last executing test programs: 4.021606988s ago: executing program 1 (id=1458): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r3, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c8, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x1aa, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x66, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a"}, {0xdd, 0xb2, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7d5ab4df3"}, {0xdd, 0x60, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed5368fc27caead9239899776d594603177acb5662b5"}]}}]}, 0x1c8}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xb8, r1, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x1c}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xe}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7ff}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xce764308b77f9479}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x74, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @beacon={{{}, {}, @device_b, @device_a, @random="e576359046a8"}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x74}}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000000), 0x0) 3.537677197s ago: executing program 1 (id=1461): socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1e, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x411, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0xf}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x77, &(0x7f0000001400)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaa0088480000000000000000bcf8ec38c16a47b435c3c3808e83e20c92dc437a023de437099322a8d6c6b17b1a66b9f021174c158e7eb2047527c2f7ccd08521e49a33da28998c692e976cfc871f8da961ee815e4536565688d33f90e5342ee8c4d03f2edaff192446a1712705"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000024c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYRES16=r4], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x48001) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r5, 0x0, 0x3a, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="26003300d00000000802114522010802110000005050505050500000090425030000003e01000000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYRES32=r8, @ANYBLOB="060065007600000006006500080000006e005b0807b8ad1df066cba9ff521765ace5e79e27345a8884f0f792d977efad11de7d490fd6e9f3c3846244142c489c9f04ed88fb0700000000000000874b746e6012fbb0506218d94ceca95b391ae8d1df636b62482ab0439f45c2bdecc54c617ee4d6b49e66bb507fd200fb050065000400000025005b0062586778c98f5be27a069e8dc8904191c13a733f13e79dd2c73c7ec2183ec70f02000000c44bd8ebf871c7d58807be48b9841d5515a8b8b0c4f4898746a5d155f713f5b129c1a183283eac40d1999f2340e99c5816c18b8a2ab08fb168b28306348662ecc9"], 0xcc}}, 0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250f0000003c0001800800030001000000140002006772657461703000000000000000000008000300000000001400020067656e65766530000000000000000000040001802000018008000100", @ANYRES32=r4, @ANYBLOB="140002007663616e30000000000000000000000034000180140002007369743000000000000000000000000008000300030000001400020073797a6b616c6c6572310000000000003c0001801400020069705f7674693000000000000000000008000100", @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="1400020076657468305f746f5f7465616d0000003800018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="140002006261746164765f736c6176655f300000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="44000180140002006c6f000000000000000000000000000008000300060000000800030000000000140002006e69637666300000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="040001804400018008000100", @ANYRES32=r4, @ANYBLOB="1400faff76657468305f746f5f626f4d640000d490d29633ef6e43f8017e0cef", @ANYRES32=0x0, @ANYBLOB="140002007674616491000c000100", @ANYRES32=r4, @ANYBLOB], 0x1a8}}, 0x44) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@loopback, @in=@broadcast}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x21, 0x4, 0x804) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 3.340452393s ago: executing program 1 (id=1462): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0, 0x0) 3.051662976s ago: executing program 1 (id=1463): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100), 0x4) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 2.680894215s ago: executing program 1 (id=1465): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_coalesce={0x1}}) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000340), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f00000001c0)='./file0\x00') listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0xf) syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@datasec={0x4, 0x0, 0x0, 0xf, 0x2, [], ']8'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "559b"}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x2e, 0x1e]}}, 0x0, 0x3c}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r3, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000010c0)='%pI4 \x00'}, 0x63) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000003007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='9p_client_req\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ec) write$binfmt_script(r8, &(0x7f0000000240), 0xb) close(r8) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, "cf0da7087b9539556f7ab2a8bf68b63bfcbea9"}) fanotify_init(0x0, 0x0) utimensat(r8, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)={{0x77359400}, {0x77359400}}, 0x100) fchownat(r7, &(0x7f0000000280)='./file0\x00', 0x0, 0xee00, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @initdev}, &(0x7f00000000c0)=0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x200, '\x00', r9, r1, 0x5, 0x2, 0x5}, 0x48) 2.066746825s ago: executing program 2 (id=1468): pipe(&(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/20, 0x13}, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 2.037553507s ago: executing program 4 (id=1470): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x2, "53bf"}, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) 1.985705871s ago: executing program 3 (id=1471): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r3, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c8, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x1aa, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x66, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a"}, {0xdd, 0xb2, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7d5ab4df3"}, {0xdd, 0x60, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed5368fc27caead9239899776d594603177acb5662b5"}]}}]}, 0x1c8}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xb8, r1, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x1c}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xe}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7ff}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xce764308b77f9479}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x74, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @beacon={{{}, {}, @device_b, @device_a, @random="e576359046a8"}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x74}}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000000), 0x0) 1.87943273s ago: executing program 0 (id=1472): socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1e, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x411, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0xf}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x77, &(0x7f0000001400)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaa0088480000000000000000bcf8ec38c16a47b435c3c3808e83e20c92dc437a023de437099322a8d6c6b17b1a66b9f021174c158e7eb2047527c2f7ccd08521e49a33da28998c692e976cfc871f8da961ee815e4536565688d33f90e5342ee8c4d03f2edaff192446a1712705"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000024c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYRES16=r4], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x48001) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r5, 0x0, 0x3a, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="26003300d00000000802114522010802110000005050505050500000090425030000003e01000000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYRES32=r8, @ANYBLOB="060065007600000006006500080000006e005b0807b8ad1df066cba9ff521765ace5e79e27345a8884f0f792d977efad11de7d490fd6e9f3c3846244142c489c9f04ed88fb0700000000000000874b746e6012fbb0506218d94ceca95b391ae8d1df636b62482ab0439f45c2bdecc54c617ee4d6b49e66bb507fd200fb050065000400000025005b0062586778c98f5be27a069e8dc8904191c13a733f13e79dd2c73c7ec2183ec70f02000000c44bd8ebf871c7d58807be48b9841d5515a8b8b0c4f4898746a5d155f713f5b129c1a183283eac40d1999f2340e99c5816c18b8a2ab08fb168b28306348662ecc9"], 0xcc}}, 0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250f0000003c0001800800030001000000140002006772657461703000000000000000000008000300000000001400020067656e65766530000000000000000000040001802000018008000100", @ANYRES32=r4, @ANYBLOB="140002007663616e30000000000000000000000034000180140002007369743000000000000000000000000008000300030000001400020073797a6b616c6c6572310000000000003c0001801400020069705f7674693000000000000000000008000100", @ANYRES32=r4, @ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="1400020076657468305f746f5f7465616d0000003800018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="140002006261746164765f736c6176655f300000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="44000180140002006c6f000000000000000000000000000008000300060000000800030000000000140002006e69637666300000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="040001804400018008000100", @ANYRES32=r4, @ANYBLOB="1400faff76657468305f746f5f626f4d640000d490d29633ef6e43f8017e0cef", @ANYRES32=0x0, @ANYBLOB="140002007674616491000c000100", @ANYRES32=r4, @ANYBLOB], 0x1a8}}, 0x44) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@loopback, @in=@broadcast}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x21, 0x4, 0x804) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 1.819689514s ago: executing program 2 (id=1473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 1.717196933s ago: executing program 0 (id=1474): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @scatter={0x6, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/85, 0x55}, {0x0}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f00000005c0)=""/192, 0xc0}]}, &(0x7f0000000180)="2e1cd343758c", 0x0, 0x7, 0x12, 0x0, 0x0}) r2 = memfd_create(&(0x7f00000008c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0xb, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r6, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg2\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)) epoll_create(0x8) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20008004) recvmsg$kcm(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000940)=""/4106, 0x100a}, {&(0x7f00000003c0)=""/23, 0x17}], 0x2}, 0x0) r10 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f00000001c0)) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000019c0)=ANY=[], 0xe8) io_uring_enter(r10, 0x30c6, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f00000000c0)="e036bfe9f6080f3c8a4947f18279b10b307f3efdb5a3b3a7851038a2ef751e948ccfd28db727d49f1959ebbd81a7e52cb5e5afd7", 0x55}, {&(0x7f0000000280)="b3a5ae96edf445f20e24a5bffbb42edda7fb80f90a380fd19bc768466f18eebb24", 0x21}], 0x2) write(r2, &(0x7f0000002140)='i', 0x1) 1.470581482s ago: executing program 2 (id=1475): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80040, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x5452, 0x0) 1.404871378s ago: executing program 3 (id=1476): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, 0x0, 0x21) 1.313837505s ago: executing program 4 (id=1477): r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) write$P9_RSYMLINK(r1, 0x0, 0x0) 1.286872037s ago: executing program 3 (id=1478): socket$kcm(0x29, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x4000080) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000010c0)={0x7, 'vlan1\x00', {0x6}, 0x4000}) 1.268084718s ago: executing program 2 (id=1479): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) 1.098844032s ago: executing program 4 (id=1480): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) 1.098423672s ago: executing program 3 (id=1481): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)="c2", 0x1}], 0x1}, 0x0) 1.037823676s ago: executing program 2 (id=1482): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a}, 0x20) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 957.722153ms ago: executing program 3 (id=1483): pipe(&(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/20, 0x13}, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 951.232974ms ago: executing program 4 (id=1484): socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1e, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x411, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0xf}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x77, &(0x7f0000001400)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaa0088480000000000000000bcf8ec38c16a47b435c3c3808e83e20c92dc437a023de437099322a8d6c6b17b1a66b9f021174c158e7eb2047527c2f7ccd08521e49a33da28998c692e976cfc871f8da961ee815e4536565688d33f90e5342ee8c4d03f2edaff192446a1712705"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000024c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x48001) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r4, 0x0, 0x3a, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="26003300d00000000802114522010802110000005050505050500000090425030000003e01000000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYRES32=r7, @ANYBLOB="060065007600000006006500080000006e005b0807b8ad1df066cba9ff521765ace5e79e27345a8884f0f792d977efad11de7d490fd6e9f3c3846244142c489c9f04ed88fb0700000000000000874b746e6012fbb0506218d94ceca95b391ae8d1df636b62482ab0439f45c2bdecc54c617ee4d6b49e66bb507fd200fb050065000400000025005b0062586778c98f5be27a069e8dc8904191c13a733f13e79dd2c73c7ec2183ec70f02000000c44bd8ebf871c7d58807be48b9841d5515a8b8b0c4f4898746a5d155f713f5b129c1a183283eac40d1999f2340e99c5816c18b8a2ab08fb168b28306348662ecc9"], 0xcc}}, 0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf250f0000003c0001800800030001000000140002006772657461703000000000000000000008000300000000001400020067656e65766530000000000000000000040001802000018008000100", @ANYRES32, @ANYBLOB="140002007663616e30000000000000000000000034000180140002007369743000000000000000000000000008000300030000001400020073797a6b616c6c6572310000000000003c0001801400020069705f7674693000000000000000000008000100", @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB="1400020076657468305f746f5f7465616d0000003800018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="140002006261746164765f736c6176655f300000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="44000180140002006c6f000000000000000000000000000008000300060000000800030000000000140002006e69637666300000000000000000000008000100", @ANYRES32, @ANYBLOB="040001804400018008000100", @ANYRES32, @ANYBLOB="1400faff76657468305f746f5f626f4d640000d490d29633ef6e43f8017e0cef", @ANYRES32=0x0, @ANYBLOB="140002007674616491000c000100", @ANYRES32, @ANYBLOB], 0x1a8}}, 0x44) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@loopback, @in=@broadcast}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x21, 0x4, 0x804) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 882.313989ms ago: executing program 4 (id=1485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xa, {0x0, 0x3}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x450, 0x3f3, 0x4, 0x70bd2c, 0x25dfdbfb, {0x6, 0x1, 0x0, [0x200, 0x1, 0x1, 0x8, 0xfffffff9, 0x1, 0x1, 0x7d0e, 0x400, 0x5, 0x7, 0x7, 0x3, 0xb, 0x7, 0x3, 0x0, 0x8, 0x2, 0x4, 0x0, 0x7e0, 0x10000, 0x3, 0x800, 0x7fffffff, 0xcac, 0x0, 0x8, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x1, 0x9, 0x80000000, 0x2, 0x5, 0xc, 0x5, 0x101, 0x1, 0x6, 0xc, 0x62, 0x9f2, 0x10, 0x0, 0x5, 0xe, 0x2, 0x0, 0x8, 0x1, 0x2, 0x2, 0x4, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0xde2, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8f, 0xfffffff6, 0x9b8, 0x4, 0x53, 0x2, 0x9, 0x2, 0x80000001, 0x4b4, 0xbdad, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0xc, 0x7fff, 0x7, 0x4, 0x2, 0x7, 0x9, 0x6, 0x2, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x0, 0x1, 0x787, 0x3, 0x3, 0xfff, 0x5, 0x7, 0x300000, 0x200, 0x7, 0x2, 0xfffe, 0x0, 0xaf72, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x3, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0xcc8, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x7f, 0x8, 0x6, 0x1, 0x3, 0x1, 0x2c8, 0x4, 0x15fd, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x400, 0x7, 0xcc, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x3e6f9426, 0x6, 0x1, 0x40b, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x5, 0x5, 0xe134, 0x5, 0x96fe, 0x38, 0x77, 0x6, 0x3ca], [0xa, 0x8, 0xff1, 0x7fff, 0x2, 0x2, 0x6, 0x4, 0x2, 0x7fffffff, 0x0, 0x3f, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63b, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x9, 0x0, 0x4, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x1, 0x5e74810d, 0x1000, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x2e, ['!