last executing test programs: 37.628486026s ago: executing program 1 (id=1278): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x202ddd, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 36.760332017s ago: executing program 1 (id=1285): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, 0x0}, 0x90) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 36.71373425s ago: executing program 1 (id=1286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x7}}]}, 0x40}}, 0x0) 36.651289266s ago: executing program 1 (id=1288): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000001c0), 0x0, 0x334, &(0x7f0000000880)="$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") 36.464936421s ago: executing program 1 (id=1289): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 36.405662396s ago: executing program 1 (id=1291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000200000000000061127400000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x9e}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@gettfilter={0x44, 0x2e, 0x302, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10}, {0xfff1, 0x3}, {0xc, 0x7}}, [{0x8, 0xb, 0xe4bf}, {0x8, 0xb, 0x1000007}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040082}, 0x8000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000640)=0x1ff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xf, 0x800, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240), 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x4, 0x1000000}]}}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000580)={0x60, r1, 0x29, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x6}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xfffffff8, 0xeb3, 0x7cf6, 0x10ec, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r13}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r13, &(0x7f0000000e00)="8e360c9c5b6a63f1b6524e30394f4ac6135213595045e6bb59c9cb990b924b0f2d586947977d5c1486bcb89aa0d3573beea8e43ac7274627ab526ae8bf906c94a128e97b8f96319904abe5481701d731f1f74055edc9f643938cdb2437e6ceb237d6faa5fa658e59079adf17348d9d3b83b28a78a231365b13e5a5279b81da156e", &(0x7f0000001680)=""/4096}, 0x20) 12.167042336s ago: executing program 3 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000e80)={0x58, r1, 0x1, 0x0, 0x0, {0x1b}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 11.291670998s ago: executing program 3 (id=1353): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f614d2a6093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0), &(0x7f00000001c0)=0x4) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, 0x0, &(0x7f0000000000)) 11.01812054s ago: executing program 3 (id=1356): preadv(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x1f}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007b013000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='children\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xb, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x50}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1000a, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2, 0x280, &(0x7f00000005c0)="$eJzs3T9rG2ccB/Df2ZKstoM0dDIF39BZ2F471Ka4UOqpRUMLpTW1DUUShhoEdUsVT9kDGfIm8k6y5B3kBQSSKQ6EXDid/jjm/EfGcoLz+Sz6oXu+z5+7x/KkR3981evsHhzuH//3LOr1JBY2YiNOkmjGQozdCwDgLjnJsniRFS5vXYuIrFHUlYW5Tw4AmIvZ/v8DAHfBz7/8+uPm9vbWT2laj+jd77eTKF6L65v78Vd0Yy9WoxFvIrKJov7+h+2tqKS5ZnzdG/TbebL3+5NR/5vPI4b5tWhEszy/lhZO5Qf9djU+z/NZUnS0Ho34sjy/XpKPdi2OJvN/uxetaMTTP+MgurEbeXaa/38tTb/LHr76dzhQnk8G/fbSsN1Utli8Pvrt9p4OAAAAAAAAAAAAAAAAAAAAAAB3VSudOH1+z2B8GmCrVX793POBlovTeQanztdZTdN0fIxPv12NIl+J5UpUPtzKAQAAAAAAAAAAAAAAAAAA4ONx+M9RZ6fb3fv7Rovx1/qv20/nccRcJtaNxdHUusm8hpi9+Gw8qeE7V38oD2Yfa2W49is1/uZay0nyuzreXZ2dJC5J1a+wSWqjIinftEtRkspKtt/iuUPUrvPgvi3p54tRsRozdViNKL1R+Yqrk5t5cT/VG9mQr7PxX0qu+XLySZHM/bMIAAAAAAAAAAAAAAAAAAA+ddNv/5ZcPI6lC8Mrc5sWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyq6e//T4ponn3nbDEYhc9tk7zfIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMzZuwAAAP//BRVs4w==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0], 0x1, 0x1a5, &(0x7f0000000140)="$eJzsVU2P0kAYfqadtuBBPRsTDxqFg1CKGm56MvwAz0aCFYnFD9pEISTWE//DC3/E/+BB4wUPxmQP7H0zm5l5W4ZN9kDC7rKbeRJ4nnnfeT+mTd95m35KAwBHq1kfz6Dg4jp+MQYO4A7TtueB5v++5gat/3HNdbJ/J/5NnE6m73pJEo9PCna6a1uxs0TbCw/nV+vl2ZeQL/PiHuYVFoBhoU8G+9DY/gghxNddZ14vn35zcKBm2c/VrC/FKwBCCAEU7wPM3OMC+FHuAW5x9WMuRLmHI+9I/QBAMxt9bKaT6cPhqDeIB/H7KGo/CR+F4eOo+WaYxKH+Z0YJh+pKrgOQM7Vq+D0Af6p6zzVsghmtkZ+Zsb4xnGt3N2MdxsvYgivkk7E02yEfwQvcV77POVtbxQ3S6khdMLjgatHiRn/6bBXlaPQ/JK/nYJD3igiAcAEOpwhbwoPDVEIZ6pWedicv2p4T3yPuEi+Il8TFnVXcRVxl+EurWg74+NLLsnFLmrQqbYKQjaObZWWHqh76m4e7HcDCwsLCwsLC4pLhOAAA//9fLWDJ") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @private=0xa010101}}) socket$nl_route(0x10, 0x3, 0x0) 9.932659229s ago: executing program 3 (id=1358): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@dioread_lock}, {@dioread_nolock}]}, 0xfd, 0x586, &(0x7f0000000e80)="$eJzs3d9rU1ccAPDvTRt/b1YQ2fYwCj7M4Uxtux8O9uAexyYTttfRhTQWaWqkScV2wvRhvuxlyGCMCWN/wN59lD3sdX+FMAUZUubDXjpuetPGJmlrjbY2nw9Ez7nn3pz7zT3n9NychATQt4bTf3IRr0fED0nE4ZaywcgKh5f3W3x0rZQ+klha+uKfJJJsW3P/JPv/YJZ5LSL++C7iZK693tr8wnSxUinPZvmR+szlkdr8wqmLM8Wp8lT50tj4+Jn3xsc+/OD9tmMn9m4t1rfPP/7587ufnPn++OJPvz84ciuJs3EoK2uN4xlcb80Mx3D2muTj7JodR3tQ2U6SbPcJsCUDWT/PRzoGHI6BrNd35CLDrvJtRCwBfSrR/6FPNecBzXv7Ht0HvzQefrx8A9Qe/+DyeyOxr3FvdGAxeeLOKL0VGupB/Wkdd+7fvpU+onfvQwBs6PqNiDg9ONg+/iXZ+Ld1pzexz9o6jH/w4txN5z/vdJr/5FbmP9Fh/nOwQ9/dio37f+5Bl0O3uAr0pHT+91HH+e/KotXQQJZ7pTHnyycXLlbK6dj2akSciPzeNL/ees6ZxXtL3cpa53937t/+8/Gja6XmXDA7jweDayKdLNaLzxJzq4c3It7oOP9NVq5/0uH6p6/H+fZQOjpWvv1mt7I18d9abIv/+Vr6LeKtjtd/dbEjWX99cqTRHkaaraLdvzeP/bWayz9R9pTx93wFJr3+B9aPfyhpXa+tPX0dv+77r9ytbOP4O7f/PcmXjfSebNvVYr0+OxqxJ/msffvY6rHNfHP/NP4Tx9cf/zq1//0R8fUm47959GbXXbe7/afxT27++qcvQZpIt6+0iI0S9z795pdu9a8T/8DyHun1f7eROpEds5nxbzPntbXWDAAAAAAAADtXLiIORZIrrKRzuUJh+fMdR+NArlKt1U9eqM5dmozGd2WHIp9rrnQfbvk8xGj2edhmfmxNfjwijkTEjwP7G/lCqVqZ3O7gAQAAAAAAAAAAAAAAAAAAYIc4GLGv0/f/U38PbPfZAc/dOj/5Dexy3ft/VtKLX3oCdiR//6F/6f/Qv/R/6F/6P/Qv/R/6l/4P/Uv/h/6l/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPnT93Ln0sLT66Vkrzk1fm56arV05NlmvThZm5UqFUnb1cmKpWpyrlQqk6s9HzVarVy6NjMXd1pF6u1Udq8wsTM9W5S/WJizPFqfJEOf9CogIAAAAAAAAAAAAAAAAAAICXS21+YbpYqZRnJXZfIokXUNfgTohU4quI6OkTbvfIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACr/g8AAP//yZ4z2A==") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 9.427722581s ago: executing program 3 (id=1360): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$eJzs3c9rI2UYwPEnaTa/lm1yEEVB+qAXvQxt9KwG2QUx4NLdiLuCMLudaMiYlJlQiYitJ6/izX9AcNljbwX1H+jFW7148dZLQdAi4shMZtr8mCRNmpLWfj9Q8kze95mZNzOE5w3M28MPvvm0UXONmtmWZFYlISJyLFKUpEQS4WsyiNPSa0devfnHwYv3Hjx8t1yp3F5XvVO+/1pJVZdXfvzsi1zYbS8j+8WPDo9Kv+8/u//84b/3P6m7Wne12WqrqY9av7XNR7alG3W3YajetS3TtbTedC2n297qttfs1uZmR83mxq38pmO5rprNjjasjrZb2nY6an5s1ptqGIbeysv1kh3Y9hKTc6pP1tfN8owHfDxjHubtb8/zxjQ7TtlcEjFyQy3VJxd6XgAA4FIaqP+/i2qEoiRPCspE31xguP6P4qD+96vO0/r/6Us/t2++v7sc1v976bj6//Vfu/l99b9/9LnX/z8MbA9XRFfe9jSdz1X/43JYSQ+91T/18+v/fDh/D3z14dPVIKD+BwAAAAAAAAAAAAAAAAAAAADgKjj2vILneYXoNfo7fYQg3I62xj1ojCtn1PXPhCsKnNwP+F+69+ChZIMH91LLIvbXW9Wtavc1bI86rkpB/gnuh1B3wYmdoFF9RfnJ3g7zt7eqS0FLWUTFFkvWpCDFvvwgvvNO5faadvXnJ1J5P78m9SC/JAV5Jj6/FJufllde7sk3pCC/PJaW2LIRfo9F+V+uqb79XmUgPxf0i/PmxV8WAAAAAADmylDNhtPn2Pm7YajGtftzeemdnw//PnAyv16NnZ+nCi+kFjt2AAAAAACuCzf9ecO0bctxOyODnEzqkwn3Nn4/8UFqms5+cBAEN8b1WeoZ4Vn3nA7/g8YUJy/TjdS07T8zEvthRku49jVlz/GpmnY0/jN0zk57CRw3Of3YLcdd8c9HZxpOTxD9bDSqj9yddc+jgmjl3Emdn/v2+79mO0QiXLW3t+mN3eyEkQZBYuCdnQk37ZHnTTyfGxf5nQMAAABgMaKiP+dG77y12BMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAamusyaSOCRY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCz+CwAA//+9m/li") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb1, 0x0, &(0x7f00000000c0)) 7.702041682s ago: executing program 3 (id=1367): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file0\x00', 0x2008054, &(0x7f0000000140)=ANY=[], 0x1, 0xf43, &(0x7f0000002d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0185879, &(0x7f0000000b00)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.869356712s ago: executing program 0 (id=1375): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$eJzs3c9rI2UYwPEnaTa/lm1yEEVB+qAXvQxt9KwG2QUx4NLdiLuCMLudaMiYlJlQiYitJ6/izX9AcNljbwX1H+jFW7148dZLQdAi4shMZtr8mCRNmpLWfj9Q8kze95mZNzOE5w3M28MPvvm0UXONmtmWZFYlISJyLFKUpEQS4WsyiNPSa0devfnHwYv3Hjx8t1yp3F5XvVO+/1pJVZdXfvzsi1zYbS8j+8WPDo9Kv+8/u//84b/3P6m7Wne12WqrqY9av7XNR7alG3W3YajetS3TtbTedC2n297qttfs1uZmR83mxq38pmO5rprNjjasjrZb2nY6an5s1ptqGIbeysv1kh3Y9hKTc6pP1tfN8owHfDxjHubtb8/zxjQ7TtlcEjFyQy3VJxd6XgAA4FIaqP+/i2qEoiRPCspE31xguP6P4qD+96vO0/r/6Us/t2++v7sc1v976bj6//Vfu/l99b9/9LnX/z8MbA9XRFfe9jSdz1X/43JYSQ+91T/18+v/fDh/D3z14dPVIKD+BwAAAAAAAAAAAAAAAAAAAADgKjj2vILneYXoNfo7fYQg3I62xj1ojCtn1PXPhCsKnNwP+F+69+ChZIMH91LLIvbXW9Wtavc1bI86rkpB/gnuh1B3wYmdoFF9RfnJ3g7zt7eqS0FLWUTFFkvWpCDFvvwgvvNO5faadvXnJ1J5P78m9SC/JAV5Jj6/FJufllde7sk3pCC/PJaW2LIRfo9F+V+uqb79XmUgPxf0i/PmxV8WAAAAAADmylDNhtPn2Pm7YajGtftzeemdnw//PnAyv16NnZ+nCi+kFjt2AAAAAACuCzf9ecO0bctxOyODnEzqkwn3Nn4/8UFqms5+cBAEN8b1WeoZ4Vn3nA7/g8YUJy/TjdS07T8zEvthRku49jVlz/GpmnY0/jN0zk57CRw3Of3YLcdd8c9HZxpOTxD9bDSqj9yddc+jgmjl3Emdn/v2+79mO0QiXLW3t+mN3eyEkQZBYuCdnQk37ZHnTTyfGxf5nQMAAABgMaKiP+dG77y12BMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAamusyaSOCRY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCz+CwAA//+9m/li") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb1, 0x0, &(0x7f00000000c0)) 4.78107762s ago: executing program 0 (id=1376): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='attr/sockcreate\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000400)='./file0\x00', 0x2800082, &(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=r1], 0x0, 0x17b, &(0x7f0000000680)="$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") r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="19"]) 4.428322679s ago: executing program 0 (id=1378): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x2402) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000018c0)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1}) 4.197519278s ago: executing program 0 (id=1379): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r0, r3}) sendmmsg$inet(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="e2", 0x1}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}], 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000300)={r0}) 2.304053432s ago: executing program 0 (id=1384): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 2.284693184s ago: executing program 4 (id=1386): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) 2.051253473s ago: executing program 0 (id=1387): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x50, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0xf, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2}, [@feature_unit={0x13, 0x24, 0x6, 0x4, 0x6, 0x6, [0xa, 0x8, 0x8, 0x9, 0x8, 0x5], 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x3, 0x43, 0x7, 0x9, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x3, "01b9f9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x1f}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x3, 0x6, {0x7, 0x25, 0x1, 0x81, 0x7f, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xd, 0x4, {0x7, 0x25, 0x1, 0x80, 0xfa, 0x6c0}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0xff, 0xff, 0xfa, 0x40, 0x8d}, 0x6f, &(0x7f0000000500)={0x5, 0xf, 0x6f, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x372, 0xf88f, 0x5, [0x3f00, 0x30, 0xff0000, 0xff00cf, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "3f37184ff56c31121f0327810181ef5d"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x10, 0xf, 0x3, [0xc000, 0xc000, 0x3f0f, 0xf, 0x0, 0x3fcf]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x61, 0xc2, 0x81, 0x4, 0x40}]}, 0x1, [{0x4a, &(0x7f00000005c0)=@string={0x4a, 0x3, "6339e06e02dde6964501d7fed5aca98d4f33de1aa1434e7190cd54293e67493a14f340f72a8dc8e46764bab091cdfc397416a0ed037a789b7f92c919262e510640c30ab3a934138f"}}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb240580403500000000000010902"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) accept(0xffffffffffffffff, &(0x7f0000000180)=@ethernet={0x0, @dev}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) 2.051090973s ago: executing program 2 (id=1388): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x33, 0x6ff, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) 1.95899746s ago: executing program 2 (id=1389): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) 1.838932521s ago: executing program 2 (id=1390): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007081c000a0004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffc2}], 0x1}, 0x0) 1.748010918s ago: executing program 4 (id=1391): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x6}]}]}, 0x38}}, 0x0) 1.669178364s ago: executing program 4 (id=1392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1], &(0x7f0000000200)='syzkaller\x00'}, 0x90) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x67, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}, 0x0, 0x0, 0x10, 0x0, "14287372edf9871223e920885212e1bdeb7e35e62ce6dba165155a7497871559e5387da52b0d43ef246033187312400834d18e1d66403ee7af8903caf03a8638bd8e6c8151dbbd6379ff37babe20e694"}, 0xd8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0', [{}], 0xa, "2ddf4cadd96be505574cfa86e5ebb9cebf7781aff3684eb378cc285623d70f6cb3195fd66a4feeb3cded023dadf36137089d4eaa55ab4ed5bb4b88c8cc09a4e5b6"}, 0x4d) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)='\x00'/12, 0xc) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}) sendmmsg(r7, &(0x7f000000ef40)=[{{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000004440)="e5", 0x1}, {&(0x7f0000004540)="abed623aff4cdc84b825ef6c1e545f8ba69f060b03425563b3377e51efa5651b3bc63deeaf5fbf5a7946e17c95bedf7a33c346497bce58724c3a5693195d48ca60545700a99c849b5092c61f58705bdc9f7852947d0caf74dbd8eda77fc2e53c4ebc37d70d65a39e4c7409a260b31c97d5537fd52bfe02d0b9d568285ad457bcea126359f911d210f337bb167774a7ac9686342f3e28c4eedb767465d54ff39b4cd8110843eff7de8a741a04fd67e38f2c608420a140c25628651c00a8af8931543a93", 0xc3}], 0x2}}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000004f00)}, {&(0x7f0000004e40)="2424dcb9613574348e07bd", 0xb}, {&(0x7f0000004f40)="8d1089073ce327f1168bc00a9bdefefc6567e4252707605351973eecb3508fb6bf586876f34bf37563180e8221e0885fc9285d6df18513e8cf925b760e795d3b062f87e157", 0x45}], 0x3}}, {{0x0, 0x0, &(0x7f0000007680)=[{&(0x7f00000063c0)="0a1fcb5ce35492f5f805e1bd266101ca08bc61249c4599f88f0d51e74fdf9ab2a1b389bfbfa418", 0x27}, {&(0x7f0000006400)="b9055c0ba3a8d83168403aff16df1928802105e20c598a8fc72347350d79d626e9b6df2443813a4024c9bc4d14fa730aa35b7615f630665b9773e166fe9a09e0a35063fa75b984bb6e9eb8852ecf56186a64295e710b745f58623e2d4f2cd2da3bd98ecc844a3baaf22db74e33afe8e1d2d5042e3863ed322f5a5f692f5777872051708e84659eec687773e00d1768a6ab3b1258415bd0bc4f0f41d57b5d84f032ade4ca824536a9ff23d13cdc9118e95c3fdf2e956e41c0373744c0d0a8dbb76f9dbfe8dc6dc2106d097eeee0447c390bd0bc083a1c3f585b", 0xd9}, {&(0x7f0000007500)=',', 0x1}, {&(0x7f00000075c0)="8c038a", 0x3}], 0x4}}, {{0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f00000077c0)="92ba", 0x2}, {&(0x7f0000007900)="a415203b646a4ee922035672674a6af09e3c3aa4ccda78ec850f465203ce98b2bbda65f7b6931010e59cd690dcfd1763b290cd7c00cefcd65738ccea80719320b8aada09f1f95f00085a13752df01cec9d8132fd67c6fda11c9e7cb83f7595f530d05a5a79abac7d10498e3d845449ffda624eb4a8fae1abc145fba825c99f7e9cf464c01a12d223d20dc17b6a5cc7df6c28791a63fc745a8e2eb9608f02a1", 0x9f}, {&(0x7f00000079c0)="5566ae2060d557fbd918b4ecbadd1960fa7e5813a8b42a76e02b357f1828e79e223f61979cc555521c2267f355d95f55094877efb33c", 0x36}], 0x3}}, {{0x0, 0x0, &(0x7f0000009440)=[{&(0x7f0000008e80)="09747ea911fa0951db694808328d193354419e45c2b37637833f2b921e7dc4b75c14d27bbe1b04c5b82c463724214dfaa9194e7efc2c1427c1279d01a1bebf01511b2099d1afabcf3c255c7d6958e7e7ac87bb3172dfedd1675569107eee274000fc12b570e1756d1ea6f5c9f27fc3aa628530c32c12b1f3760cd712", 