detected capacity change from 0 to 1024 [ 477.541302][T10122] loop4: detected capacity change from 0 to 512 [ 477.566430][T10107] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 477.632597][T10122] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 477.743066][T10122] EXT4-fs (loop4): 1 truncate cleaned up [ 477.764675][T10122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.953039][T10128] fuse: Bad value for 'fd' [ 478.992130][T10131] hfsplus: xattr searching failed [ 478.998396][T10130] hfsplus: xattr searching failed [ 479.296564][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1130'. [ 479.393403][ T3388] vhci_hcd: vhci_device speed not set [ 479.468060][ T53] hfsplus: b-tree write err: -5, ino 4 [ 479.487649][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.298944][T10155] MTD: Couldn't look up '': -22 [ 483.614443][T10161] loop0: detected capacity change from 0 to 32768 [ 483.693983][T10161] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 483.708779][T10161] (syz.0.1132,10161,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 72 [ 483.788666][T10188] fuse: Bad value for 'fd' [ 483.819705][T10161] ocfs2: Unmounting device (7,0) on (node local) [ 484.119697][T10196] loop7: detected capacity change from 0 to 512 [ 484.151023][T10193] loop6: detected capacity change from 0 to 1024 [ 484.181122][T10196] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 484.322644][T10196] EXT4-fs (loop7): 1 truncate cleaned up [ 484.330481][T10196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.519994][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 485.388331][T10206] hfsplus: xattr searching failed [ 485.393561][T10208] hfsplus: xattr searching failed [ 485.730161][T10199] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 485.842271][ T53] hfsplus: b-tree write err: -5, ino 4 [ 485.888509][ T7679] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.473225][ T5822] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 486.824294][ T5822] usb 8-1: Using ep0 maxpacket: 8 [ 486.950001][ T5822] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 487.002587][ T5822] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.082587][ T5822] usb 8-1: config 0 has no interface number 0 [ 487.144333][ T5822] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 487.174488][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.222604][ T5822] usb 8-1: Product: syz [ 487.231209][ T5822] usb 8-1: Manufacturer: syz [ 487.262990][ T5822] usb 8-1: SerialNumber: syz [ 487.300553][ T5822] usb 8-1: config 0 descriptor?? [ 487.331712][ T5822] usb 8-1: Found UVC 0.04 device syz (046d:08c3) [ 487.373041][ T5822] usb 8-1: No valid video chain found. [ 487.504979][T10244] loop0: detected capacity change from 0 to 1024 [ 487.537006][ T5822] usb 8-1: USB disconnect, device number 3 [ 487.556478][T10246] loop8: detected capacity change from 0 to 1024 [ 487.588928][T10244] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 487.654651][T10246] hfsplus: request for non-existent node 3 in B*Tree [ 487.692503][T10246] hfsplus: request for non-existent node 3 in B*Tree [ 487.716231][T10250] input: syz1 as /devices/virtual/input/input10 [ 487.840629][T10246] hfsplus: request for non-existent node 4 in B*Tree [ 487.883254][T10246] hfsplus: request for non-existent node 4 in B*Tree [ 488.222606][ T5896] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 488.395264][ T5896] usb 5-1: device descriptor read/64, error -71 [ 488.474611][T10267] loop0: detected capacity change from 0 to 512 [ 488.573786][T10267] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 488.653636][ T5896] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 488.711762][T10267] EXT4-fs (loop0): 1 truncate cleaned up [ 488.798516][T10267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.833735][ T5896] usb 5-1: device descriptor read/64, error -71 [ 488.939963][T10281] loop7: detected capacity change from 0 to 2048 [ 489.249468][ T5896] usb usb5-port1: attempt power cycle [ 489.755593][ T5896] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 489.858709][ T5896] usb 5-1: device descriptor read/8, error -71 [ 490.179589][ T5896] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 