last executing test programs: 4m54.151766975s ago: executing program 1 (id=1820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) 4m53.498973332s ago: executing program 1 (id=1824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4m52.591313873s ago: executing program 1 (id=1829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 4m51.77734138s ago: executing program 1 (id=1833): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x2001004c, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8, @ANYRESHEX, @ANYRES64], 0xfe, 0x1522, &(0x7f0000003800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040004, 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') mount(0x0, 0x0, 0x0, 0x40000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 4m50.71789968s ago: executing program 1 (id=1836): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) 4m50.128689089s ago: executing program 1 (id=1838): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfb", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4m47.998999296s ago: executing program 32 (id=1838): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfb", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4m40.087379857s ago: executing program 0 (id=1863): keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=')\x80', 0x0) 4m38.983250728s ago: executing program 0 (id=1867): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) 4m37.372238152s ago: executing program 0 (id=1870): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) 4m36.483474508s ago: executing program 0 (id=1873): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) close(0x3) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./bus\x00', 0x210082, &(0x7f0000000040)=ANY=[], 0x0, 0x2c4, &(0x7f0000001800)="$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") select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000280)='io\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) 4m35.284578262s ago: executing program 0 (id=1877): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000000000000300000002"], 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) 4m34.834437172s ago: executing program 0 (id=1880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) 4m32.115748589s ago: executing program 33 (id=1880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) 3m46.412539031s ago: executing program 5 (id=2007): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000180)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@noblock_validity}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m45.135128374s ago: executing program 5 (id=2014): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$PTP_ENABLE_PPS(r7, 0x40043d04, 0x0) ioctl$PTP_ENABLE_PPS(r7, 0x40043d04, 0x1) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000ac0), 0x0, 0x10162, 0x0) 3m39.94460675s ago: executing program 5 (id=2036): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x2, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x1, 0x9, 0x7ff}, [{0x2, 0x5dbf, 0x2, 0x6, 0x8000, 0x5, 0x400, 0xb}], "", ['\x00']}, 0x158) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$eJzs3c1rXNfdB/DvHcmyxgZHeWI7fkogIoa0VNTWC0qrbuqWUlQIJaSLroUtY+Gxk0pKUUJp1De67SJ/QLrQrqtCN4WCIV23u2y1DBS6yUpdTbl37oxGtjwdxZJGTj8fc+ecM+fec3/nN/dlZoyYAP+zlmcy/ihFlmfe3CrbuzsLrd2dhQfdepLzSRrJeKdI8TApPklupbPk/8sn6+GKp+3no7Wltz/9fPezTmu8Xqr1G4O2G852vWQ6yVhdHtd4t595vKI3wzJh17uJg1E7l6R9wE+v7vcMduGZz1vgLCg6982edn1mT1WneSbr9wGdu2Lnnv1c2x51AAAAAHAKXtjLXrZyadRxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPOk/v3/6lf/J3tPpZhO0f39/4luf5KLIwx1sInhVnvUOOlAAAAAAAAAAODkvbqXvWzlUrfdLtJI8lrVuFw9Xsx72chq1nMjW1nJZjaznrkkU30DTWytbG6uzw2x5fyhW84PGXDz2ecMAAAAAAAAAF9Cv8ry/v//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAWVAkY52iWi5361NpjCeZTDJRrred/KNbf549GnUAAAAAcApe2MtetnKp224X1Wf+q9Xn/sm8l4fZzFo208pq7lTfBXQ+9Td2dxZauzsLD8rlyXG/+68jhVGNmM53D4fv+Vq1RjN3s1Y9cyO3805auZNGtWXpWjeew+P6ZRlT8Z3akJHdqcty5r+vy5M3NsQ6U1VGzvUyMlvHVmbjxcGZOPjqbB91T3Np9L75uXwCOb9Ql0Vy8YenlvNh1Jl4NXUm5vuOvquDM5F89c9//Mm91sP79+5uzJydKR3B+Xa73a0/fkws9GXi5S99JvrNVpm40msv5wf5cWYynbeynrX8LCvZzGqm8/2qtlIfz+Xj1OBM3TrQeqt6bD49kon6delcPY4W02vVtpeylh/lndzJat6o/s1nLt/MYhaz1PcKXxnirG8c7ay//rW6Uk7wd4MnesrKvL5Y5/XD5MA1d6rq639mP0spctzXxvGv1JVyH7+uy7Ph8UzM9WXipcHHyx+qy8pG6+H99Xsr7w65v9frsjyPfnum7hLl8fJ/5YtVtQ4eHWXfS4f2zVV9l3t9jSf6rvT6/tuZOlG/h3typPmq7+VD+xaqvmt9fYe93wLgzLvw9QsTzX82/978uPmb5r3mm5PfO/+t869M5Nzfzn17fHbs9cYrxZ/ycX6x//kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD44jbe/+D+Squ1uv5Ypd1uf/iUri9aGctRtvrrX45z793fIzrG6RxvZfIoK7fPRsxHqfy73W4fy4DbAw7aY6u0a2cidSOqjPjCBJy4m5sP3r258f4H31jr3iIXF5dmlxbfWLh5d621Ott5HHGQwInYv+mPOhIAAAAAAAAAAABgWKfx5wSjniMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwfFueyfijFJmbvTFbtnd3Flrl0q3vrzmepJGk+HlSfJLcSmfJVN9wxdP289Ha0tuffr772f5Y4931G4O2G852vWQ6yVhdHtd4t595vKI3wzJh17uJg1H7TwAAAP//UOQPsQ==") r2 = open(0x0, 0x145142, 0x94) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x100000000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) syz_emit_ethernet(0x1a, &(0x7f0000000240)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0xe}}, {@llc={0x4, {@snap={0xaa, 0xaa, "c8", "1a0ef8"}}}}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[], 0x6ec}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 3m38.780920002s ago: executing program 5 (id=2042): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) 3m36.833279365s ago: executing program 5 (id=2050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c2"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 3m35.813470449s ago: executing program 5 (id=2055): open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @rand_addr=0x64010101}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m33.587618442s ago: executing program 34 (id=2055): open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @rand_addr=0x64010101}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.640381232s ago: executing program 3 (id=2874): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffffdff8) 8.416402013s ago: executing program 6 (id=2877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ff0f00000c00000008000300", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x40) 8.057227879s ago: executing program 6 (id=2879): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x4, 0x273, &(0x7f0000000680)="$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") setpgid(r1, r1) setpgid(0x0, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x9000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x8, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000002, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x10000000006], 0x1, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.275378497s ago: executing program 7 (id=2882): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000dc0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in=@private=0xa010102, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x9, 0x7fffffffffffffff, 0x20000, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x2, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@policy_type={0xa}]}, 0xc4}}, 0x2c008010) 7.144699886s ago: executing program 6 (id=2884): syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") open$dir(&(0x7f0000000000)='./file0\x00', 0x8840, 0x4e) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0xd8, 0xa, 0x148, 0xd8, 0x60, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0xffffffff, 'bridge0\x00', 'rose0\x00', {}, {}, 0x6c, 0x0, 0x3fb5801c07a70f69}, 0x0, 0x70, 0xd8, 0x0, {0x200003ae, 0x7f00}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz1\x00', {0x30f6a663}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f8, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wlan1\x00', {0xdf, 0x6, 0x1, 0x9, 0x4, 0x1000, 0x7, 0x5, 0x18, 0x40}, {0xa6}}}, @common=@ah={{0x30}, {[0x8, 0x5]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x2, 0x3, 0x2, 0x2, 0x1], 0x0, 0x5}, {0xffffffffffffffff, [0x1, 0x7, 0x0, 0x6, 0x4, 0x3], 0x2, 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) geteuid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) mount$nfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10002, &(0x7f0000000400)=ANY=[]) setgid(r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) 6.664670406s ago: executing program 7 (id=2887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000180)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x10}]) 6.187233713s ago: executing program 6 (id=2889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ff0f00000c00000008000300", @ANYRES32=r2, @ANYBLOB="2c00508005000200"], 0x54}}, 0x40) 5.831906351s ago: executing program 7 (id=2891): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0xa402, 0x10) write$FUSE_INIT(r0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, 0x0, r1) 5.766704798s ago: executing program 4 (id=2892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) close(r2) 5.559252705s ago: executing program 6 (id=2893): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) 5.208923022s ago: executing program 7 (id=2894): syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0xc56, &(0x7f0000002680)="$eJzs3U9sHNd9B/DfGy21S7mtmdhVnDQONm2Ryorl6l9MxSrcVU2zLSDLQijmFoArkVIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEXQI9O6QHLxocipJ6KFjaDogS0CBCgQMJjZt+KKIhNaFEVK/nxs6Ts7897MezPrGVrQmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvvXrh5Km0xYZD+9AYAOChuDT2pZOnt3r+AwCPrSvb/f8/AAAAAAAAAAAAAABwUKQo4qlIMXdpLU1Un7saFzsDt26Pj4xuXW0wVTUPVeXLX41Tp8+c/cKLw+d6ebEz83PqP2ifitfHrlxovjJ7c25+amFharI5PtO5Njs5teM97Lb+ZserE9C8+catyevXF5qnXzhz1+bbQx/Unzg6dH74uRPP9sqOj4yOjm0UafSXr913Q7q2G+FxOIo4ESme//aPUjsiitj9uWg83Gu/2WDVieNVJ8ZHRquOTHfaM4vlxsu9E1FENPsqtXrnaOtrEbWBh9qH7bUilsrmlw0+XnZvbK493746PdW83J5f7Cx2Zmcup25ry/40o4hzKWI5Ilbr9+5uIIqoRYpvPrmWrua3flTn4fPVwODt21HsYR93oGxncyBiuXgErtkBVo8iXosUP373WFzL95nqXvO5iNfK/G7E22W+HJHKL8bZiPe3+B7xaKpFEX9RXv/za2myuh/07isXv9z8w5nrs31le/eVD/l8uOdOsU/Ph8FN+XAc8HtTI4poV3f8tXT/P+wAAAAAAAAAAAAAAAAA8KANRhGfjBSv/vsfV+OKoxqX/uT54d8f+uX+MePP/IL9lGVfiIilYmdjcg/ngYGX0+WU9nks8UdZI4r4kzz+7+v73RgAAAAAAAAAAAAAAAAAAICPtCJ+GCleeu9YWo7+OcU7MzeaV9pXp7uzwvbm/u3Nmb6+vr7eTN1s5ZzIuZRzOedKztWcUeT69e6OWvnzRM6lnMs5V3Ku5oxDuX7OVs6JnEs5l3Ou5FzNGbVcP2cr50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4aKb7x1bUUKSJaERPRzZX6frcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACjVUxHfiRTNP2jdWVeLiFT923Ws/O1stA6X+fFoDZf5crQu5GxXWWt9fR/az+4MpCJ+ECnqjXfuXPB8/Qe6n+58DeLtr0UM5uVP1bp5qLdx6IP6E0efPD88+plntltOWzXg+MXOzK3bzfGR0dGxvtW1fPSP960bysctHkzXiYiFN996oz09PTV/PwuHq4XyK3Bf1R+5hVTbh57WPzKn9+AtRO1ANGN/+n6Xxn7doNhT5fP//Ujx2+/9R++B333+N+KXup/uPOHjJ3+68dPAS5t3tMPnf21zvfz8L5/pWz3/n+pb91L+aWSgFtFYvDk3cDSisfDmWyc6N9s3pm5MzZw9efKLw8NfPHNy4HBE43pneqpv6YGcLgAAAAAAAAAAAAAAAICHJxXxu5Gi/YO11IyI29V4raHzw8+dePZQHKrGW901bvv1sSsXmq/M3pybn1pYmJpsjs90rs1OTu30cI1quNf4yOiedOYXGtzj9g82Xpmde3O+c+OPFrfcfqRx4erC4nz72tabYzCKiFb/muNVg8dHRqtGT3faM1XVy1sOpv/wBlIR/xkprp1tps/mdXn8/+YR/tX4/95hlzbv6AGO///MkY3xfx/rK1oeM6UifhIpfusvn4nPVu08Evecs1zubyPF8XOfzuXicFmu14buewW6IwPLsv8bKf7xp3eX7Y2HfGqj7KkPdXIfAeX1fzJSfOfPvxW/ntfd/f6Hra//kc072qP3Pzzdt+7IXe8r2HXXydf/RKR4+al34jeqNf//c9//0Xv3xrFu4Y33c+zR9f/VvnVD+bi/+aA6DwAAAAAAAAAA8AgbSEX8XaT43mgtvZjX7eTv/01u3tEe/f2vT/Stm9ztfEU7XNj1SQUAAACAA2IgFfHDSHFj8Z07Y6jvHv/dN/7zdzbGf46kTVurP+f7leq9AQ/yz//6DeXjTuy+2wAAAAAAAAAAAAAAAAAAAHCgpFTEi3k+9YlqPP/ktvOpr0SKV//7+VwuHS3L9eaBH6p+b1yanTlxYXp6thGL7avTU82xufa1qbLu05Fi7W8+nesW1fzqvfnmu3O8b8zFPh8pRv++V7Y7F3tvbvKnN8qeKst+LFL81z/cXTZPTZ3njq7Kni7L/nWk+Mo/b1326EbZM2XZb0WK73+l2St7pCzbez/qJzbKvnBtttiDqwIAAAAAAAAAAAAAAAAAAMBHzUAq4s8ixf/cXL4zlj/P/z/Q97Hy9tf65vvf5HY1z/9QNf//dsv3M/9/9V6Bpe2OCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj6cURbwVKeYuraWVevm5q3GxU8Tt8ZHRrasNpqrmoap8+atx6vSZs194cfhcLy92Zm5tX/9B+2S8PnblQvOV2Ztz81MLC1OTzfGZzrXZyakd72G39Tc7Xp2A5s03bk1ev77QPP3Cmbs23x76oP7E0aHzw8+deLZXdnxkdHSsr0xt4L6Pfo+0zfrDUcRfRYrnv/2j9L16RBG7PxeNh3vtNxusOnG86sT4yGjVkelOe2ax3Hi5dyKKiGZfpVbvHD2Ea7ErrYilsvllg4+X3Ruba8+3r05PNS+35xc7i53Zmcup29qyP80o4lyKWI6I1fq9uxuIIt6IFN98ci39Sz3iUO88fP7S2JdOnt6+HcUe9nEHynY2ByKWi+2v2eF9bN+joh5F/FOk+PG7x+Jf6xG16P6Kz0W8VuZ3I96O7vVO5RfjbMT7W3yPeDTVooj/K6//+bX0br28H/TuKxe/nJYiZvvK9u4rj/zz4WE64M+TRhTx/eqOv5b+zX/XAAAAAAAAAAAAAAAAAAdIEb8WKV5671iqxgffGVPcmbnRvNK+Ot0d1tcb+9cbM72+vr7eTN1s5ZzIuZRzOedKztWcUeT6OVtlNtbXJ/LnpZzLOVdyruaMQ7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mjAMydg8AAAAAAAAAAAAAAAAAAHi8FNU/Kb7x1bW0Xu/OLz0R3VwxH+hj72cBAAD///9X9JQ=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) open$dir(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x2c1) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.150537067s ago: executing program 4 (id=2895): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000400000000000000000010000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 4.929091222s ago: executing program 2 (id=2896): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.696845245s ago: executing program 3 (id=2897): ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000580)={0x0}) ptrace(0x10, 0x0) ptrace$setsig(0x4203, 0x0, 0x7f, &(0x7f00000000c0)={0xf, 0x40, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x248}, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="f2a4c7bccbf48b6b99b1b4496c47e516a2f8c7f2eab681731e23", @ANYBLOB="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", @ANYRESOCT=r0], 0x16, 0x2b4, &(0x7f00000001c0)="$eJzs3c9qM1UUAPAz0zSJukgEVyI4oAtXH1+/J0iRFopZKVmoCy22BUmC0ELBPxi7cuvGV3AjCO58CTe+geBWcGfBwshkZkxC05BUU//9fpue3rnnzrm3U0oXOfPuC+PhSRZnV5/8GO12EmkvenGdRDfSqH0WC3pfBADwb3ad5/FLXtokL4mI9vbKAgC2aOO//99uvSQAYMveePOt1/b7/YPXs6wdh+PPLwfFf/bF1/L6/lm8H6M4jcfRiZuI/A9lfJjn+aSRFbrx8nhyOSgyx+98X62//3PENH8vOtGdDi3mH/UP9rLSXP6kqOPp6v69Iv9JdOK5Jfc/6h88WZIfg2a88tJc/Y+iEz+8Fx/EKE6mRZT5kUZ8updlr+Zf/vrx20V5RX4yuRy0pvNm8p0H/tEAAAAAAAAAAAAAAAAAAAAAAPAf9qjqndOKaf+eYqjqv7NzU3yzG1mtu9ifp8xP6oXm+wPVLwyo+vM8zrIsrybO8hvxfCMaD79jAAAAAAAAAAAAAAAAAAAA+Oe5+PCj4fFodHr+lwR1N4D6Y/33Xac3N/JirJ7cmt0rrcIVK8dOPSeJWFlGsYm1a/4tL93v6J69q+avv1l7na/u3HsrFkd2V53PnwvSKqifruFxsniG9YVW1CPt+iH5bn7BZqx50+Zdl/KNHr/mrZFuDI87Gx9C85lpMFkxJ5IVhT0VP5UHVI0k9S7SKmhOT3Vp+m4VRES6dE57/ee5+E25JdGtAwAAAAAAAAAAAAAAAAAAtmr2od8lF69WpqZ5a2tlAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCDmr3/f4NgUiUvnxMxN9KM84u/eYsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D/weAAD//wHGVCA=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0x897, 0x863, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) 4.359123903s ago: executing program 7 (id=2898): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x10483, 0x25401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xfc}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) 4.257394333s ago: executing program 2 (id=2899): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000300)=ANY=[], 0xfe, 0x1227, &(0x7f00000024c0)="$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") inotify_init1(0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x280c00, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x22) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x41, 0xf}}, @val={0x3e, 0x1, 0x1}, @void}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 3.74032742s ago: executing program 4 (id=2900): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5d95400e3b967fd364703eea58ae59fa97bf826499840257cedec731", @ANYRES16=r5, @ANYBLOB="01022bbd7000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099004a2dec07530000003d000e00680402000400821a010200060000000802110000010000010005000000020000000084150201400802"], 