}\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x450}}, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 832.827453ms ago: executing program 2 (id=1486): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$eJzs3U9sHNX9APA367+JTbwGfmDgR0ihFYGCHZJITW9BoB4Rl95BIaERhqKGHoiAmB4QlRBFQpwqDlRcKJVSpCKBKlWop7anVr31hHqhUpVKQT20SImr2G/Wuy/72PXYnrV3Px/p67dv3ux8v2M7zszs7NsAjKzG2tfjxxeKEN759O1HX36q+Pjasrtaaxxa+1rEXjOEMNHWL5LtfR4XXLn80qlubRGOrn0t++GxS63nzoQQVsKh8Flohg+Xlr/84N1HDn/02vQtb55/5pUd2v2WdD8AAGAYXfzT8t/u+8cfH5j/6uLBk2Gqtbw8Pm/G/kw87j8SD5TL4+VG6OwXbdFuMllvLEYjWW8sWW88yTOeyTeRbGcis95kj3xjbcu67ScAAADsReV5bTMUjcWOfqOxuLh+3n/N53OTxeJzZ5fPnBtQoQAAAEBl/76wdtOtEEIIIYQQQgghhjhW5wZ9BQIAAAAYNel8YddZ2d6Zulpba/aX/9LDje7Ph21Q9+//1+efHnD+LkY8//uv+osDAEB1w3o0We5XeRxdzmOQziM4ljxvs8f/jWQ745usMzev4F6ZbzBXZ/p93a1y9W/25zgoufrT+TB3q1z96Tydu1Wu/qma66gqV3+XKz+7Uq7+fTXXUVWu/v0111FVrv6ZmuuoKlf/bM11VJWr/4aa66gqV/+BmuuoKlf/XrmtNld/s+Y6qsrVP19zHVXl6r+x5jqqytV/U811VJWr/+aa6xiUO2Nbfh8OZtab6XJOt1fO8QAAAGDU/df8f0IIIUR7rN8CMfg6hBBCCCG2NS4M+gIEAAAAMHDl+wLKd72vRuX4WI/x8fbx6Y0VyvGJHs+f7DE+1WMcAAAACOG3r5+57a1iY767rc6HV84btS98fDVUmMconY9ws/m3Ou/ZVvPvlXnLAAAAGC3F9z67ev+j770w/9XFgyfbzn6vxvPdch7Q8Xht4JPYL+8LmE36RXkOfbIzTyOzXnp94Ibc9h7f4o4CAADACCvP35uhaCy2nXc3Q6OxuLhxPr4QJoozZ5dPH4n98vNZ/jA3MXVt+UM11w0AAAD0b+N8v/v5f/k5vgthslh87uzymXPr/dnW8olG+3WBuY3lRft1gWay/Ghm+bHYLz+/8wdz+9aWL5764fJT273zAAAAMCLOvXj+mSeXl0//yAMPPPCg9WDQf5kAAIDt9sUXb0/8+Njs79bf/78x/93V+OBQ7Dfj3H5/jsvL+wTK9wFc9379JzrzzOXWe75zvWay3liMqaTu6bbthLX5BjufN5/L1+zczmQm30ySbzbJl85TMJ6sX3SZSzB0mZ+wXG8uWZ7Owzie5CiS/Hd3yQUAAAClpReefX7p3IvnHzz77JNPn3769HPHjp747okTRx76zkNLa/f1L7Xf3Q8AAADsRRs3/Q66EgAAAAAAAAAAAAAAAAAAABhddXyc2KD3EQAAAEbdvy6EEFaEyET5AYODrkPs5lidGnwNwx3Bv0MhhBBCbDGc94mVEFZX00+aBwAAANhZVy6/dKq9vc5Ksa35WltrrjdXY96ynX3wr/PXolzt0sOd10v2b2s1jLq6f//l3635p7qOv//q9uafDht/+0Jff/8anRs42dHb12/ee5d+udDKH0K4fbzP/On+P95vxk6Hk/z3hv7yr76X5H+io9foN/99Sf79fea/bv+f7zdjp/tj/oXYP3xPv/k7d7H8LS33o99fgG8n+/9U6Dd/sv/NPhMmHoj5AWAUtf43X70w2EK2WXmUUB5Pz8R+ub/xcDOkdz9s9vi/kWxnfMuVd263PA66NfanW3V05i1ttv7y+zIb2xsq1pnaK3eV5Orfrp/jTsvVP1FzHVXl6p+suY6qcvV3P3vffXL1T9dcR1W5+vu+EDFgufr3ynXlXP0zNddRVa7+2ZrrqCpX/2b/Hx+UXP0Haq6jqlz9czXXUVWu/oqX1WqXq3++5jqqytV/Y811VJWr/6aa66gqV//NNdcxKHfENnc+XJ5/zsWxst9M+lNdvpd9vxgCAAAA7Kh/7sp5INquHAy8FiGEEEIIIYY//rO6btB1CCF2LlZXB3n1gUHb2XczA7Bb+fs/2vz8R5uf/2jz8+frlK/EF0m/NNZjfLzH+ESP8clkPP19neoxflOy3dXyumZ0c4/x/4t7kBs/0OP5t/YYX+gxfluP8dt7jN/RYxwAAIDRcEtsnR8CAADA8Hr5V5+88Zt7n7g8/9XFgyfD5HXzzh+J/an42vrrsZ/Oe1+aiK/5/yT2fxHb38f278n67j8BAACAnVd+TozX/wEAAGB4lZ9T6vwfAAAAhtd8bJ3/AwAAwPC6MbbO/wEAAGCIFdPdF8e2vC5wd2z7ndcPANj9/j+2d8b2YGzviu03YlseB9wT22/WVB8AsH1+/v2fnnir2Jjv/1gyfiUuL9vrrKxfKSganTP574vt/th+q8960s8D6Dd/6UCfeXYq/9wW8wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6Ox9vX48YUihHc+ffvRn02+8Zdry+5qrXFo7WsRe80QwkTreeXoRv/XccUrl1861d5ejW0RjoYiFK3l4bFLrUwzIYSVcCh8Fprhw6XlLz9495HDH702fcub5595ZQe/BR37BwAAAMPofwEAAP//fccg7g==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) 639.693659ms ago: executing program 0 (id=1487): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/19, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32=r0], 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) 564.629985ms ago: executing program 1 (id=1488): syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x2}, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000880)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40), 0x0, 0x9c, &(0x7f0000000b80), 0x0, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x401, 0x8, 0xffffffff, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x3, 0x5, 0x2, 0x5}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 549.284016ms ago: executing program 3 (id=1489): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.events\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 335.044253ms ago: executing program 0 (id=1490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0xf2) msgctl$IPC_SET(0x0, 0x1, 0x0) 250.17327ms ago: executing program 4 (id=1491): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffff7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x7) syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x14100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x805) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x48b, 0x0, 0x0}) 61.850765ms ago: executing program 0 (id=1492): r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x375) 0s ago: executing program 0 (id=1493): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@nodiscard}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8}}, {@ref_verify}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8001}}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@barrier}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") rmdir(0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x196b4b8, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES64, @ANYRES16=r0, @ANYRES8, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00'}, 0x45c) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0) kernel console output (not intermixed with test programs): k: 'syz.0.754': attribute type 10 has an invalid length. [ 226.070327][ T6767] bridge0: port 3(team0) entered disabled state [ 226.117775][ T6767] device team0 left promiscuous mode [ 226.123559][ T6767] device team_slave_0 left promiscuous mode [ 226.130539][ T6767] device team_slave_1 left promiscuous mode [ 226.136673][ T6767] bridge0: port 3(team0) entered disabled state [ 226.167771][ T6767] batman_adv: batadv0: Adding interface: team0 [ 226.174004][ T6767] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.199639][ T6767] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 226.210265][ T6768] netlink: 'syz.0.754': attribute type 10 has an invalid length. [ 226.220208][ T6768] netlink: 2 bytes leftover after parsing attributes in process `syz.0.754'. [ 226.242453][ T6768] device team0 entered promiscuous mode [ 226.250711][ T6768] device team_slave_0 entered promiscuous mode [ 226.275150][ T6768] device team_slave_1 entered promiscuous mode [ 226.304730][ T6768] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.322041][ T6768] batman_adv: batadv0: Interface activated: team0 [ 226.342741][ T6768] batman_adv: batadv0: Interface deactivated: team0 [ 226.360283][ T6768] batman_adv: batadv0: Removing interface: team0 [ 226.406231][ T6768] bridge0: port 3(team0) entered blocking state [ 226.484342][ T6768] bridge0: port 3(team0) entered disabled state [ 226.531381][ T6768] bridge0: port 3(team0) entered blocking state [ 226.538017][ T6768] bridge0: port 3(team0) entered forwarding state [ 227.282438][ T6762] loop1: detected capacity change from 0 to 32768 [ 227.316877][ T6791] i2c i2c-0: Invalid block write size 34 [ 227.358517][ T6762] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.751 (6762) [ 227.360538][ T6763] loop2: detected capacity change from 0 to 32768 [ 227.426425][ T6762] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.484131][ T6762] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 227.549167][ T6776] loop3: detected capacity change from 0 to 32768 [ 227.579889][ T6762] BTRFS info (device loop1): using free space tree [ 227.598786][ T6776] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.756 (6776) [ 227.611789][ T6763] XFS (loop2): Mounting V5 Filesystem [ 227.664628][ T6776] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.692372][ T6776] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 227.701660][ T6776] BTRFS info (device loop3): using free space tree [ 227.744401][ T6763] XFS (loop2): Ending clean mount [ 227.780144][ T6763] XFS (loop2): Quotacheck needed: Please wait. [ 227.836563][ T6763] XFS (loop2): Quotacheck: Done. [ 227.928252][ T3564] XFS (loop2): Unmounting Filesystem [ 227.934127][ T6776] BTRFS info (device loop3): enabling ssd optimizations [ 227.984191][ T6762] BTRFS info (device loop1): enabling ssd optimizations [ 228.646030][ T26] audit: type=1326 audit(1721292256.765:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc229375ad9 code=0x7ffc0000 [ 228.833990][ T26] audit: type=1326 audit(1721292256.765:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc229375ad9 code=0x7ffc0000 [ 228.893642][ T3548] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.920829][ T6099] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.082279][ T26] audit: type=1326 audit(1721292256.765:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fc229375ad9 code=0x7ffc0000 [ 230.334105][ T6886] x_tables: duplicate underflow at hook 1 [ 230.501525][ T6894] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 230.695528][ T3613] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 231.065861][ T3613] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.094439][ T3613] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 231.121463][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.151653][ T3613] usb 4-1: config 0 descriptor?? [ 231.236770][ T6890] loop4: detected capacity change from 0 to 32768 [ 231.294365][ T6892] loop1: detected capacity change from 0 to 32768 [ 231.317344][ T6892] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.779 (6892) [ 231.413816][ T6890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.780 (6890) [ 231.432594][ T6892] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.481718][ T6890] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.502647][ T6892] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 231.515926][ T6890] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 231.517755][ T6892] BTRFS info (device loop1): using free space tree [ 231.562585][ T6890] BTRFS info (device loop4): using free space tree [ 231.635919][ T3613] ath6kl: Unsupported hardware version: 0xb6cf26d5 [ 231.644427][ T3613] ath6kl: Failed to init ath6kl core: -22 [ 231.677938][ T6892] BTRFS info (device loop1): enabling ssd optimizations [ 231.725553][ T6890] BTRFS info (device loop4): enabling ssd optimizations [ 231.739591][ T6899] loop0: detected capacity change from 0 to 32768 [ 231.810332][ T6899] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.782 (6899) [ 231.821711][ T3613] ath6kl_usb: probe of 4-1:0.0 failed with error -22 [ 231.894540][ T3896] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (3896) [ 232.011184][ T6006] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.169106][ T26] audit: type=1326 audit(1721292260.555:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 232.354979][ T26] audit: type=1326 audit(1721292260.555:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 232.564337][ T26] audit: type=1326 audit(1721292260.555:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 232.633589][ T6099] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.287044][ T4546] usb 4-1: USB disconnect, device number 14 [ 233.402632][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 233.438972][ T6973] bridge0: port 3(team0) entered disabled state [ 233.451210][ T6973] device bridge_slave_1 left promiscuous mode [ 233.459331][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.470809][ T6973] device bridge_slave_0 left promiscuous mode [ 233.477755][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.487108][ T3613] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 233.755832][ T3613] usb 5-1: Using ep0 maxpacket: 8 [ 233.782092][ T26] audit: type=1326 audit(1721292262.165:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc229375ad9 code=0x7ffc0000 [ 233.875673][ T3613] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.891794][ T26] audit: type=1326 audit(1721292262.195:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc229375ad9 code=0x7ffc0000 [ 233.892948][ T3613] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 233.946765][ T3613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.990188][ T3613] usb 5-1: config 0 descriptor?? [ 234.024571][ T26] audit: type=1326 audit(1721292262.215:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc229375ad9 code=0x7ffc0000 [ 234.060064][ T3613] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 234.126927][ T26] audit: type=1326 audit(1721292262.215:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc229375ad9 code=0x7ffc0000 [ 234.154654][ T26] audit: type=1326 audit(1721292262.215:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc229375ad9 code=0x7ffc0000 [ 234.185903][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.799'. [ 234.219629][ T26] audit: type=1326 audit(1721292262.215:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc229375ad9 code=0x7ffc0000 [ 234.254340][ T26] audit: type=1326 audit(1721292262.215:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc229375ad9 code=0x7ffc0000 [ 234.680755][ T6980] loop1: detected capacity change from 0 to 32768 [ 234.694972][ T6980] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.796 (6980) [ 234.773183][ T6980] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.793585][ T6980] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 234.803259][ T6980] BTRFS info (device loop1): setting nodatacow, compression disabled [ 234.812811][ T6980] BTRFS info (device loop1): turning on flush-on-commit [ 234.824607][ T6980] BTRFS info (device loop1): max_inline at 0 [ 234.835273][ T6980] BTRFS info (device loop1): enabling auto defrag [ 234.845398][ T6980] BTRFS info (device loop1): max_inline at 0 [ 234.854217][ T6980] BTRFS info (device loop1): using free space tree [ 234.996659][ T6984] loop0: detected capacity change from 0 to 32768 [ 235.038556][ T6984] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.798 (6984) [ 235.091260][ T3645] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (3645) [ 235.465354][ T3613] gspca_vc032x: reg_w err -71 [ 235.735585][ T3613] vc032x: probe of 5-1:0.0 failed with error -71 [ 235.782727][ T6980] BTRFS info (device loop1): enabling ssd optimizations [ 235.813247][ T3613] usb 5-1: USB disconnect, device number 10 [ 235.993016][ T6099] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.325550][ T3690] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 236.423642][ T7038] x_tables: duplicate underflow at hook 1 [ 236.575534][ T3690] usb 4-1: Using ep0 maxpacket: 16 [ 236.578126][ T7038] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 236.652704][ T7042] process 'syz.1.811' launched './file0' with NULL argv: empty string added [ 236.715766][ T3690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 236.744553][ T3690] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 236.807390][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.862353][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 236.889760][ T3690] usb 4-1: config 0 descriptor?? [ 236.906949][ T7045] bridge0: port 3(team0) entered disabled state [ 236.949600][ T7045] device bridge_slave_1 left promiscuous mode [ 236.984541][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.014743][ T7045] device bridge_slave_0 left promiscuous mode [ 237.039566][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.215850][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.254952][ T7050] dlm: no local IP address has been set [ 237.260648][ T7050] dlm: cannot start dlm midcomms -107 [ 237.291930][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.627545][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.805'. [ 237.660986][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 237.712451][ T7056] loop2: detected capacity change from 0 to 4096 [ 237.733508][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 237.850453][ T7062] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.021382][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.065112][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.103641][ T3690] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 238.124289][ T3690] hid-generic 0003:0158:0100.0006: unexpected long global item [ 238.129256][ T3597] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 238.134824][ T3690] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 238.145818][ T3597] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 238.213925][ T3597] Remounting filesystem read-only [ 238.239713][ T3597] NILFS (loop2): error -5 truncating bmap (ino=12) [ 238.284442][ T7058] loop0: detected capacity change from 0 to 32768 [ 238.304617][ T7058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.817 (7058) [ 238.310848][ T3564] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 238.345757][ T3564] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 238.353138][ T3564] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 238.380175][ T3564] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 238.392275][ T7058] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.423442][ T7058] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 238.441444][ T3564] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 238.465687][ T7058] BTRFS info (device loop0): setting nodatacow, compression disabled [ 238.483794][ T3564] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 238.504245][ T7058] BTRFS info (device loop0): turning on flush-on-commit [ 238.531927][ T7058] BTRFS info (device loop0): max_inline at 0 [ 238.575881][ T7058] BTRFS info (device loop0): enabling auto defrag [ 238.582395][ T7058] BTRFS info (device loop0): max_inline at 0 [ 238.651555][ T7058] BTRFS info (device loop0): using free space tree [ 238.788838][ T7085] netlink: 72 bytes leftover after parsing attributes in process `syz.4.823'. [ 238.885358][ T3690] usb 4-1: USB disconnect, device number 15 [ 238.949326][ T7058] BTRFS info (device loop0): enabling ssd optimizations [ 239.165398][ T7106] loop2: detected capacity change from 0 to 4096 [ 239.195870][ T3549] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.340121][ T7108] dlm: no local IP address has been set [ 239.345837][ T7108] dlm: cannot start dlm midcomms -107 [ 239.379858][ T7110] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.780400][ T3823] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 239.817486][ T3823] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 239.926360][ T3823] Remounting filesystem read-only [ 239.931586][ T3823] NILFS (loop2): error -5 truncating bmap (ino=12) [ 239.941909][ T3564] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 239.950307][ T3564] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 239.958139][ T3564] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 239.975585][ T3564] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 239.983034][ T3564] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 240.023662][ T3564] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 240.390744][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 240.477712][ T7131] device bridge_slave_1 left promiscuous mode [ 240.537003][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.633209][ T7131] device bridge_slave_0 left promiscuous mode [ 240.699009][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.859524][ T7141] loop0: detected capacity change from 0 to 4096 [ 241.004088][ T7147] dlm: no local IP address has been set [ 241.009792][ T7147] dlm: cannot start dlm midcomms -107 [ 241.291594][ T7151] xt_hashlimit: overflow, try lower: 3/0 [ 241.332038][ T7150] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.723861][ T3598] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 241.774765][ T3598] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 241.837264][ T3598] Remounting filesystem read-only [ 241.855183][ T3598] NILFS (loop0): error -5 truncating bmap (ino=12) [ 241.906938][ T3549] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 241.915710][ T3549] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 241.924953][ T3549] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 241.955229][ T3549] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 241.973821][ T3549] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 241.989145][ T3886] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 242.005140][ T3549] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 242.355601][ T3886] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 242.386237][ T3886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 242.416966][ T3886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.453027][ T3886] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.705622][ T3886] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 242.743732][ T3553] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 242.752561][ T3553] Bluetooth: hci1: Injecting HCI hardware error event [ 242.761641][ T3553] Bluetooth: hci1: hardware error 0x00 [ 242.853850][ T7178] dlm: no local IP address has been set [ 242.859519][ T7178] dlm: cannot start dlm midcomms -107 [ 243.003590][ T153] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 243.018046][ T3886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 243.029581][ T3886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.039696][ T3886] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.135761][ T3886] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 243.153608][ T3886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 243.165677][ T3886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.175967][ T3886] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.445754][ T153] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.485836][ T3886] usb 3-1: string descriptor 0 read error: -22 [ 243.492188][ T3886] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 243.495256][ T153] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 243.547837][ T3886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.590642][ T7184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.631821][ T153] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.738264][ T3886] usb 3-1: can't set config #168, error -71 [ 243.781773][ T3886] usb 3-1: USB disconnect, device number 16 [ 243.791661][ T153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.846419][ T7170] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 244.082168][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 244.142644][ T7192] bridge0: port 3(team0) entered disabled state [ 244.201100][ T7192] device bridge_slave_1 left promiscuous mode [ 244.222446][ T153] usb 5-1: USB disconnect, device number 11 [ 244.262627][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.311723][ T7192] device bridge_slave_0 left promiscuous mode [ 244.341086][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.372005][ T7165] loop0: detected capacity change from 0 to 32768 [ 244.409600][ T7165] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.846 (7165) [ 244.531740][ T7165] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.593370][ T7165] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 244.639167][ T7165] BTRFS info (device loop0): setting nodatacow, compression disabled [ 244.668065][ T7165] BTRFS info (device loop0): turning on flush-on-commit [ 244.707271][ T7165] BTRFS info (device loop0): max_inline at 0 [ 244.743830][ T7165] BTRFS info (device loop0): enabling auto defrag [ 244.823169][ T7165] BTRFS info (device loop0): max_inline at 0 [ 244.868399][ T7165] BTRFS info (device loop0): using free space tree [ 245.216134][ T3553] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 245.321859][ T7165] BTRFS error (device loop0): open_ctree failed [ 245.851581][ T7236] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 246.055521][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 246.115590][ T3597] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 246.335554][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 246.343299][ T7245] netlink: 72 bytes leftover after parsing attributes in process `syz.1.869'. [ 246.428828][ T3597] usb 3-1: too many configurations: 12, using maximum allowed: 8 [ 246.455629][ T22] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 246.490920][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.540968][ T22] usb 1-1: config 0 descriptor?? [ 246.597872][ T22] gspca_main: spca501-2.14.0 probing 0000:0000 [ 246.984621][ T7257] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 246.997618][ T7257] device team0 left promiscuous mode [ 247.003036][ T7257] device team_slave_0 left promiscuous mode [ 247.009491][ T7257] device team_slave_1 left promiscuous mode [ 247.018271][ T7257] batman_adv: batadv0: Adding interface: team0 [ 247.026242][ T7257] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.053016][ T7257] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 247.068973][ T7258] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 247.076894][ T22] gspca_spca501: reg write: error -71 [ 247.082326][ T22] spca501 1-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 247.107309][ T7258] netlink: 2 bytes leftover after parsing attributes in process `syz.3.875'. [ 247.117075][ T7258] device team0 entered promiscuous mode [ 247.122638][ T7258] device team_slave_0 entered promiscuous mode [ 247.128961][ T7258] device team_slave_1 entered promiscuous mode [ 247.137366][ T7258] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.144188][ T7258] batman_adv: batadv0: Interface activated: team0 [ 247.150699][ T7258] batman_adv: batadv0: Interface deactivated: team0 [ 247.157359][ T7258] batman_adv: batadv0: Removing interface: team0 [ 247.171602][ T22] spca501: probe of 1-1:0.0 failed with error -22 [ 247.219216][ T22] usb 1-1: USB disconnect, device number 10 [ 247.255845][ T3597] usb 3-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 247.275030][ T3597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.342718][ T3597] usb 3-1: config 0 descriptor?? [ 247.728390][ T7239] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 247.735304][ T7239] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 247.779336][ T7239] vhci_hcd vhci_hcd.0: Device attached [ 247.996348][ T3959] vhci_hcd: vhci_device speed not set [ 248.075745][ T3959] usb 13-2: new full-speed USB device number 2 using vhci_hcd [ 248.472313][ T7298] loop3: detected capacity change from 0 to 764 [ 248.493578][ T7272] vhci_hcd: connection reset by peer [ 248.516941][ T4531] vhci_hcd: stop threads [ 248.522128][ T4531] vhci_hcd: release socket [ 248.535717][ T3597] usb 3-1: string descriptor 0 read error: -71 [ 248.558968][ T4531] vhci_hcd: disconnect device [ 248.577023][ T3597] usb 3-1: USB disconnect, device number 17 [ 248.585121][ T7298] rock: directory entry would overflow storage [ 248.617688][ T7298] rock: sig=0x4f50, size=4, remaining=3 [ 248.647917][ T7298] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 249.330145][ T7321] netlink: 'syz.4.897': attribute type 10 has an invalid length. [ 249.491468][ T7321] batman_adv: batadv0: Adding interface: team0 [ 249.497903][ T7321] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.523273][ T7321] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 249.534342][ T7322] netlink: 'syz.4.897': attribute type 10 has an invalid length. [ 249.542760][ T7322] netlink: 2 bytes leftover after parsing attributes in process `syz.4.897'. [ 249.551890][ T7322] device team0 entered promiscuous mode [ 249.557557][ T7322] device team_slave_0 entered promiscuous mode [ 249.564021][ T7322] device team_slave_1 entered promiscuous mode [ 249.572396][ T7322] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.579551][ T7322] batman_adv: batadv0: Interface activated: team0 [ 249.586200][ T7322] batman_adv: batadv0: Interface deactivated: team0 [ 249.592900][ T7322] batman_adv: batadv0: Removing interface: team0 [ 249.887149][ T7322] bridge0: port 3(team0) entered blocking state [ 249.893659][ T7322] bridge0: port 3(team0) entered disabled state [ 249.903653][ T7322] bridge0: port 3(team0) entered blocking state [ 249.910128][ T7322] bridge0: port 3(team0) entered forwarding state [ 251.010541][ T7354] IPVS: Scheduler module ip_vs_ not found [ 251.135628][ T7365] mmap: syz.0.913 (7365) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 251.269311][ T7362] sp0: Synchronizing with TNC [ 251.364932][ T7370] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 251.456923][ T7370] device team0 left promiscuous mode [ 251.462902][ T7370] device team_slave_0 left promiscuous mode [ 251.469700][ T7370] device team_slave_1 left promiscuous mode [ 251.487044][ T7370] batman_adv: batadv0: Adding interface: team0 [ 251.493323][ T7370] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.518610][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.526076][ T7370] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 251.579410][ T7372] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 251.587431][ T7372] netlink: 2 bytes leftover after parsing attributes in process `syz.2.915'. [ 251.596523][ T7372] device team0 entered promiscuous mode [ 251.602193][ T7372] device team_slave_0 entered promiscuous mode [ 251.608799][ T7372] device team_slave_1 entered promiscuous mode [ 251.618314][ T7372] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.626725][ T7372] batman_adv: batadv0: Interface activated: team0 [ 251.656476][ T7371] fuse: Unknown parameter 'use00000000000000000000' [ 251.692381][ T7372] batman_adv: batadv0: Interface deactivated: team0 [ 251.755802][ T7372] batman_adv: batadv0: Removing interface: team0 [ 251.798086][ T3553] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 252.234740][ T7339] loop4: detected capacity change from 0 to 32768 [ 252.271542][ T7362] libceph: resolve '0.0' (ret=-3): failed [ 252.318195][ T7339] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.905 (7339) [ 252.381023][ T7339] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.426189][ T7339] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 252.454353][ T7339] BTRFS info (device loop4): using free space tree [ 252.883184][ T7415] fuse: Unknown parameter 'user_i00000000000000000000' [ 252.953960][ T7339] BTRFS info (device loop4): enabling ssd optimizations [ 253.157062][ T6006] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.235598][ T3959] vhci_hcd: vhci_device speed not set [ 253.365824][ T3613] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 253.972259][ T7449] fuse: Unknown parameter 'user_i00000000000000000000' [ 254.055767][ T3613] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 254.073574][ T3613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.103992][ T3613] usb 1-1: Product: syz [ 254.115482][ T3613] usb 1-1: Manufacturer: syz [ 254.120260][ T3613] usb 1-1: SerialNumber: syz [ 254.135031][ T7454] dlm: no local IP address has been set [ 254.140707][ T7454] dlm: cannot start dlm midcomms -107 [ 254.147418][ T3613] usb 1-1: config 0 descriptor?? [ 254.186695][ T3613] ch341 1-1:0.0: ch341-uart converter detected [ 254.646845][ T3613] usb 1-1: failed to send control message: -71 [ 254.663352][ T3613] ch341-uart: probe of ttyUSB0 failed with error -71 [ 254.690157][ T3613] usb 1-1: USB disconnect, device number 11 [ 254.718570][ T3613] ch341 1-1:0.0: device disconnected [ 254.965403][ T7477] fuse: Unknown parameter 'user_i00000000000000000000' [ 255.003361][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 255.028638][ T7478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.952'. [ 255.047363][ T7478] device gtp1 entered promiscuous mode [ 255.061722][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 255.075016][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.091112][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.100234][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.109014][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.118234][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.126122][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 255.135390][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.143549][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 