last executing test programs: 25m19.003777139s ago: executing program 32 (id=1182): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2010092, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) 25m10.412012395s ago: executing program 33 (id=1158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file1\x00', 0x0, 0x1) 18m18.879810891s ago: executing program 4 (id=3257): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000180)="e2", 0xb, 0x1, 0xc45, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) 18m18.746850174s ago: executing program 4 (id=3260): write(0xffffffffffffffff, &(0x7f0000000040)="a7f1", 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) 18m18.676181502s ago: executing program 4 (id=3263): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) ptrace(0x10, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) msgctl$IPC_RMID(r1, 0x0) 18m17.768515675s ago: executing program 4 (id=3278): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 18m17.747733658s ago: executing program 4 (id=3281): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) 18m17.613496535s ago: executing program 4 (id=3286): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x53, 0xb0, 0x9f, 0x20, 0x534d, 0x2109, 0xa550, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x5, 0x4, 0x0, 0x1, 0x1, 0xe}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 18m17.487952274s ago: executing program 5 (id=3295): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x32, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18m17.292108758s ago: executing program 2 (id=3301): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$TIOCSETD(r0, 0x5423, 0x0) 18m17.270650408s ago: executing program 2 (id=3302): sendmsg$unix(0xffffffffffffffff, 0x0, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8901, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18006672e16714d2000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f0000000400)=""/31}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000000) 18m17.194926315s ago: executing program 2 (id=3303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x4, &(0x7f0000000240)='+:$\x00'}, 0x30) 18m17.194706903s ago: executing program 2 (id=3304): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_submit(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000048000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_io_uring_setup(0x5bbd, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0xbe2, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x1106, &(0x7f0000000740), &(0x7f0000000800), 0x0) syz_io_uring_setup(0x76a, &(0x7f0000000100), &(0x7f0000000340), 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r4, 0x47, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x1413, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000840)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f00000004c0)=""/131) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) 18m16.602919317s ago: executing program 5 (id=3305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 18m16.512073041s ago: executing program 5 (id=3308): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') unshare(0x62040200) 18m16.449152921s ago: executing program 5 (id=3310): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 18m16.405487261s ago: executing program 5 (id=3311): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) unshare(0xa020480) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 18m16.390588002s ago: executing program 5 (id=3313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 18m16.314193127s ago: executing program 2 (id=3314): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r1, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000900)=ANY=[], 0x0) 18m16.258653527s ago: executing program 2 (id=3315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17m52.213544647s ago: executing program 34 (id=3307): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/165, 0xa5}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 17m52.133197113s ago: executing program 35 (id=3312): capset(&(0x7f0000000080)={0x19980330}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) truncate(&(0x7f0000000040)='./file0\x00', 0x4) 17m52.056164553s ago: executing program 36 (id=3315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17m51.916844928s ago: executing program 37 (id=3313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 17m51.894776439s ago: executing program 38 (id=3286): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x53, 0xb0, 0x9f, 0x20, 0x534d, 0x2109, 0xa550, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x5, 0x4, 0x0, 0x1, 0x1, 0xe}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 17m44.756066379s ago: executing program 7 (id=3316): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x1114}], 0x1, 0x8001) 17m43.877422685s ago: executing program 7 (id=3325): r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 17m43.817352973s ago: executing program 7 (id=3326): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") mkdir(&(0x7f0000000440)='./control\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rmdir(&(0x7f0000000000)='./control\x00') 17m43.691691283s ago: executing program 7 (id=3329): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000700)={[{@grpquota}, {@noload}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x5, 0x5, 0x3, 0x0, 0x67, 0x7811bdba, 0x0, 0x0, 0x400000ad}) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000600)=ANY=[], 0x4000) 17m42.782526071s ago: executing program 7 (id=3330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x2c000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x40}}, 0x4048000) 17m42.710289692s ago: executing program 39 (id=3330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x2c000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x40}}, 0x4048000) 7m52.191258899s ago: executing program 0 (id=6908): timer_create(0x2, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000180), 0xee, 0x456, &(0x7f00000004c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) brk(0xc00000000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x303400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0x0, 0x8}, 0x3, 0x4, 0x1cb5, {0xe, 0x6}, 0x9, 0xff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x2b, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9, 0x0, @opaque="c6"}}}}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 7m50.758528037s ago: executing program 0 (id=6918): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000a93000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x28) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m49.792488124s ago: executing program 0 (id=6923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'wg0\x00', 0x2}) 7m49.726608842s ago: executing program 0 (id=6925): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000380)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@quota}, {@minixdf}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/../file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4) 7m48.324189022s ago: executing program 0 (id=6936): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x5e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 7m48.093491498s ago: executing program 0 (id=6941): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x80000000, 0x0, 0x1, 0x3, 0x0, 0x100}, 0x20) 7m47.942499577s ago: executing program 40 (id=6941): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x80000000, 0x0, 0x1, 0x3, 0x0, 0x100}, 0x20) 6.028563213s ago: executing program 1 (id=10102): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) rename(0x0, &(0x7f0000000340)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) getitimer(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 5.14490123s ago: executing program 1 (id=10110): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 3.947314859s ago: executing program 1 (id=10113): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.923572753s ago: executing program 1 (id=10114): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="ee", 0xff80}], 0x1}, 0x0) 3.180576801s ago: executing program 8 (id=10122): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.146176991s ago: executing program 8 (id=10123): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 3.060913062s ago: executing program 1 (id=10124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.033859841s ago: executing program 1 (id=10125): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x304}, "ec104bcd6488d2f6", "8f8c2a478c4e48f9575d967978dd13c9", "980900", "c69df17e8d1b3a58"}, 0x28) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) 2.942955261s ago: executing program 3 (id=10126): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) unshare(0x24020400) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioprio_get$uid(0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020301040000000000000000000041200800010001000000"], 0x1c}}, 0x0) poll(&(0x7f0000000240)=[{r1, 0x9350}, {r2, 0x2}, {0xffffffffffffffff, 0x8470}, {0xffffffffffffffff, 0x1028}, {r3, 0x4401}, {0xffffffffffffffff, 0x8604}], 0x6, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.096606816s ago: executing program 6 (id=10132): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20000000110001010000000082c1c1fe49e198"], 0x20}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000001040)={&(0x7f0000000c00)={{@local, 0x7ff}, {@host, 0x401}, 0x400, "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"}, 0x418, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f0000005600)='./file1\x00', 0x800002, &(0x7f0000001080)={[{@barrier}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@max_inline={'max_inline', 0x3d, [0x36, 0x70, 0x70, 0x5f, 0x36, 0x78]}}, {@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x1, 0x559e, &(0x7f0000005680)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000002, 0x0, 0xfffffffffffffff8}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0xb, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1) write$sndseq(r0, &(0x7f0000000280)=[{0x7, 0xa, 0x9, 0x4, @tick=0x2, {0x15, 0x7}, {0x2, 0x7}, @raw32={[0x2, 0x7ff, 0x9]}}], 0x1c) 2.075331214s ago: executing program 3 (id=10133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0xa, 0x800000000000002, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.029755207s ago: executing program 8 (id=10134): syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x30}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.505578216s ago: executing program 6 (id=10136): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0xc008744c, &(0x7f00000000c0)={0x21, 0x1}) 1.429149569s ago: executing program 3 (id=10137): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c40)}, {&(0x7f0000000940)="a91e020086", 0x5}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.358920494s ago: executing program 6 (id=10138): r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140), 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1", 0x12}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003500), 0x0, 0x44004) 1.290881271s ago: executing program 9 (id=10140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc00080005"], 0x58}}, 0x0) 1.206986728s ago: executing program 9 (id=10141): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, 0x0, 0x0) 1.206713664s ago: executing program 9 (id=10142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @rand_addr, 0x8}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x3}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8004) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001500)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x44050) 891.386862ms ago: executing program 8 (id=10143): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) unshare(0x24020400) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioprio_get$uid(0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020301040000000000000000000041200800010001000000"], 0x1c}}, 0x0) poll(&(0x7f0000000240)=[{r1, 0x9350}, {r2, 0x2}, {0xffffffffffffffff, 0x8470}, {0xffffffffffffffff, 0x1028}, {r3, 0x4401}, {0xffffffffffffffff, 0x8604}], 0x6, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 871.349073ms ago: executing program 9 (id=10144): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 775.030315ms ago: executing program 6 (id=10145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000050000000400000006"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 699.001812ms ago: executing program 6 (id=10146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x40}, 0x1c) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) 655.409258ms ago: executing program 6 (id=10147): r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRES32, @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x5, 0x0, 0x7}, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) 550.421194ms ago: executing program 8 (id=10148): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020100000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 151.006779ms ago: executing program 3 (id=10149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 81.851918ms ago: executing program 3 (id=10150): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e00010069703667726574617000000034000280", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 81.185469ms ago: executing program 8 (id=10151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x2a, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001400000004"], 0x20) 56.25177ms ago: executing program 9 (id=10152): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, 0x0, 0x0) 602.189µs ago: executing program 9 (id=10153): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[], 0xff, 0x1f9, &(0x7f0000000700)="$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") 0s ago: executing program 3 (id=10154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240000000000000000908000340"], 0xdc}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 0s ago: executing program 1 (id=10155): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @loopback, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0x180000000000000) kernel console output (not intermixed with test programs): rning: checktime reached, running e2fsck is recommended [ 1660.544607][ T3820] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1660.557233][ T3820] System zones: 0-2, 18-18, 34-34 [ 1660.574937][ T3820] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1660.606549][ T3820] EXT4-fs (loop9): 1 truncate cleaned up [ 1660.613271][ T3828] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8181'. [ 1660.633005][T30204] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.644355][ T3820] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1660.664583][T30204] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1660.688916][T30204] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1660.709739][T30204] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1660.719363][T30204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.728220][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8181'. [ 1660.740512][ T3828] netlink: 'syz.8.8181': attribute type 25 has an invalid length. [ 1660.750223][T30075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.759496][T30204] usb 2-1: Product: syz [ 1660.763681][T30204] usb 2-1: Manufacturer: syz [ 1660.768479][T30204] usb 2-1: SerialNumber: syz [ 1660.790280][T30204] usb 2-1: selecting invalid altsetting 1 [ 1660.851921][ T3839] loop9: detected capacity change from 0 to 128 [ 1661.098138][ T3843] xt_bpf: check failed: parse error [ 1661.457048][T30204] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 1661.476366][T30204] usb 2-1: selecting invalid altsetting 1 [ 1661.482200][T30204] cdc_ncm 2-1:1.0: bind() failure [ 1661.512535][T30204] usb 2-1: USB disconnect, device number 56 [ 1662.461484][ T3869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.521696][ T3869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1662.533285][ T3869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1662.611277][ T3869] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.639294][ T3869] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.663853][ T3869] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.672833][ T3869] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.112003][ T3869] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.121129][ T3869] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.130078][ T3869] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.138991][ T3869] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.206999][ T3874] netlink: 'syz.1.8198': attribute type 4 has an invalid length. [ 1664.968277][ T3926] loop9: detected capacity change from 0 to 16 [ 1664.975525][ T3926] erofs: (device loop9): erofs_read_inode: bogus i_mode (0) @ nid 58320 [ 1664.991802][ T3926] loop9: detected capacity change from 0 to 512 [ 1665.020580][ T3926] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 1665.027996][ T3926] EXT4-fs (loop9): mount failed [ 1665.042228][ T3926] loop9: detected capacity change from 0 to 512 [ 1665.089587][ T3926] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1665.102191][ T3926] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1665.214039][ T3935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.312967][ T3935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.334059][ T3935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.400781][ T3935] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.415922][ T3935] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.430689][ T3935] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.441553][ T3935] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.512239][ T3948] kvm: apic: phys broadcast and lowest prio [ 1665.518754][ T3935] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.527855][ T3935] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.536778][ T3935] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.545684][ T3935] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.939455][T30075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.571585][ T3987] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1667.851409][ T3986] netlink: 'syz.1.8240': attribute type 2 has an invalid length. [ 1667.860819][ T3986] netlink: 'syz.1.8240': attribute type 1 has an invalid length. [ 1667.869257][ T3986] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8240'. [ 1667.903907][ T3984] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.914782][ T3984] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.926085][ T3984] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.935097][ T3984] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.957136][ T3984] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1667.966538][ T3984] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1667.975459][ T3984] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1667.984594][ T3984] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1668.000351][ T3996] 9pnet_fd: Insufficient options for proto=fd [ 1668.395412][ T4010] xt_bpf: check failed: parse error [ 1668.444046][ T4008] trusted_key: encrypted_key: master key parameter '*',b8Ck֤ [ 1668.444046][ T4008] OKQx֥' is invalid [ 1668.964115][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.037098][ T4019] cgroup: fork rejected by pids controller in /syz3 [ 1669.850533][ T3516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1669.869129][ T3516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.967896][ T3516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1669.987134][ T3516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.069715][ T3516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1670.090890][ T3516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.225669][ T4056] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1670.253147][ T3516] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1670.281755][ T3516] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.341886][ T4056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1670.352956][ T4056] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1670.375699][ T4056] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1670.383117][ T4056] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1670.390470][ T4056] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1670.723764][T18142] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1670.791609][ T4052] lo speed is unknown, defaulting to 1000 [ 1670.998021][T18142] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1671.005927][T18142] usb 10-1: can't read configurations, error -61 [ 1671.215641][T18142] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1671.292428][ T3516] bridge_slave_1: left allmulticast mode [ 1671.303242][ T3516] bridge_slave_1: left promiscuous mode [ 1671.330737][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.363305][ T3516] bridge_slave_0: left allmulticast mode [ 1671.369271][ T3516] bridge_slave_0: left promiscuous mode [ 1671.374978][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.428614][T18142] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1671.443099][T18142] usb 10-1: can't read configurations, error -61 [ 1671.456581][T18142] usb usb10-port1: attempt power cycle [ 1671.762959][ T3516] dvmrp0 (unregistering): left allmulticast mode [ 1671.810628][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1671.821768][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1671.832458][ T3516] bond0 (unregistering): Released all slaves [ 1671.847470][ T3516] bond1 (unregistering): Released all slaves [ 1671.857975][ T3516] bond2 (unregistering): Released all slaves [ 1671.868049][T18142] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1671.898562][T18142] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1671.907110][T18142] usb 10-1: can't read configurations, error -61 [ 1672.026338][ T4052] chnl_net:caif_netlink_parms(): no params data found [ 1672.035590][T18142] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1672.067927][T18142] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1672.085464][T18142] usb 10-1: can't read configurations, error -61 [ 1672.092116][T18142] usb usb10-port1: unable to enumerate USB device [ 1672.170962][ T4052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.194706][ T4052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.229437][ T4052] bridge_slave_0: entered allmulticast mode [ 1672.244430][ T4052] bridge_slave_0: entered promiscuous mode [ 1672.394195][ T3516] hsr_slave_0: left promiscuous mode [ 1672.402264][ T3516] hsr_slave_1: left promiscuous mode [ 1672.428655][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1672.437384][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1672.445243][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1672.453521][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1672.466611][ T3516] veth1_macvtap: left promiscuous mode [ 1672.472213][ T3516] veth0_macvtap: left promiscuous mode [ 1672.479491][ T3516] veth1_vlan: left promiscuous mode [ 1672.619454][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1672.635678][T26406] Bluetooth: hci4: command tx timeout [ 1672.641293][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1672.732589][ T4052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.740021][ T4052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.750171][ T4052] bridge_slave_1: entered allmulticast mode [ 1672.761000][ T4052] bridge_slave_1: entered promiscuous mode [ 1672.832544][ T4052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.849956][ T4052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.886990][ T4052] team0: Port device team_slave_0 added [ 1672.897390][ T4052] team0: Port device team_slave_1 added [ 1672.939047][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.950871][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1672.996114][ T4052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1673.029235][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1673.040859][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1673.071681][ T4052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.181697][ T4052] hsr_slave_0: entered promiscuous mode [ 1673.190651][ T4052] hsr_slave_1: entered promiscuous mode [ 1674.728177][T26406] Bluetooth: hci4: command tx timeout [ 1674.820036][ T4052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1674.835641][ T4052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1674.861108][ T4052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1675.684332][ T4052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1675.738886][ T4052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.752933][ T4052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.775129][ T4052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1675.775155][ T4052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1675.781178][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.781246][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.782270][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.782325][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.213301][ T4052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.232131][ T4052] veth0_vlan: entered promiscuous mode [ 1676.251022][ T4052] veth1_vlan: entered promiscuous mode [ 1676.314719][ T4052] veth0_macvtap: entered promiscuous mode [ 1676.433888][ T4052] veth1_macvtap: entered promiscuous mode [ 1676.459648][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.564233][ T4205] loop9: detected capacity change from 0 to 16 [ 1676.600586][ T4205] erofs: (device loop9): mounted with root inode @ nid 36. [ 1677.179738][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.188805][T26406] Bluetooth: hci4: command tx timeout [ 1677.253112][ T29] audit: type=1326 audit(8172938026.091:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4203 comm="syz.1.8296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccdf7e719 code=0x7ffc0000 [ 1677.290459][ T4052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.320510][ T4052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.355546][ T4052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.376504][ T29] audit: type=1326 audit(8172938026.091:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4203 comm="syz.1.8296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccdf7e719 code=0x7ffc0000 [ 1677.470658][ T4052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.627612][ T29] audit: type=1326 audit(8172938026.091:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4203 comm="syz.1.8296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8ccdf7e719 code=0x7ffc0000 [ 1677.809756][ T29] audit: type=1326 audit(8172938026.091:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4203 comm="syz.1.8296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccdf7e719 code=0x7ffc0000 [ 1677.835284][ T4219] loop9: detected capacity change from 0 to 256 [ 1677.841783][ T29] audit: type=1326 audit(8172938026.091:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4203 comm="syz.1.8296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ccdf1a099 code=0x7ffc0000 [ 1677.868012][ T29] audit: type=1326 audit(8172938026.091:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4203 comm="syz.1.8296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8ccdf7e719 code=0x7ffc0000 [ 1678.018067][ T4219] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1678.040893][ T29] audit: type=1326 audit(8172938026.091:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4203 comm="syz.1.8296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ccdf7e719 code=0x7ffc0000 [ 1678.072186][ T4219] exfat filesystem being mounted at /339/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1678.146170][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.154135][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1678.161831][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.169778][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.260162][T26406] Bluetooth: hci4: command tx timeout [ 1681.271090][ T4056] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1682.688070][ T4337] loop9: detected capacity change from 0 to 1024 [ 1683.547858][ T29] audit: type=1326 audit(8172938032.391:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.1.8330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ccdf7e719 code=0x0 [ 1685.658694][ T4056] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1685.667095][ T4056] Bluetooth: hci2: Injecting HCI hardware error event [ 1685.674059][ T4056] Bluetooth: hci2: hardware error 0x00 [ 1685.704637][ T4359] loop9: detected capacity change from 0 to 32768 [ 1685.724612][ T4359] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.8335 (4359) [ 1686.200737][ T4359] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1686.261216][ T4359] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1686.434693][ T4359] BTRFS info (device loop9): using free-space-tree [ 1687.572926][ T4359] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1687.581881][ T4359] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1687.726679][ T4359] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1687.739579][ T4359] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1687.923520][ T4056] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1687.942845][ T4359] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1687.943077][ T4359] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1688.158126][ T4359] BTRFS error (device loop9): open_ctree failed [ 1688.565267][ T4437] loop9: detected capacity change from 0 to 512 [ 1688.591960][ T4437] EXT4-fs: Ignoring removed i_version option [ 1688.606587][ T4437] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1688.647541][ T4437] EXT4-fs (loop9): 1 truncate cleaned up [ 1688.653976][ T4437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1689.013767][T30075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.175466][ T5850] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1691.216237][ T5850] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1691.380037][ T4479] loop9: detected capacity change from 0 to 512 [ 1692.359238][ T4496] loop9: detected capacity change from 0 to 1024 [ 1693.361726][ T4496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1693.483558][T30075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.505598][ T4535] netlink: 'syz.8.8389': attribute type 2 has an invalid length. [ 1694.585433][ T4535] netlink: 'syz.8.8389': attribute type 1 has an invalid length. [ 1694.593200][ T4535] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.8389'. [ 1694.601371][ T4543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1694.609759][ T4543] IPv6: NLM_F_CREATE should be set when creating new route [ 1694.689042][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.756199][ T4539] loop9: detected capacity change from 0 to 32768 [ 1694.773696][ T4539] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.8391 (4539) [ 1694.802657][ T4539] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1694.813196][ T4539] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1694.852668][ T4539] BTRFS info (device loop9): using free-space-tree [ 1695.095668][ T4561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8395'. [ 1695.115914][ T4561] netlink: 'syz.6.8395': attribute type 25 has an invalid length. [ 1695.272752][ T4561] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1695.281597][ T4561] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1695.290377][ T4561] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1695.299208][ T4561] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1695.517906][ T4539] BTRFS info (device loop9): rebuilding free space tree [ 1695.561829][ T29] audit: type=1800 audit(8172938044.401:4341): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8391" name="bus" dev="loop9" ino=263 res=0 errno=0 [ 1695.769192][T30075] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1696.009020][T18142] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1696.301611][T18142] usb 2-1: config 0 has no interfaces? [ 1696.308669][T18142] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1696.329258][T18142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.388127][T18142] usb 2-1: config 0 descriptor?? [ 1696.702100][T18071] usb 2-1: USB disconnect, device number 57 [ 1696.913649][ T4602] netlink: 'syz.6.8406': attribute type 2 has an invalid length. [ 1696.921518][ T4602] netlink: 'syz.6.8406': attribute type 1 has an invalid length. [ 1696.929428][ T4602] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.8406'. [ 1697.464241][ T4606] kvm: kvm [4605]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x15e00000070 [ 1697.473718][ T4606] kvm: kvm [4605]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x15f00000044 [ 1697.522310][ T4606] kvm: kvm [4605]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x2d7000000f0 [ 1699.616340][ T4639] netlink: 'syz.1.8419': attribute type 2 has an invalid length. [ 1699.628771][ T4639] netlink: 'syz.1.8419': attribute type 1 has an invalid length. [ 1699.636689][ T4639] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8419'. [ 1699.830277][ T29] audit: type=1326 audit(8172938048.581:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.3.8423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce05b7e719 code=0x0 [ 1701.607536][ T4678] kvm: kvm [4677]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x15e00000070 [ 1701.619735][ T4678] kvm: kvm [4677]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x15f00000044 [ 1701.632729][ T4678] kvm: kvm [4677]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x2d7000000f0 [ 1701.721731][ T971] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1701.729615][T26406] Bluetooth: hci4: command 0x0405 tx timeout [ 1702.059846][ T4690] loop9: detected capacity change from 