490.292268][ T5896] usb 5-1: device descriptor read/8, error -71 [ 490.606017][ T5896] usb usb5-port1: unable to enumerate USB device [ 490.651663][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.780232][T10296] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 491.563144][T10352] netlink: 'syz.5.1174': attribute type 4 has an invalid length. [ 491.614989][T10357] netlink: 'syz.5.1174': attribute type 4 has an invalid length. [ 492.135472][T10372] loop8: detected capacity change from 0 to 1024 [ 492.458333][T10378] loop4: detected capacity change from 0 to 512 [ 492.480977][T10376] loop6: detected capacity change from 0 to 2048 [ 492.509851][T10378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 492.622695][T10378] EXT4-fs (loop4): 1 truncate cleaned up [ 492.704595][T10378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.753360][T10376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.898307][T10389] loop8: detected capacity change from 0 to 16 [ 492.976733][T10389] erofs (device loop8): mounted with root inode @ nid 36. [ 493.962355][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.973664][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 494.033233][T10395] erofs (device loop8): read error -117 @ 0 of nid 36 [ 494.040112][T10395] erofs (device loop8): failed to readdir of logical block 0 of nid 36 [ 494.212629][ T9] usb 6-1: device descriptor read/64, error -71 [ 494.229244][T10390] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 494.452684][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 494.617334][ T9] usb 6-1: device descriptor read/64, error -71 [ 494.754300][ T9] usb usb6-port1: attempt power cycle [ 494.770712][T10410] loop4: detected capacity change from 0 to 2048 [ 494.817994][T10410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.135702][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 495.193495][ T9] usb 6-1: device descriptor read/8, error -71 [ 495.485507][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 495.521293][T10430] loop0: detected capacity change from 0 to 1024 [ 495.534606][ T9] usb 6-1: device descriptor read/8, error -71 [ 495.680234][ T9] usb usb6-port1: unable to enumerate USB device [ 496.313875][T10442] Can't find ip_set type hash:net,por [ 496.506308][T10449] loop6: detected capacity change from 0 to 128 [ 496.642137][T10449] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 496.775856][T10449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.999181][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1201'. [ 497.329018][T10455] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 497.409757][T10461] loop0: detected capacity change from 0 to 16 [ 497.468700][T10461] erofs (device loop0): mounted with root inode @ nid 36. [ 498.586644][T10471] erofs (device loop0): read error -117 @ 0 of nid 36 [ 498.593574][T10471] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 499.073454][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 499.268418][ T10] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 499.320392][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 499.379569][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 64 [ 499.440625][ T10] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 499.495159][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.529953][T10499] loop0: detected capacity change from 0 to 1024 [ 499.531733][ T10] usb 5-1: Product: syz [ 499.576069][ T10] usb 5-1: Manufacturer: syz [ 499.596320][ T10] usb 5-1: SerialNumber: syz [ 499.643160][ T10] usb 5-1: config 0 descriptor?? [ 499.678203][T10486] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 499.728155][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 500.017351][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 501.162517][T10509] Can't find ip_set type hash:net,por [ 502.035025][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 502.435187][ T10] usb 5-1: USB disconnect, device number 14 [ 502.441191][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 502.708714][T10522] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 502.976284][T10544] loop0: detected capacity change from 0 to 