last executing test programs: 2m30.710564834s ago: executing program 1 (id=566): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2000000000000019, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m30.330245746s ago: executing program 1 (id=570): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r0], 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x2) 2m30.027630228s ago: executing program 1 (id=574): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./bus\x00', 0x50, &(0x7f0000000f80)=ANY=[@ANYRES32=0x0, @ANYBLOB="044f46054835d99370ff1480bde2eb2a36dabfe7e859c9294d600aac62efe6d89c0d7656182d25acbcc28091e803c3f2594c75ac34fbed676cca1d87058f1a6cd2ba9f484eb3c6682d3516e557456996715d038fe1aeceb600e82fc69f1aae97d7d57364734a5311e9573502fc38738f4244d6bb1c4512df02a3e6dac20db3e79a0531f2dec0d7b56e5f4cf52a8c2b0838403ac921ef87dd1ce2e2cf6568cef4f6e53c32706796eb39d6d5c816d579b9afee51147cad796c65e9054310cf1723ef4f1fe45eb84fe6fa7c25d9cc482bf4ec9c1c6e6f52163a43", @ANYRES8, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="a60b8f2f94f38c9c515f0a49abc35b272f81737b1b8fb0591ebfcd504abdec6006007f2d3331275784d9e3d3e712d86ca48a7445f18ab74b", @ANYRES16], 0x2, 0x639, &(0x7f0000001300)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) lremovexattr(&(0x7f0000000080)='.\x00', &(0x7f0000000100)=@known='trusted.overlay.impure\x00') 2m27.93861037s ago: executing program 1 (id=583): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0x80000000) 2m26.195949459s ago: executing program 1 (id=593): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="e527cf12a1", 0x5}, {0x0}], 0x2) 2m24.425278759s ago: executing program 1 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = syz_open_dev$sg(0x0, 0xff, 0x88000) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2286, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 2m23.065859427s ago: executing program 32 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = syz_open_dev$sg(0x0, 0xff, 0x88000) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2286, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m58.898232782s ago: executing program 3 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 1m57.375372051s ago: executing program 3 (id=683): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000001240)="b9ff03076804268c989e", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m56.240366847s ago: executing program 3 (id=684): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) syz_open_dev$loop(0x0, 0x75f, 0x103382) close(r0) r1 = memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m55.249045253s ago: executing program 3 (id=688): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1492fe, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) io_submit(0x0, 0x0, &(0x7f0000000540)) write$cgroup_int(r0, &(0x7f0000000000)=0x2, 0x12) 1m53.245938604s ago: executing program 3 (id=696): openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10000, &(0x7f0000000240), 0x1, 0x793, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpLmo33f5IUXtK4CggZKJ6bGVsFFxYUIFgq6bhsm01AzyZTMpDQhYIsIbgQVF4LddG217rr1Y6v/hQtpqZoWKy4kciczzaSZiZM2MxPI7wc3c869Z3LOM+d+nDv3MjeAfWs0/ZOJOBwRHycRw9X5SUT0VVK9ESfXyz1YXcmlUxJra2//llTK3F9dyUXde1IHq5mnI+L7DyKOZLbWW1panp0qFPIL1fx4ee7ieGlp+eiFuamZ/Ex+/vjE5OSxEy+dOL57sf7x0/KhO5+88fzXJ/96/6mbH/2QxMk4VF1WH8duGY3R6mfSl36Em7y+25V1WdLtBvBY0k2zZ30rj8MxHD2VVBODnWwZANAu70XEGgCwzySO/wCwz9S+B7i/upKrTd39RqKz7r4WEQPr8deub64v6a1esxuoXAcdup9sujKSRMTILtQ/GhHXbp25kU5R7QfX0oBOuHI1Is6NjG7d/ydb7lnYqRe2W7jWX3kZfWT2fjv+QDd9m45/Xm40/ss8HP9Eg/FPf4Nt93H8+/afub0L1TSVjv9erbu37UFd/FUjPdXcfypjvr7k/IVCPt23/TcixqKvP81PVIo2HrmN3fv7XrP668d/v3/67pdp/enrRonM7d7+ze+ZnipPPWncNXevRjzT2yj+5GH/J03Gv6dbrOPNVz78otmyNP403tq0Nf72Wrse8VzD/t/oy2Tb+xPHK6vDeG2laOCbnz8falZ/ff+nU1r/tVtnduXcohVp/w9tH/9IUn+/Zmnndfx4ffi7ZsuaxH9jo0Tj9f9A8k4lfaA67/JUubwwEXEgeSvNDmyaf2zjvbV8rXwa/9izjbf/9Wobr//pOeG5FuPvvfPrV48ff3ul8U/vqP93nrj5YLanWf2t9f9kJTVWndPK/q/VBj7JZwcAAAAAAAAAAAAAAAAAAAAAAAAArcpExKFIMtmH6Uwmm11/hvf/YyhTKJbKR84XF+eno/Ks7JHoy9R+6nK47vdQJ6q/h1/LH3sk/2JE/C8iPusfrOSzuWJhutvBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDVwSbP/0/90t/t1gEAbTPQ7QYAAB3n+A8A+8/Ojv+DbWsHANA5zv8BYP9p+fh/rr3tAAA6x/k/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbXb61Kl0WvtzdSWX5qcvLS3OFi8dnc6XZrNzi7lsrrhwMTtTLM4U8tlcca7pP7qy/lIoFi9Oxvzi5fFyvlQeLy0tn50rLs6Xz16Ym5rJn833dSwyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhdaWl5dqpQyC9IbJsY3BvN2DOJ3tgTzZBoW6J+LzHYvR0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB73TwAAAP//6HkqDQ==") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) syz_emit_ethernet(0x68, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500005a00000000002f907800000000000000002480655800000000000010000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000c2e5c5"], 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x4e, 0xa, 0x7, 0x90a9, 0x9, 0x36, 0x0, 0x1000, 0xffffffff, 0x0, 0x4, 0x9, 0x27b, 0x9, 0x8, 0x7, 0xea31, 0x8, 0xfffffffb, 0x80000001, 0x3, 0x2, 0x9}}) 1m51.684461523s ago: executing program 3 (id=702): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m50.815657818s ago: executing program 33 (id=702): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m2.881844987s ago: executing program 2 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m2.404925509s ago: executing program 2 (id=832): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$sndseq(r1, 0x0, 0x0) 1m0.161024642s ago: executing program 2 (id=838): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 59.972174713s ago: executing program 2 (id=839): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f0000000080)={[{@jqfmt_vfsv0}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@nogrpid}, {@abort}], [{@seclabel}, {@seclabel, 0x22}]}, 0x0, 0x523, &(0x7f0000000600)="$eJzs3c9vI1cdAPDveO3t/sg2KXCASrSlLcquYO2kUduIQykSglMloNyXkDhRFCdexU67iVY0EX8AEkKAxAkuXJD4A5BQJS4cEVIlOBcBAiHYwgEkuoPGHrshsZ00ceJs8vlIs/N+zMz3vd2dybyZyUwAF9ar+fQwTdNbETGelxfy6dkssx3xTES89+D+fDYlkaav/z2JJC/rbCtteSyut1eJKEZ87csR30z2x21sbq3M1WrV9Txfaa7erTQ2t24vr84tVZeqazMz0y/Nvjz74uzUcbq3eD1P3IiIV7745+9/56dfeuWXn33zD3f+evNbSbvNb8WefnxIxUGV7a6X4kqev5XP148Y7Cwq7k5cPdw6O/l/EQAATld2XvqR/Dz/4QHLvn9KbQIAAACGK/38WPw36dy72+dyn3IAAADgEVKIiLFICuX8ed+xKBTK5Wg9w/uxuFao1RvNzyzWN9YWsrqIiSgVFpdr1an8WeGJKCVZfrqV/iD/wp78TEQ8ERHfG7/aypfn67WFUV/8AAAAgAvi+p7x/7/G2+N/AAAA4JyZGHUDAAAAgBNn/A8AAADnn/E/AAAAnGtfee21bEo7379eeGNzY6X+xu2FamOlvLoxX56vr98tL9XrS6139q0O3Fj3Q9BrG/cqzWqjWWlsbt1ZrW+sNe8sdz+BDQAAAJyyJ55++/dJRGx/7mprylzeVf+f/DsBI2sgcGK6l+wiyeeX9y/07uPtBf90eu0CTt6lUTcAGJniqBsAjExp1A0ARi45oL7vwzu/yeefGm57AACA4Zv8RP/7/4WBa24PrgbOPDsxXFzu/8PF1br/3+ORv56cLMC5UnIGABfese//H8jvEAEAwKiNtaakUM4v741FoVAuR9xofRaglCwu16pTEfF4RPxuvPRYlp9urZkcOGYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIl0gGcH1gIAAACPgojCX5Jftd/lPzn+/Nje6wOXk3+PR/6J0Dd/9PoP7s01m+vTWfk/uuXNH+blL4ziCgYAAACwV2ec3hnHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDw7OTz+/PvPbg/f5qR//aFiJiIyOJ2pnZNMa605leiFBHX/plEcdd6SURcGkL87azrH+8VP8ma1Q3ZK/7Vk48fE/nfQq/414cQHy6yt7Pjz6u99r9CPNOa997/ihH/lz+q/se/6B7/LvXZ/28cMsaT7/y80jf+TsSTxd7Hn078pE/85w4Z/xtf39rqV5f+OGIyesffHavSXL1baWxu3V5enVuqLlXXZmamX5p9efbF2anK4nKtmv/ZM8Z3P/mLh4P6f61P/IkD+v/8Ifv//jv3Hny0nSz1in/zuR7xf/2TfIn98Qv5z75P5+msfrKT3m6nd3vqZ799alD/F/r0/6B//5uH7P+tr377j4dcFAA4BY3NrZW5Wq26fjYTSfHY28lG6WelOxJnK/HW/qqn48gbTNM0zfapYzQsOXr0vol340MsnHRLRn1kAgAAhu2Ds/9RtwQAAAAAAAAAAAAAAAAAAAAurtN4y9remDvdVDKMV2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzF/wIAAP//NW7kYQ==") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8c000, 0x0) 59.552885875s ago: executing program 2 (id=841): syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00f3a8929fc27e9dcd22d51bc8178a85fe247e5d60c9724dd81995e63092466cbd720fb20cc28881"], 0x1, 0x5d17, &(0x7f000000bac0)="$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") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(0x0, 0x0) mknod$loop(&(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000002bc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) 59.160915738s ago: executing program 2 (id=844): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) r0 = syz_io_uring_setup(0x5166, 0x0, &(0x7f0000002000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000d00), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r6, 0xc0045103, &(0x7f0000000040)) 58.7611199s ago: executing program 34 (id=844): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) r0 = syz_io_uring_setup(0x5166, 0x0, &(0x7f0000002000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000d00), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r6, 0xc0045103, &(0x7f0000000040)) 34.620038246s ago: executing program 7 (id=845): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) syz_open_dev$loop(0x0, 0x75f, 0x103382) close(r0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 32.381883048s ago: executing program 7 (id=934): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@test_dummy_encryption}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nomblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 30.903355287s ago: executing program 7 (id=941): chdir(&(0x7f0000000080)='./file1\x00') ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) syz_emit_ethernet(0x29a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 30.33941317s ago: executing program 7 (id=944): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) syz_open_dev$loop(0x0, 0x75f, 0x103382) close(r0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 29.754315043s ago: executing program 35 (id=944): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) syz_open_dev$loop(0x0, 0x75f, 0x103382) close(r0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12.644954699s ago: executing program 5 (id=1014): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b71, 0x0) unshare(0x2a020400) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, 0x989680}, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x408c5333, &(0x7f0000000500)) pread64(0xffffffffffffffff, 0x0, 0x0, 0xff) 10.878365099s ago: executing program 5 (id=1017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r0, 0x0, 0x0, 0x4}, 0x20) 8.107633985s ago: executing program 8 (id=1027): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800009, 0x110, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rmdir(&(0x7f00000006c0)='./file1/file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r1}, 0x1) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setreuid(0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 7.973264926s ago: executing program 4 (id=1028): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc) socket$netlink(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.357055339s ago: executing program 4 (id=1029): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x550c, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup2(r1, r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2219000, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES64=r1], 0x25, 0x365, &(0x7f0000000800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000540)='./file0\x00', 0x60842, 0x2c8) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000400)) 6.893836961s ago: executing program 8 (id=1030): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x9, &(0x7f00000007c0)={0x0, 0x0, 0xffffffc0}) 6.639936693s ago: executing program 5 (id=1031): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) write(r0, &(0x7f00000002c0)='u', 0x1) syz_open_pts(r0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESOCT], 0x2, 0x627, &(0x7f0000000b80)="$eJzs3U9oHNcdB/DvrCVZUoujJHZi2kBFDGmpqa0/KK16iRtC8SGUkB56FrYcC6+VIClBCaGo6b9rD7kW0oNuPRV6F7Tn5parjoFCLzkJWlCZ2dn1ylopKznySvbnY96+9+bNvPeb387sahfMBnhqvf5GspUiN6++uV72tzdnm9ubs+fr4WaSst1IhlpViuVk6M/JjbRKRrqmKw5a59Ol+be/+Gr7y1ZvqC7V/o1k+BHPYqMumUxyrq73O2SZ3d0D57t14Hz9KjqZKRN2paw3HmlC+Gbs7tO+Mv/bz+EH3u/A2VG03jf3mUjGk4y2/g7ovIE2HmtwJ8D7LwAAAE+DZ3ayk/VcGHQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcJbUv/9f1KXRbk+maP/+/0i9LXX7jCn29LYGFgcAAAAAAAAAHEfRc+v3drKT9Uanv1uk8d3k5apzsXr8Vt7PahazkmtZz0LWspaVTCeZ6JpoZH1hbW1luo8jZ3oeOXMCpwwAAAAAAAAAT6LJnls/yc1ceOyxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAIYrkXKuqysW6bhtNMlI2NpLP2+2zbGvQAQAAAMBj8MxOdrKeC+3+blF95n+h+tw/mveznLUsZS3NLOZ2/V1A+am/sb0529zenL1flnLj+T3z/uw/RwqjmjGt7x56r3y52mMsd7JUbbmWW3k3zdxOozqydLkdT3dcD/ymjKl4raXoM7LbdV3u/6eHvg0ZrIkqI8OdjEzVsZXZePbwTBzx2Xl4pek0Ot/8XDxCzl/rc73xui7P5w+nOucz9dX3eXnPHJCJTvTf//tff3W3uXzv7p3Vq6fnlI6pzsTGUJ2J2a778MXDr4knLBNTVSYudfo38/P8MlczmbeykqV8kIWsZTGTjTeq1kJ9RZSPE4dn6sae3ltfF8lI/by0XkX7iintmF6ujr2Qpfwi7+Z2FvNq9W8m0/lx5jKX+a5n+FIfd33jaHf9lR/UjbEkf6zr06HM67Ndee1+zZ2oxrq3PMjScwdnqTjma+PQd+pGucZv6/p0eDgT012ZeP7w6+Uvu+XjanP53srdhff6XO+Vui5T+ftT9S5RXi/PlU9W1dt7dZRjz/ccm67GLnbGGvvGLnXGet6pK+3156u9X+g500w19mLPsdlq7HLXWK+/twA49cZ/OD4y9u+xf419Nva7sbtjb46+fv4n518ayfA/h386NHXulcZLxd/yWX794PM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfKsffnRvodlcXPmaxlYf+zxKo6h/yOcEl9Do0RjJ4FbP6ClJgkavZwd4wl1fu//e9dUPP/rR0v2FdxbfWVwenpubn5qfe3X2+p2l5uJU63HQUQIn4dt1vbLa9yEfn1gwAAAAAAAAAAAAQF8ex38nGPQ5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfbzasZ2kqR6alrU2V/e3O2WZZ2+8GeQ0kaSYqPk+IfyY20Sia6pisOWufTpfm3v/hq+8vOXJ/8r71/47Djehp+eMNGXTKZ5Fw+GD/SdPvtme9WXR9f0TnDMmFX2omDQft/AAAA///9xArx") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001240)={0x124, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0, [@generic]}, @typed={0x110, 0x3, 0x0, 0x0, @str='contention_begin\x00\xea[\x1aC\x96\xe8%\xcb1\x10}\xf2\xd6\xdde\xfd\x15BF\xa8IQ\"v\x96\xb7\xfe\xf4\'\xf4\x83\xedD\x1f\x8c\xc8\xfdW\xff\xfb\xab\xf7\b\x05\xee\xfc\xa9\x92=\xd4K$\x9e\x92&Ei\xe0\xe9&\x1e\x17\n\n\xe5\xaf\x9f\xec}D\x01sE\xe2so~\xa9!\xb99\xb3l\x1bi\x8f\xf2\x8f\xbbqI\f\x19\xec\xaf\x11\xd7\x1bj\x9c\x0f?\xa7E\x19\xd1\xbf\x01\x92\xaa0_/^\xdb\xc3\xdc\xf16\xa6\x01frj\x18T\x1aG\x82m\xa8\xba`\xcfD\xce\xf7\x1c\x12\r\xfa4\\\xc7\x91m\xb6\xc1\xb6Y\x1eT\xb2\xf6\xc0\x1a\x1d\xeb\x81\xc2\x06\xbe\xf1\x11\xee\x84r\x9b \xd9^\xfe\x82\xb1\xec\xa5\xff\x82\x8f\xa8K.\xb1\xc9\x17\xeeIL\xac\x1c\x9b\t\x13[\xecJ\xc05\\n\x8cO\xbb\x9a6I{\x84\xf3p\xb1\xfb\x14#C\x84\x1c\xba\xdc\x9f\f\x8d2\x8f\xbb0q\xd5\xbby\xc3\x9b%\x9c\xfdn\x86\x00\x00\x00\x00\xeb\xd2f\vw-\x1b]\xb8.'