0x68}, 0x1, 0x0, 0x0, 0x20000014}, 0x48000) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.51891992s ago: executing program 7 (id=2901): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) socket(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x100000000, 0x1, 0xb26, 0x7f, 0x8001, 0x5, 0x2, 0x3}, &(0x7f0000000040)={0x9, 0x6, 0x80000003, 0x9, 0x3, 0x0, 0x8, 0x4}, &(0x7f0000000080)={0x5, 0xaf2, 0x5, 0xe44f, 0x3, 0x1, 0x4, 0x3}, &(0x7f0000000180)={r1, r2+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x7]}, 0x8}) chdir(&(0x7f0000000280)='./file0\x00') socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x5412, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) 3.463384545s ago: executing program 3 (id=2902): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r0, 0x5, 0x0, 0x1fffc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}}, 0x0) 2.803956237s ago: executing program 4 (id=2903): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000001040)='n:') 2.467306595s ago: executing program 3 (id=2904): syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="395332c40c43122dd5a1e7c045b43064cebfefb6c6ec6c87f98aaf78aa674ca2c725ad2cef22110c1fff2bb750de1caf53ad6b14a0621c5cccec0bd91ffc9fc9bd26128693da2c0db18a9be8c6c74e84d43b996b505e19fa574d9caa0650f715245ef23a409e67", @ANYRES64, @ANYRESDEC, @ANYBLOB="63fe131addea21fd9621945d51cc"], 0x1, 0x676, &(0x7f0000001800)="$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") open(&(0x7f0000000280)='./file1\x00', 0x1e3042, 0x5) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.039622649s ago: executing program 2 (id=2905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) close(r2) 1.56031002s ago: executing program 4 (id=2906): getdents(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x38, 0x4, "50db0822"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x4, "67deed26"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000100)={0x60, 0x23, 0x2, {0x2, 0x21}}, &(0x7f0000000240)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "2bb3eb12e56e7af42a29d34dc710935f298b7012136e93ebf6aa8baf35e0c3b906c80a5fb34f121cb815a68cc52d6cf996e4279e4d9ccaaa9cccc45b563674483ad1fbd168e29ac3d859343e686a87b8363c53a25406a71df70b05fffb8e5f3c4f36a52ebbd86476b6e042cdaefd42ef8df22d9dbbdad84ed32de15e51b8df0c1d10cb38a674dd5a8960742ab41ee853b51353cc28ba28ac4ae991c388b55861b985def9ecff"}}, &(0x7f0000000340), 0x0}, &(0x7f0000000840)={0x2c, &(0x7f00000005c0)={0x20, 0x24, 0x7d, "389a617c3464064b5e657007cc6bb829c4ad433e652a09a936948dae3da682a3b18d75bbf9058efa019b4e517a4048a2d13c54611182081826af2a54567297a3bb569c4c676d9fe18540b0fc5597d40b40d6f7a49e8b46ce7a981583fe7d255e83a5ab44091efabe305c2d84c9a556bdfcbb18ba5e0cce9103d866d0f2"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xa8}, &(0x7f00000006c0), &(0x7f0000000780)={0x20, 0x3, 0x1, 0xa7}}) syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.307749382s ago: executing program 3 (id=2907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="050200000000000000100f00000008000300", @ANYRES32=r2, @ANYBLOB="4d000e0080000000080211000001ffffffffffff0802110000000000000000000000000064007f5d0100060204022a01022d1a0020190900000000000000c90007001900000008000b0000000400000004000f00080026006c09000008000c006400000008000d00ffffffff0500d5"], 0x90}}, 0x0) 1.149402728s ago: executing program 2 (id=2908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x14, 0x14, 0x2, 0x7, 0x0, 0x0, 0x0, 0x10}, [@FRA_SRC={0x15, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x6}, @FRA_DST={0x14, 0x1, @private1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004a040}, 0x4010) 616.846331ms ago: executing program 2 (id=2909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x50, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @broadcast, @broadcast, @from_mac=@device_b, {0xd, 0x4}}, 0x171, 0x1a, @random=0x9, @void, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 485.724092ms ago: executing program 4 (id=2910): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000001140)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x18a) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)=ANY=[]) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) 399.788293ms ago: executing program 3 (id=2911): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x55e, &(0x7f0000001ac0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143b42, 0x5a) getdents(r0, 0x0, 0x58) 333.338034ms ago: executing program 6 (id=2912): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0xffffffffffffff1f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 0s ago: executing program 2 (id=2913): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="d1", 0x1}], 0x1, 0x0, 0x0, 0x50}], 0x1, 0x4010800) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) kernel console output (not intermixed with test programs): cket 59391, setting to 1024 [ 535.433464][ T5861] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 535.447245][ T5861] usb 1-1: config 168 interface 0 has no altsetting 0 [ 535.692282][ T5861] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 535.700117][ T5861] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 535.714214][ T5861] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 535.726882][ T5861] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.739305][ T5861] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.750935][ T5861] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 535.762779][ T5861] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 535.776642][ T5861] usb 1-1: config 168 interface 0 has no altsetting 0 [ 535.899036][ T5861] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 535.906814][ T5861] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 535.921725][ T5861] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 535.934549][ T5861] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.946771][ T5861] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.958691][ T5861] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 535.970678][ T5861] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 535.984461][ T5861] usb 1-1: config 168 interface 0 has no altsetting 0 [ 536.115393][ T5861] usb 1-1: string descriptor 0 read error: -22 [ 536.124960][ T5861] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 536.135338][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.186912][ T5861] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 536.557622][ T42] usb 1-1: USB disconnect, device number 27 [ 536.575142][ T9466] 9pnet_virtio: no channels available for device syz [ 536.669204][ T1898] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 536.785571][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.792437][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.894681][ T1898] usb 2-1: Using ep0 maxpacket: 8 [ 536.926317][ T1898] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 536.944041][ T1898] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 536.957779][ T1898] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 536.970091][ T1898] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 536.984517][ T1898] usb 2-1: config 168 interface 0 has no altsetting 0 [ 537.073783][ T1898] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 537.085199][ T1898] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 537.096916][ T1898] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 537.108745][ T1898] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 537.122482][ T1898] usb 2-1: config 168 interface 0 has no altsetting 0 [ 537.174054][ T1898] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 537.185315][ T1898] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 537.196911][ T1898] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 537.208697][ T1898] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 537.222459][ T1898] usb 2-1: config 168 interface 0 has no altsetting 0 [ 537.370347][ T1898] usb 2-1: string descriptor 0 read error: -22 [ 537.377317][ T1898] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 537.386937][ T1898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.535822][ T1898] adutux 2-1:168.0: interrupt endpoints not found [ 537.773604][ T1898] usb 2-1: USB disconnect, device number 46 [ 539.928298][ T1753] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 539.973471][ T9505] sit0: entered promiscuous mode [ 539.978797][ T9505] sit0: entered allmulticast mode [ 540.113584][ T1753] usb 2-1: Using ep0 maxpacket: 8 [ 540.162742][ T1753] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 540.170865][ T1753] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 540.182525][ T1753] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 540.194538][ T1753] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 540.206786][ T1753] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 540.221360][ T1753] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 540.234121][ T1753] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 540.248122][ T1753] usb 2-1: config 168 interface 0 has no altsetting 0 [ 540.392648][ T1753] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 540.403384][ T1753] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 540.415371][ T1753] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 540.429778][ T1753] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 540.442937][ T1753] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 540.454818][ T1753] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 540.466798][ T1753] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 540.480812][ T1753] usb 2-1: config 168 interface 0 has no altsetting 0 [ 540.591148][ T1753] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 540.599709][ T1753] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 540.611470][ T1753] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 540.625976][ T1753] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 540.639159][ T1753] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 540.651157][ T1753] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 540.663104][ T1753] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 540.676973][ T1753] usb 2-1: config 168 interface 0 has no altsetting 0 [ 540.702426][ T1753] usb 2-1: string descriptor 0 read error: -22 [ 540.709418][ T1753] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 540.718847][ T1753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.770199][ T1753] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 541.173133][ T1753] usb 2-1: USB disconnect, device number 47 [ 541.319134][ T1898] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 541.528301][ T1898] usb 4-1: Using ep0 maxpacket: 8 [ 541.572038][ T1898] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 541.583083][ T1898] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 541.594778][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 541.606550][ T1898] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 541.620455][ T1898] usb 4-1: config 168 interface 0 has no altsetting 0 [ 541.771165][ T1898] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 541.781977][ T1898] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 541.793600][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 541.805454][ T1898] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 541.819160][ T1898] usb 4-1: config 168 interface 0 has no altsetting 0 [ 542.101726][ T1898] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 542.112781][ T1898] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 542.124534][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 542.136469][ T1898] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 542.150207][ T1898] usb 4-1: config 168 interface 0 has no altsetting 0 [ 542.514104][ T1898] usb 4-1: string descriptor 0 read error: -22 [ 542.521176][ T1898] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 542.530733][ T1898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.643193][ T1898] adutux 4-1:168.0: interrupt endpoints not found [ 542.964702][ T1753] usb 4-1: USB disconnect, device number 36 [ 544.968898][ T1753] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 545.161248][ T1753] usb 1-1: Using ep0 maxpacket: 8 [ 545.194159][ T1753] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.202079][ T1753] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 545.213724][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 545.225576][ T1753] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.242294][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 545.254676][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 545.266511][ T1753] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 545.280776][ T1753] usb 1-1: config 168 interface 0 has no altsetting 0 [ 545.558589][ T1753] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.566392][ T1753] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 545.578317][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 545.590056][ T1753] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.602273][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 545.613806][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 545.625736][ T1753] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 545.642219][ T1753] usb 1-1: config 168 interface 0 has no altsetting 0 [ 545.853063][ T1753] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.861025][ T1753] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 545.872716][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 545.884828][ T1753] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.897105][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 545.909081][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 545.921944][ T1753] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 545.935816][ T1753] usb 1-1: config 168 interface 0 has no altsetting 0 [ 545.986771][ T42] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 546.005957][ T1753] usb 1-1: string descriptor 0 read error: -22 [ 546.013055][ T1753] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 546.025881][ T1753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.114964][ T1753] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 546.162057][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 546.184315][ T42] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 546.195655][ T42] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 546.208671][ T42] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 546.220780][ T42] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 546.234559][ T42] usb 5-1: config 168 interface 0 has no altsetting 0 [ 546.344859][ T42] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 546.356049][ T42] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 546.373870][ T42] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 546.387767][ T42] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 546.407587][ T42] usb 5-1: config 168 interface 0 has no altsetting 0 [ 546.443785][ T42] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 546.455107][ T42] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 546.472617][ T42] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 546.486461][ T42] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 546.500189][ T42] usb 5-1: config 168 interface 0 has no altsetting 0 [ 546.529465][ T1898] usb 1-1: USB