0x7c}, {&(0x7f0000008f80)="b011ed362ae4747498109037454e6930f19d1f6263237aa687173371a40d083b11fa", 0x22}, {&(0x7f0000008fc0)="075d9b4a4c28", 0x6}, {&(0x7f0000009180)="835d178facdce6acac59eef8a98a3d2ed245912b25a3560a9b31f1ae77b7decc08641bde17699a10a3b665a0dc4bf3a21f91066ae2718e4000042acb6af3e520091bfb06f01342", 0x47}], 0x4}}], 0x5, 0x8800) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000100)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000080)=0x8000000000000001, 0x12) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.626937427s ago: executing program 2 (id=1393): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r0, r3}) sendmmsg$inet(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="e2", 0x1}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}], 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000300)={r0}) 1.467963411s ago: executing program 2 (id=1394): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc3528c13e245075073feaebad2ba4189b5fb06f42a5354f9aadf6970f543a4b56e61b4b8", 0xfdef, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197ceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e65c9", @ANYRES64, @ANYRESDEC], 0x81, 0x151a, &(0x7f0000002a80)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x20102, 0x166) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet(0x2, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) ioctl$LOOP_CLR_FD(r9, 0x4c08) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x128}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18ffff000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202069250000000069e4ca2e53e29d002020207baaf8ff00000000bfa100000000000000000000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) renameat2(r4, &(0x7f0000000440)='./bus/file0\x00', r3, &(0x7f0000000180)='./bus/file0\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f00000014c0)={@broadcast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @empty, @remote, @empty}}}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x4e23, 0xfffd, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb4, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6a6, &(0x7f00000007c0)="$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") 1.467186421s ago: executing program 4 (id=1395): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 1.23309651s ago: executing program 4 (id=1396): syz_open_dev$dri(0x0, 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x5760, 0x0) 261.891339ms ago: executing program 4 (id=1397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$rds(0x15, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000001540)=ANY=[@ANYBLOB="038c"], 0x4) socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES16=r3, @ANYBLOB="010000000000000000000700000005000400000000000560707e41f69728000500ac1414bb"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="440100001a0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e40010000000000000000000000000000000033000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001600810000004c0014"], 0x144}}, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000007c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000100)=0x4b3, 0x101, 0x5) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8}, 0x10) syz_emit_ethernet(0x106, &(0x7f0000000900)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0xd0, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, @loopback, [@srh={0x51d75c5b460a4538, 0xe, 0x4, 0x7, 0x3, 0x30, 0x8, [@mcast1, @empty, @private0, @loopback, @private1, @loopback, @local]}, @routing={0x67, 0x4, 0x2, 0x95, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}]}]}}}}}}}, 0x0) 0s ago: executing program 2 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x33, 0x6ff, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): z [ 237.281484][ T6628] loop4: detected capacity change from 0 to 512 [ 237.305024][ T6628] EXT4-fs: Invalid want_extra_isize 128 [ 237.350565][ T155] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 237.603668][ T3693] cdc_ncm 2-1:1.0: bind() failure [ 237.615355][ T3693] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 237.622232][ T3693] cdc_ncm 2-1:1.1: bind() failure [ 237.640104][ T3693] usb 2-1: USB disconnect, device number 17 [ 237.903270][ T155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.116980][ T3689] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 238.413354][ T155] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00a8, bcdDevice=b9.47 [ 238.466998][ T155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.483156][ T155] usb 3-1: Product: syz [ 238.487484][ T155] usb 3-1: Manufacturer: syz [ 238.492085][ T155] usb 3-1: SerialNumber: syz [ 238.502574][ T155] usb 3-1: config 0 descriptor?? [ 238.545199][ T155] dw2102: su3000_identify_state [ 238.570272][ T155] dvb-usb: found a 'Terratec Cinergy S2 USB HD' in warm state. [ 238.578436][ T155] dw2102: su3000_power_ctrl: 1, initialized 0 [ 238.586798][ T155] dvb-usb: bulk message failed: -8 (2/0) [ 238.597708][ T155] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 238.611743][ T155] dvb-usb: Terratec Cinergy S2 USB HD error while loading driver (-19) [ 238.773882][ T155] usb 3-1: USB disconnect, device number 17 [ 239.663236][ T3689] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 239.692564][ T3689] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 239.715570][ T6649] netlink: 'syz.4.958': attribute type 3 has an invalid length. [ 239.725132][ T3689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 41090, setting to 1024 [ 239.798867][ T6649] netlink: 'syz.4.958': attribute type 3 has an invalid length. [ 239.809186][ T3689] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 239.893425][ T3689] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 240.228623][ T3689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.237471][ T3689] usb 4-1: SerialNumber: syz [ 240.249276][ T3689] usb 4-1: config 0 descriptor?? [ 240.273206][ T6641] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.280449][ T6641] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.312966][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 240.319398][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 240.327137][ T3689] port100 4-1:0.0: NFC: Could not get supported command types [ 240.432098][ T6657] loop4: detected capacity change from 0 to 16 [ 240.467175][ T3689] usb 4-1: USB disconnect, device number 21 [ 240.494250][ T6657] erofs: (device loop4): mounted with root inode @ nid 36. [ 240.519886][ T6664] --map-set only usable from mangle table [ 240.623148][ T6666] syz.4.960: attempt to access beyond end of device [ 240.623148][ T6666] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 241.052791][ T6657] device syzkaller0 entered promiscuous mode [ 241.084751][ T6656] device syzkaller0 left promiscuous mode [ 241.162624][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 241.226452][ T6678] loop1: detected capacity change from 0 to 164 [ 241.262130][ T6678] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 241.354355][ T6678] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 241.429881][ T6683] netlink: 'syz.3.970': attribute type 3 has an invalid length. [ 241.465510][ T6683] netlink: 'syz.3.970': attribute type 3 has an invalid length. [ 242.748118][ T6698] loop4: detected capacity change from 0 to 1024 [ 243.593447][ T22] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 243.823949][ T6707] --map-set only usable from mangle table [ 243.964912][ T6712] loop3: detected capacity change from 0 to 16 [ 243.973253][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 243.982210][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 243.998956][ T6712] erofs: (device loop3): mounted with root inode @ nid 36. [ 244.149588][ T6718] syz.3.978: attempt to access beyond end of device [ 244.149588][ T6718] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 244.158562][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 41090, setting to 1024 [ 244.302276][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 244.473044][ T22] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 244.482476][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.557452][ T22] usb 3-1: SerialNumber: syz [ 244.565288][ T6723] loop4: detected capacity change from 0 to 2048 [ 244.581489][ T22] usb 3-1: config 0 descriptor?? [ 244.603299][ T6708] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 244.610505][ T6708] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 244.643730][ T6726] loop1: detected capacity change from 0 to 128 [ 244.652931][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 244.659337][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 244.667686][ T22] port100 3-1:0.0: NFC: Could not get supported command types [ 244.717646][ T6723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.727264][ T6726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 244.745574][ T6734] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 244.794020][ T6726] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 244.852432][ T6712] device syzkaller0 entered promiscuous mode [ 244.871039][ T6721] loop7: detected capacity change from 0 to 16384 [ 244.871659][ T6710] device syzkaller0 left promiscuous mode [ 244.961273][ T6726] EXT4-fs (loop1): unmounting filesystem. [ 245.095142][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 245.095157][ T26] audit: type=1800 audit(1722095587.145:93): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.980" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 245.174449][ T6721] I/O error, dev loop7, sector 15880 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 2 [ 245.639752][ T6721] I/O error, dev loop7, sector 15880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.818486][ T6721] Buffer I/O error on dev loop7, logical block 1985, async page read [ 246.166496][ T3691] usb 3-1: USB disconnect, device number 18 [ 246.433711][ T5622] EXT4-fs (loop4): unmounting filesystem. [ 246.545517][ T6756] loop2: detected capacity change from 0 to 1024 [ 246.733057][ T3660] Bluetooth: hci0: command tx timeout [ 247.028780][ T6774] loop3: detected capacity change from 0 to 512 [ 247.059500][ T6776] loop2: detected capacity change from 0 to 16 [ 247.984310][ T6776] erofs: (device loop2): mounted with root inode @ nid 36. [ 248.062975][ T3689] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 248.074265][ T6774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 248.082267][ T6774] System zones: 1-12 [ 248.657865][ T6774] EXT4-fs (loop3): orphan cleanup on readonly fs [ 248.744598][ T6774] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.999: invalid indirect mapped block 1819239214 (level 1) [ 248.786960][ T3689] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 248.827713][ T3689] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 249.120935][ T6774] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.999: bg 0: block 361: padding at end of block bitmap is not set [ 249.254109][ T6774] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 249.338236][ T6774] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.999: attempt to clear invalid blocks 33619980 len 1 [ 249.362229][ T6769] syz.2.996: attempt to access beyond end of device [ 249.362229][ T6769] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 249.517634][ T6774] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.999: invalid indirect mapped block 1819239214 (level 0) [ 249.643813][ T6774] EXT4-fs (loop3): 1 truncate cleaned up [ 249.672990][ T6774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 249.701160][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 41090, setting to 1024 [ 249.712360][ T3689] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 249.952063][ T3689] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 250.014776][ T3689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.075072][ T3689] usb 1-1: config 0 descriptor?? [ 250.093024][ T3689] usb 1-1: can't set config #0, error -71 [ 250.103221][ T3689] usb 1-1: USB disconnect, device number 16 [ 250.449791][ T6769] device syzkaller0 entered promiscuous mode [ 250.456011][ T6769] device syzkaller0 left promiscuous mode [ 250.462491][ T6784] device syzkaller0 entered promiscuous mode [ 250.624935][ T6784] device syzkaller0 left promiscuous mode [ 250.637410][ T5068] EXT4-fs (loop3): unmounting filesystem. [ 251.014217][ T3691] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 251.093165][ T3689] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 251.128338][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1014'. [ 251.153116][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1014'. [ 251.215454][ T6817] loop1: detected capacity change from 0 to 164 [ 251.266675][ T6817] rock: directory entry would overflow storage [ 251.273154][ T6817] rock: sig=0x4f50, size=4, remaining=3 [ 251.278817][ T6817] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 251.353018][ T3689] usb 5-1: Using ep0 maxpacket: 16 [ 251.473688][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.518827][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.563822][ T3689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.722785][ T3689] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.813328][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.884336][ T3689] usb 5-1: config 0 descriptor?? [ 251.963560][ T6824] loop2: detected capacity change from 0 to 8 [ 251.993976][ T6824] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 252.032007][ T6824] cramfs: root is not a directory [ 252.087692][ T3636] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.148060][ T3691] usb 1-1: unable to get BOS descriptor set [ 252.233393][ T3691] usb 1-1: config 7 has an invalid interface number: 23 but max is 2 [ 252.262424][ T3691] usb 1-1: config 7 has an invalid interface number: 231 but max is 2 [ 252.303399][ T3691] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 252.319625][ T3691] usb 1-1: config 7 has an invalid interface number: 215 but max is 2 [ 252.328233][ T3691] usb 1-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 252.344801][ T6839] loop1: detected capacity change from 0 to 164 [ 252.372952][ T3691] usb 1-1: config 7 has no interface number 0 [ 252.379087][ T3691] usb 1-1: config 7 has no interface number 1 [ 252.403528][ T6839] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 252.424139][ T3691] usb 1-1: config 7 has no interface number 2 [ 252.430271][ T3691] usb 1-1: config 7 has no interface number 3 [ 252.430731][ T3689] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input21 [ 252.457056][ T3691] usb 1-1: config 7 interface 23 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.477464][ T6839] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 252.486099][ T3691] usb 1-1: config 7 interface 231 altsetting 2 has an invalid endpoint with address 0x1F, skipping [ 252.499480][ T3691] usb 1-1: config 7 interface 231 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 252.517081][ T3689] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 252.531317][ T3691] usb 1-1: config 7 interface 231 altsetting 2 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 252.558273][ T3691] usb 1-1: config 7 interface 231 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 252.621198][ T3691] usb 1-1: config 7 interface 231 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 252.639546][ T3689] usb 5-1: USB disconnect, device number 9 [ 252.644636][ T3691] usb 1-1: config 7 interface 231 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 252.676125][ T3691] usb 1-1: config 7 interface 231 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 252.694871][ T3691] usb 1-1: too many endpoints for config 7 interface 100 altsetting 84: 190, using maximum allowed: 30 [ 252.711693][ T3691] usb 1-1: config 7 interface 100 altsetting 84 has a duplicate endpoint with address 0xF, skipping [ 