0 to 256 [ 1702.082057][ T4690] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1702.103720][ T4690] exfat filesystem being mounted at /365/file1 supports timestamps until 2107-12-31 (0x10391447f) [ 1702.185504][ T971] usb 2-1: Using ep0 maxpacket: 32 [ 1702.205203][ T971] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1702.214925][ T971] usb 2-1: config 0 has no interface number 0 [ 1702.282184][ T971] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1702.318766][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.371189][ T971] usb 2-1: Product: syz [ 1702.393713][ T971] usb 2-1: Manufacturer: syz [ 1702.407089][ T971] usb 2-1: SerialNumber: syz [ 1702.512088][ T971] usb 2-1: config 0 descriptor?? [ 1702.525602][ T971] smsc95xx v2.0.0 [ 1702.632445][ T4690] netlink: 'syz.9.8435': attribute type 2 has an invalid length. [ 1702.640533][ T4690] netlink: 'syz.9.8435': attribute type 1 has an invalid length. [ 1702.648669][ T4690] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.8435'. [ 1702.690870][ T29] audit: type=1800 audit(8172938051.501:4343): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8435" name="file1" dev="loop9" ino=1048873 res=0 errno=0 [ 1702.878140][ T4708] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8441'. [ 1702.894925][ T4708] netlink: 'syz.9.8441': attribute type 25 has an invalid length. [ 1702.907078][ T4708] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1702.916109][ T4708] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1702.925031][ T4708] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1702.933978][ T4708] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1702.945604][ T971] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1702.956919][ T971] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1702.979579][ T4713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1703.041896][ T4713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1703.578981][ T971] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1703.590247][ T971] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1703.603382][ T971] usb 2-1: USB disconnect, device number 58 [ 1703.607583][ T302] udevd[302]: failed to send result of seq 31859 to main daemon: Connection refused [ 1703.725676][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8453'. [ 1704.435178][ T4752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.531080][ T4752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.915246][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8466'. [ 1706.122292][ T4789] fuse: blksize only supported for fuseblk [ 1707.001975][ T4805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1707.820486][ T4805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1707.998673][T26406] Bluetooth: hci4: command 0x0405 tx timeout [ 1708.194271][ T4828] loop9: detected capacity change from 0 to 1024 [ 1708.280979][ T4829] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1708.646926][T18071] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1708.976248][T18071] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1708.985174][T18071] usb 2-1: config 0 has no interfaces? [ 1708.991937][T18071] usb 2-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48 [ 1709.001174][T18071] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1709.009397][T18071] usb 2-1: Product: syz [ 1709.013577][T18071] usb 2-1: SerialNumber: syz [ 1709.019570][ T5939] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1709.028649][T18071] usb 2-1: config 0 descriptor?? [ 1709.361088][ T971] usb 2-1: USB disconnect, device number 59 [ 1709.579111][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 4 [ 1709.591720][ T5939] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1709.601243][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.609312][ T5939] usb 4-1: Product: syz [ 1709.613498][ T5939] usb 4-1: Manufacturer: syz [ 1709.618159][ T5939] usb 4-1: SerialNumber: syz [ 1709.623967][ T5939] usb 4-1: config 0 descriptor?? [ 1709.631511][ T5939] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 1709.943427][ T5939] usb 4-1: USB disconnect, device number 45 [ 1709.990700][ T4857] loop9: detected capacity change from 0 to 16 [ 1710.025449][ T4857] erofs: (device loop9): mounted with root inode @ nid 36. [ 1710.370402][ T4857] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1710.382009][ T4857] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1710.474671][ T4867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1710.564929][ T4867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.968933][ T4885] loop9: detected capacity change from 0 to 256 [ 1711.980107][ T4885] vfat: Unknown parameter 'B1q鞳+d'#.Ԓͯ?o\ [ 1711.980107][ T4885] 18446744073709551615' [ 1713.298825][ T4913] loop9: detected capacity change from 0 to 512 [ 1713.323493][ T4913] EXT4-fs: Ignoring removed i_version option [ 1713.334188][ T4913] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1713.376993][ T4919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1713.395907][ T4913] EXT4-fs (loop9): 1 truncate cleaned up [ 1713.401924][ T4913] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1713.486845][ T4919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1714.488012][T30075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.992773][ T4941] loop9: detected capacity change from 0 to 16 [ 1715.044652][ T4941] erofs: (device loop9): mounted with root inode @ nid 36. [ 1716.340762][ T5939] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1716.819109][ T5939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1716.834603][ T5939] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1716.941583][ T5939] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1716.964253][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.053776][ T5939] usb 4-1: Product: syz [ 1717.110417][ T5939] usb 4-1: Manufacturer: syz [ 1717.163962][ T5939] usb 4-1: SerialNumber: syz [ 1717.412584][ T4949] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1717.839070][ T4985] loop9: detected capacity change from 0 to 128 [ 1718.156661][ T4993] loop9: detected capacity change from 0 to 16 [ 1718.215125][ T4993] erofs: (device loop9): mounted with root inode @ nid 36. [ 1719.537728][ T5939] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1719.543796][ T5939] cdc_ncm 4-1:1.0: bind() failure [ 1719.550954][ T5939] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1719.557840][ T5939] cdc_ncm 4-1:1.1: bind() failure [ 1719.565050][ T5939] usb 4-1: USB disconnect, device number 46 [ 1719.757943][ T5021] block device autoloading is deprecated and will be removed. [ 1720.740840][ T5041] loop9: detected capacity change from 0 to 512 [ 1720.748067][ T5041] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 1722.005555][ T4056] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1722.014014][ T4056] Bluetooth: hci4: Injecting HCI hardware error event [ 1722.027191][ T4056] Bluetooth: hci4: hardware error 0x00 [ 1723.212507][ T5077] loop9: detected capacity change from 0 to 1024 [ 1724.240234][ T4056] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1729.929307][ T5202] loop9: detected capacity change from 0 to 1024 [ 1729.936292][ T5202] ext4: Invalid uid '0x00000000ffffffff' [ 1730.445787][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.147248][ T5223] 9pnet_virtio: no channels available for device syz [ 1733.060456][ T5248] Bluetooth: MGMT ver 1.23 [ 1734.598505][ T5270] lo speed is unknown, defaulting to 1000 [ 1734.942974][ T5287] loop9: detected capacity change from 0 to 256 [ 1735.015918][ T5287] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1735.106350][ T5287] exfat filesystem being mounted at /401/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 1736.185231][ T5298] input: syz1 as /devices/virtual/input/input67 [ 1736.264419][ T5303] loop9: detected capacity change from 0 to 128 [ 1736.278002][ T5303] EXT4-fs: Ignoring removed mblk_io_submit option [ 1736.284477][ T5303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1736.306071][ T5303] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal [ 1739.431457][ T5357] usb usb9: usbfs: process 5357 (syz.6.8647) did not claim interface 0 before use [ 1739.667620][ T5360] loop9: detected capacity change from 0 to 256 [ 1739.688250][ T5360] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1739.712680][ T5360] exfat filesystem being mounted at /404/file1 supports timestamps until 2107-12-31 (0x10391447f) [ 1740.658572][ T5367] netlink: 'syz.9.8654': attribute type 2 has an invalid length. [ 1740.666402][ T5367] netlink: 'syz.9.8654': attribute type 1 has an invalid length. [ 1740.674137][ T5367] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.8654'. [ 1740.822553][ T29] audit: type=1800 audit(8172938089.521:4344): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8654" name="file1" dev="loop9" ino=1048874 res=0 errno=0 [ 1742.204900][ T5381] loop9: detected capacity change from 0 to 1024 [ 1742.656435][ T5401] loop9: detected capacity change from 0 to 256 [ 1742.669095][ T5401] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1742.684042][ T5401] exfat filesystem being mounted at /406/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1744.553345][ T5424] loop9: detected capacity change from 0 to 2048 [ 1744.645863][ T5424] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1744.675080][ T5424] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 1744.691562][ T5424] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1744.708781][ T5424] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1744.724268][ T5424] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1744.724268][ T5424] [ 1744.745831][ T5424] EXT4-fs (loop9): Total free blocks count 0 [ 1744.751893][ T5424] EXT4-fs (loop9): Free/Dirty block details [ 1744.772494][ T5424] EXT4-fs (loop9): free_blocks=2415919104 [ 1744.779814][ T5424] EXT4-fs (loop9): dirty_blocks=16 [ 1744.791960][ T5424] EXT4-fs (loop9): Block reservation details [ 1744.799539][ T5424] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1744.923690][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8674'. [ 1745.115065][ T5445] netlink: 'syz.8.8674': attribute type 25 has an invalid length. [ 1745.126827][ T5445] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1745.135864][ T5445] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1745.144573][ T5445] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1745.153533][ T5445] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1745.181919][ T5447] loop9: detected capacity change from 0 to 128 [ 1745.201821][ T5447] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1745.214272][ T5447] ext4 filesystem being mounted at /409/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1745.239760][T30075] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1745.872340][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8685'. [ 1747.694245][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8695'. [ 1747.718575][ T5501] netlink: 'syz.3.8695': attribute type 25 has an invalid length. [ 1747.751569][ T5501] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.760503][ T5501] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.769354][ T5501] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.778106][ T5501] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1749.213560][ T5524] loop9: detected capacity change from 0 to 32768 [ 1749.241172][ T5524] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.8701 (5524) [ 1749.257194][ T5524] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1749.275937][ T5524] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 1749.285694][ T5524] BTRFS info (device loop9): using free-space-tree [ 1749.299145][ T5534] mmap: syz.6.8705 (5534) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1749.567666][T30075] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1749.716974][ T5557] loop9: detected capacity change from 0 to 256 [ 1749.744985][ T5557] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1749.784895][ T5557] exfat filesystem being mounted at /415/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1751.353492][ T5602] lo speed is unknown, defaulting to 1000 [ 1751.378482][ T5604] netlink: 11562 bytes leftover after parsing attributes in process `syz.9.8723'. [ 1751.628924][ T5622] loop9: detected capacity change from 0 to 1024 [ 1751.668515][ T5622] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1751.698131][ T29] audit: type=1800 audit(8172938100.541:4345): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8728" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 1752.106873][ T5622] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1752.121879][ T5622] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 8191 with max blocks 2 with error 28 [ 1752.134341][ T5622] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1752.134341][ T5622] [ 1752.143984][ T5622] EXT4-fs (loop9): Total free blocks count 0 [ 1752.149975][ T5622] EXT4-fs (loop9): Free/Dirty block details [ 1752.155894][ T5622] EXT4-fs (loop9): free_blocks=68451041280 [ 1752.161707][ T5622] EXT4-fs (loop9): dirty_blocks=32 [ 1752.166858][ T5622] EXT4-fs (loop9): Block reservation details [ 1752.172848][ T5622] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 1752.366752][ T5631] netlink: 'syz.8.8724': attribute type 2 has an invalid length. [ 1752.374560][ T5631] netlink: 'syz.8.8724': attribute type 1 has an invalid length. [ 1752.382356][ T5631] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.8724'. [ 1752.575304][T30075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1752.615415][ T5642] loop9: detected capacity change from 0 to 8 [ 1753.967773][ T5663] netlink: 'syz.3.8740': attribute type 29 has an invalid length. [ 1753.984018][ T5663] netlink: 'syz.3.8740': attribute type 29 has an invalid length. [ 1754.481020][ T5680] netlink: 'syz.1.8745': attribute type 2 has an invalid length. [ 1754.489233][ T5680] netlink: 'syz.1.8745': attribute type 1 has an invalid length. [ 1754.498871][ T5680] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8745'. [ 1755.749042][ T5704] netlink: 'syz.8.8753': attribute type 29 has an invalid length. [ 1755.772930][ T5704] netlink: 'syz.8.8753': attribute type 29 has an invalid length. [ 1755.957664][ T5711] netlink: 'syz.3.8757': attribute type 2 has an invalid length. [ 1755.965674][ T5711] netlink: 'syz.3.8757': attribute type 1 has an invalid length. [ 1755.973416][ T5711] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8757'. [ 1756.089110][ T5724] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.8760'. [ 1757.439510][ T5750] loop9: detected capacity change from 0 to 256 [ 1757.452846][ T5750] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1757.468029][ T5750] exfat filesystem being mounted at /426/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 1757.544743][ T5753] netlink: 'syz.6.8770': attribute type 2 has an invalid length. [ 1757.553022][ T5753] netlink: 'syz.6.8770': attribute type 1 has an invalid length. [ 1757.560787][ T5753] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.8770'. [ 1758.968641][ T5790] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1760.460858][ T5832] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1762.019116][ T5859] : renamed from hsr_slave_0 (while UP) [ 1762.037149][ T5857] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8804'. [ 1762.057593][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1762.083726][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.104065][ T5857] batadv_slave_1: entered promiscuous mode [ 1762.117468][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.628787][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8831'. [ 1766.641295][ T5953] netlink: 'syz.8.8831': attribute type 25 has an invalid length. [ 1768.315602][ T5989] netlink: 'syz.6.8845': attribute type 12 has an invalid length. [ 1768.332024][ T5989] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8845'. [ 1769.754924][ T6018] netlink: 'syz.6.8855': attribute type 9 has an invalid length. [ 1770.582471][ T6041] netlink: 'syz.8.8863': attribute type 21 has an invalid length. [ 1772.551746][ T6081] loop9: detected capacity change from 0 to 1024 [ 1772.730849][ T6105] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1772.741627][ T6105] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1772.751459][ T6105] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1772.761841][ T6105] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1772.963212][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8884'. [ 1772.972694][ T6108] netlink: 'syz.6.8884': attribute type 25 has an invalid length. [ 1773.718270][ T6138] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 1775.457556][ T6190] netlink: 'syz.8.8907': attribute type 4 has an invalid length. [ 1777.460404][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8950'. [ 1777.469495][ T6269] netlink: 'syz.3.8950': attribute type 25 has an invalid length. [ 