disconnect, device number 28 [ 546.602992][ T42] usb 5-1: string descriptor 0 read error: -22 [ 546.610277][ T42] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 546.619839][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.698392][ T42] adutux 5-1:168.0: interrupt endpoints not found [ 546.932412][ T1753] usb 5-1: USB disconnect, device number 40 [ 547.430415][ T9582] fuse: Unknown parameter 'use00000000000000000000' [ 548.250711][ T9591] pim6reg1: entered promiscuous mode [ 548.256372][ T9591] pim6reg1: entered allmulticast mode [ 548.436461][ T9597] 9pnet_virtio: no channels available for device syz [ 550.139120][ T1898] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 550.388287][ T1898] usb 4-1: Using ep0 maxpacket: 8 [ 550.388803][ T1753] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 550.417234][ T1898] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 550.425121][ T1898] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 550.436827][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 550.448864][ T1898] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.469216][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.480974][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 550.493022][ T1898] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 550.506861][ T1898] usb 4-1: config 168 interface 0 has no altsetting 0 [ 550.522091][ T9622] fuse: Bad value for 'fd' [ 550.531564][ T1898] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 550.539794][ T1898] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 550.551421][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 550.575799][ T1898] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.576549][ T1753] usb 1-1: Using ep0 maxpacket: 8 [ 550.590548][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.605736][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 550.619785][ T1898] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 550.633689][ T1898] usb 4-1: config 168 interface 0 has no altsetting 0 [ 550.681269][ T1753] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 550.692244][ T1753] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 550.703924][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 550.715777][ T1753] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 550.729505][ T1753] usb 1-1: config 168 interface 0 has no altsetting 0 [ 550.815178][ T1898] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 550.823146][ T1898] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 550.835092][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 550.846944][ T1898] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.859260][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.871445][ T1753] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 550.871591][ T1753] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 550.871768][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 550.871939][ T1753] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 550.872112][ T1753] usb 1-1: config 168 interface 0 has no altsetting 0 [ 550.877425][ T1753] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 550.889769][ T1898] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 550.899548][ T1753] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 550.913508][ T1898] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 550.931583][ T1753] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 550.931750][ T1753] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 550.931915][ T1753] usb 1-1: config 168 interface 0 has no altsetting 0 [ 551.019365][ T1898] usb 4-1: config 168 interface 0 has no altsetting 0 [ 551.152360][ T1898] usb 4-1: string descriptor 0 read error: -22 [ 551.157494][ T1753] usb 1-1: string descriptor 0 read error: -22 [ 551.160195][ T1898] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 551.166435][ T1753] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 551.181895][ T1898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.187552][ T1753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.316530][ T1753] adutux 1-1:168.0: interrupt endpoints not found [ 551.346100][ T1898] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 551.524731][ T1753] usb 1-1: USB disconnect, device number 29 [ 551.659040][ T1898] usb 4-1: USB disconnect, device number 37 [ 552.852791][ T9633] cgroup: fork rejected by pids controller in /syz1 [ 553.599896][ T9645] 9pnet_virtio: no channels available for device syz [ 553.718996][ T9652] fuse: Unknown parameter 'user_i00000000000000000000' [ 553.810882][ T9651] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 554.142555][ T3897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.346725][ T3897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.677620][ T3897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.872119][ T3897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.544659][ T3897] bridge_slave_1: left allmulticast mode [ 555.550856][ T3897] bridge_slave_1: left promiscuous mode [ 555.557582][ T3897] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.689275][ T3897] bridge_slave_0: left allmulticast mode [ 555.695369][ T3897] bridge_slave_0: left promiscuous mode [ 555.702357][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.545492][ T3897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.585263][ T3897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.628362][ T3897] bond0 (unregistering): Released all slaves [ 557.338382][ T3897] hsr_slave_0: left promiscuous mode [ 557.358277][ T3897] hsr_slave_1: left promiscuous mode [ 557.366593][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.374904][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.423083][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.430925][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.524685][ T3897] veth1_macvtap: left promiscuous mode [ 557.530664][ T3897] veth0_macvtap: left promiscuous mode [ 557.536568][ T3897] veth1_vlan: left promiscuous mode [ 557.542472][ T3897] veth0_vlan: left promiscuous mode [ 559.449999][ T9711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 559.456034][ T3897] team0 (unregistering): Port device team_slave_1 removed [ 559.493512][ T3897] team0 (unregistering): Port device team_slave_0 removed [ 559.599218][ T9711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 559.610359][ T9711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 559.626567][ T9711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 559.640042][ T9711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 561.723373][ T5803] Bluetooth: hci2: command tx timeout [ 563.619118][ T9710] chnl_net:caif_netlink_parms(): no params data found [ 563.802311][ T5803] Bluetooth: hci2: command tx timeout [ 565.747502][ T9710] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.755320][ T9710] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.763318][ T9710] bridge_slave_0: entered allmulticast mode [ 565.773522][ T9710] bridge_slave_0: entered promiscuous mode [ 565.878564][ T5803] Bluetooth: hci2: command tx timeout [ 565.953625][ T9710] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.961747][ T9710] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.969721][ T9710] bridge_slave_1: entered allmulticast mode [ 565.979498][ T9710] bridge_slave_1: entered promiscuous mode [ 566.493020][ T9710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.597617][ T9710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.960226][ T9710] team0: Port device team_slave_0 added [ 567.075176][ T9710] team0: Port device team_slave_1 added [ 567.988680][ T5803] Bluetooth: hci2: command tx timeout [ 568.125868][ T9710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.133654][ T9710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.159988][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.166349][ T9710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.586642][ T9710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.593994][ T9710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.620440][ T9710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.477545][ T9710] hsr_slave_0: entered promiscuous mode [ 569.488406][ T9710] hsr_slave_1: entered promiscuous mode [ 569.497248][ T9710] debugfs: 'hsr0' already exists in 'hsr' [ 569.508543][ T9710] Cannot create hsr debugfs directory [ 572.100186][ T9710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 572.133406][ T9710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 572.179575][ T9710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 572.274424][ T9710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 573.846440][ T9710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.080894][ T9710] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.204519][ T3897] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.212145][ T3897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.386203][ T3897] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.393904][ T3897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.777147][ T9710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.504921][ T9710] veth0_vlan: entered promiscuous mode [ 578.676849][ T9710] veth1_vlan: entered promiscuous mode [ 579.334263][ T9710] veth0_macvtap: entered promiscuous mode [ 579.415464][ T9710] veth1_macvtap: entered promiscuous mode [ 579.993750][ T9710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.049028][ T9710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.185108][ T3897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.236831][ T3897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.273957][ T3897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.319403][ T3897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.518844][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.526917][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.790416][ T3651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.801944][ T3651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.783301][ T1898] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 592.999334][ T1898] usb 1-1: device descriptor read/64, error -71 [ 593.238380][ T1898] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 593.408326][ T1898] usb 1-1: device descriptor read/64, error -71 [ 593.529237][ T1898] usb usb1-port1: attempt power cycle [ 593.918469][ T1898] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 594.038408][ T1898] usb 1-1: device descriptor read/8, error -71 [ 594.312520][ T1898] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 594.394636][ T1898] usb 1-1: device descriptor read/8, error -71 [ 594.528122][ T1898] usb usb1-port1: unable to enumerate USB device [ 595.978439][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 598.232913][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.239836][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.679007][ T1898] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 598.842682][ T1898] usb 5-1: device descriptor read/64, error -71 [ 599.102011][ T1898] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 599.288362][ T1898] usb 5-1: device descriptor read/64, error -71 [ 599.417462][ T1898] usb usb5-port1: attempt power cycle [ 599.546821][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 599.559405][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 599.829286][ T1898] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 599.899536][ T1898] usb 5-1: device descriptor read/8, error -71 [ 600.160816][ T1898] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 600.272802][ T1898] usb 5-1: device descriptor read/8, error -71 [ 600.399713][ T1898] usb usb5-port1: unable to enumerate USB device [ 604.661699][T10229] netlink: 'syz.3.1457': attribute type 2 has an invalid length. [ 604.670478][T10229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1457'. [ 606.313941][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 609.468963][ T1898] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 609.678847][ T1898] usb 1-1: Using ep0 maxpacket: 8 [ 609.715254][ T1898] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 609.725783][ T1898] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 609.737583][ T1898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 609.754947][ T1898] usb 1-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 609.768075][ T1898] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 609.782300][ T1898] usb 1-1: config 168 interface 0 has no altsetting 0 [ 609.816484][ T1898] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 609.824555][ T1898] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 609.836186][ T1898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 609.853371][ T1898] usb 1-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 609.866414][ T1898] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 609.880384][ T1898] usb 1-1: config 168 interface 0 has no altsetting 0 [ 609.929680][ T1898] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 609.937468][ T1898] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 609.954530][ T1898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 609.968118][ T1898] usb 1-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 609.979626][ T1898] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 609.993541][ T1898] usb 1-1: config 168 interface 0 has no altsetting 0 [ 610.027392][ T1898] usb 1-1: string descriptor 0 read error: -22 [ 610.034663][ T1898] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 610.044172][ T1898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.105817][ T1898] adutux 1-1:168.0: interrupt endpoints not found [ 610.329472][ T5861] usb 1-1: USB disconnect, device number 34 [ 614.061432][ T1898] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 614.228218][ T1898] usb 3-1: device descriptor read/64, error -71 [ 614.488722][ T1898] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 614.644626][ T1898] usb 3-1: device descriptor read/64, error -71 [ 614.793751][ T1898] usb usb3-port1: attempt power cycle [ 615.199916][ T1898] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 615.280402][ T1898] usb 3-1: device descriptor read/8, error -71 [ 615.555719][ T1898] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 615.634913][ T1898] usb 3-1: device descriptor read/8, error -71 [ 615.750959][ T1898] usb usb3-port1: unable to enumerate USB device [ 616.743027][T10368] netlink: 'syz.3.1509': attribute type 10 has an invalid length. [ 616.796399][T10368] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 617.228981][T10371] netlink: 'syz.1.1510': attribute type 41 has an invalid length. [ 618.159837][T10386] 9pnet_virtio: no channels available for device syz [ 618.901561][T10400] netlink: 'syz.2.1521': attribute type 6 has an invalid length. [ 618.909969][T10400] netlink: 'syz.2.1521': attribute type 23 has an invalid length. [ 618.918215][T10400] IPv6: NLM_F_CREATE should be specified when creating new route [ 619.897784][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 620.052026][ T24] usb 5-1: device descriptor read/64, error -71 [ 620.308331][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 620.469492][ T24] usb 5-1: device descriptor read/64, error -71 [ 620.589751][ T24] usb usb5-port1: attempt power cycle [ 620.999955][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 621.080465][ T24] usb 