16 [ 503.037200][T10544] erofs (device loop0): mounted with root inode @ nid 36. [ 503.498195][T10553] erofs (device loop0): read error -117 @ 0 of nid 36 [ 503.551125][T10553] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 507.476968][ T30] audit: type=1326 audit(1744954591.981:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10605 comm="syz.0.1246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bfdb8e169 code=0x0 [ 509.089898][T10627] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 509.096580][T10627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 509.165669][T10627] vhci_hcd vhci_hcd.0: Device attached [ 509.308012][T10636] loop8: detected capacity change from 0 to 1024 [ 509.398923][T10630] loop5: detected capacity change from 0 to 8192 [ 509.405638][ T5897] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 509.485210][T10631] vhci_hcd: connection reset by peer [ 509.521744][ T53] vhci_hcd: stop threads [ 509.543311][T10642] loop0: detected capacity change from 0 to 16 [ 509.549753][ T53] vhci_hcd: release socket [ 509.575769][ T53] vhci_hcd: disconnect device [ 509.680070][T10642] erofs (device loop0): mounted with root inode @ nid 36. [ 510.120858][ T6105] hfsplus: b-tree write err: -5, ino 8 [ 510.149707][T10647] erofs (device loop0): read error -117 @ 0 of nid 36 [ 510.196834][T10647] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 510.226588][T10650] sit0: entered promiscuous mode [ 510.282298][T10650] netlink: 'syz.4.1256': attribute type 1 has an invalid length. [ 510.354171][T10650] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1256'. [ 511.117222][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.124603][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.308677][T10671] loop5: detected capacity change from 0 to 256 [ 511.363606][T10671] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 511.404917][T10671] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 511.440941][T10671] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 511.482736][T10671] UDF-fs: Scanning with blocksize 512 failed [ 511.508052][T10671] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 511.586634][T10671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 513.241678][T10697] loop0: detected capacity change from 0 to 1024 [ 513.682565][ T5822] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 513.988585][T10709] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 513.995121][T10709] hfsplus: xattr searching failed [ 514.001261][T10710] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 514.007716][T10710] hfsplus: xattr searching failed [ 514.459105][ T53] hfsplus: b-tree write err: -5, ino 4 [ 514.499261][T10717] loop7: detected capacity change from 0 to 16 [ 514.527549][T10717] erofs (device loop7): mounted with root inode @ nid 36. [ 514.562846][ T5822] usb 6-1: device descriptor read/64, error -71 [ 514.569871][ T5897] vhci_hcd: vhci_device speed not set [ 515.013783][ T5822] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 515.021611][T10730] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 515.028244][T10730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 515.040831][T10730] vhci_hcd vhci_hcd.0: Device attached [ 515.172908][ T5822] usb 6-1: device descriptor read/64, error -71 [ 515.313072][ T5822] usb usb6-port1: attempt power cycle [ 515.363006][ T5897] usb 45-1: device descriptor read/64, error -110 [ 515.503216][T10731] vhci_hcd: connection closed [ 515.511875][ T1077] vhci_hcd: stop threads [ 515.543433][ T1077] vhci_hcd: release socket [ 515.568871][ T1077] vhci_hcd: disconnect device [ 515.696064][ T5822] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 515.755522][ T5822] usb 6-1: device descriptor read/8, error -71 [ 516.012649][ T5822] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 516.087890][ T5822] usb 6-1: device descriptor read/8, error -71 [ 516.223362][ T5822] usb usb6-port1: unable to enumerate USB device [ 516.233596][T10751] loop4: detected capacity change from 0 to 512 [ 516.267163][T10751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 516.394159][T10751] EXT4-fs (loop4): 1 truncate cleaned up [ 