1777.880815][T26406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1777.888686][T26406] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1777.897994][T26406] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1777.999701][T26406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1778.007732][T26406] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1778.014974][T26406] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1778.136914][ T6287] lo speed is unknown, defaulting to 1000 [ 1778.271818][ T54] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1778.506889][ T54] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1778.549006][ T6310] loop9: detected capacity change from 0 to 1024 [ 1778.584073][ T54] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1778.608819][ T6313] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.8973'. [ 1778.703970][ T54] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1778.720968][ T6287] chnl_net:caif_netlink_parms(): no params data found [ 1778.902134][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8981'. [ 1778.925399][ T6339] netlink: 'syz.9.8981': attribute type 25 has an invalid length. [ 1779.098427][ T54] bond0 (unregistering): Released all slaves [ 1779.111809][ T54] bond1 (unregistering): Released all slaves [ 1779.134599][ T54] bond2 (unregistering): Released all slaves [ 1779.160332][ T54] bond3 (unregistering): Released all slaves [ 1779.183198][ T54] bond4 (unregistering): Released all slaves [ 1779.211940][ T6348] netlink: 'syz.3.8986': attribute type 10 has an invalid length. [ 1779.228877][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1779.238984][ T6348] bond0: (slave team0): Enslaving as an active interface with an up link [ 1779.256758][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.264449][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.285963][ T6287] bridge_slave_0: entered allmulticast mode [ 1779.296293][ T6287] bridge_slave_0: entered promiscuous mode [ 1779.310191][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.318894][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.327050][ T6287] bridge_slave_1: entered allmulticast mode [ 1779.333867][ T6287] bridge_slave_1: entered promiscuous mode [ 1779.356163][ T6287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.367006][ T6287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1779.405772][ T6287] team0: Port device team_slave_0 added [ 1779.420178][ T6287] team0: Port device team_slave_1 added [ 1779.433884][ T54] hsr_slave_0: left promiscuous mode [ 1779.458565][ T54] hsr_slave_1: left promiscuous mode [ 1780.175506][T26406] Bluetooth: hci5: command tx timeout [ 1780.652740][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1780.695224][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.745393][ T6287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.778559][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1780.815380][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.865393][ T6287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.028866][ T6287] hsr_slave_0: entered promiscuous mode [ 1781.063732][ T6287] hsr_slave_1: entered promiscuous mode [ 1781.084257][ T6287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1781.095500][ T6287] Cannot create hsr debugfs directory [ 1781.253294][ T6400] loop9: detected capacity change from 0 to 2048 [ 1781.263590][ T6400] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1781.274460][ T6400] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 1781.282220][ T6400] UDF-fs: Scanning with blocksize 512 failed [ 1781.296824][ T6400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1781.323866][ T6400] netlink: 'syz.9.9004': attribute type 4 has an invalid length. [ 1781.939958][ T6287] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1781.957580][ T6287] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1781.974680][ T6287] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1782.019307][ T6287] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1782.090053][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1782.103235][ T6287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1782.128870][ T6287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1782.139299][ T6287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1782.173277][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.180417][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1782.198105][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.205224][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1782.237856][T26406] Bluetooth: hci5: command tx timeout [ 1782.712738][ T6287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1783.661484][ T6287] veth0_vlan: entered promiscuous mode [ 1783.673121][ T6287] veth1_vlan: entered promiscuous mode [ 1783.697961][ T6287] veth0_macvtap: entered promiscuous mode [ 1783.708737][ T6287] veth1_macvtap: entered promiscuous mode [ 1783.750985][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1783.770873][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.789991][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1783.812734][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.831800][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.853434][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1783.875396][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.903886][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1783.929706][ T6287] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.948790][ T6287] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.988297][ T6287] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.005384][ T6287] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.083602][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.095069][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.113619][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.121909][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.441297][T26406] Bluetooth: hci5: command tx timeout [ 1784.720698][ T6481] netlink: 'syz.3.9032': attribute type 4 has an invalid length. [ 1786.530485][T26406] Bluetooth: hci5: command tx timeout [ 1787.223746][ T6535] netlink: 'syz.3.9051': attribute type 4 has an invalid length. [ 1789.339018][ T6591] netlink: 'syz.8.9070': attribute type 4 has an invalid length. [ 1791.104743][ T6625] netlink: 'syz.6.9084': attribute type 33 has an invalid length. [ 1791.113408][ T6625] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9084'. [ 1791.848486][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.931571][ T6637] netlink: 'syz.6.9087': attribute type 4 has an invalid length. [ 1793.418101][ T6700] loop9: detected capacity change from 0 to 256 [ 1793.444755][ T6700] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1793.489614][ T6700] exfat filesystem being mounted at /481/file1 supports timestamps until 2107-12-31 (0x10391447f) [ 1793.721477][ T6705] netlink: 'syz.1.9109': attribute type 4 has an invalid length. [ 1793.733528][ T29] audit: type=1800 audit(8172938142.571:4346): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9112" name="file1" dev="loop9" ino=1048880 res=0 errno=0 [ 1793.937258][ T6712] loop9: detected capacity change from 0 to 256 [ 1793.956516][ T6712] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1793.981384][ T6712] exfat filesystem being mounted at /482/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1794.947350][ T6731] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1794.958465][ T6731] kvm: pic: non byte read [ 1794.963083][ T6731] kvm: pic: level sensitive irq not supported [ 1794.963155][ T6731] kvm: pic: non byte read [ 1794.974277][ T6731] kvm: pic: level sensitive irq not supported [ 1794.974338][ T6731] kvm: pic: non byte read [ 1794.986012][ T6731] kvm: pic: level sensitive irq not supported [ 1794.986077][ T6731] kvm: pic: non byte read [ 1795.000220][ T6731] kvm: pic: level sensitive irq not supported [ 1795.000281][ T6731] kvm: pic: non byte read [ 1795.020035][ T6731] kvm: pic: level sensitive irq not supported [ 1795.020097][ T6731] kvm: pic: non byte read [ 1795.031228][ T6731] kvm: pic: level sensitive irq not supported [ 1795.031287][ T6731] kvm: pic: non byte read [ 1795.052848][ T6731] kvm: pic: level sensitive irq not supported [ 1795.052905][ T6731] kvm: pic: non byte read [ 1795.065499][ T6731] kvm: pic: level sensitive irq not supported [ 1795.065568][ T6731] kvm: pic: non byte read [ 1795.086238][ T6731] kvm: pic: level sensitive irq not supported [ 1795.086295][ T6731] kvm: pic: non byte read [ 1795.107508][ T6731] kvm: pic: level sensitive irq not supported [ 1795.148948][ T6738] binder: BINDER_SET_CONTEXT_MGR already set [ 1795.174184][ T6738] binder: 6736:6738 ioctl 4018620d 20000040 returned -16 [ 1795.334385][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9129'. [ 1795.343443][ T6755] netlink: 'syz.1.9129': attribute type 25 has an invalid length. [ 1795.370772][ T6755] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1795.378625][ T6746] kvm: kvm [6745]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x80 [ 1795.379634][ T6755] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1795.396580][ T6755] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1795.405293][ T6755] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1795.413814][ T6746] kvm: kvm [6745]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x80 [ 1795.479657][ T6746] kvm: kvm [6745]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x80 [ 1795.619895][ T6746] kvm: kvm [6745]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x80 [ 1795.754408][ T6769] loop9: detected capacity change from 0 to 256 [ 1795.769093][ T6769] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1795.793285][ T6769] exfat filesystem being mounted at /489/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1795.902549][ T6773] sctp: [Deprecated]: syz.6.9138 (pid 6773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1795.902549][ T6773] Use struct sctp_sack_info instead [ 1798.092562][ T6815] lo speed is unknown, defaulting to 1000 [ 1798.261549][T18071] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1799.437546][T18071] usb 2-1: config 0 has no interfaces? [ 1799.453361][T18071] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1799.462413][T18071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.470489][T18071] usb 2-1: Product: syz [ 1799.474645][T18071] usb 2-1: Manufacturer: syz [ 1799.479329][T18071] usb 2-1: SerialNumber: syz [ 1799.484587][T18071] usb 2-1: config 0 descriptor?? [ 1799.525972][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1799.591657][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1800.195437][T18142] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 1800.246777][ T6862] loop9: detected capacity change from 0 to 8 [ 1800.381572][T18142] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1800.484034][T18142] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1800.606085][T18142] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1800.623622][T18142] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.631818][T18142] usb 9-1: Product: syz [ 1800.737643][T18142] usb 9-1: Manufacturer: syz [ 1800.742275][T18142] usb 9-1: SerialNumber: syz [ 1801.144647][ T6876] loop9: detected capacity change from 0 to 256 [ 1801.157981][ T6876] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1801.171974][ T6876] exfat filesystem being mounted at /496/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1801.284472][ T971] usb 2-1: USB disconnect, device number 60 [ 1801.299187][ T6858] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1802.202996][ T6895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1802.265764][T18142] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 1802.272015][T18142] cdc_ncm 9-1:1.0: bind() failure [ 1802.281170][T18142] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1802.296058][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1802.306015][T18142] cdc_ncm 9-1:1.1: bind() failure [ 1802.323632][T18142] usb 9-1: USB disconnect, device number 33 [ 1802.784223][ T6909] loop9: detected capacity change from 0 to 256 [ 1802.800704][ T6909] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1802.824051][ T6909] exfat filesystem being mounted at /498/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 1803.558567][ T6934] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9191'. [ 1803.708697][ T6948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.789339][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.435026][ T4056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1804.442495][ T4056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1804.449895][ T4056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1804.457802][ T4056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1804.465248][ T4056] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1804.472740][ T4056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1804.483229][T10919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1804.508643][ T6964] lo speed is unknown, defaulting to 1000 [ 1804.609413][T10919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1804.617795][ T6975] loop9: detected capacity change from 0 to 512 [ 1804.627614][ T6975] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1804.651164][ T6975] EXT4-fs (loop9): 1 truncate cleaned up [ 1804.664490][ T6975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1804.700665][ T6964] chnl_net:caif_netlink_parms(): no params data found [ 1804.717425][T10919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1804.730343][T30075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1804.762047][T10919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1804.786565][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.793822][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.803113][ T6964] bridge_slave_0: entered allmulticast mode [ 1804.809786][ T6964] bridge_slave_0: entered promiscuous mode [ 1804.820156][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.827557][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.835147][ T6964] bridge_slave_1: entered allmulticast mode [ 1804.841811][ T6964] bridge_slave_1: entered promiscuous mode [ 1804.861049][ T6964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.874040][ T6964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.899545][ T6964] team0: Port device team_slave_0 added [ 1804.910127][ T6964] team0: Port device team_slave_1 added [ 1804.916389][T10919] bridge_slave_1: left allmulticast mode [ 1804.922063][T10919] bridge_slave_1: left promiscuous mode [ 1804.928126][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.936609][T10919] bridge_slave_0: left allmulticast mode [ 1804.942289][T10919] bridge_slave_0: left promiscuous mode [ 1804.948137][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.018031][T10919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.027823][T10919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.037611][T10919] bond0 (unregistering): Released all slaves [ 1805.047851][T10919] bond1 (unregistering): Released all slaves [ 1805.064868][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1805.072447][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.098857][ T6964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.110772][ T6964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1805.117954][ T6964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.145723][ T6964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1805.174978][ T6964] hsr_slave_0: entered promiscuous mode [ 1805.181248][ T6964] hsr_slave_1: entered promiscuous mode [ 1805.187529][ T6964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1805.195144][ T6964] Cannot create hsr debugfs directory [ 1805.250620][T10919] hsr_slave_0: left promiscuous mode [ 1805.257112][T10919] hsr_slave_1: left promiscuous mode [ 1805.262824][T10919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1805.272865][T10919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1805.280492][T10919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.328458][T10919] team0 (unregistering): Port device team_slave_1 removed [ 1805.346002][T10919] team0 (unregistering): Port device team_slave_0 removed [ 1806.792459][ T4056] Bluetooth: hci1: command tx timeout [ 1807.113320][ T7032] loop9: detected capacity change from 0 to 1024 [ 1807.235251][ T7035] loop9: detected capacity change from 0 to 1024 [ 1807.243496][ T7035] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1807.254159][ T7035] EXT4-fs (loop9): group descriptors corrupted! [ 1807.439813][ T6964] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1807.482548][ T6964] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1807.522514][ T6964] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1807.555953][ T6964] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1807.752490][ T6964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1807.799256][ T6964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1807.829528][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.836674][T10919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1807.871211][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.878380][T10919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1807.923783][ T6964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1807.934290][ T6964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1808.875616][T26406] Bluetooth: hci1: command tx timeout [ 1809.122790][ T6964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1809.501080][ T6964] veth0_vlan: entered promiscuous mode [ 1809.516469][ T6964] veth1_vlan: entered promiscuous mode [ 1809.535887][ T6964] veth0_macvtap: entered promiscuous mode [ 1809.545038][ T6964] veth1_macvtap: entered promiscuous mode [ 1809.557936][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.569456][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.574372][T28067] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1809.579952][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.590282][T28067] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1809.597378][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.618141][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1809.631133][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.646770][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.659487][ T6964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.672009][ T6964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.684586][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1809.703537][ T6964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.716727][ T6964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.729000][ T6964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.738029][ T6964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.792487][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.802449][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1809.901253][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.911151][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.872356][T28067] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1810.888203][T28067] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1810.956796][T26406] Bluetooth: hci1: command tx timeout [ 1811.638231][ T7129] kvm: kvm [7128]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x20ff0000e60f [ 1811.751617][ T7139] loop9: detected capacity change from 0 to 1024 [ 1811.826183][ T7139] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1812.871679][ T3599] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1812.893250][ T3599] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 12 with error 28 [ 1812.906268][ T3599] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1812.906268][ T3599] [ 1812.927475][ T3599] EXT4-fs (loop9): Total free blocks count 0 [ 1812.934677][ T3599] EXT4-fs (loop9): Free/Dirty block details [ 1812.956651][ T3599] EXT4-fs (loop9): free_blocks=68451041280 [ 1812.985694][ T3599] EXT4-fs (loop9): dirty_blocks=16 [ 1812.990847][ T3599] EXT4-fs (loop9): Block reservation details [ 1813.001464][ T3599] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1813.016924][T30075] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1813.035409][T26406] Bluetooth: hci1: command tx timeout [ 1813.099230][ T7195] netdevsim netdevsim3: Direct firmware load for W failed with error -2 [ 1813.119039][ T7198] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1813.124910][ T7195] netdevsim netdevsim3: Falling back to sysfs fallback for: W [ 1814.122557][ T7214] loop9: detected capacity change from 0 to 1024 [ 1814.133560][ T7214] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1814.147879][ T7214] EXT4-fs (loop9): group descriptors corrupted! [ 1814.502029][ T7218] loop9: detected capacity change from 0 to 512 [ 1814.509898][ T7218] EXT4-fs (loop9): blocks per group (255) and clusters per group (8192) inconsistent [ 1815.641902][ T7264] loop9: detected capacity change from 0 to 32768 [ 1815.649286][ T7264] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9307 (7264) [ 1815.663627][ T7264] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1815.674047][ T7264] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1815.682856][ T7264] BTRFS info (device loop9): using free-space-tree [ 1815.802376][ T7264] BTRFS info (device loop9): rebuilding free space tree [ 1816.497006][ T29] audit: type=1326 audit(8172938165.341:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.8.9312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc0877e719 code=0x0 [ 1816.530444][T30075] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1816.677847][ T7313] loop9: detected capacity change from 0 to 256 [ 1816.709589][ T7313] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1816.726219][ T7313] exfat filesystem being mounted at /525/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1817.295417][ T5850] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1817.446655][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.457040][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1817.466159][ T5850] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1817.481584][ T5850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1817.491047][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.499368][ T5850] usb 2-1: Product: syz [ 1817.503592][ T5850] usb 2-1: Manufacturer: syz [ 1817.529919][ T5850] usb 2-1: SerialNumber: syz [ 1817.987050][ T5850] usb 2-1: selecting invalid altsetting 1 [ 1818.613779][ T5850] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 1818.639573][ T5850] usb 2-1: selecting invalid altsetting 1 [ 1818.646780][ T5850] cdc_ncm 2-1:1.0: bind() failure [ 1818.682865][ T5850] usb 2-1: USB disconnect, device number 61 [ 1818.748331][ T7366] loop9: detected capacity change from 0 to 32768 [ 1818.758840][ T7366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9338 (7366) [ 1818.773567][ T7366] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1818.784273][ T7366] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1818.793151][ T7366] BTRFS info (device loop9): using free-space-tree [ 1818.893959][ T7366] BTRFS info (device loop9): rebuilding free space tree [ 1819.075194][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9343'. [ 1819.104476][ T7396] netlink: 'syz.6.9343': attribute type 25 has an invalid length. [ 1819.551718][T30075] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1821.016888][ T7423] netlink: 'syz.3.9351': attribute type 33 has an invalid length. [ 1821.025252][ T7423] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9351'. [ 1821.741887][ T7434] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1822.890803][ T7451] loop9: detected capacity change from 0 to 256 [ 1822.911891][ T7451] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1823.003168][ T7451] exfat filesystem being mounted at /533/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 1823.871051][ T7468] loop9: detected capacity change from 0 to 8 [ 1824.901265][ T7490] loop9: detected capacity change from 0 to 256 [ 1824.966095][ T7490] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1824.990853][ T7490] exfat filesystem being mounted at /539/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 1827.710875][ T5850] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1828.199969][ T5850] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1828.210369][ T5850] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.236168][ T5850] usb 10-1: Product: syz [ 1828.240446][ T5850] usb 10-1: Manufacturer: syz [ 1828.245751][ T5850] usb 10-1: SerialNumber: syz [ 1828.251445][ T5850] usb 10-1: config 0 descriptor?? [ 1828.460756][ T5850] usb 10-1: f81604_read: reg: 105 failed: -EPIPE [ 1828.474767][ T5850] f81604 10-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1828.491326][ T5850] f81604 10-1:0.0: probe with driver f81604 failed with error -32 [ 1828.505506][ T5850] usb 10-1: USB disconnect, device number 49 [ 1830.183364][ T971] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1830.527489][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9422'. [ 1830.546559][ T971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1830.557864][ T971] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1830.560830][ T7617] netlink: 'syz.1.9423': attribute type 33 has an invalid length. [ 1830.577306][ T971] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1830.586516][ T7617] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9423'. [ 1830.597396][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.605461][ T971] usb 4-1: Product: syz [ 1830.609637][ T971] usb 4-1: Manufacturer: syz [ 1830.614229][ T971] usb 4-1: SerialNumber: syz [ 1830.883149][ T7578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1831.216793][ T7648] netlink: 'syz.9.9434': attribute type 33 has an invalid length. [ 1831.224644][ T7648] netlink: 152 bytes leftover after parsing attributes in process `syz.9.9434'. [ 1832.765861][T30204] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1833.168024][ T971] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1833.168024][T30204] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.168048][T30204] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1833.180331][ T971] cdc_ncm 4-1:1.0: bind() failure [ 1833.214819][ T971] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1833.223405][ T971] cdc_ncm 4-1:1.1: bind() failure [ 1833.234296][ T971] usb 4-1: USB disconnect, device number 47 [ 1833.240300][T30204] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1833.258275][T30204] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1833.280267][T30204] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.454090][T30204] usb 10-1: Product: syz [ 1833.526093][T30204] usb 10-1: Manufacturer: syz [ 1833.535782][T30204] usb 10-1: SerialNumber: syz [ 1833.572581][T30204] usb 10-1: selecting invalid altsetting 1 [ 1834.262408][T30204] cdc_ncm 10-1:1.0: SET_NTB_FORMAT failed [ 1834.291718][T30204] usb 10-1: selecting invalid altsetting 1 [ 1834.305797][T30204] cdc_ncm 10-1:1.0: bind() failure [ 1834.373877][T30204] usb 10-1: USB disconnect, device number 50 [ 1834.583887][ T29] audit: type=1326 audit(8172938183.421:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7702 comm="syz.3.9454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce05b7e719 code=0x0 [ 1835.161529][ T7735] loop9: detected capacity change from 0 to 16 [ 1835.299973][ T7735] erofs: (device loop9): mounted with root inode @ nid 36. [ 1836.603281][ T7767] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1837.460094][ T7794] netlink: 'syz.6.9491': attribute type 10 has an invalid length. [ 1837.493407][ T7794] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1837.511471][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9491'. [ 1837.521574][ T7794] bridge_slave_1: left allmulticast mode [ 1837.527365][ T7794] bridge_slave_1: left promiscuous mode [ 1837.533236][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.546255][ T7794] bridge_slave_0: left allmulticast mode [ 1837.551974][ T7794] bridge_slave_0: left promiscuous mode [ 1837.559618][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.578215][ T7794] bond0: (slave bridge0): Releasing backup interface [ 1838.001692][ T7800] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1838.405955][T18071] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1838.514920][ T7842] xt_CT: No such helper "pptp" [ 1838.542633][ T7846] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1838.948101][T18071] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1838.956754][T18071] usb 10-1: config 1 has an invalid interface association descriptor of length 4, skipping [ 1838.966821][T18071] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.977020][T18071] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1838.988174][T18071] usb 10-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 1838.997590][T18071] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.005724][T18071] usb 10-1: Product: syz [ 1839.009984][T18071] usb 10-1: Manufacturer: syz [ 1839.017439][T18071] usb 10-1: SerialNumber: syz [ 1839.237862][T18071] usb 10-1: USB disconnect, device number 51 [ 1840.395511][T26406] Bluetooth: hci1: command tx timeout [ 1840.439872][ T7882] loop9: detected capacity change from 0 to 1024 [ 1840.508188][ T7886] netlink: 'syz.8.9524': attribute type 10 has an invalid length. [ 1840.516432][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.523787][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.534224][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.541404][ T7886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1840.548894][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.556024][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1840.565964][ T7886] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1840.576532][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9524'. [ 1840.585544][ T7889] bridge_slave_1: left allmulticast mode [ 1840.591269][ T7889] bridge_slave_1: left promiscuous mode [ 1840.598628][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.608340][ T7889] bridge_slave_0: left allmulticast mode [ 1840.614060][ T7889] bridge_slave_0: left promiscuous mode [ 1840.621508][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.632368][ T7889] bond0: (slave bridge0): Releasing backup interface [ 1840.668575][ T7894] loop9: detected capacity change from 0 to 1024 [ 1843.350762][ T7942] netlink: 'syz.9.9548': attribute type 33 has an invalid length. [ 1843.359623][ T7942] netlink: 152 bytes leftover after parsing attributes in process `syz.9.9548'. [ 1844.812875][ T7972] netlink: 'syz.1.9556': attribute type 4 has an invalid length. [ 1845.209168][T18142] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1845.767941][T18142] usb 10-1: Using ep0 maxpacket: 32 [ 1845.818213][T18142] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1845.826619][T18142] usb 10-1: config 0 has no interface number 0 [ 1845.832862][T18142] usb 10-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1845.844927][T18142] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1845.854508][T18142] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.862994][T18142] usb 10-1: Product: syz [ 1845.867335][T18142] usb 10-1: Manufacturer: syz [ 1845.872077][T18142] usb 10-1: SerialNumber: syz [ 1845.878423][T18142] usb 10-1: config 0 descriptor?? [ 1845.885789][ T7976] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1845.905120][T18142] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1845.915376][T18142] em28xx 10-1:0.132: Video interface 132 found: bulk [ 1846.391160][T18142] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1846.698607][ T8022] vivid-000: disconnect [ 1846.703309][ T8021] vivid-000: reconnect [ 1846.707479][T18071] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1846.809106][T18142] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1846.822216][T18142] em28xx 10-1:0.132: board has no eeprom [ 1846.866853][T18071] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1846.876414][T18071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.885198][T18071] usb 4-1: config 0 descriptor?? [ 1846.891249][T18071] cp210x 4-1:0.0: cp210x converter detected [ 1846.905528][T18142] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1846.913746][T18142] em28xx 10-1:0.132: analog set to bulk mode. [ 1846.922868][ T5850] em28xx 10-1:0.132: Registering V4L2 extension [ 1846.967423][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9582'. [ 1847.036302][T18072] usb 10-1: USB disconnect, device number 52 [ 1847.044853][T18072] em28xx 10-1:0.132: Disconnecting em28xx [ 1847.100858][ T5850] em28xx 10-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1847.141156][ T5850] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1847.148541][ T5850] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1847.155975][ T5850] em28xx 10-1:0.132: No AC97 audio processor [ 1847.163090][ T5850] usb 10-1: Decoder not found [ 1847.167941][ T5850] em28xx 10-1:0.132: failed to create media graph [ 1847.174470][ T5850] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1847.299174][ T5850] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1847.502105][T18072] em28xx 10-1:0.132: Closing input extension [ 1847.508336][T18071] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1847.518983][T18072] em28xx 10-1:0.132: Freeing device [ 1847.691824][T18071] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1847.895701][ T5850] usb 4-1: USB disconnect, device number 48 [ 1847.903342][ T5850] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1847.919477][ T5850] cp210x 4-1:0.0: device disconnected [ 1847.962034][ T8060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9593'. [ 1848.066145][T18142] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1848.228045][T18142] usb 