5-1: device descriptor read/8, error -71 [ 621.368176][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 621.438767][ T24] usb 5-1: device descriptor read/8, error -71 [ 621.571243][ T24] usb usb5-port1: unable to enumerate USB device [ 621.840522][T10430] netlink: 'syz.2.1534': attribute type 29 has an invalid length. [ 622.140985][T10435] 9pnet_virtio: no channels available for device syz [ 623.589847][T10455] netlink: 'syz.2.1543': attribute type 10 has an invalid length. [ 623.702967][T10455] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 624.510788][T10469] netlink: 'syz.2.1548': attribute type 29 has an invalid length. [ 624.564063][T10466] netlink: 'syz.2.1548': attribute type 29 has an invalid length. [ 626.269498][T10489] netlink: 'syz.1.1558': attribute type 10 has an invalid length. [ 626.377397][T10489] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 631.328710][T10553] 9pnet_virtio: no channels available for device syz [ 631.417455][T10554] syzkaller0: entered promiscuous mode [ 631.423376][T10554] syzkaller0: entered allmulticast mode [ 634.310437][T10599] syzkaller0: entered promiscuous mode [ 634.316143][T10599] syzkaller0: entered allmulticast mode [ 634.706624][T10605] 9pnet_virtio: no channels available for device syz [ 637.479107][ T5861] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 637.506235][T10645] syzkaller0: entered promiscuous mode [ 637.512209][T10645] syzkaller0: entered allmulticast mode [ 637.688152][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 637.707625][ T5861] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 637.719872][ T5861] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 637.731533][ T5861] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 637.745270][ T5861] usb 4-1: config 168 interface 0 has no altsetting 0 [ 637.831490][ T5861] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 637.843441][ T5861] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 637.855415][ T5861] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 637.869618][ T5861] usb 4-1: config 168 interface 0 has no altsetting 0 [ 637.950801][ T5861] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 637.961846][ T5861] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 637.973629][ T5861] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 637.987444][ T5861] usb 4-1: config 168 interface 0 has no altsetting 0 [ 638.023148][ T5861] usb 4-1: string descriptor 0 read error: -22 [ 638.030220][ T5861] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 638.040258][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.155805][ T5861] adutux 4-1:168.0: interrupt endpoints not found [ 638.407394][ T5861] usb 4-1: USB disconnect, device number 38 [ 640.176994][T10683] loop3: detected capacity change from 0 to 512 [ 640.332155][T10684] syzkaller0: entered promiscuous mode [ 640.338040][T10684] syzkaller0: entered allmulticast mode [ 640.407516][T10683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 640.506463][T10683] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.1636: Unimplemented hash flags: 0x0001 [ 640.519174][T10683] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1636: Corrupt directory, running e2fsck is recommended [ 640.709758][T10683] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1636: path /342/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 641.262083][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.481373][T10699] loop1: detected capacity change from 0 to 128 [ 641.660526][T10699] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 641.751190][T10699] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 641.830944][T10707] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 641.868811][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 642.074786][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 642.139312][ T24] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 642.150745][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 642.162343][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 642.176265][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 642.243261][T10706] loop4: detected capacity change from 0 to 4096 [ 642.268987][T10711] loop3: detected capacity change from 0 to 512 [ 642.331742][T10711] EXT4-fs (loop3): Test dummy encryption mode enabled [ 642.331936][ T24] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 642.339231][T10711] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 642.339367][T10711] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 642.378639][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 642.390266][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 642.404126][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 642.460859][T10711] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 642.486823][T10711] EXT4-fs (loop3): 1 truncate cleaned up [ 642.494939][T10711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.573973][ T9710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 642.591713][T10711] EXT4-fs error (device loop3): ext4_lookup:1787: inode #16: comm syz.3.1647: iget: bad i_size value: 5497558147880 [ 642.644061][T10711] EXT4-fs (loop3): Remounting filesystem read-only [ 642.649567][T10706] EXT4-fs (loop4): Test dummy encryption mode enabled [ 642.659470][ T24] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 642.670484][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 642.683044][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 642.696987][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 642.751964][T10706] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 642.769236][ T24] usb 3-1: string descriptor 0 read error: -22 [ 642.776069][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 642.786438][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.825758][T10706] System zones: 0-5 [ 642.863703][T10706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.945999][ T24] adutux 3-1:168.0: interrupt endpoints not found [ 643.170133][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.245094][ T5861] usb 3-1: USB disconnect, device number 24 [ 643.870777][T10706] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 643.972814][T10726] syzkaller0: entered promiscuous mode [ 643.978814][T10726] syzkaller0: entered allmulticast mode [ 644.194782][ T5809] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.597146][T10758] loop0: detected capacity change from 0 to 128 [ 646.722457][T10758] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 646.795419][T10755] loop4: detected capacity change from 0 to 1764 [ 646.865286][T10758] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 646.991464][T10758] syz.0.1664 (pid 10758) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 647.387093][ T5807] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 649.511919][T10787] loop4: detected capacity change from 0 to 128 [ 649.582271][T10787] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 649.623197][T10787] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.778490][ T5809] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.149451][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 651.348137][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 651.412126][ T24] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 651.429587][ T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 651.441236][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 651.453147][ T24] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 651.466963][ T24] usb 2-1: config 168 interface 0 has no altsetting 0 [ 651.601011][ T24] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 651.612245][ T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 651.628791][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 651.642282][ T24] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 651.656004][ T24] usb 2-1: config 168 interface 0 has no altsetting 0 [ 651.782472][ T24] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 651.793616][ T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 651.821916][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 651.838939][ T24] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 651.854391][ T24] usb 2-1: config 168 interface 0 has no altsetting 0 [ 651.870591][ T5867] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 652.002932][ T24] usb 2-1: string descriptor 0 read error: -22 [ 652.010020][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 652.019495][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.079473][ T24] adutux 2-1:168.0: interrupt endpoints not found [ 652.108145][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 652.141440][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 652.153454][ T5867] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 652.163152][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.247787][ T5867] usb 3-1: config 0 descriptor?? [ 652.317763][ T24] usb 2-1: USB disconnect, device number 48 [ 652.802499][T10825] PM: Enabling pm_trace changes system date and time during resume. [ 652.802499][T10825] PM: Correct system time has to be restored manually after resume. [ 652.932227][ T24] usb 3-1: USB disconnect, device number 25 [ 654.469249][T10844] loop0: detected capacity change from 0 to 256 [ 654.558004][T10846] loop1: detected capacity change from 0 to 128 [ 654.657591][T10846] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 654.679063][T10846] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 655.021956][T10846] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 20: comm syz.1.1704: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 655.128550][T10846] EXT4-fs error (device loop1) in do_split:2029: Corrupt filesystem [ 655.186473][T10857] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 20: comm syz.1.1704: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 655.237530][T10857] EXT4-fs error (device loop1) in do_split:2029: Corrupt filesystem [ 655.669749][ T9710] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 656.001284][ T5867] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 656.228426][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 656.305102][ T5867] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 656.316035][ T5867] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 656.327936][ T5867] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 656.342265][ T5867] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 656.356709][ T5867] usb 3-1: config 168 interface 0 has no altsetting 0 [ 656.426948][ T5867] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 656.440400][ T5867] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 656.453917][ T5867] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 656.466217][ T5867] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 656.480481][ T5867] usb 3-1: config 168 interface 0 has no altsetting 0 [ 656.678299][ T5867] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 656.689300][ T5867] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 656.703804][ T5867] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 656.715656][ T5867] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 656.729557][ T5867] usb 3-1: config 168 interface 0 has no altsetting 0 [ 656.823633][ T5867] usb 3-1: string descriptor 0 read error: -22 [ 656.830663][ T5867] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 656.840304][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.926080][ T5867] adutux 3-1:168.0: interrupt endpoints not found [ 657.164653][ T24] usb 3-1: USB disconnect, device number 26 [ 657.901660][T10886] loop3: detected capacity change from 0 to 1024 [ 657.982467][T10886] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 658.046021][T10886] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 658.069780][T10886] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 658.160881][T10886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 658.461624][T10892] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 658.560998][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.284886][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1727'. [ 659.670300][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.676953][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.370886][T10915] loop2: detected capacity change from 0 to 2048 [ 660.559923][T10915] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 661.209162][ T5867] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 661.418129][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 661.445816][ T5867] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 661.459315][ T5867] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 661.472510][ T5867] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 661.484256][ T5867] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 661.498016][ T5867] usb 1-1: config 168 interface 0 has no altsetting 0 [ 661.689105][ T5867] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 661.699984][ T5867] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 661.711880][ T5867] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 661.723814][ T5867] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 661.737491][ T5867] usb 1-1: config 168 interface 0 has no altsetting 0 [ 661.891970][ T5867] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 661.902914][ T5867] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 661.914472][ T5867] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 661.926198][ T5867] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 661.939996][ T5867] usb 1-1: config 168 interface 0 has no altsetting 0 [ 662.098092][ T5867] usb 1-1: string descriptor 0 read error: -22 [ 662.105041][ T5867] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 662.114501][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.224003][ T5867] adutux 1-1:168.0: interrupt endpoints not found [ 662.518477][ T5867] usb 1-1: USB disconnect, device number 35 [ 663.409368][T10963] syzkaller0: entered promiscuous mode [ 663.415171][T10963] syzkaller0: entered allmulticast mode [ 665.029523][T10983] syzkaller0: entered promiscuous mode [ 665.035334][T10983] syzkaller0: entered allmulticast mode [ 665.978635][ T5867] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 666.031652][T10994] loop0: detected capacity change from 0 to 512 [ 666.074391][T10994] EXT4-fs: Ignoring removed nobh option [ 666.160265][T10994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.178799][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 666.184252][T10994] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 666.193316][ T5867] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 666.205500][ T5867] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 666.217186][ T5867] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 666.229042][ T5867] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 666.242698][ T5867] usb 5-1: config 168 interface 0 has no altsetting 0 [ 666.446568][ T5867] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 666.457469][ T5867] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 666.469226][ T5867] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 666.483513][ T5867] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 666.498157][ T5867] usb 5-1: config 168 interface 0 has no altsetting 0 [ 666.649000][ T5867] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 666.660279][ T5867] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 666.671869][ T5867] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 666.686755][ T5867] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 666.701343][ T5867] usb 5-1: config 168 interface 0 has no altsetting 0 [ 666.831460][ T5867] usb 5-1: string descriptor 0 read error: -22 [ 666.839262][ T5867] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 666.848731][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.974857][ T5867] adutux 5-1:168.0: interrupt endpoints not found [ 667.150406][ T5867] usb 5-1: USB disconnect, device number 49 [ 667.184180][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.654202][T11003] loop1: detected capacity change from 0 to 8192 [ 667.781790][T11010] loop2: detected capacity change from 0 to 256 [ 667.851084][ T30] audit: type=1804 audit(1763071310.469:2): pid=11003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1763" name="/newroot/74/file0/bus" dev="loop1" ino=1048610 res=1 errno=0 [ 669.601113][T11034] capability: warning: `syz.3.1776' uses 32-bit capabilities (legacy support in use) [ 670.335865][T11039] loop4: detected capacity change from 0 to 2048 [ 670.388527][T11039] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 670.418446][T11039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 671.092020][T11049] loop1: detected capacity change from 0 to 512 [ 671.315738][T11049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.329474][T11049] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.370513][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 671.578415][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 671.621112][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 671.633657][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 671.643887][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 671.653967][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 671.665467][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 671.675917][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 671.685472][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.802074][ T24] usb 5-1: config 0 descriptor?? [ 671.822407][T11053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 671.947531][ T9710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.216696][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 672.225079][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.233203][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.240742][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.248200][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.255541][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.263001][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.271195][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.278727][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.286093][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.293558][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.301027][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.311604][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.319726][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.326987][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.334527][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.341933][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.349351][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.356690][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.364274][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.371802][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.379265][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.386615][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.394142][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.401574][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.409059][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.418828][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.426156][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.434428][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.441906][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.449511][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.456876][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.464246][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.471724][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.479133][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.486461][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.493939][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.501369][ T9711] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 672.597617][ T5803] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 672.613764][ T24] usb 5-1: USB disconnect, device number 50 [ 674.628667][ T5867] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 674.848551][ T5867] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 674.858067][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.922707][ T5867] usb 5-1: config 0 descriptor?? [ 675.934637][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'. [ 675.981982][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'. [ 676.214519][ T5867] pegasus 5-1:0.0: can't reset MAC [ 676.221261][ T5867] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 676.318554][ T5867] usb 5-1: USB disconnect, device number 51 [ 676.588837][T11108] 9pnet: Unknown protocol version 9 [ 679.209162][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 679.257081][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 679.371427][T11140] loop2: detected capacity change from 0 to 16 [ 679.483659][T11140] erofs (device loop2): mounted with root inode @ nid 36. [ 680.492343][T11149] capability: warning: `syz.2.1826' uses deprecated v2 capabilities in a way that may be insecure [ 681.686269][T11162] loop1: detected capacity change from 0 to 256 [ 681.830231][T11162] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 681.968344][T11162] exFAT-fs (loop1): error, in sector 160, dentry 11 should be unused, but 0xc1 [ 681.977688][T11162] exFAT-fs (loop1): Filesystem has been set read-only [ 682.198476][ T9711] Bluetooth: hci2: command 0x0406 tx timeout [ 682.321180][ T9710] exFAT-fs (loop1): error, data valid size is invalid(-9223372036854774758) [ 682.384165][ T9710] exFAT-fs (loop1): error, data valid size is invalid(-9223372036854774758) [ 683.488578][ T1324] bond0: (slave netdevsim3): Releasing backup interface [ 683.536605][ T1324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.705295][ T1324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.845193][ T1324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.992472][ T1324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.441870][ T1324] bridge_slave_1: left allmulticast mode [ 684.447744][ T1324] bridge_slave_1: left promiscuous mode [ 684.454604][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.505555][ T1324] bridge_slave_0: left allmulticast mode [ 684.511612][ T1324] bridge_slave_0: left promiscuous mode [ 684.518535][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.412486][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.502237][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.569430][ T1324] bond0 (unregistering): Released all slaves [ 686.131116][T11182] loop2: detected capacity change from 0 to 1024 [ 686.295126][ T9711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.352573][ T9711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.369763][ T9711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.389927][ T9711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.409895][ T9711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 686.449542][ T1324] hsr_slave_0: left promiscuous mode [ 686.457671][ T1324] hsr_slave_1: left promiscuous mode [ 686.472554][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.480258][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.501893][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.509760][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.537256][ T1324] veth1_macvtap: left promiscuous mode [ 686.545735][ T1324] veth0_macvtap: left promiscuous mode [ 686.552231][ T1324] veth1_vlan: left promiscuous mode [ 686.557742][ T1324] veth0_vlan: left promiscuous mode [ 686.593900][T11182] Bluetooth: MGMT ver 1.23 [ 688.110571][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 688.160535][T11210] loop2: detected capacity change from 0 to 512 [ 688.213968][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 688.529310][ T5803] Bluetooth: hci2: command tx timeout [ 688.540758][T11210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 688.553951][T11210] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.793525][T11210] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 688.810281][T11210] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 688.822160][T11210] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1851: Failed to acquire dquot type 0 [ 689.445402][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 690.630968][ T5803] Bluetooth: hci2: command tx timeout [ 690.928935][T11189] chnl_net:caif_netlink_parms(): no params data found [ 691.237252][T11235] loop4: detected capacity change from 0 to 128 [ 691.246282][T11234] netlink: 'syz.2.1856': attribute type 10 has an invalid length. [ 691.497353][T11239] loop0: detected capacity change from 0 to 1024 [ 691.745972][T11239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 691.758744][T11239] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.931730][T11245] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 692.023395][T11239] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.1857: inode has both inline data and extents flags [ 692.179121][T11251] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.1857: inode has both inline data and extents flags [ 692.280373][T11254] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.1857: inode has both inline data and extents flags [ 692.310590][T11250] loop4: detected capacity change from 0 to 512 [ 692.369915][T11239] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.1857: inode has both inline data and extents flags [ 692.477259][T11258] loop2: detected capacity change from 0 to 512 [ 692.484380][T11250] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 692.590949][T11250] EXT4-fs error (device loop4): ext4_quota_enable:7136: inode #4: comm syz.4.1855: iget: bad i_size value: 5910974510929920 [ 692.692446][ T5803] Bluetooth: hci2: command tx timeout [ 692.694366][T11258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.781336][T11250] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.1855: Bad quota inode: 4, type: 1 [ 692.809715][T11189] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.817271][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.825167][T11189] bridge_slave_0: entered allmulticast mode [ 692.834993][T11189] bridge_slave_0: entered promiscuous mode [ 692.914161][T11250] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 692.921359][T11189] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.936621][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.947961][T11189] bridge_slave_1: entered allmulticast mode [ 692.958760][T11189] bridge_slave_1: entered promiscuous mode [ 692.969519][T11250] EXT4-fs (loop4): mount failed [ 693.005511][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 693.319116][T11189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.417033][T11189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.451776][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.614400][T11189] team0: Port device team_slave_0 added [ 693.653056][T11189] team0: Port device team_slave_1 added [ 694.145319][T11189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.152970][T11189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.182421][T11189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.412638][T11189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.420393][T11189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.450745][T11189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.775797][ T5803] Bluetooth: hci2: command tx timeout [ 695.423337][T11189] hsr_slave_0: entered promiscuous mode [ 695.434052][T11189] hsr_slave_1: entered promiscuous mode [ 695.443405][T11189] debugfs: 'hsr0' already exists in 'hsr' [ 695.449368][T11189] Cannot create hsr debugfs directory [ 696.362510][T11298] syzkaller0: entered promiscuous mode [ 696.368536][T11298] syzkaller0: entered allmulticast mode [ 696.937072][T11304] loop0: detected capacity change from 0 to 256 [ 697.520578][T11189] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 697.577006][T11189] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 697.627028][T11189] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 697.701886][ T5807] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 697.709617][T11189] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 697.722631][ T5807] FAT-fs (loop0): Filesystem has been set read-only [ 697.754765][ T5807] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 698.153843][ T3826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.338181][ T3826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.466214][ T3826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.565113][ T3826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.194162][ T3826] bridge_slave_1: left allmulticast mode [ 699.200377][ T3826] bridge_slave_1: left promiscuous mode [ 699.207096][ T3826] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.257484][ T3826] bridge_slave_0: left allmulticast mode [ 699.264112][ T3826] bridge_slave_0: left promiscuous mode [ 699.270991][ T3826] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.972874][ T3826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.010668][ T3826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.036031][ T3826] bond0 (unregistering): Released all slaves [ 700.247021][T11189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.453085][T11189] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.601300][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.608976][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.626673][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.634279][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.762541][ T3826] hsr_slave_0: left promiscuous mode [ 700.798718][ T3826] hsr_slave_1: left promiscuous mode [ 700.806737][ T3826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.815073][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.851162][ T3826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.858924][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.912429][ T3826] veth1_macvtap: left promiscuous mode [ 700.918796][ T3826] veth0_macvtap: left promiscuous mode [ 700.924650][ T3826] veth1_vlan: left promiscuous mode [ 700.930356][ T3826] veth0_vlan: left promiscuous mode [ 701.396757][T11341] loop2: detected capacity change from 0 to 4096 [ 701.514636][T11341] EXT4-fs (loop2): Test dummy encryption mode enabled [ 701.602114][T11341] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 701.620744][T11341] System zones: 0-5 [ 701.672535][T11341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.119549][ T9711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 