255.152062][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.160463][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.168865][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.177125][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.185187][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 255.193263][ T3959] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 255.201402][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.210221][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.219145][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.234212][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.247153][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.256481][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.264035][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.272627][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.280498][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.288557][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.296717][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.304916][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 255.315522][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.322947][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.329175][ T7490] netlink: 'syz.2.956': attribute type 14 has an invalid length. [ 255.331296][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.341867][ T7490] netlink: 'syz.2.956': attribute type 11 has an invalid length. [ 255.347834][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.361290][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.369324][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.370012][ T7490] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.377125][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.385850][ T7490] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.385887][ T7490] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.385919][ T7490] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.421239][ T7490] device vxlan0 entered promiscuous mode [ 255.441797][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.455816][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.457358][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.463332][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.470010][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.477223][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.491746][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.499314][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.519407][ T3557] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 255.625844][ T3959] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.689938][ T3959] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.734320][ T3959] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.744026][ T3959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.806030][ T7473] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.043158][ T3959] usb 2-1: USB disconnect, device number 9 [ 256.165254][ T7501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.961'. [ 256.612101][ T7509] fuse: Unknown parameter 'user_id00000000000000000000' [ 257.195627][ T7492] loop0: detected capacity change from 0 to 32768 [ 257.225864][ T7527] loop4: detected capacity change from 0 to 764 [ 257.232373][ T7492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.957 (7492) [ 257.283285][ T7492] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.316047][ T7527] rock: directory entry would overflow storage [ 257.322345][ T7527] rock: sig=0x4f50, size=4, remaining=3 [ 257.339999][ T7527] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 257.349355][ T7492] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 257.385673][ T7492] BTRFS info (device loop0): setting nodatacow, compression disabled [ 257.435936][ T7492] BTRFS info (device loop0): turning on flush-on-commit [ 257.442949][ T7492] BTRFS info (device loop0): max_inline at 0 [ 257.488417][ T7492] BTRFS info (device loop0): enabling auto defrag [ 257.495382][ T7492] BTRFS info (device loop0): max_inline at 0 [ 257.528935][ T7492] BTRFS info (device loop0): using free space tree [ 257.607118][ T7541] netlink: 48 bytes leftover after parsing attributes in process `syz.3.973'. [ 257.635483][ T3959] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 257.785994][ T7492] BTRFS info (device loop0): enabling ssd optimizations [ 257.823367][ T7563] fuse: Unknown parameter 'user_id00000000000000000000' [ 257.886051][ T3549] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.931175][ T3959] usb 3-1: Using ep0 maxpacket: 16 [ 257.979390][ T4198] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 258.055619][ T3959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 258.067315][ T3959] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 258.077662][ T3959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.094194][ T3959] usb 3-1: config 0 descriptor?? [ 258.235639][ T4198] usb 5-1: Using ep0 maxpacket: 16 [ 258.347513][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.373687][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.446715][ T7574] loop1: detected capacity change from 0 to 764 [ 258.515721][ T4198] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 258.550660][ T7574] rock: directory entry would overflow storage [ 258.559450][ T4198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.577335][ T7574] rock: sig=0x4f50, size=4, remaining=3 [ 258.590522][ T4198] usb 5-1: Product: syz [ 258.602054][ T4198] usb 5-1: Manufacturer: syz [ 258.609324][ T7574] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 258.615140][ T4198] usb 5-1: SerialNumber: syz [ 258.646735][ T4198] usb 5-1: config 0 descriptor?? [ 258.652023][ T7575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.971'. [ 258.687273][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 258.689922][ T4198] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 258.730474][ T4198] usb 5-1: No valid video chain found. [ 258.818060][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 258.941265][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.972675][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.030965][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.046501][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.071801][ T4198] usb 5-1: USB disconnect, device number 12 [ 259.093034][ T3959] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 259.145282][ T3959] hid-generic 0003:0158:0100.0008: unexpected long global item [ 259.167244][ T3959] hid-generic: probe of 0003:0158:0100.0008 failed with error -22 [ 259.440762][ T7591] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 259.455741][ T7591] batman_adv: batadv0: Adding interface: team0 [ 259.461969][ T7591] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.487167][ T7591] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 259.521482][ T7593] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 259.545695][ T7593] netlink: 2 bytes leftover after parsing attributes in process `syz.1.987'. [ 259.563290][ T7593] device team0 entered promiscuous mode [ 259.569431][ T7593] device team_slave_0 entered promiscuous mode [ 259.577475][ T7593] device team_slave_1 entered promiscuous mode [ 259.639097][ T7593] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.680561][ T7595] fuse: Unknown parameter 'user_id00000000000000000000' [ 259.681303][ T7593] batman_adv: batadv0: Interface activated: team0 [ 259.736747][ T7593] batman_adv: batadv0: Interface deactivated: team0 [ 259.743554][ T7593] batman_adv: batadv0: Removing interface: team0 [ 259.929595][ T4198] usb 3-1: USB disconnect, device number 18 [ 260.054108][ T7600] syz.0.989[7600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.054537][ T7600] syz.0.989[7600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.146059][ T7600] netlink: 312 bytes leftover after parsing attributes in process `syz.0.989'. [ 261.238955][ T7612] loop1: detected capacity change from 0 to 764 [ 261.336664][ T7612] rock: directory entry would overflow storage [ 261.358055][ T7612] rock: sig=0x4f50, size=4, remaining=3 [ 261.383295][ T7612] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 261.578671][ T7627] fuse: Bad value for 'fd' [ 262.485422][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 262.524154][ T26] audit: type=1326 audit(1721292290.866:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bfd75ad9 code=0x7ffc0000 [ 262.546420][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.603412][ T26] audit: type=1326 audit(1721292290.936:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bfd75ad9 code=0x7ffc0000 [ 262.625659][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.693869][ T26] audit: type=1326 audit(1721292290.936:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f41bfd75ad9 code=0x7ffc0000 [ 262.734090][ T26] audit: type=1326 audit(1721292290.936:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bfd75ad9 code=0x7ffc0000 [ 262.764576][ T26] audit: type=1326 audit(1721292290.936:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bfd75ad9 code=0x7ffc0000 [ 262.785591][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 262.795360][ T26] audit: type=1326 audit(1721292290.936:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f41bfd75ad9 code=0x7ffc0000 [ 262.827315][ T26] audit: type=1326 audit(1721292290.936:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bfd75ad9 code=0x7ffc0000 [ 262.849956][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 262.865189][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1006'. [ 262.882178][ T26] audit: type=1326 audit(1721292290.936:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bfd75ad9 code=0x7ffc0000 [ 262.885633][ T4198] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 262.914464][ T7645] device gtp0 entered promiscuous mode [ 262.933803][ T26] audit: type=1326 audit(1721292290.936:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f41bfd75ad9 code=0x7ffc0000 [ 262.968888][ T26] audit: type=1326 audit(1721292290.936:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bfd75ad9 code=0x7ffc0000 [ 263.089248][ T7644] device syzkaller0 entered promiscuous mode [ 263.155776][ T4198] usb 5-1: Using ep0 maxpacket: 16 [ 263.276045][ T4198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 263.309505][ T4198] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 263.319541][ T22] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 263.342913][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.351522][ T4198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.360296][ T22] usb 2-1: Product: syz [ 263.364687][ T22] usb 2-1: Manufacturer: syz [ 263.381547][ T4198] usb 5-1: config 0 descriptor?? [ 263.386750][ T22] usb 2-1: SerialNumber: syz [ 263.401110][ T22] usb 2-1: config 0 descriptor?? [ 263.446810][ T22] ch341 2-1:0.0: ch341-uart converter detected [ 263.463068][ T7657] loop0: detected capacity change from 0 to 764 [ 263.559680][ T7657] rock: directory entry would overflow storage [ 263.584814][ T7657] rock: sig=0x4f50, size=4, remaining=3 [ 263.610049][ T7657] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 263.632162][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.650095][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.832887][ T7660] fuse: Bad value for 'fd' [ 263.895998][ T22] usb 2-1: failed to send control message: -71 [ 263.902535][ T22] ch341-uart: probe of ttyUSB0 failed with error -71 [ 263.928653][ T7658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1002'. [ 264.014577][ T22] usb 2-1: USB disconnect, device number 10 [ 264.052697][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 264.072739][ T22] ch341 2-1:0.0: device disconnected [ 264.164145][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 264.310835][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.359161][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.398383][ T4198] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 264.442541][ T4198] hid-generic 0003:0158:0100.0009: unexpected long global item [ 264.499303][ T4198] hid-generic: probe of 0003:0158:0100.0009 failed with error -22 [ 265.121352][ T6142] usb 5-1: USB disconnect, device number 13 [ 266.284255][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 266.306164][ T7687] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1020'. [ 267.049261][ T3959] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 267.173180][ T7717] xt_hashlimit: overflow, try lower: 3/0 [ 267.305483][ T3959] usb 2-1: Using ep0 maxpacket: 16 [ 267.363641][ T7693] loop2: detected capacity change from 0 to 32768 [ 267.436350][ T7693] XFS (loop2): Mounting V5 Filesystem [ 267.475495][ T14] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 267.563579][ T7693] XFS (loop2): Ending clean mount [ 267.581224][ T7693] XFS (loop2): Quotacheck needed: Please wait. [ 267.654401][ T7710] loop3: detected capacity change from 0 to 40427 [ 267.655765][ T3959] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 267.666414][ T7693] XFS (loop2): Quotacheck: Done. [ 267.676199][ T3959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.692067][ T3959] usb 2-1: Product: syz [ 267.701326][ T3959] usb 2-1: Manufacturer: syz [ 267.708261][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1032'. [ 267.735767][ T3959] usb 2-1: SerialNumber: syz [ 267.740750][ T7710] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 267.756369][ T7710] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 267.767345][ T3959] usb 2-1: config 0 descriptor?? [ 267.775229][ T7727] bridge0: port 3(team0) entered disabled state [ 267.791056][ T3564] XFS (loop2): Unmounting Filesystem [ 267.809007][ T7727] device bridge_slave_1 left promiscuous mode [ 267.816441][ T7710] F2FS-fs (loop3): invalid crc value [ 267.830062][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.850457][ T7710] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 267.857849][ T7710] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 267.868386][ T7727] device bridge_slave_0 left promiscuous mode [ 267.869346][ T3959] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 267.886434][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.905628][ T14] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 267.938631][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 268.093007][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.105980][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.120824][ T3959] usb 2-1: No valid video chain found. [ 268.577781][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.588560][ T3959] usb 2-1: USB disconnect, device number 11 [ 268.621974][ T14] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.731355][ T14] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 268.759348][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 268.947038][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.975973][ T7733] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1034'. [ 268.993459][ T14] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.938042][ T7738] tty tty29: ldisc open failed (-12), clearing slot 28 [ 269.948473][ T14] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 270.050971][ T7741] fuse: Bad value for 'fd' [ 270.176570][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 270.245526][ T14] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 270.261090][ T14] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.365542][ T14] usb 1-1: string descriptor 0 read error: -71 [ 270.371859][ T14] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 270.404630][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.460373][ T14] usb 1-1: can't set config #168, error -71 [ 270.471916][ T14] usb 1-1: USB disconnect, device number 12 [ 270.724820][ T7769] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1047'. [ 271.023833][ T7774] fuse: Bad value for 'fd' [ 271.727163][ T7764] loop2: detected capacity change from 0 to 40427 [ 271.774936][ T7764] F2FS-fs (loop2): invalid crc value [ 271.804148][ T7760] loop4: detected capacity change from 0 to 32768 [ 271.858394][ T7764] F2FS-fs (loop2): Found nat_bits in checkpoint [ 271.884473][ T7760] XFS (loop4): Mounting V5 Filesystem [ 271.897598][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 271.986792][ T7764] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 272.095038][ T7760] XFS (loop4): Ending clean mount [ 272.165558][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 272.296576][ T7760] XFS (loop4): Quotacheck needed: Please wait. [ 272.331957][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 272.381646][ T14] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 272.774925][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.809026][ T14] usb 1-1: config 0 descriptor?? [ 272.848397][ T7760] XFS (loop4): Quotacheck: Done. [ 272.956044][ T6006] XFS (loop4): Unmounting Filesystem [ 273.046293][ T3598] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 273.069723][ T7782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.085651][ T7782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.295703][ T3598] usb 2-1: Using ep0 maxpacket: 8 [ 273.415775][ T3598] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.429948][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.451888][ T7812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1052'. [ 273.473150][ T3598] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.561336][ T3598] usb 2-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 273.574120][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 273.613628][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.650067][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 273.650692][ T3598] usb 2-1: config 0 descriptor?? [ 273.670196][ T7820] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1059'. [ 273.681281][ T7821] fuse: Bad value for 'fd' [ 273.743980][ T7806] loop3: detected capacity change from 0 to 32768 [ 273.757419][ T3598] usb 2-1: bad CDC descriptors [ 273.772653][ T3598] usb 2-1: bad CDC descriptors [ 273.797346][ T3598] cdc_acm 2-1:0.0: Zero length descriptor references [ 273.804180][ T7782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.804442][ T7782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.826765][ T7806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1057 (7806) [ 273.879474][ T14] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 273.898377][ T3598] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 273.915342][ T14] hid-generic 0003:0158:0100.000A: unexpected long global item [ 273.944992][ T14] hid-generic: probe of 0003:0158:0100.000A failed with error -22 [ 274.003981][ T7806] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 274.035648][ T7806] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 274.064747][ T7806] BTRFS info (device loop3): setting nodatacow, compression disabled [ 274.119953][ T7806] BTRFS info (device loop3): turning on flush-on-commit [ 274.135952][ T7806] BTRFS info (device loop3): max_inline at 0 [ 274.142012][ T7806] BTRFS info (device loop3): enabling auto defrag [ 274.156773][ T7806] BTRFS info (device loop3): max_inline at 0 [ 274.170976][ T7806] BTRFS info (device loop3): using free space tree [ 274.312449][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 274.484198][ T7806] BTRFS info (device loop3): enabling ssd optimizations [ 274.624437][ T14] usb 1-1: USB disconnect, device number 13 [ 274.747000][ T3548] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 274.821849][ T7861] fuse: Unknown parameter '0x0000000000000003' [ 275.446262][ T7877] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1072'. [ 275.634231][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 275.937267][ T7859] loop4: detected capacity change from 0 to 32768 [ 276.012530][ T7891] fuse: Unknown parameter '0x0000000000000005' [ 276.028508][ T7859] XFS (loop4): Mounting V5 Filesystem [ 276.115514][ T3961] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 276.183745][ T7859] XFS (loop4): Ending clean mount [ 276.251665][ T22] usb 2-1: USB disconnect, device number 12 [ 276.312628][ T7859] XFS (loop4): Quotacheck needed: Please wait. [ 276.332960][ T7880] loop0: detected capacity change from 0 to 32768 [ 276.341237][ T7880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1078 (7880) [ 276.359456][ T7880] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 276.375248][ T3961] usb 4-1: Using ep0 maxpacket: 16 [ 276.406756][ T7859] XFS (loop4): Quotacheck: Done. [ 276.435557][ T7880] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 276.475785][ T7880] BTRFS info (device loop0): setting nodatacow, compression disabled [ 276.498257][ T7880] BTRFS info (device loop0): turning on flush-on-commit [ 276.506277][ T3961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 276.520832][ T3961] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 276.531284][ T7880] BTRFS info (device loop0): max_inline at 0 [ 276.533240][ T6006] XFS (loop4): Unmounting Filesystem [ 276.542312][ T7880] BTRFS info (device loop0): enabling auto defrag [ 276.555518][ T3961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.583317][ T7880] BTRFS info (device loop0): max_inline at 0 [ 276.625854][ T7880] BTRFS info (device loop0): using free space tree [ 276.640833][ T3961] usb 4-1: config 0 descriptor?? [ 276.648952][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1085'. [ 276.856622][ T7880] BTRFS info (device loop0): enabling ssd optimizations [ 276.921381][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.922432][ T7931] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 276.956438][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.051889][ T3549] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.202705][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 277.250138][ T7889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1082'. [ 277.536147][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.577642][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.629917][ T3961] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 277.660781][ T3961] hid-generic 0003:0158:0100.000B: unexpected long global item [ 277.693661][ T3961] hid-generic: probe of 0003:0158:0100.000B failed with error -22 [ 277.925594][ T4195] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 277.956559][ T7961] 9pnet_fd: Insufficient options for proto=fd [ 278.296253][ T4195] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 278.353993][ T7966] loop1: detected capacity change from 0 to 764 [ 278.361867][ T4195] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 278.404706][ T4195] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.438913][ T4195] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.456396][ T7966] rock: directory entry would overflow storage [ 278.462574][ T7966] rock: sig=0x4f50, size=4, remaining=3 [ 278.499242][ T7966] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 278.534932][ T4200] usb 4-1: USB disconnect, device number 16 [ 278.605864][ T4195] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 278.650815][ T4195] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 278.686294][ T4195] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.719373][ T4195] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.739520][ T7954] loop2: detected capacity change from 0 to 32768 [ 278.825698][ T4195] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 278.842366][ T4195] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 278.854092][ T4195] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.868409][ T4195] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.029469][ T7954] XFS (loop2): Mounting V5 Filesystem [ 279.191702][ T7987] __nla_validate_parse: 3 callbacks suppressed [ 279.191717][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 279.212173][ T7954] XFS (loop2): Ending clean mount [ 279.232600][ T7954] XFS (loop2): Quotacheck needed: Please wait. [ 279.267267][ T7987] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1104'. [ 279.285865][ T4195] usb 1-1: string descriptor 0 read error: -22 [ 279.294688][ T7954] XFS (loop2): Quotacheck: Done. [ 279.299069][ T4195] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 279.351321][ T4195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.393408][ T3564] XFS (loop2): Unmounting Filesystem [ 279.437037][ T4195] adutux 1-1:168.0: interrupt endpoints not found [ 279.748284][ T4195] usb 1-1: USB disconnect, device number 14 [ 279.839843][ T7997] overlayfs: missing 'workdir' [ 280.040263][ T7971] loop3: detected capacity change from 0 to 32768 [ 280.072091][ T7971] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1101 (7971) [ 280.155262][ T7971] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.194197][ T7971] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 280.204361][ T7971] BTRFS info (device loop3): setting nodatacow, compression disabled [ 280.244966][ T7971] BTRFS info (device loop3): turning on flush-on-commit [ 280.253668][ T7971] BTRFS info (device loop3): max_inline at 0 [ 280.265880][ T7971] BTRFS info (device loop3): enabling auto defrag [ 280.282973][ T7971] BTRFS info (device loop3): max_inline at 0 [ 280.300488][ T7971] BTRFS info (device loop3): using free space tree [ 280.463649][ T8026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1111'. [ 280.523734][ T7971] BTRFS info (device loop3): enabling ssd optimizations [ 280.684203][ T3548] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.047862][ T8039] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1118'. [ 281.077433][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 281.125583][ T8041] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1117'. [ 281.490069][ T8046] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.184177][ T8036] loop3: detected capacity change from 0 to 32768 [ 282.232753][ T8036] XFS (loop3): Mounting V5 Filesystem [ 282.339412][ T8036] XFS (loop3): Ending clean mount [ 282.349129][ T8036] XFS (loop3): Quotacheck needed: Please wait. [ 282.365870][ T3961] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 282.380730][ T8036] XFS (loop3): Quotacheck: Done. [ 282.516774][ T3548] XFS (loop3): Unmounting Filesystem [ 283.601752][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 283.677290][ T8098] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1132'. [ 283.730926][ T3961] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 283.740176][ T3961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.753269][ T3961] usb 5-1: Product: syz [ 283.757735][ T3961] usb 5-1: Manufacturer: syz [ 283.762379][ T3961] usb 5-1: SerialNumber: syz [ 283.777371][ T3961] usb 5-1: config 0 descriptor?? [ 283.826765][ T3961] ch341 5-1:0.0: ch341-uart converter detected [ 284.123902][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1146'. [ 284.255623][ T3961] usb 5-1: failed to send control message: -71 [ 284.270887][ T3961] ch341-uart: probe of ttyUSB0 failed with error -71 [ 284.297619][ T3961] usb 5-1: USB disconnect, device number 14 [ 284.324477][ T3961] ch341 5-1:0.0: device disconnected [ 284.564923][ T8107] loop3: detected capacity change from 0 to 32768 [ 284.569054][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 284.581465][ T8135] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1152'. [ 284.675145][ T8107] XFS (loop3): Mounting V5 Filesystem [ 284.796627][ T8107] XFS (loop3): Ending clean mount [ 284.845223][ T8107] XFS (loop3): Quotacheck needed: Please wait. [ 284.964835][ T8107] XFS (loop3): Quotacheck: Done. [ 285.480983][ T3548] XFS (loop3): Unmounting Filesystem [ 285.878061][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 285.891885][ T8174] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1164'. [ 286.296965][ T8192] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.844427][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 286.935715][ T8216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1179'. [ 287.553340][ T8193] loop1: detected capacity change from 0 to 32768 [ 287.618971][ T8241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.670368][ T8193] XFS (loop1): Mounting V5 Filesystem [ 287.752933][ T8254] netlink: 'syz.4.1189': attribute type 10 has an invalid length. [ 287.764193][ T8254] device team0 left promiscuous mode [ 287.773634][ T8254] device team_slave_0 left promiscuous mode [ 287.787175][ T8254] device team_slave_1 left promiscuous mode [ 287.835119][ T8254] batman_adv: batadv0: Adding interface: team0 [ 287.841857][ T8254] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.876063][ T8254] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 287.900292][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 287.970225][ T8259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1192'. [ 287.996117][ T8193] XFS (loop1): Ending clean mount [ 288.002394][ T8260] netlink: 'syz.4.1189': attribute type 10 has an invalid length. [ 288.023904][ T8260] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1189'. [ 288.033384][ T8260] device team0 entered promiscuous mode [ 288.039435][ T8260] device team_slave_0 entered promiscuous mode [ 288.046933][ T8260] device team_slave_1 entered promiscuous mode [ 288.047624][ T8193] XFS (loop1): Quotacheck needed: Please wait. [ 288.088618][ T8260] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.111228][ T8260] batman_adv: batadv0: Interface activated: team0 [ 288.119219][ T8260] batman_adv: batadv0: Interface deactivated: team0 [ 288.129233][ T8260] batman_adv: batadv0: Removing interface: team0 [ 288.148175][ T8193] XFS (loop1): Quotacheck: Done. [ 288.260275][ T6099] XFS (loop1): Unmounting Filesystem [ 288.814253][ T8281] sp0: Synchronizing with TNC [ 289.108102][ T8281] libceph: resolve '0.0' (ret=-3): failed [ 289.321587][ T8257] loop2: detected capacity change from 0 to 40427 [ 289.342013][ T8296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.354323][ T8257] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 289.418324][ T8257] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 289.452636][ T8257] F2FS-fs (loop2): invalid crc value [ 289.459680][ T8257] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 289.474170][ T8257] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 289.625629][ T3958] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 290.005548][ T3958] usb 2-1: Using ep0 maxpacket: 16 [ 290.240895][ T3958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 290.287809][ T3958] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 290.321175][ T3958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.406831][ T3958] usb 2-1: config 0 descriptor?? [ 291.204756][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.235673][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.375238][ T8328] fuse: Unknown parameter 'fd0x0000000000000005' [ 291.427902][ T8331] loop3: detected capacity change from 0 to 2048 [ 291.490809][ T8325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 291.502712][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 291.515952][ T8331] loop3: p3 < > p4 < > [ 291.520547][ T8331] loop3: partition table partially beyond EOD, truncated [ 291.529572][ T8331] loop3: p3 start 4284289 is beyond EOD, truncated [ 291.566004][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 291.694466][ T8343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.797627][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.831099][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.870271][ T3958] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 291.877828][ T3961] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 291.892508][ T3958] hid-generic 0003:0158:0100.000C: unexpected long global item [ 291.910924][ T3958] hid-generic: probe of 0003:0158:0100.000C failed with error -22 [ 292.306920][ T3959] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 292.326784][ T3961] usb 3-1: config 0 has no interfaces? [ 292.495728][ T3961] usb 3-1: New USB device found, idVendor=19d2, idProduct=0040, bcdDevice=85.1f [ 292.515317][ T3961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.529600][ T3961] usb 3-1: Product: syz [ 292.533810][ T3961] usb 3-1: Manufacturer: syz [ 292.540307][ T3961] usb 3-1: SerialNumber: syz [ 292.553206][ T3961] usb 3-1: config 0 descriptor?? [ 292.595061][ T4195] usb 2-1: USB disconnect, device number 13 [ 293.025877][ T3959] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 