252.725952][ T3691] usb 1-1: config 7 interface 100 altsetting 84 has 1 endpoint descriptor, different from the interface descriptor's value: 190 [ 252.741694][ T3691] usb 1-1: config 7 interface 215 altsetting 244 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 252.759768][ T3691] usb 1-1: config 7 interface 215 altsetting 244 endpoint 0xE has invalid maxpacket 991, setting to 64 [ 252.771148][ T3691] usb 1-1: config 7 interface 231 has no altsetting 0 [ 252.783579][ T3691] usb 1-1: config 7 interface 100 has no altsetting 0 [ 252.790366][ T3691] usb 1-1: config 7 interface 215 has no altsetting 0 [ 253.052164][ T6851] netlink: 'syz.3.1026': attribute type 15 has an invalid length. [ 253.060174][ T6851] netlink: 719 bytes leftover after parsing attributes in process `syz.3.1026'. [ 253.077751][ T26] audit: type=1326 audit(1722095595.085:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff477977299 code=0x7ffc0000 [ 253.150858][ T26] audit: type=1326 audit(1722095595.085:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff477977299 code=0x7ffc0000 [ 253.214673][ T26] audit: type=1326 audit(1722095595.085:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff477977299 code=0x7ffc0000 [ 253.429972][ T26] audit: type=1326 audit(1722095595.085:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff477977299 code=0x7ffc0000 [ 253.619767][ T26] audit: type=1326 audit(1722095595.085:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff477977299 code=0x7ffc0000 [ 253.645081][ T26] audit: type=1326 audit(1722095595.085:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff477977299 code=0x7ffc0000 [ 253.667308][ T26] audit: type=1326 audit(1722095595.085:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff477977299 code=0x7ffc0000 [ 253.690688][ T26] audit: type=1326 audit(1722095595.085:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff477977299 code=0x7ffc0000 [ 253.713040][ T26] audit: type=1326 audit(1722095595.095:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff477977299 code=0x7ffc0000 [ 253.741084][ T26] audit: type=1326 audit(1722095595.095:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff477977299 code=0x7ffc0000 [ 253.783067][ T3691] usb 1-1: string descriptor 0 read error: -71 [ 253.784867][ T6861] netlink: 'syz.4.1030': attribute type 11 has an invalid length. [ 253.789313][ T3691] usb 1-1: New USB device found, idVendor=1a72, idProduct=1015, bcdDevice=8a.3e [ 253.800897][ T6861] netlink: 'syz.4.1030': attribute type 11 has an invalid length. [ 253.816331][ T6861] debugfs: Directory 'netdev:' with parent 'phy19' already present! [ 253.873082][ T3726] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 253.881182][ T3691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.922731][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 253.953206][ T3691] usb 1-1: can't set config #7, error -71 [ 253.971705][ T6867] loop3: detected capacity change from 0 to 164 [ 253.978920][ T3691] usb 1-1: USB disconnect, device number 17 [ 254.061738][ T6867] isofs: isofs_export_get_parent(): child directory not normalized! [ 254.453600][ T3726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 254.743425][ T3726] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.802391][ T3726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.842946][ T3726] usb 2-1: Product: syz [ 254.847127][ T3726] usb 2-1: Manufacturer: syz [ 254.851731][ T3726] usb 2-1: SerialNumber: syz [ 254.893823][ T6876] loop4: detected capacity change from 0 to 128 [ 254.952004][ T3726] usb 2-1: config 0 descriptor?? [ 254.992418][ T6877] Zero length message leads to an empty skb [ 255.045025][ T3726] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 255.063116][ T3726] em28xx 2-1:0.0: Device initialization failed. [ 255.089860][ T3726] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 255.176345][ T6890] loop4: detected capacity change from 0 to 8 [ 255.213118][ T6890] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 255.222818][ T6890] cramfs: root is not a directory [ 255.298932][ T6852] loop1: detected capacity change from 0 to 512 [ 255.329448][ T6893] loop3: detected capacity change from 0 to 1024 [ 255.358815][ T6852] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 255.375670][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.375753][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.400978][ T6893] Bluetooth: hci3: unsupported parameter 28 [ 255.414494][ T6852] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1028: attempt to clear invalid blocks 1024 len 1 [ 255.428096][ T6893] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 255.472973][ T3726] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 255.478501][ T6852] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1028: invalid indirect mapped block 1819239214 (level 0) [ 255.552296][ T6852] EXT4-fs (loop1): 1 truncate cleaned up [ 255.577602][ T6852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 255.647271][ T6903] loop3: detected capacity change from 0 to 164 [ 255.692731][ T6903] isofs: isofs_export_get_parent(): child directory not normalized! [ 255.863901][ T3726] usb 3-1: unable to get BOS descriptor set [ 255.946701][ T3726] usb 3-1: config 7 has an invalid interface number: 23 but max is 2 [ 255.960074][ T3726] usb 3-1: config 7 has an invalid interface number: 231 but max is 2 [ 255.963544][ T41] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 255.972184][ T3726] usb 3-1: config 7 has an invalid interface number: 100 but max is 2 [ 255.989394][ T3726] usb 3-1: config 7 has an invalid interface number: 215 but max is 2 [ 255.997924][ T3726] usb 3-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 256.012184][ T3726] usb 3-1: config 7 has no interface number 0 [ 256.027938][ T3726] usb 3-1: config 7 has no interface number 1 [ 256.039461][ T3726] usb 3-1: config 7 has no interface number 2 [ 256.058481][ T3726] usb 3-1: config 7 has no interface number 3 [ 256.069925][ T3726] usb 3-1: config 7 interface 23 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.098446][ T3726] usb 3-1: config 7 interface 231 altsetting 2 has an invalid endpoint with address 0x1F, skipping [ 256.113122][ T3726] usb 3-1: config 7 interface 231 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 256.121620][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1054'. [ 256.132498][ T3726] usb 3-1: config 7 interface 231 altsetting 2 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 256.144567][ T3726] usb 3-1: config 7 interface 231 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 256.153388][ T22] usb 2-1: USB disconnect, device number 18 [ 256.156312][ T3726] usb 3-1: config 7 interface 231 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 256.183125][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1054'. [ 256.192319][ T3726] usb 3-1: config 7 interface 231 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 256.213026][ T3726] usb 3-1: config 7 interface 231 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 256.217162][ T3645] EXT4-fs (loop1): unmounting filesystem. [ 256.236475][ T3726] usb 3-1: too many endpoints for config 7 interface 100 altsetting 84: 190, using maximum allowed: 30 [ 256.249041][ T3726] usb 3-1: config 7 interface 100 altsetting 84 has a duplicate endpoint with address 0xF, skipping [ 256.260188][ T3726] usb 3-1: config 7 interface 100 altsetting 84 has 1 endpoint descriptor, different from the interface descriptor's value: 190 [ 256.277558][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 256.283581][ T3726] usb 3-1: config 7 interface 215 altsetting 244 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 256.304759][ T3726] usb 3-1: config 7 interface 215 altsetting 244 endpoint 0xE has invalid maxpacket 991, setting to 64 [ 256.318026][ T3726] usb 3-1: config 7 interface 231 has no altsetting 0 [ 256.325534][ T3726] usb 3-1: config 7 interface 100 has no altsetting 0 [ 256.333161][ T3726] usb 3-1: config 7 interface 215 has no altsetting 0 [ 256.493090][ T41] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 256.606764][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.835406][ T3726] usb 3-1: string descriptor 0 read error: -22 [ 256.843613][ T3726] usb 3-1: New USB device found, idVendor=1a72, idProduct=1015, bcdDevice=8a.3e [ 256.853501][ T3726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.013361][ T3726] ftdi_sio 3-1:7.23: FTDI USB Serial Device converter detected [ 257.045781][ T3726] ftdi_sio ttyUSB0: unknown device type: 0x8a3e [ 257.137907][ T3726] ftdi_sio 3-1:7.231: FTDI USB Serial Device converter detected [ 257.146101][ T3726] ftdi_sio ttyUSB1: unknown device type: 0x8a3e [ 257.155777][ T3726] ftdi_sio 3-1:7.100: FTDI USB Serial Device converter detected [ 257.163828][ T3726] ftdi_sio ttyUSB2: unknown device type: 0x8a3e [ 257.171149][ T3726] ftdi_sio 3-1:7.215: FTDI USB Serial Device converter detected [ 257.190643][ T3726] ftdi_sio ttyUSB3: unknown device type: 0x8a3e [ 257.190851][ T41] usb 5-1: config 0 descriptor?? [ 257.230920][ T6886] loop2: detected capacity change from 0 to 256 [ 257.264916][ T41] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 257.316124][ T6886] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 257.485329][ T6930] Bluetooth: hci3: invalid length 0, exp 2 for type 27 [ 257.510238][ T3691] usb 3-1: USB disconnect, device number 19 [ 257.524330][ T3691] ftdi_sio 3-1:7.23: device disconnected [ 257.553536][ T3691] ftdi_sio 3-1:7.231: device disconnected [ 257.560342][ T3691] ftdi_sio 3-1:7.100: device disconnected [ 257.569856][ T3691] ftdi_sio 3-1:7.215: device disconnected [ 257.661163][ T6939] loop3: detected capacity change from 0 to 2048 [ 257.669548][ T6939] EXT4-fs: Ignoring removed bh option [ 257.675319][ T6939] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.687965][ T6939] EXT4-fs: Mount option(s) incompatible with ext2 [ 257.923269][ T22] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 258.283607][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.305360][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.403185][ T22] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 258.422804][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.459902][ T22] usb 2-1: SerialNumber: syz [ 258.698927][ T6951] loop3: detected capacity change from 0 to 8192 [ 258.713409][ T6951] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 258.733337][ T6951] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 258.757231][ T6947] loop2: detected capacity change from 0 to 40427 [ 258.818368][ T6951] REISERFS (device loop3): using ordered data mode [ 258.949653][ T6951] reiserfs: using flush barriers [ 258.977706][ T6947] F2FS-fs (loop2): invalid crc value [ 259.026303][ T6951] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.208313][ T6947] F2FS-fs (loop2): Found nat_bits in checkpoint [ 259.221131][ T6951] REISERFS (device loop3): checking transaction log (loop3) [ 259.298123][ T6951] REISERFS (device loop3): Using rupasov hash to sort names [ 259.406845][ T22] usb 2-1: 0:2 : does not exist [ 259.411098][ T6951] REISERFS (device loop3): using 3.5.x disk format [ 259.433934][ T6951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 259.447169][ T6951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 259.459733][ T22] usb 2-1: USB disconnect, device number 19 [ 259.469708][ T6947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 259.472279][ T6951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 259.490060][ T6951] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 259.581331][ T6951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 259.604469][ T6951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 259.636465][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 259.636478][ T26] audit: type=1326 audit(1722095601.684:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.0.1071" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f08f77299 code=0x0 [ 259.667416][ T6951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 259.680323][ T3651] syz-executor: attempt to access beyond end of device [ 259.680323][ T3651] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.695384][ T6951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 259.735647][ T6951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 259.776013][ T3941] udevd[3941]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.843646][ T6951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 259.886606][ T6951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 260.091323][ T6981] loop2: detected capacity change from 0 to 1024 [ 260.165697][ T6968] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 260.190885][ T6981] Bluetooth: hci3: unsupported parameter 28 [ 260.202420][ T6981] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 260.209703][ T41] gspca_sonixj: reg_w1 err -71 [ 260.246232][ T41] sonixj: probe of 5-1:0.0 failed with error -71 [ 260.271740][ T41] usb 5-1: USB disconnect, device number 10 [ 260.471572][ T6995] loop2: detected capacity change from 0 to 128 [ 260.707765][ T7001] loop2: detected capacity change from 0 to 512 [ 260.799701][ T7001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 260.829637][ T7001] System zones: 1-12 [ 260.839258][ T7001] EXT4-fs (loop2): orphan cleanup on readonly fs [ 260.848470][ T7001] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1083: invalid indirect mapped block 1819239214 (level 1) [ 260.883283][ T7001] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1083: bg 0: block 361: padding at end of block bitmap is not set [ 260.903396][ T7001] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 260.953375][ T7001] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1083: attempt to clear invalid blocks 33619980 len 1 [ 261.024033][ T7001] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1083: invalid indirect mapped block 1819239214 (level 0) [ 261.079926][ T7001] EXT4-fs (loop2): 1 truncate cleaned up [ 261.129455][ T7001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 262.511366][ T7027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1092'. [ 262.520455][ T7027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1092'. [ 262.535700][ T3651] EXT4-fs (loop2): unmounting filesystem. [ 262.564605][ T3660] Bluetooth: hci2: command 0x0406 tx timeout [ 262.571668][ T3648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.582042][ T3648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.591134][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.599120][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.607851][ T3652] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 262.616107][ T3652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.720268][ T7030] loop1: detected capacity change from 0 to 128 [ 262.898860][ T7040] loop2: detected capacity change from 0 to 8 [ 262.937846][ T7040] SQUASHFS error: xz decompression failed, data probably corrupt [ 262.954568][ T7040] SQUASHFS error: Failed to read block 0x108: -5 [ 262.961085][ T7040] SQUASHFS error: Unable to read metadata cache entry [106] [ 262.978940][ T7040] SQUASHFS error: Unable to read inode 0x0 [ 263.373433][ T7052] loop1: detected capacity change from 0 to 512 [ 263.393181][ T7052] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 263.402082][ T7052] System zones: 1-12 [ 263.407297][ T7052] EXT4-fs (loop1): orphan cleanup on readonly fs [ 263.419203][ T3688] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.421518][ T7052] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.1103: invalid block [ 263.445609][ T7052] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1103: invalid indirect mapped block 1819239214 (level 1) [ 263.463819][ T7052] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1103: bg 0: block 361: padding at end of block bitmap is not set [ 263.488721][ T7052] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 