}]}, 0x124}], 0x1}, 0x0) r4 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4003, 0x400000, 0x0, 0x800000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0x508, &(0x7f0000000500)="$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") 6.404385434s ago: executing program 6 (id=1032): sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae", 0x4c, 0xc000, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 5.907575767s ago: executing program 8 (id=1034): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x2002}], 0x1, 0x9d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 5.781051658s ago: executing program 4 (id=1035): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4100, 0x40, 0x0, 0x0) fcntl$getown(r0, 0x9) 4.845900173s ago: executing program 0 (id=1036): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x7c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x2}, {0xfff3}, {0xe, 0xffe0}}, [@TCA_RATE={0x6}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x8, 0x5, 0x7fff, 0x0, 0x2, 0x80000000, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x1f2, 0x0]}}]}]}, 0x7c}}, 0x4010) 4.834067973s ago: executing program 5 (id=1037): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket(0x840000000002, 0x3, 0x100) openat(r0, &(0x7f0000000200)='./bus\x00', 0xf27c959f4c188a63, 0x40) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x100000000, 0x100, 0x0, 0x0, 0x18, 0x0, "2dbe0000000000eff7d6a4ae6dddd6d1ce5d29c2ee5e5c9d000ff8ee09e737ff0e1286eb3bcbf3eeee000000006ee677df701905bbaafab4afba0400a3f6a004", "cba3d627780820d1cbf7db710382aceb38a0ef8da65697e4298d1e02dcb8eb8c6b105d9600fdff00000000040000000000000000000000438ea359866cfe1a00", "be1d0000ae9ef31eea2a004000010000004000008000", [0x400, 0x20000000]}) mkdir(&(0x7f0000000080)='./file0\x00', 0x106) 4.691178304s ago: executing program 8 (id=1038): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x503, 0x80, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) 4.564973495s ago: executing program 6 (id=1039): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.359250456s ago: executing program 4 (id=1040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r1, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0xc, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.358464756s ago: executing program 0 (id=1041): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4010, 0x0, 0x0) 3.809334179s ago: executing program 6 (id=1042): pipe2(&(0x7f0000000040), 0x0) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$hiddev(0x0, 0x1, 0xe000) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0x8, 0xffffffefffffffff, 0x0, 0x2, 0x7, 0x0, 0x88f7, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x40000000000000, 0x0, 0xfffffffffffffffc}) 3.62723235s ago: executing program 5 (id=1043): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x83, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x7928, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000440)={'syz1\x00', {0x3, 0x0, 0x4, 0x5}, 0x39, [0x80000001, 0x2, 0x9, 0x1200, 0x200, 0x8, 0x5699, 0x7, 0xffffffff, 0x966, 0x1391b3ed, 0x3, 0x1, 0x9, 0x3, 0x5, 0x5, 0x9, 0x3443, 0x4, 0x3, 0x400007, 0x7fff, 0x6, 0x3, 0x3, 0x3, 0x401, 0x9, 0x4, 0x7, 0x6, 0x1, 0x2, 0x4, 0x8001, 0x7, 0x0, 0xd, 0x0, 0x7ff, 0x0, 0x2, 0x95, 0x8, 0x5, 0x21f, 0x3, 0x5, 0xfffffffc, 0xffff, 0x2, 0x83fd, 0x81, 0x9, 0xfff, 0xfff, 0x8, 0x1, 0xc, 0x7, 0xffff4d57, 0x7, 0x401], [0x8, 0xa, 0x5, 0x1, 0x400, 0x400, 0xffff, 0x4, 0x6, 0x7fff, 0x1, 0x8, 0x4, 0x28e, 0x100, 0x0, 0x7ff, 0x8, 0x1, 0x4f5, 0xa331, 0xad53, 0xb8, 0x8, 0x7, 0x5, 0xff, 0x1, 0x8000, 0x7, 0xb0, 0x8, 0x4, 0x6, 0x5, 0xa847, 0x10000, 0x9, 0xb648, 0xb, 0x10, 0x1, 0x0, 0x7, 0xfffffffd, 0x3, 0x700, 0x6, 0x101, 0x2, 0x7, 0x2, 0xffffffff, 0x93, 0x9, 0xac, 0x3, 0x3, 0xd, 0x5, 0x2, 0xfffffff8, 0x1, 0x9], [0x3, 0x5a, 0x9, 0x5, 0xb93, 0x3, 0x2, 0x3, 0x4, 0x1, 0x8, 0x6, 0x10000, 0x0, 0xfffffff7, 0xffffffff, 0x10, 0x7, 0x8, 0x81, 0x400, 0x7fffffff, 0xfffffffa, 0x80000000, 0x3, 0x4, 0x7fffffff, 0x37, 0xb, 0x80000000, 0xffffffff, 0xb, 0x7, 0x1, 0x40, 0xe8, 0x9, 0x1, 0xf, 0xf30, 0x3ff, 0x7fff, 0x8, 0x0, 0x5, 0x0, 0xa57, 0x4, 0x9, 0x3, 0x0, 0x9, 0x8, 0x8000, 0x9, 0xffff0001, 0x9, 0xf, 0x941, 0x1, 0x6, 0x7f, 0x9, 0x100], [0xb, 0x6, 0x2, 0xffffffff, 0xf, 0x3, 0x81, 0x0, 0x9, 0x8, 0x7, 0x40, 0x4, 0x2, 0x2e, 0xc, 0x7ff, 0x2, 0x0, 0x3, 0x7, 0xfffffff9, 0x6, 0x1, 0x8, 0x5bd3, 0xcce, 0x3, 0xea80000, 0x8001, 0x40e2, 0x7, 0x9, 0x3, 0xb0, 0x2, 0x2, 0x0, 0x8, 0xfdd0, 0x1, 0x3ff, 0x7489, 0x7fffffff, 0x2, 0x3ff, 0x9f, 0x9, 0x6, 0x7, 0x8, 0x9, 0x7, 0x4, 0x8, 0xffff8000, 0xd, 0x8, 0xa1, 0xfffffffe, 0x4, 0xfffffff7, 0x4, 0x6]}, 0x45c) add_key(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 3.437675811s ago: executing program 8 (id=1044): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 3.437514831s ago: executing program 4 (id=1045): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x253, &(0x7f00000004c0)="$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") r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045516, &(0x7f0000000180)) 3.297139722s ago: executing program 0 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) munmap(&(0x7f000019a000/0x1000)=nil, 0x1000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.375426717s ago: executing program 6 (id=1047): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 2.311176557s ago: executing program 0 (id=1048): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/116, 0x74}], 0x1) 2.124775498s ago: executing program 5 (id=1049): unshare(0x600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x0, r2, 0x5}) 2.124593499s ago: executing program 0 (id=1050): chdir(&(0x7f0000000080)='./file1\x00') ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) syz_emit_ethernet(0x29a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaa0086dd60cb653e02643a00fe800000000000000000000000000000fe80000000000000000000000000000086009078000000000000000000000000000d7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d9800081598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8b0034130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd90f4eb74bf0559f1c6b1ebec57dba007f143108ca4be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b63c1b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb2259"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.014039739s ago: executing program 6 (id=1051): close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) clock_gettime(0x2, &(0x7f0000000280)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x802, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xffb}, 0x10) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0x5}, 0x1c) getrlimit(0xeb11cfb8dcace944, &(0x7f00000000c0)) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x4, 0x4002) 771.900006ms ago: executing program 36 (id=1049): unshare(0x600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x0, r2, 0x5}) 740.334466ms ago: executing program 0 (id=1053): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x6c, r1, 0x303, 0xfffffffc, 0x0, {0xa, 0x6}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000014) 2.49722ms ago: executing program 8 (id=1054): r0 = memfd_create(&(0x7f0000000140)='\x00\xac=\x9d\xf2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\xb3\xd9L\xccc\xecR\xd6\xe8\xf1Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x8c!\xb9ew\xce\xdd8$m\x1d\x8b:\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00Y\x8f\xc6S[\xceS\xa1b \x1d\x14\xfc\x89\xad\xa2\x83V\x93\xb8\vT\x02bS\xcdqE$1\xdbW\x9b<\xc8~\"\x1c\xf5\xa2~\x1e\xd4\'\xf0\xe2\xa4I&RB\xf5\xa5\xc8\x85R\x10\x15\x8d.\xb1_\xedMe!\x9bm\xdd\xd4\xc0E<\"\x8c\a6D6\x13\x10\x02IEWax\xf6C\xa4\xf4#\xa8\xb9\x86\xd210!pcb\xaa\x18\xda\xbb3W\x8b\x9e\xa5Ed9\xdb\xdap\xe5\xf0\xb1\xe7\x14\x00_#\xe1*D1\x92\xb6\xa4\xa0\xe7\a}>nL\xd24\xb3\xb3[\xd3\x7f]4\\\xda\f\x91z\x1c=\x87\x0f\xd2\x89\xf0\x1c\xad\xcf\xd5\x92\x9bc10ZK\x82\xe9\xddb5\xd8\x9e\x8eAO\xbe\xa7,\xa0RG\x96\xc9\x86x\xd1\x85\xee\xaa\xe3\xea\x02\xff\xa7\xf3\xe8\xd8\x11<\x17~r\xaf\x8cx}\xc0%\x06r\xe2', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) fallocate(r0, 0x0, 0x0, 0x8) 206.84µs ago: executing program 6 (id=1055): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200106, &(0x7f0000000140), 0x1, 0x46e, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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") pivot_root(0x0, &(0x7f0000000800)='./file1\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0\x00') 0s ago: executing program 4 (id=1056): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505331, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x6, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x4010, r4, 0x10000000) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000004c0)=0x1) kernel console output (not intermixed with test programs): .192023][ T4257] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 267.224368][ T22] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 267.233625][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.242746][ T4257] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 267.359939][ T22] usb 3-1: config 0 descriptor?? [ 267.411872][ T4257] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 267.464918][ T4257] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 267.526334][ T4257] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 267.593120][ T4257] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 267.666959][ T4257] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 267.748271][ T4257] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 267.796456][ T4257] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 267.837538][ T22] hid (null): global environment stack underflow [ 267.862309][ T22] uclogic 0003:5543:0522.0007: global environment stack underflow [ 267.874775][ T4257] EXT4-fs warning (device loop1): ext4_empty_dir:3166: inode #11: lblock 1: comm syz-executor: error -12 reading directory block [ 267.918868][ T22] uclogic 0003:5543:0522.0007: item 0 1 1 11 parsing failed [ 267.954850][ T22] uclogic 0003:5543:0522.0007: parse failed [ 267.971045][ T22] uclogic: probe of 0003:5543:0522.0007 failed with error -22 [ 268.118775][ T22] usb 3-1: USB disconnect, device number 4 [ 268.380486][ T6413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.599'. [ 268.432426][ T6411] loop3: detected capacity change from 0 to 2048 [ 268.484772][ T6411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.519742][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 268.621106][ T6417] loop4: detected capacity change from 0 to 1024 [ 268.653567][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 268.672704][ T6417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 269.612515][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 269.859525][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.863144][ T6433] loop4: detected capacity change from 0 to 2048 [ 269.955659][ T6433] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 269.981698][ T6433] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.014064][ T26] audit: type=1800 audit(1732070170.748:11): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.606" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 270.036660][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.121246][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 270.279010][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.481645][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.266957][ T6449] binder_alloc: 6448: binder_alloc_buf size 5373453080 failed, no address space [ 271.322811][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 271.340504][ T6449] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 271.595249][ T6462] loop0: detected capacity change from 0 to 1024 [ 271.666918][ T6462] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 271.684317][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 271.789463][ T6462] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 271.801513][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.812254][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.834223][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.874623][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 271.911323][ T6471] input: syz0 as /devices/virtual/input/input17 [ 272.005468][ T22] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 272.040668][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.058871][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.069856][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.555968][ T22] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 272.565363][ T22] usb 3-1: Product: syz [ 272.569664][ T22] usb 3-1: Manufacturer: syz [ 272.575250][ T22] usb 3-1: SerialNumber: syz [ 273.166320][ T22] usb 3-1: config 0 descriptor?? [ 273.357740][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 273.696294][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.621'. [ 273.716727][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 273.733890][ T22] usb 3-1: USB disconnect, device number 5 [ 274.138885][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 274.218204][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.382024][ T46] device hsr_slave_0 left promiscuous mode [ 275.464467][ T46] device hsr_slave_1 left promiscuous mode [ 275.472204][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.554309][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.624940][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.632448][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.765063][ T46] device bridge_slave_1 left promiscuous mode [ 275.772679][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.905733][ T46] device bridge_slave_0 left promiscuous mode [ 275.912520][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.129938][ T46] device veth1_macvtap left promiscuous mode [ 276.204508][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 276.211485][ T46] device veth0_macvtap left promiscuous mode [ 276.244399][ T46] device veth1_vlan left promiscuous mode [ 276.250484][ T46] device veth0_vlan left promiscuous mode [ 278.284440][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 278.575678][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 279.383689][ T6507] loop0: detected capacity change from 0 to 1764 [ 279.426707][ T6509] loop4: detected capacity change from 0 to 16 [ 279.460993][ T6509] erofs: (device loop4): mounted with root inode @ nid 36. [ 279.502211][ T6511] loop3: detected capacity change from 0 to 1024 [ 279.541738][ T6511] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.553188][ T4249] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 279.604545][ T4249] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 279.618090][ T4249] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 279.628554][ T6511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 279.998049][ T6519] input: syz0 as /devices/virtual/input/input18 [ 280.364633][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 280.683845][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 280.726148][ T46] team0 (unregistering): Port device team_slave_1 removed [ 280.921086][ T46] team0 (unregistering): Port device team_slave_0 removed [ 281.003163][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.120983][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.929910][ T46] bond0 (unregistering): Released all slaves [ 282.047876][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.631'. [ 282.075789][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 282.102284][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.109781][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.164419][ T6466] chnl_net:caif_netlink_parms(): no params data found [ 282.475044][ T6541] loop3: detected capacity change from 0 to 128 [ 282.909077][ T6541] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 283.070763][ T6541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.390045][ T6553] netlink: 48 bytes leftover after parsing attributes in process `syz.4.638'. [ 284.496916][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 284.513003][ T6565] loop0: detected capacity change from 0 to 1024 [ 284.557127][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.569330][ T6565] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.586625][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.632901][ T6466] device bridge_slave_0 entered promiscuous mode [ 284.656713][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.675855][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.732653][ T6565] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 284.785291][ T6466] device bridge_slave_1 entered promiscuous mode [ 284.822452][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'. [ 285.021097][ T6466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.056162][ T6466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.060584][ T6583] loop3: detected capacity change from 0 to 1024 [ 285.076117][ T6583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.562118][ T6583] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 285.685814][ T6583] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.643: missing EA_INODE flag [ 285.738268][ T6466] team0: Port device team_slave_0 added [ 285.789561][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 285.797455][ T6466] team0: Port device team_slave_1 added [ 285.803283][ T6590] loop2: detected capacity change from 0 to 512 [ 285.805144][ T6583] EXT4-fs (loop3): Remounting filesystem read-only [ 285.824651][ T6583] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.643: error while reading EA inode 11 err=-117 [ 285.862025][ T6583] EXT4-fs (loop3): Remounting filesystem read-only [ 285.950814][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.646'. [ 285.992950][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 286.031218][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 286.089432][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.108224][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.165016][ T6466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.177815][ T6590] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 286.204803][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.222911][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.290510][ T6466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.314328][ T4293] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 286.398433][ T6605] loop4: detected capacity change from 0 to 8 [ 286.526473][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.620996][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.714514][ T4293] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 286.723828][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.758072][ T4293] usb 1-1: config 0 descriptor?? [ 286.826881][ T6466] device hsr_slave_0 