702.130740][ T9711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 702.145388][ T9711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 702.223004][ T9711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 702.235368][ T9711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 702.314865][ T3826] team0 (unregistering): Port device team_slave_1 removed [ 702.350049][ T3826] team0 (unregistering): Port device team_slave_0 removed [ 702.506094][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.285872][ T9711] Bluetooth: hci3: command tx timeout [ 705.672206][T11189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.859625][T11350] chnl_net:caif_netlink_parms(): no params data found [ 706.358758][ T9711] Bluetooth: hci3: command tx timeout [ 707.300877][T11399] loop2: detected capacity change from 0 to 4096 [ 707.418575][T11399] EXT4-fs (loop2): Test dummy encryption mode enabled [ 707.425580][T11350] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.435959][T11350] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.444273][T11350] bridge_slave_0: entered allmulticast mode [ 707.453578][T11350] bridge_slave_0: entered promiscuous mode [ 707.523662][T11399] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 707.563504][T11399] System zones: 0-5 [ 707.598770][T11350] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.606508][T11350] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.613750][T11399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.627062][T11350] bridge_slave_1: entered allmulticast mode [ 707.641574][T11350] bridge_slave_1: entered promiscuous mode [ 707.865148][T11350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.947023][T11350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.011486][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.281811][T11350] team0: Port device team_slave_0 added [ 708.340452][T11350] team0: Port device team_slave_1 added [ 708.465968][ T9711] Bluetooth: hci3: command tx timeout [ 708.511862][T11350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.519819][T11350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.546261][T11350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.569391][T11350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.576520][T11350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.603516][T11350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.744568][T11189] veth0_vlan: entered promiscuous mode [ 708.848511][T11350] hsr_slave_0: entered promiscuous mode [ 708.858857][T11350] hsr_slave_1: entered promiscuous mode [ 708.871769][T11350] debugfs: 'hsr0' already exists in 'hsr' [ 708.877657][T11350] Cannot create hsr debugfs directory [ 708.950148][T11189] veth1_vlan: entered promiscuous mode [ 709.629715][T11189] veth0_macvtap: entered promiscuous mode [ 709.763333][T11189] veth1_macvtap: entered promiscuous mode [ 710.130610][T11189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.296956][T11189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.417503][ T3017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.531103][ T9711] Bluetooth: hci3: command tx timeout [ 710.573523][ T3017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.657601][ T3017] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.701898][ T3017] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.983630][T11350] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 711.151357][T11350] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 711.289576][T11350] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 711.372171][T11350] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 713.249176][T11350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.369471][T11350] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.441742][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.449371][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.484082][T11453] netlink: 'syz.4.1905': attribute type 8 has an invalid length. [ 713.492230][T11453] netem: change failed [ 713.562246][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.569868][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.879953][T11350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.424855][ T3862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.433050][ T3862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.755840][T11511] syzkaller0: entered promiscuous mode [ 718.763717][T11511] syzkaller0: entered allmulticast mode [ 718.843361][ T3897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.851535][ T3897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.308673][T11350] veth0_vlan: entered promiscuous mode [ 719.406928][T11350] veth1_vlan: entered promiscuous mode [ 719.872949][T11350] veth0_macvtap: entered promiscuous mode [ 719.978747][T11350] veth1_macvtap: entered promiscuous mode [ 720.218944][ T42] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 720.252753][T11350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.347560][T11350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.478698][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 720.498513][ T42] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 720.506182][ T42] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 720.521881][ T42] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 720.533765][ T42] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 720.549234][ T42] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 720.561764][ T42] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 720.573721][ T42] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 720.583881][T11534] loop4: detected capacity change from 0 to 512 [ 720.589925][ T42] usb 3-1: config 168 interface 0 has no altsetting 0 [ 720.669741][ T1324] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.711276][ T42] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 720.719206][ T42] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 720.731919][ T42] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 720.746772][ T42] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 720.754867][ T1324] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.759934][ T42] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 720.779841][ T42] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 720.791707][ T42] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 720.805655][ T42] usb 3-1: config 168 interface 0 has no altsetting 0 [ 720.895199][ T1324] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.954418][ T3622] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.056538][T11534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.070935][T11534] ext4 filesystem being mounted at /392/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.130946][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.137630][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.184304][ T42] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 721.192615][ T42] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 721.205235][ T42] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 721.217006][ T42] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 721.229621][ T42] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 721.241368][ T42] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 721.253276][ T42] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 721.270676][ T42] usb 3-1: config 168 interface 0 has no altsetting 0 [ 721.395500][ T30] audit: type=1800 audit(1763071363.999:3): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1921" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 721.632286][ T42] usb 3-1: string descriptor 0 read error: -22 [ 721.639553][ T42] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 721.651068][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.771341][ T5809] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.821399][ T42] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 722.040039][ T42] usb 3-1: USB disconnect, device number 27 [ 722.524917][T11555] 9pnet_virtio: no channels available for device syz [ 726.402764][ T1753] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 726.598911][ T1753] usb 3-1: Using ep0 maxpacket: 8 [ 726.614126][ T1753] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 726.624992][ T1753] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 726.636516][ T1753] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 726.648456][ T1753] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 726.660727][ T1753] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 726.672330][ T1753] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 726.686792][ T1753] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 726.701661][ T1753] usb 3-1: config 168 interface 0 has no altsetting 0 [ 726.834664][T11611] 9pnet_virtio: no channels available for device syz [ 726.930216][ T1753] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 726.938242][ T1753] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 726.949779][ T1753] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 726.961665][ T1753] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 726.973908][ T1753] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 726.986062][ T1753] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 727.000765][ T1753] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 727.015439][ T1753] usb 3-1: config 168 interface 0 has no altsetting 0 [ 727.429623][ T1753] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 727.437401][ T1753] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 727.451683][ T1753] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 727.464247][ T1753] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 727.477743][ T1753] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 727.494955][ T1753] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 727.510091][ T1753] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 727.525701][ T1753] usb 3-1: config 168 interface 0 has no altsetting 0 [ 727.585233][ T1753] usb 3-1: string descriptor 0 read error: -22 [ 727.592241][ T1753] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 727.601587][ T1753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.740420][ T1753] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 727.922577][ T42] usb 3-1: USB disconnect, device number 28 [ 728.555654][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.563935][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.660073][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.668413][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.615159][T11638] netlink: 13 bytes leftover after parsing attributes in process `syz.6.1881'. [ 729.870799][T11640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1941'. [ 733.131693][T11668] 9pnet_virtio: no channels available for device syz [ 734.809432][T11686] loop2: detected capacity change from 0 to 764 [ 734.893576][T11686] rock: directory entry would overflow storage [ 734.900058][T11686] rock: sig=0x4654, size=5, remaining=4 [ 735.305972][T11691] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1954'. [ 736.485737][T11704] loop2: detected capacity change from 0 to 256 [ 737.248392][T11713] loop4: detected capacity change from 0 to 512 [ 737.399512][T11713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.412765][T11713] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.666971][T11713] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 737.749193][T11713] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 38 with error 28 [ 737.762155][T11713] EXT4-fs (loop4): This should not happen!! Data will be lost [ 737.762155][T11713] [ 737.772201][T11713] EXT4-fs (loop4): Total free blocks count 0 [ 737.778570][T11713] EXT4-fs (loop4): Free/Dirty block details [ 737.784652][T11713] EXT4-fs (loop4): free_blocks=65280 [ 737.790325][T11713] EXT4-fs (loop4): dirty_blocks=56 [ 737.795627][T11713] EXT4-fs (loop4): Block reservation details [ 737.802103][T11713] EXT4-fs (loop4): i_reserved_data_blocks=56 [ 737.821777][T11721] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 738.001936][T11724] loop5: detected capacity change from 0 to 128 [ 738.094867][T11724] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 738.206044][ T30] audit: type=1800 audit(1763071380.819:4): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1963" name="file2" dev="loop5" ino=1048630 res=0 errno=0 [ 738.965050][T11733] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1968'. [ 739.069278][T11731] loop2: detected capacity change from 0 to 2048 [ 739.151260][T11731] udf: Bad value for 'anchor' [ 741.496559][T11770] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1981'. [ 742.502744][T11782] loop2: detected capacity change from 0 to 256 [ 745.358129][ T30] audit: type=1326 audit(1763071387.949:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 745.380692][ T30] audit: type=1326 audit(1763071387.989:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 745.406141][ T30] audit: type=1326 audit(1763071387.989:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 745.435779][ T30] audit: type=1326 audit(1763071387.989:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 745.459312][ T30] audit: type=1326 audit(1763071387.989:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 745.481876][ T30] audit: type=1326 audit(1763071387.989:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 745.504420][ T30] audit: type=1326 audit(1763071387.989:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 745.531128][ T30] audit: type=1326 audit(1763071388.009:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 745.554773][ T30] audit: type=1326 audit(1763071388.009:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 745.577306][ T30] audit: type=1326 audit(1763071388.029:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11817 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 746.899895][T11838] fuse: Bad value for 'fd' [ 747.045664][T11840] loop5: detected capacity change from 0 to 1024 [ 747.112492][T11840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 747.183712][T11840] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003] [ 747.280587][T11840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.928223][T11189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.121074][T11859] loop2: detected capacity change from 0 to 512 [ 748.199206][T11859] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 748.259574][T11859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 748.358769][T11859] System zones: 1-12 [ 748.408110][T11859] EXT4-fs (loop2): orphan cleanup on readonly fs [ 748.456615][T11859] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2013: invalid indirect mapped block 12 (level 1) [ 748.532807][T11859] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2013: invalid indirect mapped block 2 (level 2) [ 748.646288][T11859] EXT4-fs (loop2): 1 truncate cleaned up [ 748.654873][T11859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 749.100464][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 750.388959][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2022'. [ 751.175063][T11903] loop2: detected capacity change from 0 to 256 [ 753.388811][T11928] loop2: detected capacity change from 0 to 1024 [ 753.612374][T11931] loop5: detected capacity change from 0 to 1024 [ 