516.401950][T10751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.778386][T10759] MTD: Couldn't look up '': -22 [ 517.159621][T10777] loop7: detected capacity change from 0 to 512 [ 517.195594][T10777] EXT4-fs: Ignoring removed orlov option [ 517.248681][T10777] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 517.631589][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.054728][T10797] loop4: detected capacity change from 0 to 1024 [ 518.112817][T10797] EXT4-fs (loop4): Test dummy encryption mode enabled [ 518.123068][T10797] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 518.237347][T10801] loop0: detected capacity change from 0 to 16 [ 518.291730][T10801] erofs (device loop0): mounted with root inode @ nid 36. [ 519.430823][ T30] audit: type=1326 audit(1744954603.291:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.6.1298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3822b8e169 code=0x0 [ 519.612342][ T5898] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 519.772499][ T5898] usb 8-1: Using ep0 maxpacket: 8 [ 519.778352][ T5898] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 519.778430][ T5898] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 519.778473][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.240549][T10820] MTD: Couldn't look up '': -22 [ 521.211055][T10834] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 521.211121][T10834] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 521.211219][T10834] vhci_hcd vhci_hcd.0: Device attached [ 521.465647][ T5896] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 521.868115][T10835] vhci_hcd: connection reset by peer [ 521.871463][ T12] vhci_hcd: stop threads [ 521.871487][ T12] vhci_hcd: release socket [ 521.871594][ T12] vhci_hcd: disconnect device [ 521.910698][T10842] loop8: detected capacity change from 0 to 512 [ 521.911669][T10842] EXT4-fs: Ignoring removed nobh option [ 521.933644][T10845] 9pnet_fd: Insufficient options for proto=fd [ 521.947719][T10842] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #11: comm syz.8.1306: invalid indirect mapped block 256 (level 2) [ 521.956203][T10842] EXT4-fs (loop8): 2 truncates cleaned up [ 521.958831][T10842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.995760][ T10] usb 8-1: USB disconnect, device number 4 [ 522.024883][T10842] EXT4-fs (loop8): shut down requested (1) [ 522.207988][T10852] loop4: detected capacity change from 0 to 1024 [ 522.320476][T10852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.320636][T10852] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.611544][ T7824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.665797][T10852] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.1308: bg 0: block 393: padding at end of block bitmap is not set [ 523.279853][T10844] tty tty32: ldisc open failed (-12), clearing slot 31 [ 523.343026][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.139369][T10868] loop6: detected capacity change from 0 to 16 [ 524.152343][T10873] loop0: detected capacity change from 0 to 128 [ 524.237277][T10873] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 524.237415][T10868] erofs (device loop6): mounted with root inode @ nid 36. [ 524.297662][T10873] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.677100][T10883] MTD: Couldn't look up '': -22 [ 525.326705][T10885] capability: warning: `syz.8.1317' uses deprecated v2 capabilities in a way that may be insecure [ 526.085636][ T5834] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 526.103102][ T5897] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 526.194821][T10903] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 526.362493][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 526.384699][ T5897] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 526.423144][ T5897] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.492947][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.863551][ T5896] vhci_hcd: vhci_device speed not set [ 528.691706][T10927] MTD: Couldn't look up '': -22 [ 529.021394][ T5898] usb 5-1: USB disconnect, device number 15 [ 529.867223][ T5897] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 529.988017][T10956] loop4: detected