263.510659][ T7052] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1103: attempt to clear invalid blocks 33619980 len 1 [ 263.516519][ T7054] device macvlan2 entered promiscuous mode [ 263.527963][ T7052] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1103: invalid indirect mapped block 1819239214 (level 0) [ 263.544986][ T7052] EXT4-fs (loop1): 1 truncate cleaned up [ 263.550703][ T7052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 263.551690][ T7054] device vlan1 entered promiscuous mode [ 263.633445][ T7057] Bluetooth: hci3: invalid length 0, exp 2 for type 27 [ 263.684931][ T7054] team0: Port device macvlan2 added [ 263.795636][ T3688] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.558116][ T3645] EXT4-fs (loop1): unmounting filesystem. [ 264.643565][ T3648] Bluetooth: hci5: command tx timeout [ 264.704187][ T7073] loop4: detected capacity change from 0 to 8 [ 264.716737][ T3688] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.809989][ T7073] SQUASHFS error: xz decompression failed, data probably corrupt [ 264.825220][ T7073] SQUASHFS error: Failed to read block 0x108: -5 [ 264.872672][ T7073] SQUASHFS error: Unable to read metadata cache entry [106] [ 264.891527][ T3688] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.916134][ T7073] SQUASHFS error: Unable to read inode 0x0 [ 264.977020][ T7024] chnl_net:caif_netlink_parms(): no params data found [ 265.160251][ T26] audit: type=1326 audit(1722095607.184:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd177299 code=0x7ffc0000 [ 265.182588][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.285491][ T7081] netlink: 'syz.1.1109': attribute type 15 has an invalid length. [ 265.293562][ T7081] netlink: 719 bytes leftover after parsing attributes in process `syz.1.1109'. [ 265.711414][ T26] audit: type=1326 audit(1722095607.184:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd177299 code=0x7ffc0000 [ 265.756039][ T26] audit: type=1326 audit(1722095607.194:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28cd177299 code=0x7ffc0000 [ 265.940928][ T26] audit: type=1326 audit(1722095607.194:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd177299 code=0x7ffc0000 [ 265.964474][ T26] audit: type=1326 audit(1722095607.194:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd177299 code=0x7ffc0000 [ 265.989494][ T26] audit: type=1326 audit(1722095607.194:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28cd177299 code=0x7ffc0000 [ 266.012071][ T26] audit: type=1326 audit(1722095607.194:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd177299 code=0x7ffc0000 [ 266.052968][ T26] audit: type=1326 audit(1722095607.194:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd177299 code=0x7ffc0000 [ 266.104033][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.120632][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.124812][ T26] audit: type=1326 audit(1722095607.194:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f28cd177299 code=0x7ffc0000 [ 266.170995][ T7024] device bridge_slave_0 entered promiscuous mode [ 266.215325][ T7099] loop1: detected capacity change from 0 to 512 [ 266.220777][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.228945][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.236547][ T26] audit: type=1326 audit(1722095607.194:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd177299 code=0x7ffc0000 [ 266.244444][ T7024] device bridge_slave_1 entered promiscuous mode [ 266.286003][ T7099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 266.354753][ T7099] System zones: 1-12 [ 266.360082][ T7099] EXT4-fs (loop1): orphan cleanup on readonly fs [ 266.370530][ T7099] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1119: invalid indirect mapped block 1819239214 (level 1) [ 266.376254][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.408076][ T7099] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1119: bg 0: block 361: padding at end of block bitmap is not set [ 266.454111][ T7099] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 266.466621][ T7099] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1119: attempt to clear invalid blocks 33619980 len 1 [ 266.510107][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.537000][ T7099] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1119: invalid indirect mapped block 1819239214 (level 0) [ 266.578030][ T7099] EXT4-fs (loop1): 1 truncate cleaned up [ 266.588788][ T7099] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 266.632938][ T3723] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 266.833188][ T3661] Bluetooth: hci5: command tx timeout [ 268.125998][ T3723] usb 3-1: Using ep0 maxpacket: 8 [ 268.253421][ T3723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.272955][ T3723] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 268.313316][ T3723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 268.351479][ T3723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 268.373709][ T7120] netlink: 'syz.4.1124': attribute type 15 has an invalid length. [ 268.381591][ T7120] netlink: 719 bytes leftover after parsing attributes in process `syz.4.1124'. [ 268.470167][ T3645] EXT4-fs (loop1): unmounting filesystem. [ 268.574939][ T7024] team0: Port device team_slave_0 added [ 268.614900][ T7133] binder: 7132:7133 ioctl c0306201 200002c0 returned -14 [ 268.628071][ T3723] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 268.646012][ T7024] team0: Port device team_slave_1 added [ 268.661639][ T3723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.700711][ T3723] usb 3-1: Product: syz [ 268.712957][ T3723] usb 3-1: Manufacturer: syz [ 268.728115][ T3723] usb 3-1: SerialNumber: syz [ 268.747694][ T3723] usb 3-1: config 0 descriptor?? [ 268.795088][ T3723] redrat3 3-1:0.0: Couldn't find all endpoints [ 268.831986][ T7139] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 268.883009][ T3648] Bluetooth: hci5: command tx timeout [ 268.929192][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.941396][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.967337][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.974007][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.999206][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.006290][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.032182][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.199260][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.407498][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 269.682250][ T3723] usb 3-1: USB disconnect, device number 20 [ 269.847429][ T7024] device hsr_slave_0 entered promiscuous mode [ 269.882377][ T7024] device hsr_slave_1 entered promiscuous mode [ 269.900623][ T7024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.912252][ T7024] Cannot create hsr debugfs directory [ 270.143231][ T3726] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 270.145994][ T7158] loop1: detected capacity change from 0 to 4096 [ 270.340760][ T7165] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.370950][ T7166] Bluetooth: MGMT ver 1.22 [ 270.397750][ T7163] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 270.423521][ T3726] usb 5-1: Using ep0 maxpacket: 16 [ 270.563335][ T3726] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 270.583013][ T3726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.594186][ T3726] usb 5-1: config 0 descriptor?? [ 270.662143][ T3726] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 270.964020][ T3648] Bluetooth: hci5: command tx timeout [ 271.011777][ T7187] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 271.064242][ T3688] device hsr_slave_0 left promiscuous mode [ 271.075014][ T3688] device hsr_slave_1 left promiscuous mode [ 271.087999][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.105641][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.118739][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.130246][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.138056][ T3688] device bridge_slave_1 left promiscuous mode [ 271.144865][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.155288][ T3688] device bridge_slave_0 left promiscuous mode [ 271.161491][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.290639][ T3688] device veth1_macvtap left promiscuous mode [ 271.298616][ T3688] device veth0_macvtap left promiscuous mode [ 271.326772][ T3688] device veth1_vlan left promiscuous mode [ 271.516461][ T3688] device veth0_vlan left promiscuous mode [ 271.947850][ T3726] gspca_sonixj: reg_r err -110 [ 271.957614][ T3726] sonixj: probe of 5-1:0.0 failed with error -110 [ 272.241896][ T7204] loop1: detected capacity change from 0 to 4096 [ 272.278580][ T7209] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.325127][ T3648] Bluetooth: hci0: command 0x0c20 tx timeout [ 272.331954][ T3661] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 272.400067][ T7211] loop1: detected capacity change from 0 to 8 [ 272.406861][ T7211] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 272.428858][ T7211] cramfs: Error -5 while decompressing! [ 272.436881][ T7211] cramfs: ffffffff920be4f8(27)->ffff888053e0b000(4096) [ 272.444665][ T7211] cramfs: Error -5 while decompressing! [ 272.450365][ T7211] cramfs: ffffffff920be4f8(27)->ffff888053e0b000(4096) [ 272.611520][ T3688] team0 (unregistering): Port device team_slave_1 removed [ 272.646507][ T3688] team0 (unregistering): Port device team_slave_0 removed [ 272.679681][ T3688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.711783][ T3688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.853001][ T22] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 273.044052][ T3661] Bluetooth: hci5: command tx timeout [ 273.068751][ T3688] bond0 (unregistering): Released all slaves [ 273.130687][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1153'. [ 273.227943][ T22] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.258603][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.267929][ T7024] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.294863][ T7024] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.295404][ T22] usb 2-1: config 0 descriptor?? [ 273.332491][ T7024] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 273.390488][ T3693] usb 5-1: USB disconnect, device number 11 [ 273.418441][ T7024] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.498537][ T7222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.669481][ T7214] netlink: 'syz.1.1153': attribute type 4 has an invalid length. [ 273.691186][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.720209][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.729096][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.765544][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.793417][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.802033][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.831965][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.839184][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.901292][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.910088][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.934296][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.942812][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.950032][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.021737][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.049138][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.075098][ T22] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 274.092562][ T22] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 274.106832][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.127197][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.146418][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.166546][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.192521][ T22] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 274.208794][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.225783][ T22] [drm] Initialized udl on minor 2 [ 274.238976][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.263583][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.297807][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.325050][ T7024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.346273][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.373280][ T22] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 274.389144][ T7244] loop2: detected capacity change from 0 to 4096 [ 274.398573][ T22] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 274.414927][ T3652] Bluetooth: hci0: command 0x0c20 tx timeout [ 274.593133][ T22] usb 2-1: USB disconnect, device number 20 [ 274.642978][ T7252] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.644668][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.652198][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.686425][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.750026][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.768907][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.381169][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.434577][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.469003][ T7024] device veth0_vlan entered promiscuous mode [ 278.597927][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.598434][ T7277] loop4: detected capacity change from 0 to 16 [ 278.608314][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.627718][ T7024] device veth1_vlan entered promiscuous mode [ 278.717086][ T7277] erofs: (device loop4): mounted with root inode @ nid 36. [ 278.800019][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.822603][ T7277] syz.4.1168: attempt to access beyond end of device [ 278.822603][ T7277] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 278.845534][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.935342][ T7024] device veth0_macvtap entered promiscuous mode [ 278.980458][ T7024] device veth1_macvtap entered promiscuous mode [ 279.138317][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.262469][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.304266][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.338774][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.411918][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.433791][ T7287] binder: 7286:7287 ioctl c0306201 200002c0 returned -14 [ 279.452236][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.508946][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.552956][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.588219][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.632841][ T7277] device syzkaller0 entered promiscuous mode [ 279.813172][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.821327][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.843806][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.852572][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.635010][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.704065][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.770839][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.813955][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.887946][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.911991][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.939366][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.971132][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.026759][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.073645][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.082461][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.118837][ T7275] device syzkaller0 left promiscuous mode [ 281.136403][ T7024] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.169929][ T7024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.199618][ T7024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.253255][ T7024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.348487][ T7309] loop2: detected capacity change from 0 to 512 [ 281.469140][ T7309] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 281.504626][ T7309] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038 (0x7fffffff) [ 281.529701][ T3652] Bluetooth: hci0: unexpected event for opcode 0x040e [ 281.712254][ T7309] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 281.757653][ T4003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.453641][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'. [ 282.462931][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'. [ 282.492370][ T4003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.513877][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.625740][ T7321] loop1: detected capacity change from 0 to 4096 [ 282.659034][ T7321] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 282.674327][ T5504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.676215][ T3651] EXT4-fs (loop2): unmounting filesystem. [ 282.682372][ T5504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.699224][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.018174][ T7336] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 283.390248][ T7336] netlink: 'syz.3.1085': attribute type 8 has an invalid length. [ 283.733766][ T7332] loop2: detected capacity change from 0 to 4096 [ 284.002573][ T7332] ntfs3: loop2: failed to convert "0080" to cp437 [ 284.052586][ T7332] ntfs3: loop2: failed to convert name for inode 1e. [ 285.039616][ T7350] loop3: detected capacity change from 0 to 131072 [ 285.050112][ T7350] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 285.059618][ T7350] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 285.084129][ T7350] F2FS-fs (loop3): invalid crc value [ 285.150647][ T7350] F2FS-fs (loop3): Found nat_bits in checkpoint [ 285.253400][ T7350] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 285.260516][ T7350] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 285.287215][ T7350] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 285.302053][ T7350] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 285.391775][ T7380] loop4: detected capacity change from 0 to 512 [ 286.398580][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 286.407581][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 286.430112][ T7380] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 286.453015][ T7380] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038 (0x7fffffff) [ 286.530874][ T7373] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 286.621146][ T5622] EXT4-fs (loop4): unmounting filesystem. [ 287.941723][ T3652] Bluetooth: hci0: unexpected event for opcode 0x040e [ 287.995301][ T3693] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 288.865558][ T7445] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.874100][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 288.883071][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 288.884835][ T7445] netlink: 'syz.3.1214': attribute type 8 has an invalid length. [ 289.112112][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.128151][ T3693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.138667][ T3693] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 289.147911][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.159327][ T3693] usb 3-1: config 0 descriptor?? [ 289.247020][ T7459] IPv6: Can't replace route, no match found [ 289.297000][ T3726] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 289.552973][ T3726] usb 1-1: Using ep0 maxpacket: 8 [ 289.644658][ T3693] belkin 0003:1020:0006.0014: item fetching failed at offset 4/5 [ 289.653044][ T3693] belkin 0003:1020:0006.0014: parse failed [ 289.658877][ T3693] belkin: probe of 0003:1020:0006.0014 failed with error -22 [ 289.703135][ T3726] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 289.715792][ T3726] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.726105][ T3726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.736275][ T3726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.746262][ T3726] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.759447][ T3726] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.768608][ T3726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.853583][ T3693] usb 3-1: USB disconnect, device number 21 [ 290.033006][ T3726] usb 1-1: usb_control_msg returned -32 [ 290.038760][ T3726] usbtmc 1-1:16.0: can't read capabilities [ 290.217665][ T7468] loop3: detected capacity change from 0 to 4096 [ 290.300827][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 290.300843][ T26] audit: type=1804 audit(1722095632.344:144): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1223" name=2F6E6577726F6F742F362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop3" ino=33 res=1 errno=0 [ 290.342399][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.358814][ T26] audit: type=1800 audit(1722095632.394:145): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1223" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 290.462484][ T7473] loop1: detected capacity change from 0 to 1024 [ 290.481737][ T7475] loop2: detected capacity change from 0 to 4096 [ 290.526225][ T7475] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 290.853194][ T7478] usbtmc 1-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 290.929272][ T7483] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 290.937769][ T7483] netlink: 'syz.2.1228': attribute type 8 has an invalid length. [ 291.064610][ T41] usb 1-1: USB disconnect, device number 18 [ 291.138978][ T7490] loop3: detected capacity change from 0 to 1024 [ 291.281693][ T7496] befs: (nbd1): No write support. Marking filesystem read-only [ 291.293674][ T52] block nbd1: Attempted send on invalid socket [ 291.300172][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.311969][ T7496] befs: (nbd1): unable to read superblock [ 291.512947][ T3693] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 291.615458][ T3726] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 291.953025][ T3693] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 291.983418][ T3693] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.020614][ T7509] loop2: detected capacity change from 0 to 4096 [ 292.059301][ T3726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.092421][ T3726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.102324][ T3726] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 292.131789][ T7509] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 292.134225][ T3726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.147848][ T3693] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.158003][ T41] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 292.165855][ T3726] usb 5-1: config 0 descriptor?? [ 292.165862][ T3693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.180598][ T3693] usb 4-1: Product: Э [ 292.185216][ T3693] usb 4-1: Manufacturer: 忯긐檆嶹ȁ踶⅏烈⍉쉴ꡙ␅䏲ﯭ䖍﨣⺭헄ꮟ荢巆仚퀚㫪垀φᇆᐸ堵쬗塙㈏縻ꯦ湰腠Ƈ [ 292.201596][ T3693] usb 4-1: SerialNumber: syz [ 292.490268][ T7517] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 292.501029][ T7517] netlink: 'syz.2.1243': attribute type 8 has an invalid length. [ 292.523179][ T41] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 292.536470][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.554166][ T41] usb 1-1: config 0 descriptor?? [ 292.579809][ T3693] usb 4-1: 0:2 : does not exist [ 292.599656][ T41] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 292.601815][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'. [ 292.622667][ T3693] usb 4-1: USB disconnect, device number 22 [ 292.657890][ T3726] belkin 0003:1020:0006.0015: item fetching failed at offset 4/5 [ 292.658354][ T3726] belkin 0003:1020:0006.0015: parse failed [ 292.658385][ T3726] belkin: probe of 0003:1020:0006.0015 failed with error -22 [ 292.765835][ T7524] cgroup: none used incorrectly [ 292.816513][ T41] gp8psk: usb in 128 operation failed. [ 292.838130][ T41] gp8psk: usb in 137 operation failed. [ 292.843776][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.880822][ T3638] udevd[3638]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.898532][ T3980] usb 5-1: USB disconnect, device number 12 [ 292.901924][ T41] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 292.932622][ T41] usb 1-1: media controller created [ 292.973049][ T3726] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 293.007659][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.094628][ T41] gp8psk_fe: Frontend attached [ 293.105739][ T41] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 293.120773][ T41] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 293.140897][ T7533] loop3: detected capacity change from 0 to 1024 [ 293.240215][ T7531] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 293.243199][ T41] gp8psk: usb in 138 operation failed. [ 293.264176][ T41] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 293.273730][ T41] gp8psk: found Genpix USB device pID = 203 (hex) [ 293.293446][ T41] usb 1-1: USB disconnect, device number 19 [ 293.349531][ T41] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 293.364606][ T3726] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 293.379352][ T3726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.408716][ T3726] usb 2-1: config 0 descriptor?? [ 293.933152][ T3726] [drm] vendor descriptor length:b9 data:20 30 c4 a4 1b 38 94 62 92 09 29 [ 293.945249][ T3726] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 293.976970][ T3726] [drm:udl_init] *ERROR* Selecting channel failed [ 293.990847][ T3726] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 294.007936][ T3726] [drm] Initialized udl on minor 2 [ 294.037009][ T3726] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 294.053349][ T3726] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 294.061680][ T3726] usb 2-1: USB disconnect, device number 21 [ 294.136461][ T41] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 294.503845][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.522916][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.542972][ T41] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 294.553786][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.564033][ T41] usb 1-1: config 0 descriptor?? [ 294.687871][ T7570] loop1: detected capacity change from 0 to 1024 [ 294.741377][ T3636] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 294.856585][ T7570] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 295.097763][ T41] belkin 0003:1020:0006.0016: item fetching failed at offset 4/5 [ 295.106535][ T41] belkin 0003:1020:0006.0016: parse failed [ 295.112374][ T41] belkin: probe of 0003:1020:0006.0016 failed with error -22 [ 295.842512][ T3980] usb 1-1: USB disconnect, device number 20 [ 295.849414][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 295.858972][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 296.136271][ T7590] loop3: detected capacity change from 0 to 512 [ 296.185324][ T7590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.194593][ T7590] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 296.482985][ T3726] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 296.863010][ T3726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.873401][ T3726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.966003][ T3726] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.975273][ T3726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.983921][ T3726] usb 4-1: SerialNumber: syz [ 297.280323][ T3726] usb 4-1: 0:2 : does not exist [ 297.286692][ T3726] usb 4-1: unit 5: unexpected type 0x0d [ 297.293279][ T7605] ALSA: seq fatal error: cannot create timer (-22) [ 297.327621][ T3726] usb 4-1: USB disconnect, device number 23 [ 297.584295][ T3941] udevd[3941]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.626690][ T7615] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 297.764141][ T7024] EXT4-fs (loop3): unmounting filesystem. [ 297.849143][ T7624] loop1: detected capacity change from 0 to 64 [ 297.864768][ T7624] hfs: invalid btree extent records [ 297.870630][ T7624] hfs: unable to open extent tree [ 297.876110][ T7624] hfs: can't find a HFS filesystem on dev loop1 [ 298.039785][ T7630] ALSA: seq fatal error: cannot create timer (-22) [ 298.402974][ T3661] Bluetooth: hci0: command 0x0c20 tx timeout [ 298.739272][ T7643] loop3: detected capacity change from 0 to 4096 [ 298.771987][ T7643] ntfs3: loop3: Failed to load $MFT. [ 298.913482][ T7645] loop3: detected capacity change from 0 to 512 [ 298.935125][ T7645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 298.947502][ T7645] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 299.242992][ T3690] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 299.423202][ T3726] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 299.603020][ T3690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.616788][ T3690] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.703113][ T3690] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.712255][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.724408][ T3690] usb 4-1: SerialNumber: syz [ 299.843284][ T3726] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 299.852898][ T3726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.862621][ T3726] usb 1-1: config 0 descriptor?? [ 299.905106][ T3726] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 300.012233][ T3690] usb 4-1: 0:2 : does not exist [ 300.018050][ T3690] usb 4-1: unit 5: unexpected type 0x0d [ 300.030037][ T3690] usb 4-1: USB disconnect, device number 24 [ 300.115981][ T3726] gp8psk: usb in 128 operation failed. [ 300.133171][ T3726] gp8psk: usb in 137 operation failed. [ 300.138729][ T3726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.163999][ T3726] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 300.172597][ T3726] usb 1-1: media controller created [ 300.186296][ T3726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.202626][ T3726] gp8psk_fe: Frontend attached [ 300.207566][ T3726] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 300.215690][ T3726] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 300.233867][ T3941] udevd[3941]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.293051][ T3726] gp8psk: usb in 138 operation failed. [ 300.298530][ T3726] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 300.308542][ T3726] gp8psk: found Genpix USB device pID = 203 (hex) [ 300.316832][ T3726] usb 1-1: USB disconnect, device number 21 [ 300.366692][ T3726] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 300.497889][ T7024] EXT4-fs (loop3): unmounting filesystem. [ 300.538066][ T7651] loop3: detected capacity change from 0 to 64 [ 300.551165][ T7651] hfs: invalid btree extent records [ 300.556550][ T7651] hfs: unable to open extent tree [ 300.561701][ T7651] hfs: can't find a HFS filesystem on dev loop3 [ 300.717890][ T7653] loop3: detected capacity change from 0 to 1024 [ 300.760568][ T7658] ALSA: seq fatal error: cannot create timer (-22) [ 300.779654][ T3941] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.840670][ T7653] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 303.259749][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 303.582942][ T3694] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 303.591561][ T3726] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 303.888012][ T3661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.896980][ T3661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.907624][ T3661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.918184][ T3661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.927390][ T3661] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 303.937266][ T3661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.003611][ T3694] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 