754.090373][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2039'. [ 754.864162][T11948] loop5: detected capacity change from 0 to 512 [ 755.067175][T11948] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.2042: corrupted in-inode xattr: invalid ea_ino [ 755.155765][T11948] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2042: couldn't read orphan inode 15 (err -117) [ 755.250746][T11948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.588382][T11960] loop5: detected capacity change from 512 to 0 [ 755.705946][T11962] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 68) [ 755.718288][T11962] Buffer I/O error on device loop5, logical block 68 [ 755.725156][T11962] Buffer I/O error on device loop5, logical block 69 [ 755.732000][T11962] Buffer I/O error on device loop5, logical block 70 [ 755.739203][T11962] Buffer I/O error on device loop5, logical block 71 [ 755.746514][T11962] Buffer I/O error on device loop5, logical block 72 [ 755.753364][T11962] Buffer I/O error on device loop5, logical block 73 [ 755.760213][T11962] Buffer I/O error on device loop5, logical block 74 [ 755.767056][T11962] Buffer I/O error on device loop5, logical block 75 [ 755.775494][T11962] Buffer I/O error on device loop5, logical block 76 [ 755.782356][T11962] Buffer I/O error on device loop5, logical block 77 [ 755.790489][T11962] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 145) [ 755.802727][T11962] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 165) [ 756.208293][T11189] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 756.486791][ T3017] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 40) [ 756.498725][ T3017] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 48) [ 756.510657][ T3017] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 56) [ 756.522468][ T3017] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 64) [ 756.534390][ T3017] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 44) [ 756.546276][ T3017] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 19 starting block 52) [ 756.691960][T11189] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.801610][T11189] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 756.810367][T11189] EXT4-fs (loop5): I/O error while writing superblock [ 757.186511][ T3826] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.412288][ T3826] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.632092][ T3826] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.904204][ T3826] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.910760][T11987] fuse: Bad value for 'fd' [ 758.449214][ T3826] bridge_slave_1: left allmulticast mode [ 758.455072][ T3826] bridge_slave_1: left promiscuous mode [ 758.462219][ T3826] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.559587][ T3826] bridge_slave_0: left allmulticast mode [ 758.565446][ T3826] bridge_slave_0: left promiscuous mode [ 758.572316][ T3826] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.077732][ T3826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.105156][ T3826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.124058][ T3826] bond0 (unregistering): Released all slaves [ 759.741897][ T3826] hsr_slave_0: left promiscuous mode [ 759.808892][ T3826] hsr_slave_1: left promiscuous mode [ 759.817192][ T3826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.824922][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.911754][ T3826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.919488][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.040567][ T3826] veth1_macvtap: left promiscuous mode [ 760.046337][ T3826] veth0_macvtap: left promiscuous mode [ 760.052504][ T3826] veth1_vlan: left promiscuous mode [ 760.058222][ T3826] veth0_vlan: left promiscuous mode [ 760.972959][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 760.998995][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 761.052001][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 761.165001][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 761.182329][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 761.406178][ T3826] team0 (unregistering): Port device team_slave_1 removed [ 761.530806][ T3826] team0 (unregistering): Port device team_slave_0 removed [ 762.300643][ T5861] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 762.516034][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.529807][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.540456][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 762.553767][ T5861] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 762.563875][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.791091][ T5861] usb 3-1: config 0 descriptor?? [ 763.282941][ T5861] plantronics 0003:047F:FFFF.0004: unbalanced collection at end of report description [ 763.319609][ T9711] Bluetooth: hci2: command tx timeout [ 763.395068][ T5861] plantronics 0003:047F:FFFF.0004: parse failed [ 763.402513][ T5861] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 763.518540][T12026] usb 3-1: USB disconnect, device number 29 [ 763.782838][T12011] chnl_net:caif_netlink_parms(): no params data found [ 765.095310][T12011] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.103185][T12011] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.111225][T12011] bridge_slave_0: entered allmulticast mode [ 765.121172][T12011] bridge_slave_0: entered promiscuous mode [ 765.251174][T12011] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.259250][T12011] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.266981][T12011] bridge_slave_1: entered allmulticast mode [ 765.277179][T12011] bridge_slave_1: entered promiscuous mode [ 765.399059][ T9711] Bluetooth: hci2: command tx timeout [ 765.549203][T12011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.574231][T12011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.705967][T12011] team0: Port device team_slave_0 added [ 765.730972][T12011] team0: Port device team_slave_1 added [ 765.864418][T12011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.871929][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.899208][T12011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.024413][T12011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.035702][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.062473][T12011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.589014][T12011] hsr_slave_0: entered promiscuous mode [ 766.599492][T12011] hsr_slave_1: entered promiscuous mode [ 766.608550][T12011] debugfs: 'hsr0' already exists in 'hsr' [ 766.614440][T12011] Cannot create hsr debugfs directory [ 767.478393][ T9711] Bluetooth: hci2: command tx timeout [ 768.119248][T12011] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 768.225323][T12011] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 768.370036][T12011] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 768.467944][T12011] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 769.431705][T12011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.560168][ T9711] Bluetooth: hci2: command tx timeout [ 769.676245][T12011] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.782516][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.790328][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.923515][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.931270][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.308767][T12011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 771.870809][T12150] netlink: 'syz.3.2102': attribute type 10 has an invalid length. [ 772.115193][T12011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.503107][T12011] veth0_vlan: entered promiscuous mode [ 774.664922][T12011] veth1_vlan: entered promiscuous mode [ 775.034691][T12011] veth0_macvtap: entered promiscuous mode [ 775.091894][T12011] veth1_macvtap: entered promiscuous mode [ 775.264331][T12200] loop2: detected capacity change from 0 to 1024 [ 775.336622][T12011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.398640][T12200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.420990][T12011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.467457][ T3897] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.476900][ T3897] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.536246][ T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.602128][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.081496][T12210] netlink: 'syz.4.2120': attribute type 8 has an invalid length. [ 776.168651][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.072087][T12225] loop2: detected capacity change from 0 to 512 [ 777.121410][T12225] EXT4-fs: Ignoring removed i_version option [ 777.355986][T12225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.482256][T12225] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 777.814150][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.288530][T12246] fuse: Bad value for 'fd' [ 779.062233][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2134'. [ 782.571439][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.579112][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.646258][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.654523][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.761810][T12318] fuse: Bad value for 'fd' [ 782.935609][ T3862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.944100][ T3862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.370008][T12327] fuse: Bad value for 'fd' [ 785.857624][T12366] fuse: Bad value for 'fd' [ 788.900115][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 788.900197][ T30] audit: type=1326 audit(1763071431.519:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 788.931027][ T30] audit: type=1326 audit(1763071431.529:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 788.955207][ T30] audit: type=1326 audit(1763071431.529:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 788.982882][ T30] audit: type=1326 audit(1763071431.529:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 789.007000][ T30] audit: type=1326 audit(1763071431.559:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 789.029537][ T30] audit: type=1326 audit(1763071431.579:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 789.056839][ T30] audit: type=1326 audit(1763071431.579:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 789.081054][ T30] audit: type=1326 audit(1763071431.579:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 789.103958][ T30] audit: type=1326 audit(1763071431.579:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 789.126440][ T30] audit: type=1326 audit(1763071431.609:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.2188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 798.858788][T12546] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2232'. [ 806.720188][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2259'. [ 809.160605][T12664] 9pnet_virtio: no channels available for device syz [ 812.691567][T12714] 9pnet_virtio: no channels available for device syz [ 816.080081][T12756] fuse: Bad value for 'fd' [ 817.574902][T12771] 9pnet_virtio: no channels available for device syz [ 820.861530][T12815] 9pnet_virtio: no channels available for device syz [ 820.880172][T12817] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 822.483950][T12837] syz.6.2325 (12837) used greatest stack depth: 2344 bytes left [ 827.695448][T12911] Invalid ELF header magic: != ELF [ 828.353463][T12916] syz.3.2357(12916): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 842.486524][T13002] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2391'. [ 843.990113][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 843.996734][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.879049][T13037] cgroup: Unknown subsys name 'cpuset' [ 846.049005][T13053] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2414'. [ 850.432041][T13092] process 'syz.6.2433' launched './file0' with NULL argv: empty string added [ 850.935065][T13102] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2437'. [ 854.041689][T13147] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2456'. [ 858.859176][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 858.859261][ T30] audit: type=1326 audit(1763071502.465:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13182 comm="syz.7.2472" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x0 [ 862.307254][T13212] lo: entered allmulticast mode [ 862.352591][T13211] lo: left allmulticast mode [ 866.520884][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 866.580955][T13234] fuse: Bad value for 'fd' [ 867.263411][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2487'. [ 867.273530][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2487'. [ 868.025591][T13243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2489'. [ 868.035459][T13243] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2489'. [ 868.369083][T13247] raw_sendmsg: syz.4.2491 forgot to set AF_INET. Fix it! [ 869.070582][T13254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2494'. [ 869.269862][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'. [ 869.828237][T13259] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2496'. [ 870.695584][ T30] audit: type=1326 audit(1763071514.315:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 870.718257][ T30] audit: type=1326 audit(1763071514.315:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 870.888063][ T30] audit: type=1326 audit(1763071514.375:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 870.910930][ T30] audit: type=1326 audit(1763071514.395:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 870.933381][ T30] audit: type=1326 audit(1763071514.395:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 870.955793][ T30] audit: type=1326 audit(1763071514.445:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 870.979921][ T30] audit: type=1326 audit(1763071514.445:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 871.002783][ T30] audit: type=1326 audit(1763071514.445:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 871.025167][ T30] audit: type=1326 audit(1763071514.445:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 871.048389][ T30] audit: type=1326 audit(1763071514.445:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.4.2501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf71f8b00 code=0x7ffc0000 [ 873.673639][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2515'. [ 874.916083][T13329] cgroup: Unknown subsys name 'cpuset' [ 876.427588][T13346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2528'. [ 876.644609][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2531'. [ 886.998272][ T9711] Bluetooth: hci2: command 0x0406 tx timeout [ 890.296531][T13495] nfs: Deprecated parameter 'nointr' [ 890.302404][T13495] nfs: Unknown parameter 'fscontext' [ 897.320233][T13554] fuse: Bad value for 'fd' [ 899.562919][T13573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2609'. [ 899.572437][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2609'. [ 904.203164][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2627'. [ 904.241396][T13609] netlink: 'syz.3.2622': attribute type 9 has an invalid length. [ 904.255125][T13609] netlink: 'syz.3.2622': attribute type 6 has an invalid length. [ 904.264432][T13609] netlink: 'syz.3.2622': attribute type 7 has an invalid length. [ 904.272710][T13609] netlink: 'syz.3.2622': attribute