10-1: Using ep0 maxpacket: 16 [ 1848.253073][T18142] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1848.262712][T18142] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.272977][T18142] usb 10-1: Product: syz [ 1848.277375][T18142] usb 10-1: Manufacturer: syz [ 1848.282105][T18142] usb 10-1: SerialNumber: syz [ 1848.293187][T18142] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1848.299737][T18142] r8152-cfgselector 10-1: config 0 descriptor?? [ 1848.512112][T18142] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1848.521638][T18142] r8152-cfgselector 10-1: bad CDC descriptors [ 1848.539163][T18142] r8152-cfgselector 10-1: USB disconnect, device number 53 [ 1849.834084][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9615'. [ 1849.844444][ T8120] netlink: 'syz.1.9615': attribute type 25 has an invalid length. [ 1849.874128][ T8120] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.883009][ T8120] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.892150][ T8120] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.901199][ T8120] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1850.700334][ T8148] netlink: 'syz.1.9627': attribute type 33 has an invalid length. [ 1850.718944][ T8148] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9627'. [ 1851.836459][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9636'. [ 1852.009131][ T8170] netlink: 'syz.6.9636': attribute type 25 has an invalid length. [ 1852.214434][ T8196] program syz.9.9646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1852.361742][ T8203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9649'. [ 1852.939509][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9655'. [ 1852.950722][ T8217] netlink: 'syz.3.9655': attribute type 25 has an invalid length. [ 1853.966296][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.571328][ T8240] netlink: 'syz.3.9663': attribute type 4 has an invalid length. [ 1854.920548][ T4056] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1854.953104][ T4056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1854.961407][ T4056] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1854.962307][T10919] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.981605][ T4056] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1854.989264][ T4056] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1854.998532][ T4056] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1855.055698][T10919] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1855.080732][ T8256] lo speed is unknown, defaulting to 1000 [ 1855.130003][T10919] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1855.193521][T10919] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1855.211372][ T8256] chnl_net:caif_netlink_parms(): no params data found [ 1855.262575][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1855.271466][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.279236][ T8256] bridge_slave_0: entered allmulticast mode [ 1855.286339][ T8256] bridge_slave_0: entered promiscuous mode [ 1855.293528][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.300986][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.308420][ T8256] bridge_slave_1: entered allmulticast mode [ 1855.315706][ T8256] bridge_slave_1: entered promiscuous mode [ 1855.337336][ T8256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1855.362870][ T8256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1855.407571][ T8256] team0: Port device team_slave_0 added [ 1855.470961][T10919] dvmrp0 (unregistering): left allmulticast mode [ 1855.515581][T18071] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1855.532767][T10919] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1855.544103][T10919] bond0 (unregistering): Released all slaves [ 1855.554507][T10919] bond1 (unregistering): Released all slaves [ 1855.565228][T10919] bond2 (unregistering): Released all slaves [ 1855.578193][T10919] bond3 (unregistering): Released all slaves [ 1855.601848][T10919] bond4 (unregistering): Released all slaves [ 1855.613562][ T8256] team0: Port device team_slave_1 added [ 1855.651395][ T8256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1855.658595][ T8256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.684929][T18071] usb 9-1: Using ep0 maxpacket: 16 [ 1855.690671][ T8256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.708312][ T8256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1855.715433][ T8256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.741861][ T8256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1855.765102][T18071] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1855.774196][T18071] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.782264][T18071] usb 9-1: Product: syz [ 1855.786475][T18071] usb 9-1: Manufacturer: syz [ 1855.791079][T18071] usb 9-1: SerialNumber: syz [ 1855.798294][T18071] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1855.804552][T18071] r8152-cfgselector 9-1: config 0 descriptor?? [ 1855.816602][ T8256] hsr_slave_0: entered promiscuous mode [ 1855.822716][ T8256] hsr_slave_1: entered promiscuous mode [ 1855.829535][ T8256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1855.837574][ T8256] Cannot create hsr debugfs directory [ 1855.908342][T10919] hsr_slave_0: left promiscuous mode [ 1855.914299][T10919] hsr_slave_1: left promiscuous mode [ 1856.222780][ T5850] r8152-cfgselector 9-1: USB disconnect, device number 34 [ 1857.088716][ T8346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1857.115663][T26406] Bluetooth: hci0: command tx timeout [ 1857.161376][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9708'. [ 1857.194208][ T8256] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1857.196267][ T8354] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1857.210329][ T8256] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1857.219755][ T8256] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1857.228541][ T8256] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1857.267918][ T8256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1857.281471][ T8256] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.290782][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.297921][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.309613][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.316768][T10919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.423936][ T8256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1857.472241][ T8367] loop9: detected capacity change from 0 to 6 [ 1857.489429][ T8367] Dev loop9: unable to read RDB block 6 [ 1857.497234][ T8367] loop9: unable to read partition table [ 1857.503146][ T8367] loop9: partition table beyond EOD, truncated [ 1857.514115][ T8367] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 1857.514115][ T8367] ) failed (rc=-5) [ 1858.121057][ T8256] veth0_vlan: entered promiscuous mode [ 1858.131728][ T8256] veth1_vlan: entered promiscuous mode [ 1858.151594][ T8256] veth0_macvtap: entered promiscuous mode [ 1858.181864][ T8386] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9718'. [ 1858.216919][ T8256] veth1_macvtap: entered promiscuous mode [ 1858.236507][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.247321][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.264362][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.276967][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.292892][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.304440][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.316732][ T8256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1858.330810][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1858.344020][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.373254][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1858.383917][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.394116][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1858.404969][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.416439][ T8256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1858.434819][ T8256] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.443632][ T8256] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.452532][ T8256] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.461370][ T8256] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.689702][T14237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.703633][T14237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.728375][T10919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.736579][T10919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.124919][ T8423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9731'. [ 1859.197364][T26406] Bluetooth: hci0: command tx timeout [ 1859.601923][ T8441] loop9: detected capacity change from 0 to 256 [ 1859.618671][ T8441] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1859.631816][ T8441] exfat filesystem being mounted at /6/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1860.115500][ T8400] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1860.270226][ T8471] netlink: 172 bytes leftover after parsing attributes in process `syz.6.9753'. [ 1860.345443][ T8400] usb 2-1: Using ep0 maxpacket: 8 [ 1860.353526][ T8400] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1860.362705][ T8400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.370945][ T8400] usb 2-1: Product: syz [ 1860.375218][ T8400] usb 2-1: Manufacturer: syz [ 1860.379908][ T8400] usb 2-1: SerialNumber: syz [ 1860.837643][ T8400] usb 2-1: config 0 descriptor?? [ 1860.848449][ T8400] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1861.557712][T26406] Bluetooth: hci0: command tx timeout [ 1861.833938][ T8400] gspca_vc032x: reg_w err -110 [ 1861.864336][ T8400] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 1862.136938][ T8529] fuse: Bad value for 'group_id' [ 1862.155876][ T8529] fuse: Bad value for 'group_id' [ 1862.286485][ T971] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1862.400606][ T8536] netlink: 'syz.8.9777': attribute type 4 has an invalid length. [ 1862.457996][ T971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1862.470116][ T971] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1862.486741][ T971] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1862.495937][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.503944][ T971] usb 4-1: Product: syz [ 1862.508415][ T971] usb 4-1: Manufacturer: syz [ 1862.513032][ T971] usb 4-1: SerialNumber: syz [ 1862.616159][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.623443][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.633299][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.640451][ T8558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1862.647850][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.654931][ T8558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1862.665725][ T8558] team0: Port device bridge0 added [ 1862.722141][ T8514] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1863.472584][ T971] cdc_ncm 4-1:1.0: bind() failure [ 1863.539247][ T971] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1863.565455][ T971] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1863.613135][ T971] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1863.689705][ T971] usb 4-1: USB disconnect, device number 49 [ 1863.755950][T26406] Bluetooth: hci0: command tx timeout [ 1864.001648][ T971] usb 2-1: USB disconnect, device number 62 [ 1864.534325][T26406] Bluetooth: min 0 < 6 [ 1864.992383][T26406] Bluetooth: min 0 < 6 [ 1865.595434][T18142] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1865.745454][T18142] usb 2-1: Using ep0 maxpacket: 16 [ 1865.756575][T18142] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1865.768974][T18142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1865.786208][T18142] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1865.795495][T18142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.811181][T18142] usb 2-1: Product: syz [ 1865.820697][T18142] usb 2-1: Manufacturer: syz [ 1865.830657][T18142] usb 2-1: SerialNumber: syz [ 1865.842004][T18142] usb 2-1: config 0 descriptor?? [ 1865.855733][T18142] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1865.876058][T18142] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1866.099393][ T29] audit: type=1326 audit(8172938214.941:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.9.9838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42c17e719 code=0x0 [ 1866.460430][T18142] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1866.468295][T18142] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1866.565416][T26406] Bluetooth: hci0: command tx timeout [ 1867.029603][ T8688] netlink: 'syz.3.9840': attribute type 2 has an invalid length. [ 1867.037443][T26406] Bluetooth: hci1: command tx timeout [ 1867.042927][ T8688] netlink: 'syz.3.9840': attribute type 1 has an invalid length. [ 1867.051272][ T8688] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9840'. [ 1867.395475][T18142] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 1867.405071][T18142] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1867.838052][T18142] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 1867.852442][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1867.872358][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1867.883527][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1867.892327][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1867.902455][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1868.103857][ T8724] loop9: detected capacity change from 0 to 256 [ 1868.116424][ T8724] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1868.130060][ T8724] exfat filesystem being mounted at /40/file1 supports timestamps until 2107-12-31 (0x10391447f) [ 1868.246060][ T8724] netlink: 'syz.9.9852': attribute type 2 has an invalid length. [ 1868.254052][ T8724] netlink: 'syz.9.9852': attribute type 1 has an invalid length. [ 1868.262001][ T8724] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.9852'. [ 1868.273060][ T29] audit: type=1800 audit(8172938217.111:4350): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9852" name="file1" dev="loop9" ino=1048892 res=0 errno=0 [ 1868.369121][ T8729] loop9: detected capacity change from 0 to 256 [ 1868.381891][ T8729] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1868.395878][ T8729] exfat filesystem being mounted at /42/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1868.422130][ T8731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1868.484080][ T8730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1868.521409][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 20 [ 1868.528870][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 16 [ 1868.535898][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 12 [ 1868.542664][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 14 [ 1868.550866][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 18 [ 1868.559657][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 22 [ 1868.572075][T18142] em28xx 2-1:0.0: couldn't setup AC97 register 24 [ 1868.903125][T18142] em28xx 2-1:0.0: Binding audio extension [ 1868.924388][T18142] em28xx 2-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 1868.966141][T18142] em28xx 2-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 1868.978549][T18142] em28xx 2-1:0.0: alt 0 doesn't exist on interface 7 [ 1869.001862][T18142] usb 2-1: USB disconnect, device number 63 [ 1869.008417][T18142] em28xx 2-1:0.0: Disconnecting em28xx [ 1869.013978][T18142] em28xx 2-1:0.0: Closing audio extension [ 1869.020480][T18142] em28xx 2-1:0.0: Freeing device [ 1869.572818][ T29] audit: type=1326 audit(8172938218.411:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.1.9862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1f217e719 code=0x0 [ 1869.806230][ T8770] loop9: detected capacity change from 0 to 256 [ 1869.885281][ T8770] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 1869.904652][ T8770] exfat filesystem being mounted at /47/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 1870.034758][ T8773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1870.492403][ T8772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1871.539540][T18142] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1871.817050][T18142] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1871.828205][T18142] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1871.842740][T18142] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1871.851931][T18142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.285082][T18142] usb 2-1: Product: syz [ 1872.289368][T18142] usb 2-1: Manufacturer: syz [ 1872.294004][T18142] usb 2-1: SerialNumber: syz [ 1872.313150][ T29] audit: type=1326 audit(8172938221.151:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.6.9899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb23d97e719 code=0x0 [ 1872.649976][ T8858] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1873.288437][T18142] cdc_ncm 2-1:1.0: bind() failure [ 1873.295684][T18142] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1873.311801][T18142] cdc_ncm 2-1:1.1: bind() failure [ 1873.333675][T18142] usb 2-1: USB disconnect, device number 64 [ 1873.712652][ T8883] kvm: kvm [8882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1873.739699][ T8883] kvm: kvm [8882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 1873.765820][ T8883] kvm: kvm [8882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1873.839090][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9923'. [ 1873.840963][ T8883] kvm: kvm [8882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 1873.856259][ T8905] netlink: 'syz.1.9923': attribute type 25 has an invalid length. [ 1873.933989][ T8883] kvm: kvm [8882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1873.951455][ T8911] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1874.177184][ T8883] kvm: kvm [8882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 1874.195756][ T8883] kvm: kvm [8882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1874.211270][ T8883] kvm: kvm [8882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 1874.227619][ T8883] kvm: kvm [8882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1874.240892][ T8883] kvm: kvm [8882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 1875.783449][ T8958] fuse: Bad value for 'fd' [ 1876.278094][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9944'. [ 1876.348633][ T8968] loop9: detected capacity change from 0 to 1024 [ 1876.356673][ T8965] netlink: 'syz.8.9944': attribute type 25 has an invalid length. [ 1876.404479][ T8965] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1876.413333][ T8965] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1876.422039][ T8965] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1876.430727][ T8965] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1877.154570][ T8992] fuse: Bad value for 'fd' [ 1877.519632][ T8998] loop9: detected capacity change from 0 to 32768 [ 1877.531930][ T8998] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9958 (8998) [ 1877.550529][ T8998] BTRFS info (device loop9): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1877.561190][ T8998] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1877.570019][ T8998] BTRFS info (device loop9): using free-space-tree [ 1877.683988][ T29] audit: type=1800 audit(8172938226.521:4353): pid=8998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9958" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 1877.875149][ T8256] BTRFS info (device loop9): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1878.228586][ T9028] loop9: detected capacity change from 0 to 1024 [ 1878.395552][T18072] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1878.555660][T18072] usb 4-1: Using ep0 maxpacket: 16 [ 1878.565832][T18072] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1878.576147][T18072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.595399][T18072] usb 4-1: Product: syz [ 1878.601808][T18072] usb 4-1: Manufacturer: syz [ 1878.612069][T18072] usb 4-1: SerialNumber: syz [ 1878.623586][T18072] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1878.636640][T18072] r8152-cfgselector 4-1: config 0 descriptor?? [ 1878.710505][T10919] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1878.760483][ T4056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1878.768532][ T4056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1878.775949][ T4056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1878.776680][T10919] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1878.783745][ T4056] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1878.801757][ T4056] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1878.809219][ T4056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1878.838214][T10919] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1878.864480][T18072] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1878.879553][T18072] r8152-cfgselector 4-1: bad CDC descriptors [ 1878.889476][T18072] r8152-cfgselector 4-1: USB disconnect, device number 50 [ 1878.889619][T10919] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1879.050368][T10919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1879.062537][T10919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1879.074648][T10919] bond0 (unregistering): (slave team0): Releasing backup interface [ 1879.085210][T10919] bond0 (unregistering): Released all slaves [ 1879.097610][ T9052] chnl_net:caif_netlink_parms(): no params data found [ 1879.211582][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1879.221769][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.240338][ T9052] bridge_slave_0: entered allmulticast mode [ 1879.283066][ T9052] bridge_slave_0: entered promiscuous mode [ 1879.346630][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1879.353798][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.361621][ T9052] bridge_slave_1: entered allmulticast mode [ 1879.377622][ T9052] bridge_slave_1: entered promiscuous mode [ 1879.463269][ T9052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1879.484888][ T9052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1879.605531][T10919] hsr_slave_0: left promiscuous mode [ 1879.613540][T10919] hsr_slave_1: left promiscuous mode [ 1879.619549][T10919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1879.639268][T10919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1880.630604][ T9092] loop9: detected capacity change from 0 to 1024 [ 1880.706615][T10919] team0 (unregistering): Port device team_slave_1 removed [ 1880.916458][T10919] team0 (unregistering): Port device team_slave_0 removed [ 1880.939758][T26406] Bluetooth: hci2: command tx timeout [ 1881.385114][ T9052] team0: Port device team_slave_0 added [ 1881.400238][ T9052] team0: Port device team_slave_1 added [ 1881.434457][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1881.441873][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1881.473486][ T9052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1881.492159][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1881.499351][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1881.525577][ T9052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1881.574023][ T9052] hsr_slave_0: entered promiscuous mode [ 1881.580362][ T9052] hsr_slave_1: entered promiscuous mode [ 1881.589464][ T9052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1881.610616][ T9052] Cannot create hsr debugfs directory [ 1882.817129][ T9052] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1882.825865][ T9052] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1882.837066][ T9052] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1882.846045][ T9052] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1882.902137][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1882.915214][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1882.926709][ T3250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.933824][ T3250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1882.963858][T26406] Bluetooth: hci2: command tx timeout [ 1882.982145][ T9052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1882.994837][ T9052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1883.008848][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.015963][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1883.105431][T18142] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1883.567022][T18142] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1883.578768][T18142] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.595347][T18142] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1883.625270][T18142] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1883.636634][T18142] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1883.646394][T18142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.651111][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1883.656927][T18142] usb 2-1: config 0 descriptor?? [ 1883.869509][ T9161] loop9: detected capacity change from 0 to 32768 [ 1883.879770][ T9161] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.10012 (9161) [ 1883.894652][ T9161] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1883.904905][ T9161] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 1883.913722][ T9161] BTRFS info (device loop9): using free-space-tree [ 1884.025242][ T9052] veth0_vlan: entered promiscuous mode [ 1884.036123][ T9052] veth1_vlan: entered promiscuous mode [ 1884.055423][ T9052] veth0_macvtap: entered promiscuous mode [ 1884.063826][ T9052] veth1_macvtap: entered promiscuous mode [ 1884.077293][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.088305][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.098578][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.109158][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.119071][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.129541][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.139425][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.150578][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.163807][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.173298][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.183912][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.194231][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.205169][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.215124][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.225589][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.235497][ T9052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1884.245947][ T9052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.256486][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.274893][T18142] cherry 0003:046A:0027.002C: unexpected long global item [ 1884.282516][T18142] cherry 0003:046A:0027.002C: probe with driver cherry failed with error -22 [ 1884.300064][ T9052] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.309526][ T9052] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.318697][ T9052] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.329154][ T9052] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.368931][T18072] usb 2-1: USB disconnect, device number 65 [ 1884.374817][ T3250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.384265][ T3250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.413718][T10919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.425064][T10919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.555531][ T8256] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1884.852115][ T9200] loop9: detected capacity change from 0 to 1024 [ 1885.046284][T26406] Bluetooth: hci2: command tx timeout [ 1886.576750][ T9256] netlink: 'syz.1.10044': attribute type 2 has an invalid length. [ 1886.584890][ T9256] netlink: 'syz.1.10044': attribute type 1 has an invalid length. [ 1886.593567][ T9256] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10044'. [ 1887.157720][T26406] Bluetooth: hci2: command tx timeout [ 1887.657530][ T9286] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.10056'. [ 1887.686014][ T9288] loop9: detected capacity change from 0 to 256 [ 1887.698524][ T9288] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1887.712335][ T9288] exfat filesystem being mounted at /84/file1 supports timestamps until 2107-12-31 (0x10391447f) [ 1887.878678][ T9288] netlink: 'syz.9.10057': attribute type 2 has an invalid length. [ 1887.892041][ T9288] netlink: 'syz.9.10057': attribute type 1 has an invalid length. [ 1887.900279][ T9288] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.10057'. [ 1887.914783][ T29] audit: type=1800 audit(8172938236.751:4354): pid=9288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10057" name="file1" dev="loop9" ino=1048897 res=0 errno=0 [ 1888.051751][ T9301] netlink: 'syz.9.10062': attribute type 33 has an invalid length. [ 1888.060810][ T9301] netlink: 152 bytes leftover after parsing attributes in process `syz.9.10062'. [ 1888.615546][ T5939] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1888.766656][ T5939] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1888.775867][ T5939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.784843][ T5939] usb 9-1: config 0 descriptor?? [ 1888.792147][ T5939] cp210x 9-1:0.0: cp210x converter detected [ 1888.830415][ T9315] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.10069'. [ 1888.935457][T18072] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1889.031049][ T9322] netlink: 72 bytes leftover after parsing attributes in process `syz.9.10072'. [ 1889.061608][ T9324] netlink: 'syz.9.10073': attribute type 33 has an invalid length. [ 1889.069903][ T9324] netlink: 152 bytes leftover after parsing attributes in process `syz.9.10073'. [ 1889.085409][T18072] usb 4-1: Using ep0 maxpacket: 32 [ 1889.092029][T18072] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1889.100873][T18072] usb 4-1: config 0 has no interface number 0 [ 1889.107899][T18072] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1889.124601][T18072] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1889.141066][T18072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.149662][T18072] usb 4-1: Product: syz [ 1889.154021][T18072] usb 4-1: Manufacturer: syz [ 1889.161250][T18072] usb 4-1: SerialNumber: syz [ 1889.176119][T18072] usb 4-1: config 0 descriptor?? [ 1889.181855][ T9313] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1889.191094][T18072] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1889.201446][T18072] em28xx 4-1:0.132: Video interface 132 found: bulk [ 1889.208552][ T5939] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 1889.282036][ T9326] loop9: detected capacity change from 0 to 32768 [ 1889.289510][ T9326] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.10074 (9326) [ 1889.304839][ T9326] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1889.316322][ T9326] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 1889.325182][ T9326] BTRFS info (device loop9): using free-space-tree [ 1889.461221][ T8256] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1889.609281][T18072] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1889.616284][ T5939] cp210x 9-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1889.623971][ T5939] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 1889.631592][ T5939] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1889.639041][ T5939] usb 9-1: USB disconnect, device number 35 [ 1889.646675][ T5939] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1889.654574][ T5939] cp210x 9-1:0.0: device disconnected [ 1889.799513][ T29] audit: type=1326 audit(8172938238.641:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9349 comm="syz.6.10078" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd09377e719 code=0x0 [ 1890.245400][T18072] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 1890.252253][T18072] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1890.495609][T18072] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1890.521148][T18072] em28xx 4-1:0.132: analog set to bulk mode. [ 1890.527310][ T5939] em28xx 4-1:0.132: Registering V4L2 extension [ 1890.539335][T18072] usb 4-1: USB disconnect, device number 51 [ 1890.558745][T18072] em28xx 4-1:0.132: Disconnecting em28xx [ 1890.612073][ T5939] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1890.621047][ T5939] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1890.630555][ T5939] em28xx 4-1:0.132: No AC97 audio processor [ 1890.642169][ T5939] usb 4-1: Decoder not found [ 1890.642189][ T5939] em28xx 4-1:0.132: failed to create media graph [ 1890.642210][ T5939] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1890.647679][ T5939] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1890.648522][T18072] em28xx 4-1:0.132: Closing input extension [ 1890.663498][T18072] em28xx 4-1:0.132: Freeing device [ 1890.699845][ T9365] loop9: detected capacity change from 0 to 16 [ 1890.730786][ T9365] erofs: (device loop9): mounted with root inode @ nid 36. [ 1890.841862][ T9367] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10083'. [ 1891.280919][ T9387] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1891.381130][T18072] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1891.556187][T18072] usb 2-1: Using ep0 maxpacket: 16 [ 1891.558600][ T9394] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10094'. [ 1891.574622][T18072] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1891.584013][T18072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.594481][T18072] usb 2-1: Product: syz [ 1891.602492][T18072] usb 2-1: Manufacturer: syz [ 1891.607427][T18072] usb 2-1: SerialNumber: syz [ 1891.614381][T18072] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1891.620943][T18072] r8152-cfgselector 2-1: config 0 descriptor?? [ 