capacity change from 0 to 256 [ 530.072788][ T5897] usb 9-1: device descriptor read/64, error -71 [ 530.089350][T10956] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 530.161219][T10956] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 530.225471][T10961] loop7: detected capacity change from 0 to 16 [ 530.252362][T10961] erofs (device loop7): mounted with root inode @ nid 36. [ 530.267820][T10956] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 530.372987][ T5897] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 530.738422][ T5897] usb 9-1: device descriptor read/64, error -71 [ 530.892705][ T5897] usb usb9-port1: attempt power cycle [ 530.937214][T10972] [ 530.939607][T10972] ====================================================== [ 530.946643][T10972] WARNING: possible circular locking dependency detected [ 530.953683][T10972] 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 Not tainted [ 530.960815][T10972] ------------------------------------------------------ [ 530.967845][T10972] syz.0.1340/10972 is trying to acquire lock: [ 530.973920][T10972] ffffffff90381d78 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x1a/0x290 [ 530.983385][T10972] [ 530.983385][T10972] but task is already holding lock: [ 530.990757][T10972] ffff888029a94a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x60b/0x2c00 [ 531.000137][T10972] [ 531.000137][T10972] which lock already depends on the new lock. [ 531.000137][T10972] [ 531.010564][T10972] [ 531.010564][T10972] the existing dependency chain (in reverse order) is: [ 531.019609][T10972] [ 531.019609][T10972] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 531.027647][T10972] _raw_spin_lock_bh+0x33/0x40 [ 531.032974][T10972] nr_rt_device_down+0x18e/0x810 [ 531.038459][T10972] nr_device_event+0x126/0x170 [ 531.043781][T10972] notifier_call_chain+0xbc/0x410 [ 531.049366][T10972] call_netdevice_notifiers_info+0xbe/0x140 [ 531.055825][T10972] dev_close_many+0x319/0x630 [ 531.061043][T10972] netif_close+0x17f/0x230 [ 531.066001][T10972] dev_close+0xaa/0x240 [ 531.070718][T10972] bpq_device_event+0x601/0x840 [ 531.076125][T10972] notifier_call_chain+0xbc/0x410 [ 531.081707][T10972] call_netdevice_notifiers_info+0xbe/0x140 [ 531.088170][T10972] dev_close_many+0x319/0x630 [ 531.093389][T10972] netif_close+0x17f/0x230 [ 531.098344][T10972] dev_close+0xaa/0x240 [ 531.103070][T10972] bond_enslave+0x1f67/0x6050 [ 531.108294][T10972] bond_do_ioctl+0x601/0x6c0 [ 531.113434][T10972] dev_ifsioc+0xe9c/0x1f70 [ 531.118399][T10972] dev_ioctl+0x223/0x10e0 [ 531.123279][T10972] sock_do_ioctl+0x19d/0x280 [ 531.128428][T10972] sock_ioctl+0x227/0x6b0 [ 531.133296][T10972] __x64_sys_ioctl+0x193/0x200 [ 531.138606][T10972] do_syscall_64+0xcd/0x260 [ 531.143666][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.150185][T10972] [ 531.150185][T10972] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 531.158051][T10972] _raw_spin_lock_bh+0x33/0x40 [ 531.163369][T10972] nr_rt_device_down+0xd3/0x810 [ 531.168762][T10972] nr_device_event+0x126/0x170 [ 531.174102][T10972] notifier_call_chain+0xbc/0x410 [ 531.179694][T10972] call_netdevice_notifiers_info+0xbe/0x140 [ 531.186220][T10972] __dev_notify_flags+0x1f7/0x2e0 [ 531.191797][T10972] netif_change_flags+0x108/0x160 [ 531.197377][T10972] dev_change_flags+0xba/0x250 [ 531.202704][T10972] dev_ifsioc+0x1498/0x1f70 [ 531.207756][T10972] dev_ioctl+0x223/0x10e0 [ 531.212631][T10972] sock_do_ioctl+0x19d/0x280 [ 531.217785][T10972] sock_ioctl+0x227/0x6b0 [ 531.222658][T10972] __x64_sys_ioctl+0x193/0x200 [ 531.227980][T10972] do_syscall_64+0xcd/0x260 [ 531.233054][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.239491][T10972] [ 531.239491][T10972] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 531.247443][T10972] __lock_acquire+0x1173/0x1ba0 [ 531.252838][T10972] lock_acquire+0x179/0x350 [ 531.257884][T10972] _raw_spin_lock_bh+0x33/0x40 [ 531.263196][T10972] nr_remove_neigh+0x1a/0x290 [ 531.268425][T10972] nr_add_node+0x2408/0x2c00 [ 531.273566][T10972] nr_rt_ioctl+0x11b7/0x29b0 [ 531.278700][T10972] nr_ioctl+0x19a/0x2e0 [ 531.283414][T10972] sock_do_ioctl+0x118/0x280 [ 531.288567][T10972] sock_ioctl+0x227/0x6b0 [ 