type 8 has an invalid length. [ 905.444664][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.451489][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 906.314092][T13642] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2636'. [ 906.374858][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2636'. [ 911.733595][T13691] fuse: Bad value for 'fd' [ 913.507078][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 913.507162][ T30] audit: type=1326 audit(1763071557.125:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13709 comm="syz.2.2664" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62539 code=0x0 [ 921.541103][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2696'. [ 928.687488][T13934] trusted_key: encrypted_key: insufficient parameters specified [ 933.783808][ T30] audit: type=1326 audit(1763071577.405:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14033 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 933.806402][ T30] audit: type=1326 audit(1763071577.405:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14033 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 933.917545][ T30] audit: type=1326 audit(1763071577.465:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14033 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 933.944574][ T30] audit: type=1326 audit(1763071577.465:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14033 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 933.971845][ T30] audit: type=1326 audit(1763071577.515:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14033 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 933.994699][ T30] audit: type=1326 audit(1763071577.515:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14033 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 934.019904][ T30] audit: type=1326 audit(1763071577.525:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14033 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 934.050854][ T30] audit: type=1326 audit(1763071577.525:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14033 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 939.200969][T14113] 9pnet_fd: Insufficient options for proto=fd [ 945.386366][ T9711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 945.399003][ T9711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 945.410578][ T9711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 945.424671][ T9711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 945.436536][ T9711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 947.122289][T14192] chnl_net:caif_netlink_parms(): no params data found [ 947.204310][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2822'. [ 947.478100][ T9711] Bluetooth: hci5: command tx timeout [ 948.954169][T14192] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.962049][T14192] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.970147][T14192] bridge_slave_0: entered allmulticast mode [ 948.979991][T14192] bridge_slave_0: entered promiscuous mode [ 949.103460][T14192] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.111443][T14192] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.121057][T14192] bridge_slave_1: entered allmulticast mode [ 949.131105][T14192] bridge_slave_1: entered promiscuous mode [ 949.288065][T14192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.320129][T14192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.501941][T14192] team0: Port device team_slave_0 added [ 949.552044][T14192] team0: Port device team_slave_1 added [ 949.568420][ T9711] Bluetooth: hci5: command tx timeout [ 949.894159][T14192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.901670][T14192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.933911][T14192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.014349][T14192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.027148][T14192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.054887][T14192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.363291][T14192] hsr_slave_0: entered promiscuous mode [ 950.373954][T14192] hsr_slave_1: entered promiscuous mode [ 950.383140][T14192] debugfs: 'hsr0' already exists in 'hsr' [ 950.389351][T14192] Cannot create hsr debugfs directory [ 951.416171][T14192] bond0: (slave netdevsim3): Releasing backup interface [ 951.465069][T14192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.620452][T14192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.642074][ T9711] Bluetooth: hci5: command tx timeout [ 951.732408][T14192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.831679][T14192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.444117][T14192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 952.492469][T14192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 952.532433][T14192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 952.624949][T14192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 953.527511][T14192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.721632][T14192] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.731848][ T9711] Bluetooth: hci5: command tx timeout [ 953.779543][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.787043][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.955133][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.962771][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.228057][T14192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.696124][T14192] veth0_vlan: entered promiscuous mode [ 955.819891][T14192] veth1_vlan: entered promiscuous mode [ 956.048463][T14192] veth0_macvtap: entered promiscuous mode [ 956.085858][T14192] veth1_macvtap: entered promiscuous mode [ 956.235468][T14192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.336156][T14192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.427278][T13785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.485203][T13785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.538106][T13785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.568399][T13785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.966828][T13785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.975056][T13785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.291806][T13810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.300667][T13810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.795135][T14364] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2877'. [ 965.984522][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2882'. [ 966.871672][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 966.878613][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.152862][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2889'. [ 967.162559][T14395] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2889'. [ 968.835887][T14412] loop3: detected capacity change from 0 to 2048 [ 969.185879][T14412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.539057][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'. [ 969.548544][T14422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.612267][T14192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.630880][T14422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.659004][T13773] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 970.744271][T13773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.752744][T13773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.046207][T14434] loop3: detected capacity change from 0 to 1024 [ 972.128794][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2908'. [ 972.937158][T14451] loop3: detected capacity change from 0 to 512 [ 973.040842][T14453] ===================================================== [ 973.048323][T14453] BUG: KMSAN: uninit-value in eth_type_trans+0x69d/0x9a0 [ 973.055593][T14453] eth_type_trans+0x69d/0x9a0 [ 973.060701][T14453] __dev_forward_skb2+0x4b1/0x950 [ 973.065940][T14453] dev_forward_skb_nomtu+0x3b/0xe0 [ 973.071342][T14453] __bpf_redirect+0x14d6/0x1760 [ 973.076396][T14453] bpf_clone_redirect+0x366/0x530 [ 973.081845][T14453] ___bpf_prog_run+0x1297/0xeba0 [ 973.086988][T14453] __bpf_prog_run512+0xc5/0x100 [ 973.092253][T14453] bpf_test_run+0x496/0xd80 [ 973.096997][T14453] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 973.102795][T14453] bpf_prog_test_run+0x5c2/0xa40 [ 973.108055][T14453] __sys_bpf+0x873/0xeb0 [ 973.112447][T14453] __ia32_sys_bpf+0xa4/0xf0 [ 973.117181][T14453] ia32_sys_call+0xadf/0x4310 [ 973.122286][T14453] __do_fast_syscall_32+0xb0/0x150 [ 973.127627][T14453] do_fast_syscall_32+0x38/0x80 [ 973.132782][T14453] do_SYSENTER_32+0x1f/0x30 [ 973.137522][T14453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 973.144243][T14453] [ 973.146646][T14453] Uninit was created at: [ 973.151349][T14453] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 973.157528][T14453] kmalloc_reserve+0x13c/0x4b0 [ 973.162575][T14453] pskb_expand_head+0x1fc/0x1610 [ 973.167850][T14453] skb_ensure_writable+0x44e/0x510 [ 973.173157][T14453] bpf_clone_redirect+0x1c1/0x530 [ 973.178604][T14453] ___bpf_prog_run+0x1297/0xeba0 [ 973.183694][T14453] __bpf_prog_run512+0xc5/0x100 [ 973.188912][T14453] bpf_test_run+0x496/0xd80 [ 973.193616][T14453] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 973.199410][T14453] bpf_prog_test_run+0x5c2/0xa40 [ 973.204554][T14453] __sys_bpf+0x873/0xeb0 [ 973.209138][T14453] __ia32_sys_bpf+0xa4/0xf0 [ 973.213898][T14453] ia32_sys_call+0xadf/0x4310 [ 973.218995][T14453] __do_fast_syscall_32+0xb0/0x150 [ 973.224329][T14453] do_fast_syscall_32+0x38/0x80 [ 973.229548][T14453] do_SYSENTER_32+0x1f/0x30 [ 973.234280][T14453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 973.241014][T14453] [ 973.243561][T14453] CPU: 1 UID: 0 PID: 14453 Comm: syz.6.2912 Not tainted syzkaller #0 PREEMPT(none) [ 973.253260][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 973.263954][T14453] ===================================================== [ 973.271144][T14453] Disabling lock debugging due to kernel taint [ 973.277477][T14453] Kernel panic - not syncing: kmsan.panic set ... [ 973.284039][T14453] CPU: 1 UID: 0 PID: 14453 Comm: syz.6.2912 Tainted: G B syzkaller #0 PREEMPT(none) [ 973.295179][T14453] Tainted: [B]=BAD_PAGE [ 973.299424][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 973.309637][T14453] Call Trace: [ 973.313014][T14453] [ 973.316033][T14453] __dump_stack+0x26/0x30 [ 973.320554][T14453] dump_stack_lvl+0x53/0x270 [ 973.325323][T14453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 973.331298][T14453] dump_stack+0x1e/0x25 [ 973.335599][T14453] vpanic+0x435/0xd30 [ 973.339755][T14453] panic+0x15d/0x160 [ 973.343856][T14453] kmsan_report+0x31c/0x320 [ 973.348509][T14453] ? bpf_prog_test_run+0x5c2/0xa40 [ 973.353756][T14453] ? __msan_warning+0x1b/0x30 [ 973.358571][T14453] ? eth_type_trans+0x69d/0x9a0 [ 973.363608][T14453] ? __dev_forward_skb2+0x4b1/0x950 [ 973.368979][T14453] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 973.374433][T14453] ? __bpf_redirect+0x14d6/0x1760 [ 973.379657][T14453] ? bpf_clone_redirect+0x366/0x530 [ 973.385072][T14453] ? ___bpf_prog_run+0x1297/0xeba0 [ 973.390338][T14453] ? __bpf_prog_run512+0xc5/0x100 [ 973.395529][T14453] ? bpf_test_run+0x496/0xd80 [ 973.400390][T14453] ? bpf_prog_test_run_skb+0x18c1/0x26a0 [ 973.406210][T14453] ? bpf_prog_test_run+0x5c2/0xa40 [ 973.411485][T14453] ? __sys_bpf+0x873/0xeb0 [ 973.416038][T14453] ? __ia32_sys_bpf+0xa4/0xf0 [ 973.420907][T14453] ? ia32_sys_call+0xadf/0x4310 [ 973.425951][T14453] ? __do_fast_syscall_32+0xb0/0x150 [ 973.431419][T14453] ? do_fast_syscall_32+0x38/0x80 [ 973.436636][T14453] ? do_SYSENTER_32+0x1f/0x30 [ 973.441500][T14453] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 973.448212][T14453] ? kmem_cache_alloc_node_noprof+0x71/0x16b0 [ 973.454442][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.459739][T14453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 973.465717][T14453] ? eth_get_headlen+0x181/0x1e0 [ 973.470837][T14453] ? filter_irq_stacks+0x49/0x190 [ 973.476048][T14453] ? stack_depot_save_flags+0x35/0x7b0 [ 973.481679][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.486956][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.492221][T14453] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 973.498773][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.504033][T14453] __msan_warning+0x1b/0x30 [ 973.508680][T14453] eth_type_trans+0x69d/0x9a0 [ 973.513589][T14453] __dev_forward_skb2+0x4b1/0x950 [ 973.518799][T14453] ? pskb_expand_head+0x1268/0x1610 [ 973.524233][T14453] dev_forward_skb_nomtu+0x3b/0xe0 [ 973.529523][T14453] __bpf_redirect+0x14d6/0x1760 [ 973.534591][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.539868][T14453] bpf_clone_redirect+0x366/0x530 [ 973.545120][T14453] ___bpf_prog_run+0x1297/0xeba0 [ 973.550257][T14453] __bpf_prog_run512+0xc5/0x100 [ 973.555288][T14453] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 973.561844][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.567120][T14453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 973.573080][T14453] ? __local_bh_enable_ip+0x61/0xb0 [ 973.578483][T14453] ? filter_irq_stacks+0x49/0x190 [ 973.583805][T14453] ? stack_depot_save_flags+0x35/0x7b0 [ 973.589445][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.594736][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.599999][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.605276][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.610542][T14453] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 973.617084][T14453] ? kmsan_get_metadata+0x150/0x160 [ 973.622471][T14453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 973.628477][T14453] ? __pfx___bpf_prog_run512+0x10/0x10 [ 973.634123][T14453] ? __pfx___bpf_prog_run512+0x10/0x10 [ 973.639728][T14453] bpf_test_run+0x496/0xd80 [ 973.644409][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.649680][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.654949][T14453] ? kmsan_get_metadata+0xfb/0x160 [ 973.660221][T14453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 973.666213][T14453] ? bpf_test_run+0x2f7/0xd80 [ 973.671085][T14453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 973.677097][T14453] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 973.682789][T14453] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 973.688811][T14453] bpf_prog_test_run+0x5c2/0xa40 [ 973.693932][T14453] __sys_bpf+0x873/0xeb0 [ 973.698370][T14453] __ia32_sys_bpf+0xa4/0xf0 [ 973.703079][T14453] ia32_sys_call+0xadf/0x4310 [ 973.707947][T14453] __do_fast_syscall_32+0xb0/0x150 [ 973.713310][T14453] do_fast_syscall_32+0x38/0x80 [ 973.718357][T14453] do_SYSENTER_32+0x1f/0x30 [ 973.723051][T14453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 973.729593][T14453] RIP: 0023:0xf7f87539 [ 973.733778][T14453] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 973.753568][T14453] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 973.762140][T14453] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 973.770266][T14453] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 973.778370][T14453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 973.786460][T14453] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 973.794538][T14453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 973.802652][T14453] [ 973.806158][T14453] Kernel Offset: disabled [ 973.810560][T14453] Rebooting in 86400 seconds..