1891.842175][T18072] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1891.849497][T18072] r8152-cfgselector 2-1: bad CDC descriptors [ 1891.860105][T18072] r8152-cfgselector 2-1: USB disconnect, device number 66 [ 1892.395390][ T971] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1892.605509][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 1892.620084][ T971] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1892.677854][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1892.919511][ T971] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1892.932550][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.943150][ T971] usb 4-1: Product: syz [ 1892.948961][ T971] usb 4-1: Manufacturer: syz [ 1892.953828][ T971] usb 4-1: SerialNumber: syz [ 1892.960165][ T971] usb 4-1: config 0 descriptor?? [ 1892.968004][ T971] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1892.978406][ T971] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1893.074660][ T9423] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10105'. [ 1893.573411][ T971] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1893.580378][ T971] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1894.471537][ T971] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1894.481924][ T971] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1894.489299][ T971] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1894.497560][ T971] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1894.769606][ T9451] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10116'. [ 1894.925875][ T971] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1894.933092][ T971] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1894.941563][ T971] usb 4-1: USB disconnect, device number 52 [ 1896.098676][ T9481] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10128'. [ 1896.597597][ T9494] netlink: 'syz.8.10134': attribute type 10 has an invalid length. [ 1896.662584][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10134'. [ 1897.112698][ T9508] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10139'. [ 1897.163388][ T9510] netlink: 'syz.9.10140': attribute type 11 has an invalid length. [ 1898.397810][ T9538] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10150'. [ 1898.464492][ T9546] ================================================================== [ 1898.472612][ T9546] BUG: KASAN: slab-out-of-bounds in skb_copy_and_csum_bits+0x433/0x9c0 [ 1898.480893][ T9546] Write of size 1240 at addr ffff888029a279d0 by task syz.1.10155/9546 [ 1898.489152][ T9546] [ 1898.491505][ T9546] CPU: 1 UID: 0 PID: 9546 Comm: syz.1.10155 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 1898.501760][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1898.502844][ T9547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10154'. [ 1898.511817][ T9546] Call Trace: [ 1898.511844][ T9546] [ 1898.511854][ T9546] dump_stack_lvl+0x241/0x360 [ 1898.511880][ T9546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1898.511902][ T9546] ? __pfx__printk+0x10/0x10 [ 1898.541603][ T9546] ? _printk+0xd5/0x120 [ 1898.545788][ T9546] ? __virt_addr_valid+0x183/0x530 [ 1898.550911][ T9546] ? __virt_addr_valid+0x183/0x530 [ 1898.556055][ T9546] print_report+0x169/0x550 [ 1898.560576][ T9546] ? __virt_addr_valid+0x183/0x530 [ 1898.565709][ T9546] ? __virt_addr_valid+0x183/0x530 [ 1898.570847][ T9546] ? __virt_addr_valid+0x45f/0x530 [ 1898.575974][ T9546] ? __phys_addr+0xba/0x170 [ 1898.580510][ T9546] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 1898.586071][ T9546] kasan_report+0x143/0x180 [ 1898.590592][ T9546] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 1898.596160][ T9546] kasan_check_range+0x282/0x290 [ 1898.601126][ T9546] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 1898.606718][ T9546] __asan_memcpy+0x40/0x70 [ 1898.611178][ T9546] skb_copy_and_csum_bits+0x433/0x9c0 [ 1898.616581][ T9546] __ip6_append_data+0x3075/0x4380 [ 1898.621742][ T9546] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1898.627313][ T9546] ? __pfx___ip6_append_data+0x10/0x10 [ 1898.632811][ T9546] ? ip6_setup_cork+0x9f7/0x1080 [ 1898.638385][ T9546] ip6_append_data+0x264/0x3a0 [ 1898.643182][ T9546] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1898.648751][ T9546] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1898.654315][ T9546] udpv6_sendmsg+0xbb8/0x32b0 [ 1898.659026][ T9546] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1898.664598][ T9546] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1898.669736][ T9546] ? __pfx___might_resched+0x10/0x10 [ 1898.675056][ T9546] ? aa_sk_perm+0x96d/0xab0 [ 1898.679673][ T9546] ? rcu_is_watching+0x15/0xb0 [ 1898.684463][ T9546] ? sock_rps_record_flow+0x1a/0x400 [ 1898.689771][ T9546] ? inet_send_prepare+0x21/0x260 [ 1898.694819][ T9546] ? inet_send_prepare+0x5a/0x260 [ 1898.699867][ T9546] __sock_sendmsg+0xef/0x270 [ 1898.704480][ T9546] sock_sendmsg+0x134/0x200 [ 1898.709002][ T9546] ? __pfx_sock_sendmsg+0x10/0x10 [ 1898.714047][ T9546] ? xas_start+0x3f8/0x7b0 [ 1898.718492][ T9546] ? iov_iter_bvec+0x4e/0x180 [ 1898.723197][ T9546] splice_to_socket+0xa10/0x10b0 [ 1898.728177][ T9546] ? __pfx_splice_to_socket+0x10/0x10 [ 1898.733585][ T9546] ? shmem_file_splice_read+0xd33/0xeb0 [ 1898.739163][ T9546] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 1898.745077][ T9546] ? __pfx_splice_to_socket+0x10/0x10 [ 1898.750477][ T9546] direct_splice_actor+0x11b/0x220 [ 1898.755693][ T9546] splice_direct_to_actor+0x586/0xc80 [ 1898.761123][ T9546] ? __pfx_direct_splice_actor+0x10/0x10 [ 1898.766795][ T9546] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1898.772719][ T9546] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1898.772749][ T9546] ? __pfx_lock_release+0x10/0x10 [ 1898.772770][ T9546] do_splice_direct+0x289/0x3e0 [ 1898.787834][ T9546] ? __pfx_do_splice_direct+0x10/0x10 [ 1898.787860][ T9546] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1898.787883][ T9546] ? bpf_lsm_file_permission+0x9/0x10 [ 1898.787905][ T9546] ? security_file_permission+0x74/0x280 [ 1898.810188][ T9546] ? rw_verify_area+0x1c3/0x6f0 [ 1898.810221][ T9546] do_sendfile+0x561/0xe10 [ 1898.819489][ T9546] ? __pfx_do_sendfile+0x10/0x10 [ 1898.823071][ T9553] loop9: detected capacity change from 0 to 16 [ 1898.824439][ T9546] __se_sys_sendfile64+0x17c/0x1e0 [ 1898.824469][ T9546] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1898.841353][ T9546] ? rcu_is_watching+0x15/0xb0 [ 1898.841383][ T9546] ? rcu_is_watching+0x15/0xb0 [ 1898.850895][ T9546] do_syscall_64+0xf3/0x230 [ 1898.855446][ T9546] ? clear_bhb_loop+0x35/0x90 [ 1898.855477][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.855507][ T9546] RIP: 0033:0x7ff1f217e719 [ 1898.855533][ T9546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1898.855547][ T9546] RSP: 002b:00007ff1f05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1898.855566][ T9546] RAX: ffffffffffffffda RBX: 00007ff1f2335f80 RCX: 00007ff1f217e719 [ 1898.855579][ T9546] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1898.855591][ T9546] RBP: 00007ff1f21f132e R08: 0000000000000000 R09: 0000000000000000 [ 1898.855604][ T9546] R10: 0180000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1898.855617][ T9546] R13: 0000000000000000 R14: 00007ff1f2335f80 R15: 00007ffd81c5dca8 [ 1898.855637][ T9546] [ 1898.855645][ T9546] [ 1898.855651][ T9546] Allocated by task 9546: [ 1898.855661][ T9546] kasan_save_track+0x3f/0x80 [ 1898.855688][ T9546] __kasan_slab_alloc+0x66/0x80 [ 1898.855704][ T9546] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 1898.855724][ T9546] kmalloc_reserve+0xa8/0x2a0 [ 1898.855744][ T9546] __alloc_skb+0x1f3/0x440 [ 1898.855763][ T9546] __ip6_append_data+0x2e49/0x4380 [ 1898.855785][ T9546] ip6_append_data+0x264/0x3a0 [ 1898.855805][ T9546] udpv6_sendmsg+0xbb8/0x32b0 [ 1898.855824][ T9546] __sock_sendmsg+0xef/0x270 [ 1898.855841][ T9546] sock_sendmsg+0x134/0x200 [ 1898.855857][ T9546] splice_to_socket+0xa10/0x10b0 [ 1898.855881][ T9546] direct_splice_actor+0x11b/0x220 [ 1898.855896][ T9546] splice_direct_to_actor+0x586/0xc80 [ 1898.855909][ T9546] do_splice_direct+0x289/0x3e0 [ 1898.855923][ T9546] do_sendfile+0x561/0xe10 [ 1898.855943][ T9546] __se_sys_sendfile64+0x17c/0x1e0 [ 1898.855962][ T9546] do_syscall_64+0xf3/0x230 [ 1898.855999][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.856026][ T9546] [ 1898.856031][ T9546] The buggy address belongs to the object at ffff888029a27900 [ 1898.856031][ T9546] which belongs to the cache skbuff_small_head of size 640 [ 1898.856049][ T9546] The buggy address is located 208 bytes inside of [ 1898.856049][ T9546] allocated 640-byte region [ffff888029a27900, ffff888029a27b80) [ 1898.856069][ T9546] [ 1898.856075][ T9546] The buggy address belongs to the physical page: [ 1898.856091][ T9546] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29a24 [ 1898.856110][ T9546] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1898.856127][ T9546] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1898.856151][ T9546] page_type: f5(slab) [ 1898.856177][ T9546] raw: 00fff00000000040 ffff888140ec1a00 dead000000000100 dead000000000122 [ 1898.856194][ T9546] raw: 0000000000000000 0000000080150015 00000001f5000000 0000000000000000 [ 1898.856212][ T9546] head: 00fff00000000040 ffff888140ec1a00 dead000000000100 dead000000000122 [ 1898.856227][ T9546] head: 0000000000000000 0000000080150015 00000001f5000000 0000000000000000 [ 1898.856242][ T9546] head: 00fff00000000002 ffffea0000a68901 ffffffffffffffff 0000000000000000 [ 1898.856260][ T9546] head: ffff888000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 1898.856270][ T9546] page dumped because: kasan: bad access detected [ 1898.856285][ T9546] page_owner tracks the page as allocated [ 1898.856293][ T9546] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9052, tgid 9052 (syz-executor), ts 1881791544733, free_ts 1878649117945 [ 1898.856326][ T9546] post_alloc_hook+0x1f3/0x230 [ 1898.856348][ T9546] get_page_from_freelist+0x3725/0x3870 [ 1898.856372][ T9546] __alloc_pages_noprof+0x292/0x710 [ 1898.856394][ T9546] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1898.856411][ T9546] alloc_slab_page+0x6a/0x140 [ 1898.856433][ T9546] allocate_slab+0x5a/0x2f0 [ 1898.856454][ T9546] ___slab_alloc+0xcd1/0x14b0 [ 1898.856474][ T9546] __slab_alloc+0x58/0xa0 [ 1898.856494][ T9546] kmem_cache_alloc_node_noprof+0x269/0x380 [ 1898.856513][ T9546] kmalloc_reserve+0xa8/0x2a0 [ 1898.856532][ T9546] __alloc_skb+0x1f3/0x440 [ 1898.856552][ T9546] alloc_uevent_skb+0x74/0x230 [ 1898.856571][ T9546] kobject_uevent_net_broadcast+0x182/0x580 [ 1898.856590][ T9546] kobject_uevent_env+0x57d/0x8e0 [ 1898.856609][ T9546] device_add+0x63b/0xbf0 [ 1898.856631][ T9546] netdev_register_kobject+0x17e/0x310 [ 1898.856651][ T9546] page last free pid 9050 tgid 9050 stack trace: [ 1898.856663][ T9546] free_unref_page+0xcfb/0xf20 [ 1898.856684][ T9546] vfree+0x186/0x2e0 [ 1898.856703][ T9546] kcov_close+0x28/0x50 [ 1898.856718][ T9546] __fput+0x23c/0xa50 [ 1898.856736][ T9546] task_work_run+0x24f/0x310 [ 1898.856754][ T9546] do_exit+0xa2f/0x28e0 [ 1898.856769][ T9546] do_group_exit+0x207/0x2c0 [ 1898.856785][ T9546] get_signal+0x16a3/0x1740 [ 1898.856804][ T9546] arch_do_signal_or_restart+0x96/0x860 [ 1898.856823][ T9546] syscall_exit_to_user_mode+0xc9/0x370 [ 1898.856847][ T9546] do_syscall_64+0x100/0x230 [ 1898.856861][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.856886][ T9546] [ 1898.856892][ T9546] Memory state around the buggy address: [ 1898.856902][ T9546] ffff888029a27a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.856913][ T9546] ffff888029a27b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.856924][ T9546] >ffff888029a27b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1898.856932][ T9546] ^ [ 1898.856941][ T9546] ffff888029a27c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.856952][ T9546] ffff888029a27c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.856961][ T9546] ================================================================== [ 1898.858809][ T9546] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1898.858827][ T9546] CPU: 1 UID: 0 PID: 9546 Comm: syz.1.10155 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 1898.858850][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1898.858862][ T9546] Call Trace: [ 1898.858870][ T9546] [ 1898.858878][ T9546] dump_stack_lvl+0x241/0x360 [ 1898.858901][ T9546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1898.858920][ T9546] ? __pfx__printk+0x10/0x10 [ 1898.858945][ T9546] ? rcu_is_watching+0x15/0xb0 [ 1898.858971][ T9546] ? vscnprintf+0x5d/0x90 [ 1898.858993][ T9546] panic+0x349/0x880 [ 1898.859019][ T9546] ? check_panic_on_warn+0x21/0xb0 [ 1898.859040][ T9546] ? __pfx_panic+0x10/0x10 [ 1898.859065][ T9546] ? trace_irq_enable+0x2c/0x120 [ 1898.859091][ T9546] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 1898.859117][ T9546] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1898.859142][ T9546] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1898.859167][ T9546] ? print_report+0x502/0x550 [ 1898.859198][ T9546] check_panic_on_warn+0x86/0xb0 [ 1898.859218][ T9546] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 1898.859239][ T9546] end_report+0x77/0x160 [ 1898.859257][ T9546] kasan_report+0x154/0x180 [ 1898.859275][ T9546] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 1898.859297][ T9546] kasan_check_range+0x282/0x290 [ 1898.859315][ T9546] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 1898.859335][ T9546] __asan_memcpy+0x40/0x70 [ 1898.859359][ T9546] skb_copy_and_csum_bits+0x433/0x9c0 [ 1898.859383][ T9546] __ip6_append_data+0x3075/0x4380 [ 1898.859418][ T9546] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1898.859445][ T9546] ? __pfx___ip6_append_data+0x10/0x10 [ 1898.859469][ T9546] ? ip6_setup_cork+0x9f7/0x1080 [ 1898.859494][ T9546] ip6_append_data+0x264/0x3a0 [ 1898.859518][ T9546] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1898.859541][ T9546] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1898.859564][ T9546] udpv6_sendmsg+0xbb8/0x32b0 [ 1898.859592][ T9546] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1898.859617][ T9546] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1898.859640][ T9546] ? __pfx___might_resched+0x10/0x10 [ 1898.859671][ T9546] ? aa_sk_perm+0x96d/0xab0 [ 1898.859697][ T9546] ? rcu_is_watching+0x15/0xb0 [ 1898.859719][ T9546] ? sock_rps_record_flow+0x1a/0x400 [ 1898.859741][ T9546] ? inet_send_prepare+0x21/0x260 [ 1898.859763][ T9546] ? inet_send_prepare+0x5a/0x260 [ 1898.859788][ T9546] __sock_sendmsg+0xef/0x270 [ 1898.859808][ T9546] sock_sendmsg+0x134/0x200 [ 1898.859829][ T9546] ? __pfx_sock_sendmsg+0x10/0x10 [ 1898.859848][ T9546] ? xas_start+0x3f8/0x7b0 [ 1898.859877][ T9546] ? iov_iter_bvec+0x4e/0x180 [ 1898.859901][ T9546] splice_to_socket+0xa10/0x10b0 [ 1898.859936][ T9546] ? __pfx_splice_to_socket+0x10/0x10 [ 1898.859972][ T9546] ? shmem_file_splice_read+0xd33/0xeb0 [ 1898.859998][ T9546] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 1898.860019][ T9546] ? __pfx_splice_to_socket+0x10/0x10 [ 1898.860045][ T9546] direct_splice_actor+0x11b/0x220 [ 1898.860065][ T9546] splice_direct_to_actor+0x586/0xc80 [ 1898.860090][ T9546] ? __pfx_direct_splice_actor+0x10/0x10 [ 1898.860110][ T9546] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1898.860128][ T9546] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1898.860154][ T9546] ? __pfx_lock_release+0x10/0x10 [ 1898.860180][ T9546] do_splice_direct+0x289/0x3e0 [ 1898.860201][ T9546] ? __pfx_do_splice_direct+0x10/0x10 [ 1898.860219][ T9546] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1898.860240][ T9546] ? bpf_lsm_file_permission+0x9/0x10 [ 1898.860261][ T9546] ? security_file_permission+0x74/0x280 [ 1898.860287][ T9546] ? rw_verify_area+0x1c3/0x6f0 [ 1898.860314][ T9546] do_sendfile+0x561/0xe10 [ 1898.860340][ T9546] ? __pfx_do_sendfile+0x10/0x10 [ 1898.860367][ T9546] __se_sys_sendfile64+0x17c/0x1e0 [ 1898.860389][ T9546] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1898.860410][ T9546] ? rcu_is_watching+0x15/0xb0 [ 1898.860431][ T9546] ? rcu_is_watching+0x15/0xb0 [ 1898.860453][ T9546] do_syscall_64+0xf3/0x230 [ 1898.860472][ T9546] ? clear_bhb_loop+0x35/0x90 [ 1898.860492][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.860521][ T9546] RIP: 0033:0x7ff1f217e719 [ 1898.860538][ T9546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1898.860555][ T9546] RSP: 002b:00007ff1f05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1898.860578][ T9546] RAX: ffffffffffffffda RBX: 00007ff1f2335f80 RCX: 00007ff1f217e719 [ 1898.860594][ T9546] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1898.860607][ T9546] RBP: 00007ff1f21f132e R08: 0000000000000000 R09: 0000000000000000 [ 1898.860619][ T9546] R10: 0180000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1898.860632][ T9546] R13: 0000000000000000 R14: 00007ff1f2335f80 R15: 00007ffd81c5dca8 [ 1898.860652][ T9546] [ 1898.860917][ T9546] Kernel Offset: disabled