531.293440][T10972] __x64_sys_ioctl+0x193/0x200 [ 531.298767][T10972] do_syscall_64+0xcd/0x260 [ 531.303847][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.310290][T10972] [ 531.310290][T10972] other info that might help us debug this: [ 531.310290][T10972] [ 531.320560][T10972] Chain exists of: [ 531.320560][T10972] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 531.320560][T10972] [ 531.334452][T10972] Possible unsafe locking scenario: [ 531.334452][T10972] [ 531.341904][T10972] CPU0 CPU1 [ 531.347267][T10972] ---- ---- [ 531.352631][T10972] lock(&nr_node->node_lock); [ 531.357411][T10972] lock(nr_node_list_lock); [ 531.364537][T10972] lock(&nr_node->node_lock); [ 531.371837][T10972] lock(nr_neigh_list_lock); [ 531.376531][T10972] [ 531.376531][T10972] *** DEADLOCK *** [ 531.376531][T10972] [ 531.384675][T10972] 1 lock held by syz.0.1340/10972: [ 531.389788][T10972] #0: ffff888029a94a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x60b/0x2c00 [ 531.399616][T10972] [ 531.399616][T10972] stack backtrace: [ 531.405601][T10972] CPU: 1 UID: 0 PID: 10972 Comm: syz.0.1340 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 531.405646][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.405667][T10972] Call Trace: [ 531.405677][T10972] [ 531.405690][T10972] dump_stack_lvl+0x116/0x1f0 [ 531.405746][T10972] print_circular_bug+0x275/0x350 [ 531.405805][T10972] check_noncircular+0x14c/0x170 [ 531.405867][T10972] __lock_acquire+0x1173/0x1ba0 [ 531.405907][T10972] lock_acquire+0x179/0x350 [ 531.405938][T10972] ? nr_remove_neigh+0x1a/0x290 [ 531.405974][T10972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.406017][T10972] ? do_raw_spin_lock+0x12c/0x2b0 [ 531.406064][T10972] _raw_spin_lock_bh+0x33/0x40 [ 531.406108][T10972] ? nr_remove_neigh+0x1a/0x290 [ 531.406141][T10972] nr_remove_neigh+0x1a/0x290 [ 531.406177][T10972] nr_add_node+0x2408/0x2c00 [ 531.406221][T10972] nr_rt_ioctl+0x11b7/0x29b0 [ 531.406264][T10972] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 531.406304][T10972] ? srso_alias_return_thunk+0xbdf8/0xfbef5 [ 531.406348][T10972] ? __pfx_aa_get_newest_label+0x10/0x10 [ 531.406394][T10972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.406436][T10972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.406478][T10972] ? security_capable+0x7e/0x260 [ 531.406513][T10972] nr_ioctl+0x19a/0x2e0 [ 531.406564][T10972] sock_do_ioctl+0x118/0x280 [ 531.406622][T10972] ? __pfx_sock_do_ioctl+0x10/0x10 [ 531.406679][T10972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.406730][T10972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.406774][T10972] sock_ioctl+0x227/0x6b0 [ 531.406808][T10972] ? __pfx_sock_ioctl+0x10/0x10 [ 531.406839][T10972] ? hook_file_ioctl_common+0x145/0x410 [ 531.406883][T10972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.406924][T10972] ? __fget_files+0x20e/0x3c0 [ 531.406975][T10972] ? __entry_text_end+0x1020c5/0x1020c9 [ 531.407020][T10972] ? __pfx_sock_ioctl+0x10/0x10 [ 531.407058][T10972] __x64_sys_ioctl+0x193/0x200 [ 531.407103][T10972] do_syscall_64+0xcd/0x260 [ 531.407159][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.407193][T10972] RIP: 0033:0x7f2bfdb8e169 [ 531.407219][T10972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.407253][T10972] RSP: 002b:00007f2bfe993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.407284][T10972] RAX: ffffffffffffffda RBX: 00007f2bfddb5fa0 RCX: 00007f2bfdb8e169 [ 531.407307][T10972] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000004 [ 531.407329][T10972] RBP: 00007f2bfdc10a68 R08: 0000000000000000 R09: 0000000000000000 [ 531.407350][T10972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.407371][T10972] R13: 0000000000000000 R14: 00007f2bfddb5fa0 R15: 00007ffd5e12f958 [ 531.407405][T10972] [ 531.791715][T10972] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 531.962514][ T5897] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 531.983212][ T5897] usb 9-1: device descriptor read/8, error -71 [ 532.222568][ T5897] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 532.242986][ T5897] usb 9-1: device descriptor read/8, error -71 [ 532.353244][ T5897] usb usb9-port1: unable to enumerate USB device