entered promiscuous mode [ 286.863892][ T6466] device hsr_slave_1 entered promiscuous mode [ 286.893959][ T6466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.932631][ T6466] Cannot create hsr debugfs directory [ 287.188610][ T4293] hid (null): global environment stack underflow [ 287.209035][ T4293] uclogic 0003:5543:0522.0008: global environment stack underflow [ 287.239321][ T4293] uclogic 0003:5543:0522.0008: item 0 1 1 11 parsing failed [ 287.262626][ T4293] uclogic 0003:5543:0522.0008: parse failed [ 287.282256][ T4293] uclogic: probe of 0003:5543:0522.0008 failed with error -22 [ 287.401617][ T4293] usb 1-1: USB disconnect, device number 9 [ 287.489763][ T6466] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.545705][ T6466] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.578091][ T6466] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.625555][ T6466] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 287.656369][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 287.701083][ T6629] netlink: 48 bytes leftover after parsing attributes in process `syz.2.655'. [ 287.732309][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 287.896247][ T6633] loop3: detected capacity change from 0 to 1024 [ 287.954039][ T6633] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.037308][ T6633] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 288.225496][ T6629] device hsr_slave_1 left promiscuous mode [ 288.265687][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.658'. [ 288.275416][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 288.294528][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 288.756184][ T22] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 288.816150][ T22] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 288.881446][ T22] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 288.965579][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.033780][ T6636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.035865][ T6466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.048604][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 289.063540][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.083645][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.093735][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.139655][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.217273][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.298027][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.305419][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.368054][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.464190][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.539615][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.547033][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.552112][ T22] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 289.623994][ T22] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input19 [ 289.640139][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.818600][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.825553][ T22] usb 5-1: USB disconnect, device number 6 [ 289.826058][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 289.871467][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.892622][ T6657] loop2: detected capacity change from 0 to 1024 [ 289.918342][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.071962][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.093031][ T6657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 290.672120][ T6466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.908091][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 290.909231][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 290.958159][ T6466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.015456][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.030007][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.051156][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.101267][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.123168][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.161253][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.189346][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.210191][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.461652][ T6687] loop2: detected capacity change from 0 to 1024 [ 291.495630][ T6687] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 291.557376][ T6690] netlink: 48 bytes leftover after parsing attributes in process `syz.0.670'. [ 291.758745][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 291.769577][ T6687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 291.850494][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 291.860574][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.870532][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 291.880386][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.855279][ T6709] loop3: detected capacity change from 0 to 512 [ 292.882898][ T6709] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 292.948376][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 292.977514][ T6709] EXT4-fs (loop3): 1 truncate cleaned up [ 292.983228][ T6709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 293.028271][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.076088][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.091997][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.105835][ T6713] loop2: detected capacity change from 0 to 1024 [ 293.106382][ T6709] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.672: bg 0: block 424: padding at end of block bitmap is not set [ 293.198404][ T6713] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 293.285041][ T6709] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.672: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 293.534911][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 293.593546][ T6722] loop4: detected capacity change from 0 to 512 [ 293.600784][ T6722] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.639758][ T6722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 293.721308][ T6722] System zones: 1-12 [ 293.760500][ T6722] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.675: corrupted in-inode xattr [ 293.851549][ T6722] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.675: couldn't read orphan inode 15 (err -117) [ 293.881788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.895541][ T6722] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 293.915534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.051024][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 294.078476][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.094221][ T4297] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 294.108729][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.143655][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 294.159012][ T6466] device veth0_vlan entered promiscuous mode [ 294.206270][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.223638][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.286619][ T4297] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 294.290202][ T6466] device veth1_vlan entered promiscuous mode [ 294.347224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.361783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 294.382721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.397805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.412239][ T6466] device veth0_macvtap entered promiscuous mode [ 294.430872][ T6466] device veth1_macvtap entered promiscuous mode [ 294.501040][ T4297] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 294.512952][ T4297] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 294.522959][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.534350][ T6729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.546997][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 294.547543][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.645872][ T6745] netlink: 104 bytes leftover after parsing attributes in process `syz.4.678'. [ 294.673108][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.043640][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.164605][ T4297] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 295.189050][ T4297] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input20 [ 295.229775][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.308300][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.326324][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.346777][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.356295][ T4297] usb 1-1: USB disconnect, device number 10 [ 295.362267][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 295.365792][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.395481][ T6750] loop2: detected capacity change from 0 to 128 [ 295.415769][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.434800][ T6750] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 295.446379][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.481166][ T6750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.501095][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.520230][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.559599][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.582322][ T6466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.610281][ T6466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.659860][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.673302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.714609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.730901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.744308][ T4296] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 295.760315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.787757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.809768][ T6759] loop2: detected capacity change from 0 to 1024 [ 295.827270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.838130][ T6759] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.856002][ T6466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.874829][ T6466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.905777][ T6466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.919148][ T6466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.920609][ T6759] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 295.947473][ T4296] usb 5-1: config 255 has an invalid interface number: 0 but max is -1 [ 295.979781][ T4296] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 296.012710][ T4296] usb 5-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 296.029988][ T4296] usb 5-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 296.042052][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.752504][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.797953][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.873521][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.914097][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 296.914222][ T4296] usb 5-1: string descriptor 0 read error: -71 [ 296.940145][ T4296] snd-usb-audio: probe of 5-1:255.0 failed with error -2 [ 296.948680][ T4296] usb 5-1: USB disconnect, device number 7 [ 297.016162][ T6769] netlink: 48 bytes leftover after parsing attributes in process `syz.0.685'. [ 297.026531][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.039059][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.106130][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 297.151087][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 297.160986][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.330950][ T6776] loop2: detected capacity change from 0 to 1024 [ 297.453317][ T6776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 297.931792][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 297.981973][ T6789] loop2: detected capacity change from 0 to 128 [ 297.990989][ T6784] loop4: detected capacity change from 0 to 512 [ 298.089839][ T6791] loop3: detected capacity change from 0 to 1024 [ 298.116041][ T6789] loop2: detected capacity change from 0 to 512 [ 298.125438][ T6784] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.132983][ T6791] EXT4-fs: Ignoring removed orlov option [ 298.139696][ T6791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.158580][ T6784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 298.171586][ T6784] System zones: 1-12 [ 298.179197][ T6784] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.687: corrupted in-inode xattr [ 298.210057][ T6791] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 298.228535][ T6789] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #17: comm syz.2.689: iget: bogus i_mode (0) [ 298.248195][ T6784] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.687: couldn't read orphan inode 15 (err -117) [ 298.313223][ T6789] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.689: couldn't read orphan inode 17 (err -117) [ 298.356150][ T6784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 298.403350][ T6789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 298.574061][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 298.626542][ T6805] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 298.719281][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 298.801424][ T6808] loop4: detected capacity change from 0 to 1024 [ 298.807715][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 298.815603][ T6805] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #18: comm syz.3.688: mark_inode_dirty error [ 298.877331][ T6808] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 298.930183][ T6805] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 298.991870][ T6805] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm syz.3.688: mark_inode_dirty error [ 299.108543][ T6805] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 299.154889][ T6805] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm syz.3.688: mark_inode_dirty error [ 299.667201][ T4256] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 299.835166][ T4256] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 299.923967][ T4256] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error [ 299.980773][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 300.041108][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 300.274486][ T4291] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 300.615973][ T6833] loop0: detected capacity change from 0 to 1024 [ 300.862834][ T4291] usb 6-1: config 255 has an invalid interface number: 0 but max is -1 [ 300.998106][ T6833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 301.078587][ T4291] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 301.147959][ T6842] loop2: detected capacity change from 0 to 512 [ 301.174656][ T6842] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.232066][ T6842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 301.283284][ T4291] usb 6-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 301.294473][ T6842] System zones: 1-12 [ 301.295162][ T4291] usb 6-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 301.308527][ T4291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.311822][ T6842] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.701: corrupted in-inode xattr [ 301.335340][ T6842] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.701: couldn't read orphan inode 15 (err -117) [ 301.355049][ T6842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 301.396705][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 301.408736][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.408756][ T6841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 301.408775][ T6841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.639204][ T4636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.688676][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 301.731722][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 301.923282][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 301.929859][ T4636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.084834][ T4291] usb 6-1: string descriptor 0 read error: -71 [ 302.107466][ T4636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.122390][ T4291] snd-usb-audio: probe of 6-1:255.0 failed with error -2 [ 302.137708][ T4291] usb 6-1: USB disconnect, device number 2 [ 302.290158][ T4636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.375155][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.411940][ T6866] loop2: detected capacity change from 0 to 512 [ 302.480876][ T6866] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.708: inode #1: comm syz.2.708: iget: illegal inode # [ 302.520246][ T6866] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.708: error while reading EA inode 1 err=-117 [ 302.644033][ T6866] EXT4-fs (loop2): 1 orphan inode deleted [ 302.733061][ T6866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 303.898332][ T6887] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 303.907159][ T6887] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 304.153186][ T6885] loop0: detected capacity change from 0 to 1024 [ 304.355321][ T6885] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 304.355746][ T4293] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 304.426298][ T4260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.603062][ T4260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.612554][ T4260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.612727][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 304.626755][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.635321][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 304.642658][ T4260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.667035][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.683614][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.708985][ T4293] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 304.723032][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.736554][ T4293] usb 5-1: config 0 descriptor?? [ 304.752406][ T4293] hub 5-1:0.0: USB hub found [ 304.858703][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 304.949278][ T4293] hub 5-1:0.0: 1 port detected [ 305.057607][ T6900] loop2: detected capacity change from 0 to 2048 [ 305.127280][ T6900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 305.151567][ T4293] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 305.155062][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'. [ 305.160903][ T4293] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 305.264467][ T4293] usbhid 5-1:0.0: can't add hid device: -71 [ 305.270536][ T4293] usbhid: probe of 5-1:0.0 failed with error -71 [ 305.333842][ T4293] usb 5-1: USB disconnect, device number 8 [ 306.760257][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 307.138441][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 307.247492][ T6894] chnl_net:caif_netlink_parms(): no params data found [ 307.284300][ T4334] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 307.415289][ T6925] loop4: detected capacity change from 0 to 1024 [ 307.490242][ T4334] usb 1-1: config 255 has an invalid interface number: 0 but max is -1 [ 307.628993][ T4334] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 307.722246][ T6925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 307.923313][ T4334] usb 1-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 308.289454][ T4334] usb 1-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 308.299609][ T4334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.790044][ T6939] input: syz0 as /devices/virtual/input/input21 [ 308.889121][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 309.043563][ T4334] usb 1-1: string descriptor 0 read error: -71 [ 309.121227][ T4334] snd-usb-audio: probe of 1-1:255.0 failed with error -2 [ 309.193585][ T4334] usb 1-1: USB disconnect, device number 11 [ 309.241484][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.373077][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 309.582236][ T6947] loop4: detected capacity change from 0 to 1024 [ 309.646606][ T6949] loop5: detected capacity change from 0 to 2048 [ 309.737498][ T6953] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 309.746527][ T6953] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 310.342641][ T6949] loop5: p3 < > p4 < > [ 310.348042][ T6949] loop5: partition table partially beyond EOD, truncated [ 310.361543][ T6949] loop5: p3 start 4284289 is beyond EOD, truncated [ 310.491345][ T6947] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 310.494928][ T3621] loop5: p3 < > p4 < > [ 310.513826][ T3621] loop5: partition table partially beyond EOD, truncated [ 310.523098][ T3621] loop5: p3 start 4284289 is beyond EOD, truncated [ 310.529711][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.537830][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.562920][ T6894] device bridge_slave_0 entered promiscuous mode [ 310.642893][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.653739][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.702994][ T6894] device bridge_slave_1 entered promiscuous mode [ 310.768293][ T4327] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 310.873277][ T4327] udevd[4327]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 310.925637][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 311.035748][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 311.065913][ T4327] udevd[4327]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 311.083441][ T6894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.109409][ T6971] loop0: detected capacity change from 0 to 2048 [ 311.122639][ T6894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.220249][ T6971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 311.470709][ T4636] device hsr_slave_0 left promiscuous mode [ 311.485965][ T4636] device hsr_slave_1 left promiscuous mode [ 311.503001][ T4636] batman_adv: batadv0: Interface deactivated: dummy0 [ 311.541983][ T4636] batman_adv: batadv0: Removing interface: dummy0 [ 311.647748][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.069943][ T4636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.419279][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.454171][ T4636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.503607][ T4636] device bridge_slave_1 left promiscuous mode [ 312.530036][ T4636] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.627161][ T4636] device bridge_slave_0 left promiscuous mode [ 312.639760][ T4636] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.955367][ T4636] device veth1_macvtap left promiscuous mode [ 313.002922][ T4636] device veth0_macvtap left promiscuous mode [ 313.009594][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 313.033854][ T4636] device veth1_vlan left promiscuous mode [ 313.059345][ T4636] device veth0_vlan left promiscuous mode [ 313.075910][ T6998] input: syz0 as /devices/virtual/input/input22 [ 313.512273][ T7006] loop4: detected capacity change from 0 to 1024 [ 313.569418][ T7006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 313.774529][ T4296] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 313.843440][ T7010] loop2: detected capacity change from 0 to 8 [ 313.870078][ T7010] SQUASHFS error: zlib decompression failed, data probably corrupt [ 314.087905][ T7010] SQUASHFS error: Failed to read block 0x9b: -5 [ 314.114318][ T7010] SQUASHFS error: Unable to read metadata cache entry [99] [ 314.124715][ T7010] SQUASHFS error: Unable to read inode 0x127 [ 314.672304][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 314.678705][ T4296] usb 6-1: config 255 has an invalid interface number: 0 but max is -1 [ 314.688396][ T4296] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 314.697713][ T4296] usb 6-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 314.708628][ T4296] usb 6-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 314.717770][ T4296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.572003][ T4296] usb 6-1: string descriptor 0 read error: -71 [ 315.604440][ T4296] snd-usb-audio: probe of 6-1:255.0 failed with error -2 [ 315.613191][ T4296] usb 6-1: USB disconnect, device number 3 [ 315.695986][ T7025] loop2: detected capacity change from 0 to 1024 [ 315.712936][ T7025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 315.829449][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.911916][ T4636] team0 (unregistering): Port device team_slave_1 removed [ 315.971546][ T4636] team0 (unregistering): Port device team_slave_0 removed [ 316.025162][ T4636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.100070][ T4636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.041243][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.055575][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.101193][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 317.199523][ T4260] Bluetooth: hci0: unexpected event for opcode 0x2036 [ 318.332084][ T4636] bond0 (unregistering): Released all slaves [ 318.436436][ T6894] team0: Port device team_slave_0 added [ 318.530146][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 318.539979][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.642932][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 318.685699][ T6894] team0: Port device team_slave_1 added [ 318.880038][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.891746][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.933029][ T7046] loop0: detected capacity change from 0 to 1024 [ 319.052690][ T6894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.090585][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.115796][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.255700][ T4348] hfsplus: b-tree write err: -5, ino 3 [ 319.272141][ T6894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.491369][ T6894] device hsr_slave_0 entered promiscuous mode [ 320.528125][ T6894] device hsr_slave_1 entered promiscuous mode [ 320.551200][ T6894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.567259][ T6894] Cannot create hsr debugfs directory [ 320.628647][ T7064] loop2: detected capacity change from 0 to 1024 [ 320.717763][ T7064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 320.734221][ T4294] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 320.904528][ T6894] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 320.936106][ T4294] usb 1-1: config 255 has an invalid interface number: 0 but max is -1 [ 320.960011][ T4294] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 320.989919][ T4294] usb 1-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 321.007639][ T6894] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 321.032086][ T4294] usb 1-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 321.047204][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.094953][ T6894] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 321.113809][ T6894] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 321.292798][ T4294] usb 1-1: string descriptor 0 read error: -71 [ 321.350650][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.383315][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.399533][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.419942][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.435545][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.451063][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.464357][ T4247] EXT4-fs (loop2): unmounting filesystem. [ 321.473571][ T4294] snd-usb-audio: probe of 1-1:255.0 failed with error -2 [ 321.482763][ T4294] usb 1-1: USB disconnect, device number 12 [ 321.496292][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.525490][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.532637][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.578702][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.605253][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.665167][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.683863][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.691105][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.700717][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.866636][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.902663][ T7087] loop5: detected capacity change from 0 to 2048 [ 322.739540][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.756187][ T7087] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 323.135593][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.432793][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 323.442652][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.465953][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.639415][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.842162][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.974435][ T6894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.029821][ T6466] EXT4-fs (loop5): unmounting filesystem. [ 324.088051][ T6894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.137204][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.179734][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.361723][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.265096][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.322122][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.931538][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.961707][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.995925][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.094391][ T14] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 328.006329][ T14] usb 1-1: config 255 has an invalid interface number: 0 but max is -1 [ 328.016165][ T14] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 328.026461][ T14] usb 1-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 328.037988][ T14] usb 1-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 328.050225][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.310351][ T14] usb 1-1: string descriptor 0 read error: -71 [ 328.416150][ T14] snd-usb-audio: probe of 1-1:255.0 failed with error -2 [ 328.448253][ T14] usb 1-1: USB disconnect, device number 13 [ 328.583700][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.827628][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 328.837510][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.550023][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.833203][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.538281][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.621439][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.035343][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.095203][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.105868][ T6894] device veth0_vlan entered promiscuous mode [ 334.168526][ T6894] device veth1_vlan entered promiscuous mode [ 334.352489][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.361618][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.612344][ T6894] device veth0_macvtap entered promiscuous mode [ 335.006159][ T6894] device veth1_macvtap entered promiscuous mode [ 335.194330][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.252496][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.280204][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.326273][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.374199][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.404292][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.446289][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.457686][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.476605][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.511662][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.535499][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.567806][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.584226][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.662032][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.743909][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.790047][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.856492][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.874188][ T7168] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 336.086311][ T7168] usb 1-1: config 255 has an invalid interface number: 0 but max is -1 [ 336.178717][ T7168] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 336.248328][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.359246][ T7168] usb 1-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 336.522489][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.563262][ T7168] usb 1-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 336.579234][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.588404][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.605287][ T7168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.609019][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.638945][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 336.649451][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.682665][ T6894] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.704964][ T6894] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.725671][ T6894] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.753546][ T6894] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.776423][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 336.913154][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 336.920768][ T7168] usb 1-1: string descriptor 0 read error: -71 [ 336.953585][ T7168] snd-usb-audio: probe of 1-1:255.0 failed with error -2 [ 336.977638][ T7168] usb 1-1: USB disconnect, device number 14 [ 337.169893][ T4956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.189860][ T4956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.225788][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.237627][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.239515][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.282036][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.328986][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 337.619470][ T7243] loop6: detected capacity change from 0 to 128 [ 337.686249][ T7243] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 338.098929][ T7253] loop6: detected capacity change from 0 to 256 [ 338.219134][ T7253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 338.291618][ T7253] FAT-fs (loop6): Filesystem has been set read-only [ 338.357547][ T7253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 338.404257][ T7253] FAT-fs (loop6): Filesystem has been set read-only [ 338.438876][ T7253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 338.480329][ T7253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 338.529685][ T7253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 338.579192][ T7253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 338.625624][ T7253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 338.669165][ T7253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 338.704296][ T7253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 338.719175][ T7253] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 338.742351][ T26] audit: type=1800 audit(1732070239.478:12): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.786" name="file1" dev="loop6" ino=1048628 res=0 errno=0 [ 339.899654][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 339.909709][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.008805][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 341.032403][ T7272] loop2: detected capacity change from 0 to 32768 [ 341.081849][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 341.144389][ T7168] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 341.346037][ T7168] usb 6-1: config 255 has an invalid interface number: 0 but max is -1 [ 341.372348][ T7168] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 341.389322][ T7168] usb 6-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 341.420864][ T7168] usb 6-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 341.430480][ T7168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.640839][ T7307] loop2: detected capacity change from 0 to 128 [ 341.677818][ T7307] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 341.696913][ T7168] usb 6-1: string descriptor 0 read error: -71 [ 341.750406][ T7168] snd-usb-audio: probe of 6-1:255.0 failed with error -2 [ 341.781471][ T7307] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 550) [ 341.820934][ T7168] usb 6-1: USB disconnect, device number 4 [ 341.859588][ T7307] FAT-fs (loop2): Filesystem has been set read-only [ 341.870319][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.958971][ T4247] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 550) [ 341.972393][ T7313] loop0: detected capacity change from 0 to 1024 [ 343.370045][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 343.380306][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.420457][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.810'. [ 344.446047][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.810'. [ 344.624189][ T14] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 344.662564][ T7350] device hsr_slave_1 left promiscuous mode [ 344.814192][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 344.821305][ T14] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 344.867596][ T14] usb 1-1: config 179 has no interface number 0 [ 344.890940][ T14] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 344.907828][ T7338] loop4: detected capacity change from 0 to 32768 [ 344.912654][ T14] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 344.965432][ T14] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 345.001818][ T14] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 345.023836][ T14] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 345.057831][ T14] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 345.078205][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.104617][ T7348] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 345.535431][ T14] usb 1-1: USB disconnect, device number 15 [ 345.535501][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 345.535545][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 345.640350][ T7372] loop4: detected capacity change from 0 to 512 [ 345.666141][ T7372] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.745833][ T7372] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c028, mo2=0002] [ 345.754613][ T7372] System zones: 0-2, 18-18, 34-35 [ 345.813373][ T7372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 346.000731][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 347.504312][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 347.708144][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.740059][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.800004][ T14] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 347.850013][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.012148][ T14] usb 5-1: config 0 descriptor?? [ 348.181492][ T7409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 348.191415][ T7409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.839110][ T7410] tty tty33: ldisc open failed (-12), clearing slot 32 [ 348.922968][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 348.991205][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 349.015901][ T14] hid (null): global environment stack underflow [ 349.025724][ T14] uclogic 0003:5543:0522.0009: global environment stack underflow [ 349.037905][ T14] uclogic 0003:5543:0522.0009: item 0 1 1 11 parsing failed [ 349.068635][ T14] uclogic 0003:5543:0522.0009: parse failed [ 349.077066][ T14] uclogic: probe of 0003:5543:0522.0009 failed with error -22 [ 349.219374][ T14] usb 5-1: USB disconnect, device number 9 [ 350.367188][ T7436] loop5: detected capacity change from 0 to 1024 [ 350.423019][ T7436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 351.226999][ T6466] EXT4-fs (loop5): unmounting filesystem. [ 351.628020][ T7460] loop5: detected capacity change from 0 to 512 [ 351.670295][ T7460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.720452][ T7460] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 351.741918][ T7460] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.716050][ T6466] EXT4-fs (loop5): unmounting filesystem. [ 353.023891][ T7481] loop5: detected capacity change from 0 to 1024 [ 353.169967][ T7487] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 353.272505][ T7489] loop2: detected capacity change from 0 to 512 [ 353.280107][ T7489] EXT4-fs: quotafile must be on filesystem root [ 353.346932][ T4343] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 353.359760][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 353.425269][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.840'. [ 354.058363][ T4348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.355204][ T4348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.504004][ T4348] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.656516][ T4348] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.790822][ T7518] loop5: detected capacity change from 0 to 1024 [ 355.125891][ T7529] hfsplus: catalog searching failed [ 355.215716][ T7527] hfsplus: xattr searching failed [ 355.221637][ T26] audit: type=1800 audit(1732070255.958:13): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.849" name="file0" dev="loop5" ino=4 res=0 errno=0 [ 355.294555][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.305918][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.315755][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.330884][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.340373][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 355.347908][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.359437][ T4373] hfsplus: b-tree write err: -5, ino 3 [ 355.390810][ T6466] hfsplus: node 4:3 still has 1 user(s)! [ 355.414959][ T26] audit: type=1326 audit(1732070256.148:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 355.523230][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'. [ 355.534255][ T26] audit: type=1326 audit(1732070256.148:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 355.616544][ T26] audit: type=1326 audit(1732070256.198:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 355.664464][ T3621] udevd[3621]: worker [4327] terminated by signal 33 (Unknown signal 33) [ 355.672971][ T3621] udevd[3621]: worker [4327] failed while handling '/devices/virtual/block/loop5' [ 355.730401][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 355.747763][ T26] audit: type=1326 audit(1732070256.198:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 355.854142][ T26] audit: type=1326 audit(1732070256.198:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9142575727 code=0x7ffc0000 [ 355.909393][ T26] audit: type=1326 audit(1732070256.198:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f914251a0f9 code=0x7ffc0000 [ 355.977564][ T4294] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 356.004161][ T26] audit: type=1326 audit(1732070256.198:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9142575727 code=0x7ffc0000 [ 356.084290][ T26] audit: type=1326 audit(1732070256.198:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f914251a0f9 code=0x7ffc0000 [ 356.140329][ T26] audit: type=1326 audit(1732070256.198:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9142575727 code=0x7ffc0000 [ 356.196106][ T4294] usb 6-1: config 255 has an invalid interface number: 0 but max is -1 [ 356.231033][ T4294] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 356.270951][ T4294] usb 6-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 356.300155][ T4294] usb 6-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 356.333201][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.753740][ T7540] loop4: detected capacity change from 0 to 32768 [ 356.858363][ T4294] usb 6-1: string descriptor 0 read error: -71 [ 356.877115][ T4294] snd-usb-audio: probe of 6-1:255.0 failed with error -2 [ 356.885701][ T4294] usb 6-1: USB disconnect, device number 5 [ 357.111875][ T7531] chnl_net:caif_netlink_parms(): no params data found [ 357.135995][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.564873][ T4260] Bluetooth: hci0: command 0x0409 tx timeout [ 358.259264][ T7583] loop4: detected capacity change from 0 to 128 [ 358.564559][ T4292] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 358.737256][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.754481][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.770987][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.771067][ T7531] device bridge_slave_0 entered promiscuous mode [ 358.811661][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.825105][ T4292] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 358.841918][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.856018][ T4292] usb 6-1: config 0 descriptor?? [ 358.872609][ T5580] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 358.966015][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.973364][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.995519][ T7531] device bridge_slave_1 entered promiscuous mode [ 359.071087][ T4348] device hsr_slave_0 left promiscuous mode [ 359.085498][ T5580] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 359.104336][ T5580] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 359.117302][ T5580] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 359.127219][ T4348] batman_adv: batadv0: Interface deactivated: dummy0 [ 359.134022][ T4348] batman_adv: batadv0: Removing interface: dummy0 [ 359.134063][ T5580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.164925][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.173160][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.190358][ T7595] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 359.203595][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.214980][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.238505][ T4348] device bridge_slave_1 left promiscuous mode [ 359.265890][ T4292] hid (null): global environment stack underflow [ 359.270000][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.282322][ T4292] uclogic 0003:5543:0522.000A: global environment stack underflow [ 359.291925][ T4348] device bridge_slave_0 left promiscuous mode [ 359.299948][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.310798][ T4292] uclogic 0003:5543:0522.000A: item 0 1 1 11 parsing failed [ 359.334817][ T4292] uclogic 0003:5543:0522.000A: parse failed [ 359.340877][ T4292] uclogic: probe of 0003:5543:0522.000A failed with error -22 [ 359.381603][ T4348] device veth1_macvtap left promiscuous mode [ 359.401853][ T4348] device veth0_macvtap left promiscuous mode [ 359.427114][ T5580] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 359.431247][ T4348] device veth1_vlan left promiscuous mode [ 359.442386][ T5580] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input23 [ 359.460444][ T4348] device veth0_vlan left promiscuous mode [ 359.485077][ T4292] usb 6-1: USB disconnect, device number 6 [ 359.537410][ T5580] usb 5-1: USB disconnect, device number 10 [ 359.543424][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 359.644589][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 360.889357][ T7627] futex_wake_op: syz.6.870 tries to shift op by 144; fix this program [ 361.214506][ T4292] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 361.439245][ T4292] usb 5-1: config 255 has an invalid interface number: 0 but max is -1 [ 361.448567][ T4292] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 361.460991][ T4292] usb 5-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 361.472946][ T4292] usb 5-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 361.492012][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.874'. [ 361.630825][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.734682][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 362.403237][ T4348] team0 (unregistering): Port device team_slave_1 removed [ 362.453021][ T4292] usb 5-1: string descriptor 0 read error: -71 [ 362.509233][ T4292] snd-usb-audio: probe of 5-1:255.0 failed with error -2 [ 362.518361][ T4348] team0 (unregistering): Port device team_slave_0 removed [ 362.524827][ T4292] usb 5-1: USB disconnect, device number 11 [ 362.635940][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.702412][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.747309][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.955293][ T7648] loop4: detected capacity change from 0 to 1024 [ 362.963675][ T7648] EXT4-fs: Invalid want_extra_isize 129 [ 363.139665][ T7650] loop4: detected capacity change from 0 to 256 [ 363.178113][ T7650] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 363.520612][ T4348] bond0 (unregistering): Released all slaves [ 363.780127][ T7531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.800959][ T7531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.965584][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 364.111118][ T7531] team0: Port device team_slave_0 added [ 364.179182][ T7531] team0: Port device team_slave_1 added [ 364.250771][ T7661] loop6: detected capacity change from 0 to 1024 [ 364.269648][ T7664] loop5: detected capacity change from 0 to 256 [ 364.278388][ T7664] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 364.300889][ T7661] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 364.428576][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.514858][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 364.543068][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.590939][ T7664] FAT-fs (loop5): Filesystem has been set read-only [ 364.646841][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 364.685354][ T7673] loop4: detected capacity change from 0 to 128 [ 364.701978][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 364.783128][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 364.824016][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 364.946218][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 364.965442][ T7531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.976658][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 364.976675][ T26] audit: type=1800 audit(1732070265.538:74): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.886" name="bus" dev="loop4" ino=1048637 res=0 errno=0 [ 365.034818][ T7673] syz.4.886: attempt to access beyond end of device [ 365.034818][ T7673] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 365.062105][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.120289][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.137750][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.194509][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.246978][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.312097][ T6894] EXT4-fs (loop6): unmounting filesystem. [ 365.324814][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.333584][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.347492][ T7531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.372124][ T4371] kworker/u4:10: attempt to access beyond end of device [ 365.372124][ T4371] loop4: rw=1, sector=153, nr_sectors = 24 limit=128 [ 365.424458][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.448398][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.467924][ T4371] kworker/u4:10: attempt to access beyond end of device [ 365.467924][ T4371] loop4: rw=1, sector=177, nr_sectors = 1 limit=128 [ 365.510534][ T4371] Buffer I/O error on dev loop4, logical block 177, lost async page write [ 365.521313][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.534479][ T7531] device hsr_slave_0 entered promiscuous mode [ 365.601802][ T7531] device hsr_slave_1 entered promiscuous mode [ 365.604383][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.641434][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.697991][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.744456][ T4293] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 365.747521][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.827874][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.853436][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.891367][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.917899][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.938241][ T4293] usb 1-1: config 255 has an invalid interface number: 0 but max is -1 [ 365.944220][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 365.956891][ T4293] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 365.989632][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.6.893'. [ 366.004539][ T7664] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 366.013329][ T26] audit: type=1800 audit(1732070266.748:75): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.885" name="file1" dev="loop5" ino=1048635 res=0 errno=0 [ 366.039895][ T4293] usb 1-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 366.074602][ T4293] usb 1-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 366.105220][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.307572][ T7531] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 366.360756][ T7531] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 366.391321][ T7531] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 366.402305][ T4293] usb 1-1: string descriptor 0 read error: -71 [ 366.437910][ T7531] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 366.621915][ T4293] snd-usb-audio: probe of 1-1:255.0 failed with error -2 [ 366.630493][ T4293] usb 1-1: USB disconnect, device number 16 [ 367.172230][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.369563][ T7717] loop4: detected capacity change from 0 to 1024 [ 367.423293][ T7531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.455497][ T7717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 367.482536][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.534953][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.644342][ T7] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 367.684658][ T7531] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.755403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.003963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.112803][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.121342][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.179083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.194535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.205214][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.212386][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.271617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.335934][ T7531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.398873][ T7531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.544122][ T7] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 368.552445][ T7] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 368.560759][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.571027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.571108][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 368.587676][ T7] usb 1-1: config 0 has no interface number 0 [ 368.600768][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 368.605115][ T7] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 368.625210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.637712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 368.646225][ T7] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 368.670438][ T7736] binder: BINDER_SET_CONTEXT_MGR already set [ 368.680533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.688714][ T7] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 368.699137][ T7736] binder: 7735:7736 ioctl 4018620d 20000040 returned -16 [ 368.707648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.715757][ T7] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.741095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.749342][ T7] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 368.765163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.773911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.784194][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.798724][ T7] usb 1-1: config 0 descriptor?? [ 368.840966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 368.866365][ T7] gspca_main: spca561-2.14.0 probing abcd:cdee [ 368.895341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.921667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 368.930972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.924452][ T7168] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 370.054807][ T7] spca561: probe of 1-1:0.156 failed with error -22 [ 370.062336][ T7] usb 1-1: MIDIStreaming interface descriptor not found [ 370.108416][ T7753] input: syz0 as /devices/virtual/input/input24 [ 370.156697][ T7168] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.169792][ T7] usb 1-1: USB disconnect, device number 17 [ 370.200409][ T7168] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.466359][ T7168] usb 5-1: config 0 interface 0 has no altsetting 0 [ 370.483440][ T7168] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 370.500863][ T7168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.349463][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 371.445669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.456712][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.498028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.556208][ T7531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.282616][ T7168] usb 5-1: config 0 descriptor?? [ 372.312516][ T7168] usb 5-1: can't set config #0, error -71 [ 372.392037][ T7168] usb 5-1: USB disconnect, device number 12 [ 373.342102][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 373.415086][ T7797] loop5: detected capacity change from 0 to 1024 [ 373.480727][ T7797] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 374.234244][ T7168] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 374.462691][ T7168] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 374.509401][ T7168] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 374.545147][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 374.557671][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.586271][ T7168] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 374.605430][ T7168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.619831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.629831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.658666][ T7810] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 374.673182][ T6466] EXT4-fs (loop5): unmounting filesystem. [ 374.725401][ T7531] device veth0_vlan entered promiscuous mode [ 374.744552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 374.753632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 374.778409][ T7531] device veth1_vlan entered promiscuous mode [ 374.870920][ T7531] device veth0_macvtap entered promiscuous mode [ 374.908361][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 374.973173][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 375.135938][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 375.247781][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.662387][ T7531] device veth1_macvtap entered promiscuous mode [ 375.674897][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 375.684741][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 375.758609][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.844161][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.864985][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 375.894514][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.924258][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.946591][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.960868][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.993225][ T7168] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 376.132615][ T7168] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input25 [ 376.280528][ T7531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.762986][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 376.781783][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.810091][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.812656][ T7168] usb 1-1: USB disconnect, device number 18 [ 376.820622][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 376.832121][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.895328][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.963830][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.989625][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.010123][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.020627][ T7531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.039766][ T7531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.050620][ T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 377.080180][ T7531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.866493][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 377.882667][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.898842][ T7531] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.934609][ T7531] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.950744][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.960656][ T7531] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.979020][ T7531] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.984325][ T7] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.005051][ T126] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 378.039494][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 378.049935][ T7] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 378.072505][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.133788][ T7] usb 6-1: config 0 descriptor?? [ 378.148366][ T7] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 378.201063][ T126] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 378.209875][ T4795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.224159][ T126] usb 5-1: config 0 has no interface number 0 [ 378.231102][ T4795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.258730][ T126] usb 5-1: New USB device found, idVendor=0745, idProduct=1000, bcdDevice=54.42 [ 378.297257][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.305696][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 378.336437][ T4782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.342069][ T126] usb 5-1: Product: syz [ 378.362309][ T126] usb 5-1: Manufacturer: syz [ 378.367550][ T4782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.375549][ T126] usb 5-1: SerialNumber: syz [ 378.394747][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.403875][ T126] usb 5-1: config 0 descriptor?? [ 378.418708][ T126] cp210x 5-1:0.204: cp210x converter detected [ 378.448795][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.455183][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.648648][ T126] cp210x 5-1:0.204: failed to get vendor val 0x370b size 1: -71 [ 378.666948][ T126] cp210x 5-1:0.204: querying part number failed [ 378.720982][ T126] usb 5-1: cp210x converter now attached to ttyUSB0 [ 378.796035][ T126] usb 5-1: USB disconnect, device number 13 [ 378.824299][ T5580] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 378.895048][ T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 378.913520][ T126] cp210x 5-1:0.204: device disconnected [ 379.024426][ T5580] usb 1-1: Using ep0 maxpacket: 16 [ 379.033387][ T5580] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 379.053183][ T5580] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 379.089218][ T5580] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.142987][ T5580] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.171232][ T5580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.199966][ T5580] usb 1-1: Product: syz [ 379.214261][ T5580] usb 1-1: Manufacturer: syz [ 379.229301][ T5580] usb 1-1: SerialNumber: syz [ 379.485840][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 379.652750][ T5580] usb 1-1: 0:2 : does not exist [ 379.718796][ T5580] usb 1-1: USB disconnect, device number 19 [ 379.779754][ T7168] usb 6-1: USB disconnect, device number 7 [ 379.995265][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.397506][ T7168] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 380.411082][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 380.596332][ T7168] usb 6-1: config 255 has an invalid interface number: 0 but max is -1 [ 380.624228][ T7168] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 380.639547][ T7168] usb 6-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 380.704605][ T7168] usb 6-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 380.713721][ T7168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.868995][ T7927] Zero length message leads to an empty skb [ 380.917852][ T7928] loop7: detected capacity change from 0 to 1024 [ 380.989221][ T7928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.038401][ T7928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 381.059444][ T7168] usb 6-1: string descriptor 0 read error: -71 [ 381.110094][ T7928] EXT4-fs (loop7): Test dummy encryption mode enabled [ 381.119201][ T7168] snd-usb-audio: probe of 6-1:255.0 failed with error -2 [ 381.148375][ T7168] usb 6-1: USB disconnect, device number 8 [ 381.152664][ T7928] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 381.572112][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.884852][ T4347] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 382.126626][ T4347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.152742][ T7947] loop5: detected capacity change from 0 to 256 [ 382.176615][ T4347] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.223444][ T4347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 382.242803][ T7947] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 382.267832][ T4347] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 382.307961][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.318911][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 382.339176][ T4347] usb 5-1: config 0 descriptor?? [ 382.392415][ T4347] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 382.653830][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 382.729756][ T7531] EXT4-fs (loop7): unmounting filesystem. [ 382.762102][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 382.949849][ T46] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.260587][ T46] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.357094][ T46] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.477620][ T46] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.085165][ T4260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.096200][ T4260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.110405][ T4347] usb 5-1: USB disconnect, device number 14 [ 384.113727][ T4260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.146306][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.153875][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 384.162641][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.182370][ T7994] loop5: detected capacity change from 0 to 164 [ 384.195721][ T7994] syz.5.946: attempt to access beyond end of device [ 384.195721][ T7994] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 384.211521][ T7994] syz.5.946: attempt to access beyond end of device [ 384.211521][ T7994] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.229903][ T26] audit: type=1800 audit(1732070284.968:76): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.946" name="file0" dev="loop5" ino=1862 res=0 errno=0 [ 384.233616][ T7994] syz.5.946: attempt to access beyond end of device [ 384.233616][ T7994] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.264565][ T7994] syz.5.946: attempt to access beyond end of device [ 384.264565][ T7994] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.279892][ T7994] syz.5.946: attempt to access beyond end of device [ 384.279892][ T7994] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.293408][ T7994] syz.5.946: attempt to access beyond end of device [ 384.293408][ T7994] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.306946][ T7994] syz.5.946: attempt to access beyond end of device [ 384.306946][ T7994] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.320541][ T7994] syz.5.946: attempt to access beyond end of device [ 384.320541][ T7994] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.334128][ T7994] syz.5.946: attempt to access beyond end of device [ 384.334128][ T7994] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.347632][ T7994] syz.5.946: attempt to access beyond end of device [ 384.347632][ T7994] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 384.407991][ T7996] loop4: detected capacity change from 0 to 1024 [ 384.415564][ T7996] EXT4-fs: Ignoring removed orlov option [ 384.421270][ T7996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 384.509491][ T7996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 384.641849][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 384.830722][ T8005] loop4: detected capacity change from 0 to 256 [ 384.917291][ T8005] FAT-fs (loop4): Directory bread(block 64) failed [ 384.955779][ T8005] FAT-fs (loop4): Directory bread(block 65) failed [ 384.962475][ T8005] FAT-fs (loop4): Directory bread(block 66) failed [ 384.986622][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 385.018685][ T7989] chnl_net:caif_netlink_parms(): no params data found [ 385.030228][ T8005] FAT-fs (loop4): Directory bread(block 67) failed [ 385.037156][ T8005] FAT-fs (loop4): Directory bread(block 68) failed [ 385.043901][ T8005] FAT-fs (loop4): Directory bread(block 69) failed [ 385.051140][ T8005] FAT-fs (loop4): Directory bread(block 70) failed [ 385.057885][ T8005] FAT-fs (loop4): Directory bread(block 71) failed [ 385.064819][ T8005] FAT-fs (loop4): Directory bread(block 72) failed [ 385.071471][ T8005] FAT-fs (loop4): Directory bread(block 73) failed [ 385.374340][ T8018] loop5: detected capacity change from 0 to 1024 [ 385.931054][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.943323][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.959335][ T7989] device bridge_slave_0 entered promiscuous mode [ 386.006581][ T46] device hsr_slave_0 left promiscuous mode [ 386.017745][ T46] device hsr_slave_1 left promiscuous mode [ 386.040617][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.054344][ T7223] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 386.062530][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.079892][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.104294][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.179171][ T46] device bridge_slave_1 left promiscuous mode [ 386.185575][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.296248][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 386.309213][ T7223] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 386.320741][ T7223] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 386.321412][ T46] device bridge_slave_0 left promiscuous mode [ 386.332270][ T7223] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 386.347563][ T7223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.380529][ T8031] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 386.788442][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.002337][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'. [ 387.024944][ T46] device veth1_macvtap left promiscuous mode [ 387.031055][ T46] device veth0_macvtap left promiscuous mode [ 387.073056][ T46] device veth1_vlan left promiscuous mode [ 387.092049][ T46] device veth0_vlan left promiscuous mode [ 387.111819][ T7223] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 387.120859][ T7223] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input26 [ 387.138841][ T7223] usb 5-1: USB disconnect, device number 15 [ 387.138898][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 388.364319][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 388.590837][ T46] team0 (unregistering): Port device team_slave_1 removed [ 388.674334][ T46] team0 (unregistering): Port device team_slave_0 removed [ 388.851818][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.936336][ T8075] loop5: detected capacity change from 0 to 1024 [ 388.980731][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.992462][ T8075] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 389.995300][ T6466] EXT4-fs (loop5): unmounting filesystem. [ 390.444984][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 391.084370][ T7168] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 391.143796][ T46] bond0 (unregistering): Released all slaves [ 391.240363][ T7989] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.249670][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.258932][ T7989] device bridge_slave_1 entered promiscuous mode [ 391.275956][ T7168] usb 6-1: config 255 has an invalid interface number: 0 but max is -1 [ 391.287959][ T7168] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 391.320170][ T7168] usb 6-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 391.331962][ T7168] usb 6-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 391.341198][ T7168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.365788][ T7989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.397427][ T7989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.557574][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.973'. [ 391.661082][ T26] audit: type=1326 audit(1732070292.398:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8089 comm="syz.0.972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4f3d7e759 code=0x0 [ 391.667641][ T7989] team0: Port device team_slave_0 added [ 391.711306][ T7168] usb 6-1: string descriptor 0 read error: -71 [ 391.757993][ T7168] snd-usb-audio: probe of 6-1:255.0 failed with error -2 [ 391.785660][ T7168] usb 6-1: USB disconnect, device number 9 [ 391.798255][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.969464][ T7989] team0: Port device team_slave_1 added [ 391.992635][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.973'. [ 392.119011][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.137770][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.175715][ T7989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.209806][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.243579][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.270815][ T7989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.399085][ T7989] device hsr_slave_0 entered promiscuous mode [ 392.424822][ T7989] device hsr_slave_1 entered promiscuous mode [ 392.524223][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 392.645257][ T8119] loop5: detected capacity change from 0 to 2048 [ 392.673608][ T8119] UDF-fs: bad mount option "anchor=0000000000000000000gid=forget" or missing value [ 393.684914][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 393.820053][ T7989] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 393.846306][ T7989] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 393.877551][ T7989] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 393.920690][ T7989] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 394.024600][ T4347] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 394.134399][ T7989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.161916][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.183325][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.203664][ T7989] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.214350][ T7223] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 394.225980][ T4347] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 394.240288][ T4347] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 394.253182][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 394.266315][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.274665][ T4347] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.285754][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.292898][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.301471][ T4347] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 394.310644][ T4347] usb 6-1: config 0 has no interface number 0 [ 394.317776][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.325266][ T4347] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 394.336179][ T4347] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 394.350376][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.355058][ T4347] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 394.369319][ T4347] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.382674][ T4347] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 394.383459][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.401394][ T4347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.411729][ T4347] usb 6-1: config 0 descriptor?? [ 394.426973][ T7223] usb 5-1: config 255 has an invalid interface number: 0 but max is -1 [ 394.434363][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.442453][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.443044][ T4347] gspca_main: spca561-2.14.0 probing abcd:cdee [ 394.465658][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.476792][ T7223] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 394.486761][ T7223] usb 5-1: config 255 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 394.500700][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 394.524499][ T7223] usb 5-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 394.533729][ T7223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.554469][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 394.572812][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.588226][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.599088][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.609924][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 394.619129][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 394.630788][ T4347] spca561: probe of 6-1:0.156 failed with error -22 [ 394.654796][ T7989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.666465][ T4347] usb 6-1: MIDIStreaming interface descriptor not found [ 394.675505][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 394.683862][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 394.695534][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 394.739233][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 394.747353][ T4347] usb 6-1: USB disconnect, device number 10 [ 394.832728][ T7223] usb 5-1: string descriptor 0 read error: -71 [ 394.894697][ T7223] snd-usb-audio: probe of 5-1:255.0 failed with error -2 [ 394.914648][ T7223] usb 5-1: USB disconnect, device number 16 [ 394.978730][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 395.162019][ T8172] loop6: detected capacity change from 0 to 8 [ 395.222844][ T6049] udevd[6049]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.286066][ T7762] udevd[7762]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.343265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.358661][ T8176] loop5: detected capacity change from 0 to 1024 [ 395.364405][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.421768][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.437310][ T8176] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 395.495748][ T8176] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802e118, mo2=0000] [ 395.503971][ T8176] System zones: 0-1, 3-12 [ 395.547705][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'. [ 395.615230][ T8176] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.991: Invalid block bitmap block 0 in block_group 0 [ 395.682914][ T8176] Quota error (device loop5): write_blk: dquota write failed [ 395.695816][ T8176] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 395.884479][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 395.893156][ T8176] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.991: Failed to acquire dquot type 0 [ 396.250413][ T8176] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.991: Freeing blocks not in datazone - block = 0, count = 4096 [ 396.301369][ T8176] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.991: Invalid inode bitmap blk 0 in block_group 0 [ 396.363068][ T4300] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 396.365506][ T8176] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 396.390671][ T4300] EXT4-fs error (device loop5): ext4_release_dquot:6824: comm kworker/u4:5: Failed to release dquot type 0 [ 396.562846][ T8176] EXT4-fs (loop5): 1 orphan inode deleted [ 396.574528][ T8176] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 397.170455][ T8176] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 397.421744][ T6466] EXT4-fs (loop5): unmounting filesystem. [ 397.708909][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.728363][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.772615][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.787402][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.805705][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.824169][ T4347] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 397.832394][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.855458][ T7989] device veth0_vlan entered promiscuous mode [ 397.883023][ T7989] device veth1_vlan entered promiscuous mode [ 397.934038][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 397.951228][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 397.961191][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 397.979914][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.998803][ T7989] device veth0_macvtap entered promiscuous mode [ 398.018719][ T4347] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 398.029373][ T7989] device veth1_macvtap entered promiscuous mode [ 398.030645][ T4347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.073755][ T4347] usb 6-1: config 0 descriptor?? [ 