293.070304][ T3959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.238569][ T3959] usb 5-1: Product: syz [ 293.242764][ T3959] usb 5-1: Manufacturer: syz [ 293.259059][ T3959] usb 5-1: SerialNumber: syz [ 293.273838][ T3959] usb 5-1: config 0 descriptor?? [ 293.325065][ T8352] loop0: detected capacity change from 0 to 40427 [ 293.333024][ T8352] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 293.342708][ T8352] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 293.346638][ T3959] ch341 5-1:0.0: ch341-uart converter detected [ 293.370291][ T8352] F2FS-fs (loop0): invalid crc value [ 293.391339][ T8352] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 293.408863][ T8352] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 294.922948][ T3959] usb 5-1: failed to send control message: -110 [ 294.929346][ T3959] ch341-uart: probe of ttyUSB0 failed with error -110 [ 294.939057][ T3959] usb 5-1: USB disconnect, device number 15 [ 294.946959][ T3959] ch341 5-1:0.0: device disconnected [ 295.023276][ T4200] usb 3-1: USB disconnect, device number 19 [ 295.137554][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 295.960376][ T8389] sctp: failed to load transform for md5: -2 [ 296.254911][ T8412] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 296.490392][ T8412] input: syz1 as /devices/virtual/input/input5 [ 296.721973][ T8428] xt_hashlimit: overflow, try lower: 3/0 [ 297.115544][ T4200] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 297.343024][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 297.476514][ T4195] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 297.487954][ T4200] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 297.519143][ T4200] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 297.565115][ T4200] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 297.602398][ T4200] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.695877][ T4200] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 297.715754][ T4200] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 297.740676][ T4200] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 297.768706][ T4200] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.886032][ T4200] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 297.911405][ T4200] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 297.955162][ T4200] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.000785][ T4200] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.045578][ T4195] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 298.075079][ T4195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.103480][ T4195] usb 3-1: Product: syz [ 298.145986][ T4195] usb 3-1: Manufacturer: syz [ 298.165691][ T4195] usb 3-1: SerialNumber: syz [ 298.194913][ T4195] usb 3-1: config 0 descriptor?? [ 298.256653][ T4195] ch341 3-1:0.0: ch341-uart converter detected [ 298.293097][ T8459] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.305954][ T4200] usb 2-1: string descriptor 0 read error: -22 [ 298.322345][ T4200] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 298.342626][ T4200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.417122][ T4200] adutux 2-1:168.0: interrupt endpoints not found [ 298.479156][ T8459] input: syz1 as /devices/virtual/input/input6 [ 298.695593][ T4195] usb 3-1: failed to send control message: -71 [ 298.703013][ T4195] ch341-uart: probe of ttyUSB0 failed with error -71 [ 298.743992][ T4195] usb 3-1: USB disconnect, device number 20 [ 298.789555][ T3961] usb 2-1: USB disconnect, device number 14 [ 298.815846][ T4195] ch341 3-1:0.0: device disconnected [ 299.309244][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.322617][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.331289][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.341906][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.350488][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 299.358350][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.623857][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 300.354731][ T8475] chnl_net:caif_netlink_parms(): no params data found [ 300.641083][ T8507] dlm: no local IP address has been set [ 300.646755][ T8507] dlm: cannot start dlm midcomms -107 [ 301.455663][ T3553] Bluetooth: hci3: command tx timeout [ 301.670000][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.703693][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.754367][ T8475] device bridge_slave_0 entered promiscuous mode [ 301.784520][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.812015][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.863841][ T8475] device bridge_slave_1 entered promiscuous mode [ 301.999082][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.056964][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.170564][ T8475] team0: Port device team_slave_0 added [ 302.210250][ T8475] team0: Port device team_slave_1 added [ 302.297553][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.333244][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.385546][ T4195] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 302.453099][ T8475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.633298][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.683363][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.755925][ T4195] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.776761][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.788611][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.819446][ T4195] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 302.869752][ T4195] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.879377][ T8475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.902122][ T4195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.946276][ T8523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.005409][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 303.098182][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.139479][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.203051][ T3961] usb 2-1: USB disconnect, device number 15 [ 304.009718][ T3553] Bluetooth: hci3: command tx timeout [ 304.316968][ T8549] ieee802154 phy0 wpan0: encryption failed: -22 [ 304.618368][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.671465][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.401887][ T8475] device hsr_slave_0 entered promiscuous mode [ 305.409215][ T8475] device hsr_slave_1 entered promiscuous mode [ 305.435749][ T8475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.443317][ T8475] Cannot create hsr debugfs directory [ 305.530971][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.591193][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.676404][ T8560] device dummy0 entered promiscuous mode [ 305.682151][ T8560] device macsec1 entered promiscuous mode [ 306.087171][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 306.095714][ T3553] Bluetooth: hci3: command tx timeout [ 306.842185][ T41] libceph: connect (1)[c::]:6789 error -101 [ 306.866126][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 306.932199][ T8585] ceph: No mds server is up or the cluster is laggy [ 307.041408][ T8591] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.985510][ T4939] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 308.195747][ T3553] Bluetooth: hci3: command tx timeout [ 308.485692][ T4939] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.521433][ T4939] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.672427][ T4939] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.681900][ T4939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.767086][ T8594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 309.320712][ T4939] usb 1-1: USB disconnect, device number 15 [ 309.527354][ T8633] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.530501][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 310.433954][ T3557] libceph: connect (1)[c::]:6789 error -101 [ 310.443250][ T8636] ceph: No mds server is up or the cluster is laggy [ 310.456102][ T3557] libceph: mon0 (1)[c::]:6789 connect error [ 310.573262][ T3645] udevd[3645]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.853807][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'. [ 310.915810][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 310.952804][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 310.984280][ T8670] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.128701][ T8475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.222400][ T8475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.249901][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'. [ 311.361021][ T8475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.440892][ T8475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.499510][ T3557] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 312.037822][ T9] device hsr_slave_0 left promiscuous mode [ 312.048115][ T9] device hsr_slave_1 left promiscuous mode [ 312.064968][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.082183][ T3557] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 312.082925][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.095618][ T3557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.109537][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.139723][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.140221][ T3557] usb 3-1: Product: syz [ 312.169939][ T3557] usb 3-1: Manufacturer: syz [ 312.174576][ T3557] usb 3-1: SerialNumber: syz [ 312.194496][ T3557] usb 3-1: config 0 descriptor?? [ 312.218670][ T9] device veth1_macvtap left promiscuous mode [ 312.231632][ T9] device veth0_macvtap left promiscuous mode [ 312.244352][ T9] device veth1_vlan left promiscuous mode [ 312.256759][ T3557] ch341 3-1:0.0: ch341-uart converter detected [ 312.272951][ T9] device veth0_vlan left promiscuous mode [ 312.675735][ T3557] usb 3-1: failed to send control message: -71 [ 312.682008][ T3557] ch341-uart: probe of ttyUSB0 failed with error -71 [ 312.715025][ T3557] usb 3-1: USB disconnect, device number 21 [ 312.757336][ T3557] ch341 3-1:0.0: device disconnected [ 313.090165][ T9] device team_slave_1 left promiscuous mode [ 313.105313][ T9] team0 (unregistering): Port device team_slave_1 removed [ 313.161023][ T9] device team_slave_0 left promiscuous mode [ 313.174833][ T9] team0 (unregistering): Port device team_slave_0 removed [ 313.243893][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.313664][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.002595][ T9] bond0 (unregistering): Released all slaves [ 314.037655][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 314.060823][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 314.076636][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 314.092491][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 314.244222][ T8475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.329164][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.340497][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.354842][ T8475] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.425323][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.456997][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.496422][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.503643][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.177040][ T8475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.343441][ T8475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.454601][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.465337][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.492030][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.503739][ T4939] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.510900][ T4939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.522629][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.559850][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.573129][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.591420][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.634763][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.657514][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.674119][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.700678][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.741160][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.750923][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.797572][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.842432][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.891770][ T8741] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.932220][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 316.920765][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.931727][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.183165][ T8768] openvswitch: netlink: Flow actions attr not present in new flow. [ 317.192339][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.200360][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.214361][ T8475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.241078][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.251630][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.286664][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.304994][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.317124][ T8752] ALSA: mixer_oss: invalid OSS volume '' [ 317.343131][ T8475] device veth0_vlan entered promiscuous mode [ 317.368550][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.384198][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.459855][ T8475] device veth1_vlan entered promiscuous mode [ 317.545169][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 317.565051][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 317.590129][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.609197][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.631613][ T8475] device veth0_macvtap entered promiscuous mode [ 317.668277][ T8475] device veth1_macvtap entered promiscuous mode [ 317.768713][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.801106][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.847516][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.888452][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.931498][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.993588][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.039787][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.070153][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.117539][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.129921][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 318.129935][ T26] audit: type=1326 audit(1721292346.516:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 318.179143][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.189326][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.199301][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.208708][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.230451][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.251447][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.302291][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.321561][ T26] audit: type=1326 audit(1721292346.546:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 318.348510][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.359275][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.372903][ T26] audit: type=1326 audit(1721292346.546:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 318.412787][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.433483][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.462013][ T26] audit: type=1326 audit(1721292346.556:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 318.499488][ T8790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.505499][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.522267][ T26] audit: type=1326 audit(1721292346.556:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 318.584167][ T8770] loop0: detected capacity change from 0 to 32768 [ 318.597353][ T8792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.609306][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.662238][ T8770] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1340 (8770) [ 318.662546][ T26] audit: type=1326 audit(1721292346.556:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 318.737061][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.752998][ T3886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.780968][ T26] audit: type=1326 audit(1721292346.556:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 318.817512][ T8770] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.842470][ T26] audit: type=1326 audit(1721292346.606:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 318.873497][ T8770] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 318.912780][ T8770] BTRFS info (device loop0): setting nodatacow, compression disabled [ 318.925987][ T8770] BTRFS info (device loop0): turning on flush-on-commit [ 318.935115][ T8770] BTRFS info (device loop0): max_inline at 0 [ 318.941537][ T8770] BTRFS info (device loop0): enabling auto defrag [ 318.948837][ T8475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.957861][ T8770] BTRFS info (device loop0): max_inline at 0 [ 318.970793][ T8770] BTRFS info (device loop0): using free space tree [ 318.975614][ T26] audit: type=1326 audit(1721292346.606:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 319.000946][ T8475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.017635][ T8475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.032452][ T8475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.049684][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 319.052394][ T26] audit: type=1326 audit(1721292346.606:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f41c0175ad9 code=0x7ffc0000 [ 319.059085][ T3553] Bluetooth: hci2: command 0x0406 tx timeout [ 319.193676][ T4857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.236091][ T4857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.349710][ T8770] BTRFS info (device loop0): enabling ssd optimizations [ 319.441584][ T8097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.441659][ T8097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.452664][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.453444][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 319.455196][ T8770] BTRFS error (device loop0: state M): unrecognized mount option 'ÿÿÿÿ017777777777777777777770177777777777777777777701777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 319.606251][ T3549] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.908058][ T8825] input: syz0 as /devices/virtual/input/input7 [ 319.914428][ T8825] input: failed to attach handler leds to device input7, error: -6 [ 320.447564][ T8838] input: syz1 as /devices/virtual/input/input8 [ 320.585691][ T8843] dlm: no local IP address has been set [ 320.591372][ T8843] dlm: cannot start dlm midcomms -107 [ 320.826921][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.841298][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.852408][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.868773][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.186584][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.199164][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.465004][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 321.633240][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.753732][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.894735][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.899468][ T8861] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 322.204316][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.664106][ T8834] chnl_net:caif_netlink_parms(): no params data found [ 323.247037][ T8891] dlm: no local IP address has been set [ 323.252635][ T8891] dlm: cannot start dlm midcomms -107 [ 323.337005][ T48] Bluetooth: hci1: command tx timeout [ 323.502391][ T8859] loop3: detected capacity change from 0 to 32768 [ 323.550201][ T8859] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1359 (8859) [ 323.877880][ T8859] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 323.916335][ T8859] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 323.925098][ T8859] BTRFS info (device loop3): setting nodatacow, compression disabled [ 324.091995][ T8859] BTRFS info (device loop3): turning on flush-on-commit [ 324.135784][ T8859] BTRFS info (device loop3): max_inline at 0 [ 324.149181][ T8859] BTRFS info (device loop3): enabling auto defrag [ 324.175780][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 324.198071][ T8859] BTRFS info (device loop3): max_inline at 0 [ 324.225007][ T8859] BTRFS info (device loop3): using free space tree [ 324.319780][ T8834] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.332344][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.354953][ T8834] device bridge_slave_0 entered promiscuous mode [ 324.366790][ T8834] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.373898][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.495761][ T8834] device bridge_slave_1 entered promiscuous mode [ 324.681509][ T8859] BTRFS info (device loop3): enabling ssd optimizations [ 324.705596][ T3958] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 324.795856][ T8475] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 324.965508][ T3958] usb 3-1: Using ep0 maxpacket: 32 [ 325.029638][ T8834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.085657][ T3958] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 325.114826][ T3958] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 325.214087][ T8834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.409286][ T3553] Bluetooth: hci1: command tx timeout [ 325.461981][ T3958] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 325.577239][ T8957] dlm: no local IP address has been set [ 325.582865][ T8957] dlm: cannot start dlm midcomms -107 [ 326.187301][ T3958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.195516][ T3958] usb 3-1: Product: syz [ 326.209410][ T3958] usb 3-1: Manufacturer: syz [ 326.214054][ T3958] usb 3-1: SerialNumber: syz [ 326.260743][ T8834] team0: Port device team_slave_0 added [ 326.369833][ T8834] team0: Port device team_slave_1 added [ 326.497867][ T3958] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 326.639652][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.669923][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.702043][ T3886] usb 3-1: USB disconnect, device number 22 [ 326.713860][ T8834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.770342][ T3886] usblp0: removed [ 326.836566][ T4200] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 326.871647][ T8978] xt_hashlimit: overflow, try lower: 3/0 [ 326.988110][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.999765][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.034252][ T8834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.093155][ T4200] usb 2-1: Using ep0 maxpacket: 16 [ 327.215731][ T4200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 327.216760][ T3961] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 327.233433][ T4200] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 327.251315][ T8834] device hsr_slave_0 entered promiscuous mode [ 327.264619][ T4200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.296107][ T4200] usb 2-1: config 0 descriptor?? [ 327.333820][ T8834] device hsr_slave_1 entered promiscuous mode [ 327.344041][ T8834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.360079][ T8834] Cannot create hsr debugfs directory [ 327.401242][ T9] device hsr_slave_0 left promiscuous mode [ 327.417181][ T9] device hsr_slave_1 left promiscuous mode [ 327.446734][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.455701][ T3553] Bluetooth: hci1: command tx timeout [ 327.474877][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.490548][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.502062][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.587993][ T9] device dummy0 left promiscuous mode [ 327.636983][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.649184][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.657408][ T9] device veth1_macvtap left promiscuous mode [ 327.664836][ T9] device veth0_macvtap left promiscuous mode [ 327.672969][ T9] device veth1_vlan left promiscuous mode [ 327.679469][ T9] device veth0_vlan left promiscuous mode [ 327.738338][ T9001] dlm: no local IP address has been set [ 327.743937][ T9001] dlm: cannot start dlm midcomms -107 [ 328.439500][ T3553] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 328.448789][ T3553] Bluetooth: hci4: Injecting HCI hardware error event [ 328.459470][ T48] Bluetooth: hci4: hardware error 0x00 [ 328.471025][ T3961] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 328.481493][ T3961] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 328.491587][ T3961] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 328.503060][ T3961] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.619890][ T3961] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 328.646457][ T3961] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 328.662429][ T3961] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 328.663930][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1379'. [ 328.673858][ T3961] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.686738][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 328.705824][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 328.780138][ T3961] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 328.791745][ T3961] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 328.802024][ T3961] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 328.812686][ T3961] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.977937][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.993227][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.020217][ T4200] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 329.027859][ T4200] hid-generic 0003:0158:0100.000D: unexpected long global item [ 329.036922][ T4200] hid-generic: probe of 0003:0158:0100.000D failed with error -22 [ 329.096361][ T3961] usb 4-1: string descriptor 0 read error: -22 [ 329.102777][ T3961] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 329.112146][ T3961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.170717][ T3961] adutux 4-1:168.0: interrupt endpoints not found [ 329.229699][ T9] device team_slave_1 left promiscuous mode [ 329.245528][ T9] team0 (unregistering): Port device team_slave_1 removed [ 329.281908][ T9] device team_slave_0 left promiscuous mode [ 329.292143][ T9] team0 (unregistering): Port device team_slave_0 removed [ 329.328894][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.368907][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.388855][ T3961] usb 4-1: USB disconnect, device number 17 [ 329.545750][ T3553] Bluetooth: hci1: command tx timeout [ 329.778169][ T3961] usb 2-1: USB disconnect, device number 16 [ 329.833570][ T9] bond0 (unregistering): Released all slaves [ 330.269263][ T9021] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1393'. [ 330.441023][ T3569] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 330.575663][ T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 330.763285][ T9039] dlm: no local IP address has been set [ 330.769052][ T9039] dlm: cannot start dlm midcomms -107 [ 332.529473][ T9012] loop1: detected capacity change from 0 to 32768 [ 332.616183][ T9052] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1401'. [ 332.661472][ C0] Unknown status report in ack skb [ 332.906559][ T8834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 332.948569][ T8834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.073820][ T8834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 333.114120][ T8834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.300712][ T9073] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1405'. [ 333.525142][ T8834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.636986][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.646349][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.657982][ T8834] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.718170][ T9085] dlm: no local IP address has been set [ 333.723805][ T9085] dlm: cannot start dlm midcomms -107 [ 334.882829][ T9091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1411'. [ 335.047285][ C1] Unknown status report in ack skb [ 335.092187][ T8834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.177178][ T8834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.220248][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.234768][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.279172][ T3961] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.286395][ T3961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.347779][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.366214][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.375209][ T3961] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.382359][ T3961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.393965][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.403862][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.413262][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.429720][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.438485][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.449359][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.458020][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.466674][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.477619][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.487666][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.502453][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.518450][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.538030][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.554937][ T9108] netlink: 'syz.0.1415': attribute type 10 has an invalid length. [ 335.582973][ T9108] device team0 left promiscuous mode [ 335.599307][ T9108] device team_slave_0 left promiscuous mode [ 335.621008][ T9108] device team_slave_1 left promiscuous mode [ 335.644778][ T9108] batman_adv: batadv0: Adding interface: team0 [ 335.671842][ T9115] loop1: detected capacity change from 0 to 256 [ 335.679628][ T9108] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.712632][ T9108] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 335.754883][ T9115] FAT-fs (loop1): Directory bread(block 64) failed [ 335.765876][ T9109] netlink: 'syz.0.1415': attribute type 10 has an invalid length. [ 335.785727][ T9109] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1415'. [ 335.805222][ T9115] FAT-fs (loop1): Directory bread(block 65) failed [ 335.813762][ T9109] device team0 entered promiscuous mode [ 335.815167][ T9115] FAT-fs (loop1): Directory bread(block 66) failed [ 335.830554][ T9109] device team_slave_0 entered promiscuous mode [ 335.838710][ T9115] FAT-fs (loop1): Directory bread(block 67) failed [ 335.845350][ T9115] FAT-fs (loop1): Directory bread(block 68) failed [ 335.859927][ T9115] FAT-fs (loop1): Directory bread(block 69) failed [ 335.869045][ T9109] device team_slave_1 entered promiscuous mode [ 335.879343][ T9115] FAT-fs (loop1): Directory bread(block 70) failed [ 335.891387][ T9109] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.905176][ T9109] batman_adv: batadv0: Interface activated: team0 [ 335.916806][ T9109] batman_adv: batadv0: Interface deactivated: team0 [ 335.933431][ T9115] FAT-fs (loop1): Directory bread(block 71) failed [ 335.942734][ T9109] batman_adv: batadv0: Removing interface: team0 [ 335.962045][ T9115] FAT-fs (loop1): Directory bread(block 72) failed [ 335.979985][ T9115] FAT-fs (loop1): Directory bread(block 73) failed [ 336.269489][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 336.629114][ T9136] dlm: no local IP address has been set [ 336.634736][ T9136] dlm: cannot start dlm midcomms -107 [ 337.217562][ T8097] batman_adv: batadv_iv_ogm_emit: soft interface switch for queued OGM [ 337.245567][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.253038][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.338884][ T8834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.479286][ T9146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1424'. [ 337.531822][ C0] Unknown status report in ack skb [ 338.004889][ T9121] loop3: detected capacity change from 0 to 32768 [ 338.182479][ T8676] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (8676) [ 338.281252][ T9135] loop2: detected capacity change from 0 to 512 [ 338.361168][ T9135] ext4: Unknown parameter 'hash' [ 338.486324][ T7193] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 338.542614][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 338.570980][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 338.681407][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 338.693389][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.739332][ T8834] device veth0_vlan entered promiscuous mode [ 338.757062][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.776253][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.823439][ T8834] device veth1_vlan entered promiscuous mode [ 338.918207][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 338.946342][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 338.995747][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.026102][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.040973][ T8834] device veth0_macvtap entered promiscuous mode [ 339.076221][ T8834] device veth1_macvtap entered promiscuous mode [ 339.187781][ T8834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.252355][ T9186] xt_hashlimit: overflow, try lower: 3/0 [ 339.263670][ T8834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.295160][ T8834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.345272][ T8834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.384240][ T8834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.406090][ T8834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.430177][ T8834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.450852][ T8834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.513755][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.586765][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.614278][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.683577][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.728371][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.792373][ T8834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.825521][ T8834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.876133][ T8834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.912467][ T8834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.935563][ T3648] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 339.957606][ T8834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.984478][ T8834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.015844][ T8834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.043902][ T8834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.102935][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.142272][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.164905][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.214836][ T8834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.263745][ T8834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.300654][ T8834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.336667][ T3648] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 340.475752][ T8834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.484770][ T3648] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 340.563174][ T9205] dlm: no local IP address has been set [ 340.568871][ T9205] dlm: cannot start dlm midcomms -107 [ 341.312099][ T3648] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 341.315346][ T9208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1435'. [ 341.355810][ T3648] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.475883][ T3648] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 341.506976][ T3648] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 341.571958][ T4857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.575938][ T3648] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 341.622752][ T3648] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.625535][ T4857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.682596][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.699523][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.712502][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.759638][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 341.786468][ T3648] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 341.823712][ T3648] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 341.864519][ T3648] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 341.904565][ T3648] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.927215][ T3648] usb 1-1: string descriptor 0 read error: -71 [ 342.933516][ T3648] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 342.943149][ T3648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.967264][ T3648] usb 1-1: can't set config #168, error -71 [ 342.991380][ T3648] usb 1-1: USB disconnect, device number 16 [ 343.380681][ T9244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1446'. [ 343.451243][ C0] Unknown status report in ack skb [ 343.592140][ T9248] dlm: no local IP address has been set [ 343.597831][ T9248] dlm: cannot start dlm midcomms -107 [ 344.343065][ T9217] loop1: detected capacity change from 0 to 32768 [ 344.397395][ T9217] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.439134][ T9217] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 344.464527][ T9217] BTRFS info (device loop1): using free space tree [ 345.418196][ T9217] BTRFS error (device loop1): open_ctree failed [ 345.449714][ T8676] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (8676) [ 345.483604][ T9288] xt_hashlimit: overflow, try lower: 3/0 [ 345.835567][ T9287] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 345.991088][ T9304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1458'. [ 346.115021][ C1] Unknown status report in ack skb [ 346.215700][ T9287] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 346.249120][ T9287] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 346.309072][ T9287] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.364979][ T9287] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.505603][ T9287] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 346.542743][ T9287] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 346.603425][ T9287] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.663914][ T9287] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.815783][ T9287] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 346.854988][ T9287] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 346.915710][ T9287] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.969034][ T9287] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.224029][ T9272] loop3: detected capacity change from 0 to 32768 [ 347.235080][ T9272] XFS: ikeep mount option is deprecated. [ 347.296353][ T9287] usb 1-1: string descriptor 0 read error: -22 [ 347.302751][ T9287] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 347.312288][ T9287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.339023][ T9272] XFS (loop3): Mounting V5 Filesystem [ 347.370034][ T9287] adutux 1-1:168.0: interrupt endpoints not found [ 347.537762][ T22] usb 1-1: USB disconnect, device number 17 [ 347.589059][ T9272] XFS (loop3): Ending clean mount [ 347.681161][ T9272] XFS (loop3): Quotacheck needed: Please wait. [ 347.770224][ T9272] XFS (loop3): Quotacheck: Done. [ 347.861123][ T8475] XFS (loop3): Unmounting Filesystem [ 348.382773][ T9363] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1471'. [ 348.558506][ T9332] loop1: detected capacity change from 0 to 32768 [ 348.592292][ T9332] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 348.652745][ T9332] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 348.683611][ T9332] BTRFS info (device loop1): using free space tree [ 349.020372][ T9332] BTRFS info (device loop1): enabling ssd optimizations [ 349.058466][ T9412] netlink: 'syz.4.1485': attribute type 10 has an invalid length. [ 349.074997][ T9412] batman_adv: batadv0: Adding interface: team0 [ 349.081257][ T9412] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.106860][ T9412] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 349.132879][ T9413] netlink: 'syz.4.1485': attribute type 10 has an invalid length. [ 349.168713][ T9413] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1485'. [ 349.178613][ T9413] device team0 entered promiscuous mode [ 349.184203][ T9413] device team_slave_0 entered promiscuous mode [ 349.190561][ T9413] device team_slave_1 entered promiscuous mode [ 349.198049][ T9413] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.204895][ T9413] batman_adv: batadv0: Interface activated: team0 [ 349.211788][ T9413] batman_adv: batadv0: Interface deactivated: team0 [ 349.218446][ T9413] batman_adv: batadv0: Removing interface: team0 [ 349.278010][ T9413] bridge0: port 3(team0) entered blocking state [ 349.284532][ T9413] bridge0: port 3(team0) entered disabled state [ 349.294023][ T9413] bridge0: port 3(team0) entered blocking state [ 349.300466][ T9413] bridge0: port 3(team0) entered forwarding state [ 349.317223][ T6099] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 349.417994][ T9420] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1487'. [ 349.541518][ T9415] loop2: detected capacity change from 0 to 4096 [ 349.755585][ T9428] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.817521][ T9415] ------------[ cut here ]------------ [ 349.824076][ T9415] kernel BUG at fs/buffer.c:1967! [ 349.901098][ T9415] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 349.907216][ T9415] CPU: 0 PID: 9415 Comm: syz.2.1486 Not tainted 6.1.99-syzkaller #0 [ 349.915219][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 349.925287][ T9415] RIP: 0010:__block_write_begin_int+0x195a/0x1a30 [ 349.931762][ T9415] Code: 00 00 31 ff e8 47 c9 88 ff 48 89 d8 48 25 ff 0f 00 00 74 24 e8 57 c5 88 ff e9 00 e8 ff ff e8 4d c5 88 ff 0f 0b e8 46 c5 88 ff <0f> 0b e8 3f c5 88 ff 0f 0b e8 68 68 89 08 48 8b 5c 24 18 48 89 df [ 349.951476][ T9415] RSP: 0018:ffffc900034df780 EFLAGS: 00010287 [ 349.957570][ T9415] RAX: ffffffff8201d10a RBX: 00fff4000000245f RCX: 0000000000040000 [ 349.965560][ T9415] RDX: ffffc90005c32000 RSI: 0000000000008bed RDI: 0000000000008bee [ 349.973548][ T9415] RBP: ffffc900034df908 R08: ffffffff8201b963 R09: fffff940002c4471 [ 349.981570][ T9415] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 349.989553][ T9415] R13: 000000000000d0ca R14: dffffc0000000000 R15: 000000000000d0ca [ 349.997531][ T9415] FS: 00007f30c90e26c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 350.006462][ T9415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.013046][ T9415] CR2: 00007fb8b16a63b0 CR3: 000000007e870000 CR4: 00000000003506f0 [ 350.021020][ T9415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.029010][ T9415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 350.036984][ T9415] Call Trace: [ 350.040260][ T9415] [ 350.043188][ T9415] ? __die_body+0x5e/0xa0 [ 350.047532][ T9415] ? die+0x83/0xb0 [ 350.051258][ T9415] ? do_trap+0x11e/0x350 [ 350.055506][ T9415] ? __block_write_begin_int+0x195a/0x1a30 [ 350.061310][ T9415] ? __block_write_begin_int+0x195a/0x1a30 [ 350.067116][ T9415] ? do_error_trap+0x13d/0x1e0 [ 350.071906][ T9415] ? __block_write_begin_int+0x195a/0x1a30 [ 350.077718][ T9415] ? do_int3+0x30/0x30 [ 350.081882][ T9415] ? report_bug+0x3e0/0x500 [ 350.086385][ T9415] ? rcu_is_watching+0x11/0xb0 [ 350.091145][ T9415] ? handle_invalid_op+0x2c/0x40 [ 350.096078][ T9415] ? __block_write_begin_int+0x195a/0x1a30 [ 350.101879][ T9415] ? exc_invalid_op+0x2f/0x40 [ 350.106552][ T9415] ? asm_exc_invalid_op+0x16/0x20 [ 350.111587][ T9415] ? __block_write_begin_int+0x1b3/0x1a30 [ 350.117331][ T9415] ? __block_write_begin_int+0x195a/0x1a30 [ 350.123139][ T9415] ? __block_write_begin_int+0x195a/0x1a30 [ 350.128950][ T9415] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 350.134849][ T9415] ? __might_sleep+0xb0/0xb0 [ 350.139527][ T9415] ? current_time+0x1af/0x2f0 [ 350.144212][ T9415] ? atime_needs_update+0x7b0/0x7b0 [ 350.149503][ T9415] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 350.154879][ T9415] ? page_zero_new_buffers+0x650/0x650 [ 350.160342][ T9415] ? __block_write_begin+0x61/0x150 [ 350.165542][ T9415] nilfs_set_link+0xbd/0x2b0 [ 350.170139][ T9415] nilfs_rename+0x68f/0x770 [ 350.174649][ T9415] ? nilfs_mknod+0x290/0x290 [ 350.179246][ T9415] ? rwsem_write_trylock+0x166/0x210 [ 350.184534][ T9415] ? generic_permission+0x21c/0x4f0 [ 350.189734][ T9415] ? do_raw_spin_unlock+0x137/0x8a0 [ 350.195016][ T9415] ? memcpy+0x3c/0x60 [ 350.198999][ T9415] vfs_rename+0xd32/0x10f0 [ 350.203427][ T9415] ? __ia32_sys_link+0x90/0x90 [ 350.208197][ T9415] ? security_path_rename+0x17f/0x210 [ 350.213588][ T9415] do_renameat2+0xde0/0x1440 [ 350.218200][ T9415] ? fsnotify_move+0x4f0/0x4f0 [ 350.222970][ T9415] ? __virt_addr_valid+0x44a/0x520 [ 350.228087][ T9415] ? __check_object_size+0x4dd/0xa30 [ 350.233379][ T9415] ? getname_flags+0x1f9/0x4f0 [ 350.238152][ T9415] __x64_sys_renameat2+0xce/0xe0 [ 350.243090][ T9415] do_syscall_64+0x3b/0xb0 [ 350.247510][ T9415] ? clear_bhb_loop+0x45/0xa0 [ 350.252190][ T9415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.258084][ T9415] RIP: 0033:0x7f30c8375ad9 [ 350.262510][ T9415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.282121][ T9415] RSP: 002b:00007f30c90e2048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 350.290534][ T9415] RAX: ffffffffffffffda RBX: 00007f30c8503f60 RCX: 00007f30c8375ad9 [ 350.298505][ T9415] RDX: 0000000000000005 RSI: 00000000200001c0 RDI: 0000000000000005 [ 350.306472][ T9415] RBP: 00007f30c83e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 350.314437][ T9415] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 350.322409][ T9415] R13: 000000000000000b R14: 00007f30c8503f60 R15: 00007fff18363528 [ 350.330385][ T9415] [ 350.333402][ T9415] Modules linked in: [ 350.365474][ T9415] ---[ end trace 0000000000000000 ]--- [ 350.393742][ T9415] RIP: 0010:__block_write_begin_int+0x195a/0x1a30 [ 350.418982][ T9415] Code: 00 00 31 ff e8 47 c9 88 ff 48 89 d8 48 25 ff 0f 00 00 74 24 e8 57 c5 88 ff e9 00 e8 ff ff e8 4d c5 88 ff 0f 0b e8 46 c5 88 ff <0f> 0b e8 3f c5 88 ff 0f 0b e8 68 68 89 08 48 8b 5c 24 18 48 89 df [ 350.488448][ T9415] RSP: 0018:ffffc900034df780 EFLAGS: 00010287 [ 350.515219][ T9415] RAX: ffffffff8201d10a RBX: 00fff4000000245f RCX: 0000000000040000 [ 350.543033][ T9415] RDX: ffffc90005c32000 RSI: 0000000000008bed RDI: 0000000000008bee [ 350.572683][ T9415] RBP: ffffc900034df908 R08: ffffffff8201b963 R09: fffff940002c4471 [ 350.581767][ T9422] loop3: detected capacity change from 0 to 32768 [ 350.601326][ T9422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1489 (9422) [ 350.618316][ T9415] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 350.627448][ T9415] R13: 000000000000d0ca R14: dffffc0000000000 R15: 000000000000d0ca [ 350.638377][ T9415] FS: 00007f30c90e26c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 350.655005][ T9422] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 350.673208][ T9422] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 350.692232][ T9422] BTRFS info (device loop3): enabling auto defrag [ 350.701005][ T9415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.712557][ T9422] BTRFS info (device loop3): max_inline at 0 [ 350.727754][ T9422] BTRFS info (device loop3): enabling ssd optimizations [ 350.738086][ T9415] CR2: 000055aecf58a000 CR3: 000000007e870000 CR4: 00000000003506e0 [ 350.751273][ T9422] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 350.774989][ T9422] BTRFS info (device loop3): use lzo compression, level 0 [ 350.786811][ T9415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.799293][ T9422] BTRFS info (device loop3): using free space tree [ 350.822602][ T9415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 350.852883][ T9415] Kernel panic - not syncing: Fatal exception [ 350.859113][ T9415] Kernel Offset: disabled [ 350.863544][ T9415] Rebooting in 86400 seconds..