398.105288][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.133778][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.179891][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.214210][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.238747][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.267544][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.302793][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.319687][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.355112][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.358928][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 398.375259][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.405054][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.426520][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.458865][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.489432][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.515365][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.549853][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.589722][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.612746][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.630900][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.642863][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.660571][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 398.674466][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.686374][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.702461][ T7989] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.713576][ T7989] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.725702][ T7989] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.736045][ T7989] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.900275][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.920290][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.961984][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.963423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.986045][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.005594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.195995][ T8251] loop4: detected capacity change from 0 to 256 [ 399.269957][ T8251] FAT-fs (loop4): invalid media value (0x01) [ 399.294416][ T8251] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 399.379320][ T8251] FAT-fs (loop4): Can't find a valid FAT filesystem [ 399.789876][ T4347] usb 6-1: Cannot set autoneg [ 399.871756][ T4347] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 400.196693][ T4347] usb 6-1: USB disconnect, device number 11 [ 400.522405][ T8266] loop8: detected capacity change from 0 to 1024 [ 400.634189][ T7168] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 400.646854][ T26] audit: type=1800 audit(1732070301.358:78): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1012" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 400.872473][ T7168] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 400.972319][ T7168] usb 5-1: config 0 has an invalid interface number: 235 but max is 128 [ 401.145448][ T7168] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.353597][ T7168] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 402.236124][ T7168] usb 5-1: config 0 has no interface number 0 [ 402.259048][ T7168] usb 5-1: New USB device found, idVendor=1199, idProduct=683e, bcdDevice=c7.ec [ 402.274174][ T7168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.282996][ T7168] usb 5-1: Product: syz [ 402.325009][ T7168] usb 5-1: Manufacturer: syz [ 402.329672][ T7168] usb 5-1: SerialNumber: syz [ 402.366489][ T7168] usb 5-1: config 0 descriptor?? [ 402.406108][ T7168] sierra 5-1:0.235: Sierra USB modem converter detected [ 402.598100][ T7168] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 402.631484][ T7168] usb 5-1: USB disconnect, device number 17 [ 402.685087][ T7168] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 402.698625][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 402.713752][ T7168] sierra 5-1:0.235: device disconnected [ 402.906067][ T8300] loop8: detected capacity change from 0 to 1024 [ 402.968072][ T8300] hfsplus: extend alloc file! (8192,65536,366) [ 403.599134][ T8308] loop6: detected capacity change from 0 to 256 [ 403.682721][ T8308] FAT-fs (loop6): Unrecognized mount option "§"Jœ|q·³" or missing value [ 404.904976][ T4343] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 404.938791][ T26] audit: type=1326 audit(1732070305.678:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 405.054888][ T26] audit: type=1326 audit(1732070305.708:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 405.359349][ T26] audit: type=1326 audit(1732070305.708:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 405.396094][ T26] audit: type=1326 audit(1732070305.708:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f914257d0f0 code=0x7ffc0000 [ 405.419484][ T26] audit: type=1326 audit(1732070305.708:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f914257e35b code=0x7ffc0000 [ 405.450141][ T26] audit: type=1326 audit(1732070305.708:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f914257e35b code=0x7ffc0000 [ 405.534335][ T4347] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 405.764599][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.776226][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.786757][ T4347] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 405.796036][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.835124][ T4347] usb 1-1: config 0 descriptor?? [ 406.153121][ T26] audit: type=1326 audit(1732070305.728:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f914257e35b code=0x7ffc0000 [ 406.177117][ T26] audit: type=1326 audit(1732070305.728:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.6.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f914257e35b code=0x7ffc0000 [ 406.282815][ T4347] usbhid 1-1:0.0: can't add hid device: -71 [ 406.289399][ T4347] usbhid: probe of 1-1:0.0 failed with error -71 [ 406.330868][ T8332] loop4: detected capacity change from 0 to 256 [ 406.350966][ T4347] usb 1-1: USB disconnect, device number 20 [ 406.791739][ T8344] loop5: detected capacity change from 0 to 1024 [ 407.147172][ T8344] hfsplus: unable to find HFS+ superblock [ 407.189437][ T4343] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 407.206693][ T8344] 9pnet_fd: Insufficient options for proto=fd [ 407.281035][ T8354] loop5: detected capacity change from 0 to 512 [ 407.756610][ T8354] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 407.845866][ T8354] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.335119][ T6466] EXT4-fs (loop5): unmounting filesystem. [ 408.393325][ T8369] netlink: 'syz.0.1036': attribute type 17 has an invalid length. [ 408.560837][ T8375] loop5: detected capacity change from 0 to 2048 [ 408.655226][ T8375] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 408.728260][ T8375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.495637][ T6466] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 409.519356][ T6466] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 409.848327][ T8396] loop4: detected capacity change from 0 to 256 [ 410.144509][ T7168] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 410.540476][ T7168] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.606334][ T7168] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.621063][ T8396] FAT-fs (loop4): Directory bread(block 64) failed [ 410.638247][ T8396] FAT-fs (loop4): Directory bread(block 65) failed [ 410.655417][ T7168] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 410.675769][ T8396] FAT-fs (loop4): Directory bread(block 66) failed [ 410.714137][ T7168] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.729819][ T8396] FAT-fs (loop4): Directory bread(block 67) failed [ 410.785977][ T7168] usb 9-1: config 0 descriptor?? [ 410.801688][ T8396] FAT-fs (loop4): Directory bread(block 68) failed [ 410.833765][ T8396] FAT-fs (loop4): Directory bread(block 69) failed [ 410.873423][ T8396] FAT-fs (loop4): Directory bread(block 70) failed [ 410.886283][ T26] audit: type=1326 audit(1732070311.628:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 410.914431][ T8396] FAT-fs (loop4): Directory bread(block 71) failed [ 410.921127][ T8396] FAT-fs (loop4): Directory bread(block 72) failed [ 410.985897][ T26] audit: type=1326 audit(1732070311.628:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 411.023193][ T8396] FAT-fs (loop4): Directory bread(block 73) failed [ 411.055697][ T4300] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.096841][ T26] audit: type=1326 audit(1732070311.668:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 411.214152][ T26] audit: type=1326 audit(1732070311.668:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 411.241274][ T7168] usbhid 9-1:0.0: can't add hid device: -71 [ 411.257659][ T7168] usbhid: probe of 9-1:0.0 failed with error -71 [ 411.299401][ T7168] usb 9-1: USB disconnect, device number 2 [ 411.325131][ T26] audit: type=1326 audit(1732070311.668:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 411.387822][ T4300] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.445268][ T26] audit: type=1326 audit(1732070311.678:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 412.224400][ T26] audit: type=1326 audit(1732070311.678:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 412.303644][ T4300] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.338898][ T26] audit: type=1326 audit(1732070311.678:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 412.541974][ T26] audit: type=1326 audit(1732070311.678:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 413.146140][ T8423] loop6: detected capacity change from 0 to 512 [ 413.193536][ T8423] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 413.212317][ T26] audit: type=1326 audit(1732070311.678:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 413.547230][ T8423] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.1055: invalid indirect mapped block 83886080 (level 1) [ 413.566343][ T4300] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.594899][ T26] audit: type=1326 audit(1732070311.678:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914257e759 code=0x7ffc0000 [ 413.731187][ T8423] EXT4-fs (loop6): 1 orphan inode deleted [ 413.910866][ T8423] EXT4-fs (loop6): 1 truncate cleaned up [ 413.962081][ T8423] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 413.994960][ T26] audit: type=1326 audit(1732070313.278:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bff7e759 code=0x7ffc0000 [ 414.077986][ T26] audit: type=1326 audit(1732070313.278:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.8.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bff7e759 code=0x7ffc0000 [ 414.123954][ T8423] EXT4-fs (loop6): unmounting filesystem. [ 415.983465][ T4300] device hsr_slave_0 left promiscuous mode [ 415.991403][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.006409][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.018599][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.029677][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.042267][ T4300] device bridge_slave_1 left promiscuous mode [ 416.051712][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.067369][ T4300] device bridge_slave_0 left promiscuous mode [ 416.073659][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.125872][ T4300] device veth1_macvtap left promiscuous mode [ 416.131975][ T4300] device veth0_macvtap left promiscuous mode [ 416.138573][ T4300] device veth1_vlan left promiscuous mode [ 416.144588][ T4300] device veth0_vlan left promiscuous mode [ 416.746312][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 416.793556][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 416.843169][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.891964][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.405550][ T4300] bond0 (unregistering): Released all slaves [ 418.028697][ T4300] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.086394][ T4300] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.154754][ T4300] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.211661][ T4300] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.367848][ T4300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.435178][ T4300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.513825][ T4300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.599989][ T4300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.775327][ T4300] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.846164][ T4300] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.923174][ T4300] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.981598][ T4300] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.139833][ T4300] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.210135][ T4300] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.287719][ T4300] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.376313][ T4300] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.061841][ T4300] device hsr_slave_0 left promiscuous mode [ 422.069900][ T4300] device hsr_slave_1 left promiscuous mode [ 422.076621][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.088456][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.096800][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.109927][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.117911][ T4300] device bridge_slave_1 left promiscuous mode [ 422.129064][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.138533][ T4300] device bridge_slave_0 left promiscuous mode [ 422.145357][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.159454][ T4300] device hsr_slave_0 left promiscuous mode [ 422.166360][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.173785][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.181523][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.189329][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.197872][ T4300] device bridge_slave_1 left promiscuous mode [ 422.204315][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.212402][ T4300] device bridge_slave_0 left promiscuous mode [ 422.218721][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.230773][ T4300] device hsr_slave_0 left promiscuous mode [ 422.237237][ T4300] device hsr_slave_1 left promiscuous mode [ 422.243600][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.251100][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.259281][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.266930][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.275116][ T4300] device bridge_slave_1 left promiscuous mode [ 422.281345][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.291326][ T4300] device bridge_slave_0 left promiscuous mode [ 422.298460][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.311813][ T4300] device hsr_slave_0 left promiscuous mode [ 422.318416][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.326050][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.333712][ T4300] device bridge_slave_1 left promiscuous mode [ 422.339986][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.348214][ T4300] device bridge_slave_0 left promiscuous mode [ 422.354531][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.425428][ T4300] device veth1_macvtap left promiscuous mode [ 422.431517][ T4300] device veth0_macvtap left promiscuous mode [ 422.437666][ T4300] device veth1_vlan left promiscuous mode [ 422.443438][ T4300] device veth0_vlan left promiscuous mode [ 422.451192][ T4300] device veth1_macvtap left promiscuous mode [ 422.457326][ T4300] device veth0_macvtap left promiscuous mode [ 422.463401][ T4300] device veth1_vlan left promiscuous mode [ 422.469433][ T4300] device veth0_vlan left promiscuous mode [ 422.481379][ T4300] device veth1_macvtap left promiscuous mode [ 422.487529][ T4300] device veth0_macvtap left promiscuous mode [ 422.493628][ T4300] device veth1_vlan left promiscuous mode [ 422.499687][ T4300] device veth0_vlan left promiscuous mode [ 422.507238][ T4300] device veth1_macvtap left promiscuous mode [ 422.513278][ T4300] device veth0_macvtap left promiscuous mode [ 422.519781][ T4300] device veth1_vlan left promiscuous mode [ 422.527179][ T4300] device veth0_vlan left promiscuous mode [ 423.283520][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 423.330412][ T4300] team0 (unregistering): Port device team_slave_0 removed [