304.012673][ T3694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.020751][ T3726] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 304.030238][ T3726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.046465][ T3694] usb 4-1: config 0 descriptor?? [ 304.057622][ T3726] usb 1-1: config 0 descriptor?? [ 304.084930][ T3694] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 304.124026][ T7693] chnl_net:caif_netlink_parms(): no params data found [ 304.172478][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.185337][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.193919][ T7693] device bridge_slave_0 entered promiscuous mode [ 304.202445][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.230801][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.239991][ T7693] device bridge_slave_1 entered promiscuous mode [ 304.320643][ T3694] gp8psk: usb in 128 operation failed. [ 304.343007][ T3694] gp8psk: usb in 137 operation failed. [ 304.348486][ T3694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.365034][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.383285][ T3694] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 304.391911][ T3694] usb 4-1: media controller created [ 304.399611][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.440107][ T3694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.486728][ T3694] gp8psk_fe: Frontend attached [ 304.492446][ T7693] team0: Port device team_slave_0 added [ 304.499748][ T3694] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 304.523171][ T3694] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 304.533964][ T7693] team0: Port device team_slave_1 added [ 304.593072][ T3726] [drm] vendor descriptor length:b9 data:20 30 c4 a4 1b 38 94 62 92 09 29 [ 304.603767][ T3726] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 304.604093][ T3652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.623892][ T3652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.634047][ T3652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.640403][ T3726] [drm:udl_init] *ERROR* Selecting channel failed [ 304.642102][ T3652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.655649][ T3652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 304.661712][ T3726] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 304.662965][ T3648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.677526][ T3726] [drm] Initialized udl on minor 2 [ 304.688316][ T3694] gp8psk: usb in 138 operation failed. [ 304.694741][ T3694] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 304.707833][ T3694] gp8psk: found Genpix USB device pID = 203 (hex) [ 304.722461][ T3694] usb 4-1: USB disconnect, device number 25 [ 304.728603][ T3726] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 304.752721][ T3726] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 304.767650][ T3651] syz-executor (3651) used greatest stack depth: 19352 bytes left [ 304.772171][ T3726] usb 1-1: USB disconnect, device number 22 [ 304.844419][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.856837][ T3694] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 304.861139][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.894189][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.904437][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.931307][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.946284][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.953722][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.995904][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.047462][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.058098][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.153196][ T7706] ipt_CLUSTERIP: no config found for 172.20.20.170, need 'new' [ 305.201745][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.222059][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.255007][ T7693] device hsr_slave_0 entered promiscuous mode [ 305.263936][ T7693] device hsr_slave_1 entered promiscuous mode [ 305.270526][ T7693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.278199][ T7693] Cannot create hsr debugfs directory [ 305.306452][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.317876][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.484394][ T7701] chnl_net:caif_netlink_parms(): no params data found [ 305.513055][ T3723] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 305.732314][ T7693] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.866144][ T7693] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.924461][ T3723] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 305.950924][ T3723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.965305][ T3723] usb 4-1: config 0 descriptor?? [ 306.003135][ T3652] Bluetooth: hci2: command tx timeout [ 306.011928][ T3723] gspca_main: spca508-2.14.0 probing 8086:0110 [ 306.068368][ T7693] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.105998][ T7732] smc: net device batadv_slave_1 applied user defined pnetid SYZ2 [ 306.117932][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.131816][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.140479][ T7701] device bridge_slave_0 entered promiscuous mode [ 306.178822][ T7693] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.215895][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.223824][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.231526][ T7701] device bridge_slave_1 entered promiscuous mode [ 306.233212][ T3723] gspca_spca508: reg_read err -32 [ 306.320603][ T3723] gspca_spca508: reg_read err -32 [ 306.343885][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.357342][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.394017][ T3723] gspca_spca508: reg_read err -32 [ 306.450517][ T7701] team0: Port device team_slave_0 added [ 306.485352][ T7701] team0: Port device team_slave_1 added [ 306.560651][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.575621][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.605732][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.632382][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.639774][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.653436][ T7710] overlayfs: invalid origin (0000) [ 306.666690][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.689570][ T7693] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 306.701959][ T7693] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 306.709281][ T3689] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 306.723051][ T3652] Bluetooth: hci0: command tx timeout [ 306.767658][ T7693] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 306.797014][ T7693] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 306.872450][ T7701] device hsr_slave_0 entered promiscuous mode [ 306.881657][ T7701] device hsr_slave_1 entered promiscuous mode [ 306.895676][ T7701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.907784][ T7701] Cannot create hsr debugfs directory [ 306.971843][ T3723] gspca_spca508: reg write: error -71 [ 306.977845][ T3723] spca508: probe of 4-1:0.0 failed with error -71 [ 306.994857][ T3723] usb 4-1: USB disconnect, device number 26 [ 307.163129][ T3689] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 307.186801][ T3689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.227877][ T11] device hsr_slave_0 left promiscuous mode [ 307.235406][ T11] device hsr_slave_1 left promiscuous mode [ 307.242149][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.250295][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.259815][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.267576][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.282685][ T11] device bridge_slave_1 left promiscuous mode [ 307.306771][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.320106][ T11] device bridge_slave_0 left promiscuous mode [ 307.330313][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.377703][ T3689] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.400261][ T11] device vlan1 left promiscuous mode [ 307.405709][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.421082][ T3689] usb 1-1: Product: Э [ 307.426051][ T3689] usb 1-1: Manufacturer: 忯긐檆嶹ȁ踶⅏烈⍉쉴ꡙ␅䏲ﯭ䖍﨣⺭헄ꮟ荢巆仚퀚㫪垀φᇆᐸ堵쬗塙㈏縻ꯦ湰腠Ƈ [ 307.448987][ T3689] usb 1-1: SerialNumber: syz [ 307.456962][ T11] device veth1_macvtap left promiscuous mode [ 307.477560][ T11] device veth0_macvtap left promiscuous mode [ 307.493049][ T11] device veth1_vlan left promiscuous mode [ 307.501304][ T11] device veth0_vlan left promiscuous mode [ 307.760861][ T7774] loop3: detected capacity change from 0 to 512 [ 307.775171][ T7774] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 307.788610][ T7774] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 307.800899][ T11] team0 (unregistering): Port device macvlan2 removed [ 307.820490][ T7774] EXT4-fs (loop3): 1 truncate cleaned up [ 307.826570][ T7774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 307.843319][ T3689] usb 1-1: 0:2 : does not exist [ 307.866703][ T3689] usb 1-1: USB disconnect, device number 23 [ 308.083356][ T3652] Bluetooth: hci2: command tx timeout [ 308.115753][ T3941] udevd[3941]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.757078][ T7024] EXT4-fs (loop3): unmounting filesystem. [ 308.803083][ T3648] Bluetooth: hci0: command tx timeout [ 308.966702][ T3648] Bluetooth: hci5: adv larger than maximum supported [ 308.966767][ T3648] Bluetooth: hci5: Malformed LE Event: 0x0d [ 309.371799][ T3652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.382173][ T3652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.390077][ T3652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.398985][ T3652] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.407508][ T3652] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 309.419172][ T3661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.540532][ T11] team0 (unregistering): Port device team_slave_1 removed [ 309.604614][ T11] team0 (unregistering): Port device team_slave_0 removed [ 309.645733][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.707117][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.163238][ T3661] Bluetooth: hci2: command tx timeout [ 310.261459][ T7792] capability: warning: `syz.0.1332' uses 32-bit capabilities (legacy support in use) [ 310.307002][ T11] bond0 (unregistering): Released all slaves [ 310.793214][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.882021][ T3980] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 312.604066][ T3661] Bluetooth: hci0: command tx timeout [ 313.368144][ T3648] Bluetooth: hci3: command tx timeout [ 313.374112][ T3648] Bluetooth: hci2: command tx timeout [ 313.805276][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.826483][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.889145][ T7693] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.184883][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.234949][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.253787][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.260921][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.283639][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.427006][ T7830] hub 9-0:1.0: USB hub found [ 314.434737][ T7830] hub 9-0:1.0: 8 ports detected [ 314.975996][ T3661] Bluetooth: hci0: command tx timeout [ 314.993805][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.002679][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.022709][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.029892][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.037741][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.071324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.080759][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.090621][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.122626][ T7693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.152894][ T7693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.337465][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.346056][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.365720][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.394168][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.402689][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.418347][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.428193][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.443037][ T3661] Bluetooth: hci3: command tx timeout [ 315.456705][ T7787] chnl_net:caif_netlink_parms(): no params data found [ 315.478646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.955005][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.962107][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.970603][ T7787] device bridge_slave_0 entered promiscuous mode [ 315.989961][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.008442][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.037149][ T7787] device bridge_slave_1 entered promiscuous mode [ 316.060153][ T7701] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.211712][ T7701] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.313389][ T7701] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.334040][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.341574][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.363298][ T7787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.391082][ T7701] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.411260][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.435162][ T7787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.560296][ T7787] team0: Port device team_slave_0 added [ 316.598444][ T7851] device veth1_macvtap left promiscuous mode [ 316.719042][ T7787] team0: Port device team_slave_1 added [ 316.806861][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.815686][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.845890][ T7787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.882964][ T7787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.955715][ T7787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.007202][ T7787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.024052][ T7787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.081075][ T7787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.610108][ T3661] Bluetooth: hci3: command tx timeout [ 320.620562][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.644617][ T3661] Bluetooth: hci3: command tx timeout [ 320.673039][ T7875] loop3: detected capacity change from 0 to 256 [ 320.696721][ T7787] device hsr_slave_0 entered promiscuous mode [ 320.735511][ T7787] device hsr_slave_1 entered promiscuous mode [ 320.763923][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.771737][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.811114][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.903298][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.916405][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.951661][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.958937][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.988175][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.011999][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.035749][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.042900][ T3690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.103850][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.112435][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.132530][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.162361][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.180321][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.199863][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.221364][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.240474][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.260785][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.285495][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.338415][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.353896][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.382697][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.413459][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.421807][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.433086][ T41] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 321.451572][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.493540][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.501519][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.530116][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.553241][ T7693] device veth0_vlan entered promiscuous mode [ 321.637375][ T7693] device veth1_vlan entered promiscuous mode [ 321.683553][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 321.727843][ T7882] loop3: detected capacity change from 0 to 32768 [ 321.734376][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.735050][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.771219][ T7693] device veth0_macvtap entered promiscuous mode [ 321.803249][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.828913][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.841639][ T41] usb 1-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 321.847556][ T7787] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.861399][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.863677][ T41] usb 1-1: config 0 descriptor?? [ 321.876944][ T7787] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.889208][ T7882] XFS (loop3): Mounting V5 Filesystem [ 321.906778][ T7693] device veth1_macvtap entered promiscuous mode [ 322.000446][ T7882] XFS (loop3): Ending clean mount [ 322.074426][ T7787] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.121575][ T7787] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.178132][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.231164][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.262497][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.281519][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.291638][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.314137][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.330875][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.353024][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.361207][ T41] apple 0003:05AC:027B.0017: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.0-1/input0 [ 322.382181][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.398411][ T7024] XFS (loop3): Unmounting Filesystem [ 322.425730][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.440294][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 322.463951][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.472670][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.605005][ T22] usb 1-1: USB disconnect, device number 25 [ 322.665573][ T7787] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.713164][ T7787] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.815289][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.844189][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.874375][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.907474][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.927623][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.948473][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.979441][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.000250][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.031529][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.059595][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.083361][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.091745][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.123126][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.131712][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.234743][ T7787] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.250534][ T7923] loop3: detected capacity change from 0 to 8192 [ 323.253538][ T7787] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.296395][ T7693] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.313355][ T7693] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.332515][ T7693] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.342033][ T7693] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.609245][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.618801][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.627301][ T3726] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 323.724233][ T4003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.740668][ T4003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.760121][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.775866][ T7939] loop3: detected capacity change from 0 to 256 [ 323.784782][ T7939] FAT-fs (loop3): Unrecognized mount option "shrtname=lower" or missing value [ 323.847874][ T7885] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.867109][ T7939] loop3: detected capacity change from 0 to 8 [ 323.875027][ T5504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.882377][ T7885] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.890135][ T5504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.903231][ T3726] usb 1-1: Using ep0 maxpacket: 32 [ 323.904455][ T7885] Buffer I/O error on dev loop3, logical block 0, async page read [ 323.992830][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.030334][ T3726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.051088][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.063747][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.072590][ T3726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.091114][ T3726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 324.102454][ T3726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 324.125835][ T3726] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 324.151553][ T3726] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 324.170981][ T3726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.181922][ T3726] usb 1-1: config 0 descriptor?? [ 324.221057][ T7701] device veth0_vlan entered promiscuous mode [ 324.241278][ T7787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.268446][ T7787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.281705][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.299623][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.316552][ T7701] device veth1_vlan entered promiscuous mode [ 324.396940][ T7951] loop4: detected capacity change from 0 to 4096 [ 324.411536][ T7787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.421271][ T7951] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 324.435574][ T7951] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 324.472647][ T7915] udevd[7915]: incorrect nilfs2 checksum on /dev/loop4 [ 324.487185][ T7956] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.502918][ T7787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.610087][ T7961] loop3: detected capacity change from 0 to 1024 [ 324.637411][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.653754][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.683835][ T7961] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 324.705333][ T3726] ntrig 0003:1B96:000A.0018: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 324.755893][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.766284][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.787915][ T7701] device veth0_macvtap entered promiscuous mode [ 324.793810][ T7961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 324.879590][ T7701] device veth1_macvtap entered promiscuous mode [ 324.981558][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.004942][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.012285][ T7024] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /47/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 325.033397][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.070131][ T7024] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 325.095555][ T7024] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 325.097809][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.108800][ T7024] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /47/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 325.139718][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.140142][ T7024] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 325.161860][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.180779][ T7024] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 325.185550][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.193211][ T7024] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /47/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 325.210696][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.234066][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.241913][ T7024] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 325.244518][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.246434][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.274716][ T7024] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 325.306526][ T7024] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /47/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 325.314925][ T7974] (unnamed net_device) (uninitialized): (slave bond_slave_0): Device is not our slave [ 325.340853][ T7974] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_0) [ 325.356263][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.364933][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.367892][ T7024] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 325.381999][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.415143][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.447029][ T7024] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 325.478199][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.490315][ T7024] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /47/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 325.496760][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.525593][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.546851][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.565136][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.574820][ T7024] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 325.588710][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.622937][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.644165][ T7024] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 325.660455][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.676376][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.692622][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.698829][ T7024] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 325.716418][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.740304][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.740673][ T7024] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 325.751381][ T3980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.790793][ T7024] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 325.810594][ T7024] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 325.831975][ T7024] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 325.841952][ T26] audit: type=1326 audit(1722095667.874:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.4.1363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd78577299 code=0x0 [ 325.995152][ T7701] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.022432][ T7701] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.048328][ T7701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.067670][ T7701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.099413][ T7787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.244456][ T7787] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.268397][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.277374][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.363183][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.374660][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.383626][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.390712][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.398881][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.411981][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.420692][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.427814][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.522301][ T11] device hsr_slave_0 left promiscuous mode [ 326.547521][ T11] device hsr_slave_1 left promiscuous mode [ 326.565460][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.616475][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.651409][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.663891][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.672231][ T7024] EXT4-fs (loop3): unmounting filesystem. [ 326.758398][ T3726] usb 1-1: USB disconnect, device number 26 [ 326.788606][ T11] device veth1_macvtap left promiscuous mode [ 326.813208][ T11] device veth0_macvtap left promiscuous mode [ 326.843058][ T11] device veth1_vlan left promiscuous mode [ 326.849359][ T11] device veth0_vlan left promiscuous mode [ 327.439367][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.450454][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.464752][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.487178][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.499000][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 327.737307][ T3652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.812144][ T11] team0 (unregistering): Port device team_slave_1 removed [ 328.848290][ T11] team0 (unregistering): Port device team_slave_0 removed [ 328.880160][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.919744][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.064202][ T3690] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 329.281306][ T11] bond0 (unregistering): Released all slaves [ 329.302996][ T3690] usb 5-1: Using ep0 maxpacket: 32 [ 329.318669][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.327402][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.341208][ T8016] tap0: tun_chr_ioctl cmd 1074025677 [ 329.351022][ T8016] tap0: linktype set to 0 [ 329.380873][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.383395][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.398431][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.410918][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.433173][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.444516][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.460764][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.472160][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.480617][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 329.492752][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.501335][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 329.522411][ T3690] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 329.535839][ T3690] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 329.545229][ T3690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.566283][ T3690] usb 5-1: config 0 descriptor?? [ 329.607515][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.622413][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.632063][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.641150][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.652343][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.661242][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.676338][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.686771][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.702735][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.763255][ T3652] Bluetooth: hci4: command tx timeout [ 329.777860][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 329.994162][ T8025] chnl_net:caif_netlink_parms(): no params data found [ 330.176154][ T3690] ntrig 0003:1B96:000A.0019: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 330.944095][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.968218][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.997717][ T8025] device bridge_slave_0 entered promiscuous mode [ 331.008104][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.015242][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.023342][ T8025] device bridge_slave_1 entered promiscuous mode [ 331.080033][ T8060] lo speed is unknown, defaulting to 1000 [ 331.091184][ T8025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.118351][ T8025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.148223][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.170627][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.192222][ T8060] lo speed is unknown, defaulting to 1000 [ 331.236799][ T7787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.245926][ T8060] lo speed is unknown, defaulting to 1000 [ 331.264310][ T8060] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 331.281003][ T8060] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 331.283756][ T8025] team0: Port device team_slave_0 added [ 331.334982][ T8025] team0: Port device team_slave_1 added [ 331.417975][ T8060] lo speed is unknown, defaulting to 1000 [ 331.425245][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.432190][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.491331][ T8025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.522178][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.532559][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.559090][ T8025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.589729][ T8069] loop2: detected capacity change from 0 to 256 [ 331.601397][ T8060] lo speed is unknown, defaulting to 1000 [ 331.638788][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.649647][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.660343][ T8069] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 331.680909][ T8060] lo speed is unknown, defaulting to 1000 [ 331.690819][ T8025] device hsr_slave_0 entered promiscuous mode [ 331.726056][ T8025] device hsr_slave_1 entered promiscuous mode [ 331.742731][ T8025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.752343][ T8025] Cannot create hsr debugfs directory [ 331.771399][ T8060] lo speed is unknown, defaulting to 1000 [ 331.776816][ T7787] device veth0_vlan entered promiscuous mode [ 331.801114][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.826661][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.843031][ T3652] Bluetooth: hci4: command tx timeout [ 331.889412][ T7787] device veth1_vlan entered promiscuous mode [ 331.909259][ T8060] lo speed is unknown, defaulting to 1000 [ 331.934137][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.960925][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.969912][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.989650][ T8060] lo speed is unknown, defaulting to 1000 [ 332.031200][ T8060] lo speed is unknown, defaulting to 1000 [ 332.041892][ T7787] device veth0_macvtap entered promiscuous mode [ 332.058272][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.070773][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.088835][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.110884][ T7787] device veth1_macvtap entered promiscuous mode [ 332.153373][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.161845][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.274605][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.304071][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.328990][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.366777][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.385452][ T3689] usb 5-1: USB disconnect, device number 13 [ 332.408326][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.434339][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.454103][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.476878][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.498172][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.521166][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.534098][ T7787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.545248][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.593545][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.629662][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.652932][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.662758][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.683129][ T3691] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 332.706605][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.745945][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.782984][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.793077][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.827121][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.848554][ T7787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.867994][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.881163][ T8096] siw: device registration error -23 [ 332.887530][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.908040][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.933664][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.943136][ T3691] usb 1-1: Using ep0 maxpacket: 8 [ 333.047519][ T8100] loop2: detected capacity change from 0 to 256 [ 333.070690][ T8025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.077238][ T8100] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 333.099555][ T7787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.103065][ T3691] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 333.117841][ T7787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.123998][ T3691] usb 1-1: config 179 has no interface number 0 [ 333.127674][ T7787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.142563][ T7787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.143388][ T3691] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 333.237486][ T3691] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 333.289525][ T3691] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 333.373353][ T3691] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 333.411225][ T3691] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 333.430285][ T3691] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 333.442238][ T3691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.624256][ T8083] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 333.953137][ T3652] Bluetooth: hci4: command tx timeout [ 334.128059][ T8025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.174261][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.191185][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.205263][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.213929][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.337869][ T3865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.382945][ T3865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.444243][ T8025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.524649][ T8114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.766217][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 335.162029][ T8025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.207069][ T8111] ================================================================== [ 335.212325][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.215141][ T8111] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb6/0x370 [ 335.215170][ T8111] Read of size 8 at addr ffff88807ea25608 by task syz.4.1397/8111 [ 335.215186][ T8111] [ 335.215199][ T8111] CPU: 0 PID: 8111 Comm: syz.4.1397 Not tainted 6.1.102-syzkaller #0 [ 335.215219][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 335.215235][ T8111] Call Trace: [ 335.215242][ T8111] [ 335.264718][ T8111] dump_stack_lvl+0x1e3/0x2cb [ 335.269402][ T8111] ? nf_tcp_handle_invalid+0x642/0x642 [ 335.274865][ T8111] ? panic+0x764/0x764 [ 335.278927][ T8111] ? _printk+0xd1/0x111 [ 335.283085][ T8111] ? __virt_addr_valid+0x17f/0x530 [ 335.288201][ T8111] ? __virt_addr_valid+0x17f/0x530 [ 335.293308][ T8111] print_report+0x15f/0x4f0 [ 335.297804][ T8111] ? __virt_addr_valid+0x17f/0x530 [ 335.302912][ T8111] ? __virt_addr_valid+0x17f/0x530 [ 335.308017][ T8111] ? __virt_addr_valid+0x45b/0x530 [ 335.313121][ T8111] ? __phys_addr+0xb6/0x170 [ 335.317619][ T8111] ? cpu_map_enqueue+0xb6/0x370 [ 335.322460][ T8111] kasan_report+0x136/0x160 [ 335.326953][ T8111] ? cpu_map_enqueue+0xb6/0x370 [ 335.331795][ T8111] cpu_map_enqueue+0xb6/0x370 [ 335.336465][ T8111] xdp_do_redirect+0x666/0xb90 [ 335.341229][ T8111] tun_xdp_act+0xdc/0xd50 [ 335.345553][ T8111] ? tun_get_user+0x816/0x42d0 [ 335.350308][ T8111] ? __cant_sleep+0x270/0x270 [ 335.354972][ T8111] ? alloc_pages+0x50c/0x770 [ 335.359561][ T8111] ? __tun_build_skb+0x2f0/0x2f0 [ 335.364502][ T8111] tun_get_user+0x3118/0x42d0 [ 335.369176][ T8111] ? tun_get_user+0x816/0x42d0 [ 335.373946][ T8111] ? rcu_read_unlock+0xa0/0xa0 [ 335.378712][ T8111] ? __lock_acquire+0x1f80/0x1f80 [ 335.383748][ T8111] ? tun_get+0x1e/0x2f0 [ 335.387897][ T8111] ? tun_get+0x27d/0x2f0 [ 335.392134][ T8111] tun_chr_write_iter+0x10c/0x1f0 [ 335.397151][ T8111] vfs_write+0x857/0xbc0 [ 335.401389][ T8111] ? file_end_write+0x250/0x250 [ 335.406232][ T8111] ? do_futex+0x3b5/0x490 [ 335.410558][ T8111] ? __fdget_pos+0x1db/0x360 [ 335.415141][ T8111] ksys_write+0x19c/0x2c0 [ 335.419462][ T8111] ? print_irqtrace_events+0x210/0x210 [ 335.424929][ T8111] ? __ia32_sys_read+0x80/0x80 [ 335.429685][ T8111] ? syscall_enter_from_user_mode+0x2e/0x230 [ 335.435661][ T8111] ? lockdep_hardirqs_on+0x94/0x130 [ 335.440855][ T8111] ? syscall_enter_from_user_mode+0x2e/0x230 [ 335.446825][ T8111] do_syscall_64+0x3b/0xb0 [ 335.451237][ T8111] ? clear_bhb_loop+0x45/0xa0 [ 335.455908][ T8111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.461792][ T8111] RIP: 0033:0x7fdd78575e1f [ 335.466202][ T8111] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 335.485796][ T8111] RSP: 002b:00007fdd7925f010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 335.494196][ T8111] RAX: ffffffffffffffda RBX: 00007fdd78705f80 RCX: 00007fdd78575e1f [ 335.502156][ T8111] RDX: 0000000000000106 RSI: 0000000020000900 RDI: 00000000000000c8 [ 335.510124][ T8111] RBP: 00007fdd785e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 335.518084][ T8111] R10: 0000000000000106 R11: 0000000000000293 R12: 0000000000000000 [ 335.526044][ T8111] R13: 000000000000000b R14: 00007fdd78705f80 R15: 00007ffc89a1b098 [ 335.534013][ T8111] [ 335.537017][ T8111] [ 335.539349][ T8111] Allocated by task 5406: [ 335.543662][ T8111] kasan_set_track+0x4b/0x70 [ 335.548246][ T8111] __kasan_kmalloc+0x97/0xb0 [ 335.552819][ T8111] __kmalloc_node+0xb3/0x230 [ 335.557400][ T8111] bpf_map_kmalloc_node+0xce/0x1c0 [ 335.562500][ T8111] cpu_map_update_elem+0x277/0xf60 [ 335.567601][ T8111] map_update_elem+0x503/0x680 [ 335.572357][ T8111] __sys_bpf+0x337/0x6c0 [ 335.576594][ T8111] __x64_sys_bpf+0x78/0x90 [ 335.581003][ T8111] do_syscall_64+0x3b/0xb0 [ 335.585411][ T8111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.591295][ T8111] [ 335.593602][ T8111] Last potentially related work creation: [ 335.599299][ T8111] kasan_save_stack+0x3b/0x60 [ 335.603985][ T8111] __kasan_record_aux_stack+0xb0/0xc0 [ 335.609354][ T8111] insert_work+0x54/0x3d0 [ 335.613688][ T8111] __queue_work+0xb4b/0xf90 [ 335.618190][ T8111] queue_work_on+0x14b/0x250 [ 335.622776][ T8111] cpu_map_free+0xd7/0x1b0 [ 335.627193][ T8111] process_one_work+0x8a9/0x11d0 [ 335.632133][ T8111] worker_thread+0xa47/0x1200 [ 335.636809][ T8111] kthread+0x28d/0x320 [ 335.640875][ T8111] ret_from_fork+0x1f/0x30 [ 335.645286][ T8111] [ 335.647594][ T8111] Second to last potentially related work creation: [ 335.654165][ T8111] kasan_save_stack+0x3b/0x60 [ 335.658838][ T8111] __kasan_record_aux_stack+0xb0/0xc0 [ 335.664204][ T8111] call_rcu+0x163/0xa10 [ 335.668344][ T8111] __cpu_map_entry_replace+0x74/0x170 [ 335.673703][ T8111] cpu_map_free+0xd7/0x1b0 [ 335.678108][ T8111] process_one_work+0x8a9/0x11d0 [ 335.683036][ T8111] worker_thread+0xa47/0x1200 [ 335.687706][ T8111] kthread+0x28d/0x320 [ 335.691759][ T8111] ret_from_fork+0x1f/0x30 [ 335.696168][ T8111] [ 335.698478][ T8111] The buggy address belongs to the object at ffff88807ea25600 [ 335.698478][ T8111] which belongs to the cache kmalloc-cg-256 of size 256 [ 335.712786][ T8111] The buggy address is located 8 bytes inside of [ 335.712786][ T8111] 256-byte region [ffff88807ea25600, ffff88807ea25700) [ 335.725876][ T8111] [ 335.728196][ T8111] The buggy address belongs to the physical page: [ 335.734608][ T8111] page:ffffea0001fa8900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ea24 [ 335.744749][ T8111] head:ffffea0001fa8900 order:1 compound_mapcount:0 compound_pincount:0 [ 335.753066][ T8111] memcg:ffff888058e7cb01 [ 335.757314][ T8111] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 335.765291][ T8111] raw: 00fff00000010200 ffffea0004ff9800 dead000000000003 ffff888012842c80 [ 335.773859][ T8111] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888058e7cb01 [ 335.782428][ T8111] page dumped because: kasan: bad access detected [ 335.788841][ T8111] page_owner tracks the page as allocated [ 335.794546][ T8111] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3651, tgid 3651 (syz-executor), ts 65909969872, free_ts 65798132867 [ 335.817280][ T8111] post_alloc_hook+0x18d/0x1b0 [ 335.822033][ T8111] get_page_from_freelist+0x322e/0x33b0 [ 335.827566][ T8111] __alloc_pages+0x28d/0x770 [ 335.832144][ T8111] alloc_slab_page+0x6a/0x150 [ 335.836814][ T8111] new_slab+0x84/0x2d0 [ 335.840875][ T8111] ___slab_alloc+0xc20/0x1270 [ 335.845543][ T8111] __kmem_cache_alloc_node+0x19f/0x260 [ 335.850993][ T8111] __kmalloc_node+0xa2/0x230 [ 335.855574][ T8111] kvmalloc_node+0x6e/0x180 [ 335.860066][ T8111] nf_hook_entries_grow+0x331/0x760 [ 335.865254][ T8111] __nf_register_net_hook+0x29c/0x930 [ 335.870615][ T8111] nf_register_net_hook+0xac/0x180 [ 335.875712][ T8111] nf_register_net_hooks+0x3d/0x1a0 [ 335.880897][ T8111] ipt_register_table+0x4ca/0x7a0 [ 335.885923][ T8111] iptable_security_table_init+0x3e/0x60 [ 335.891557][ T8111] xt_find_table_lock+0x2cc/0x3a0 [ 335.896571][ T8111] page last free stack trace: [ 335.901225][ T8111] free_unref_page_prepare+0xf63/0x1120 [ 335.906758][ T8111] free_unref_page+0x33/0x3e0 [ 335.911468][ T8111] qlist_free_all+0x76/0xe0 [ 335.915963][ T8111] kasan_quarantine_reduce+0x156/0x170 [ 335.921413][ T8111] __kasan_slab_alloc+0x1f/0x70 [ 335.926250][ T8111] slab_post_alloc_hook+0x52/0x3a0 [ 335.931355][ T8111] __kmem_cache_alloc_node+0x137/0x260 [ 335.936813][ T8111] kmalloc_trace+0x26/0xe0 [ 335.941217][ T8111] get_mountpoint+0x207/0x440 [ 335.945905][ T8111] lock_mount+0xba/0x2c0 [ 335.950138][ T8111] do_loopback+0x2b7/0x510 [ 335.954545][ T8111] __se_sys_mount+0x2d5/0x3c0 [ 335.959217][ T8111] do_syscall_64+0x3b/0xb0 [ 335.963638][ T8111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.969536][ T8111] [ 335.971849][ T8111] Memory state around the buggy address: [ 335.977461][ T8111] ffff88807ea25500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 335.985505][ T8111] ffff88807ea25580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 335.993550][ T8111] >ffff88807ea25600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.001591][ T8111] ^ [ 336.005902][ T8111] ffff88807ea25680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.013947][ T8111] ffff88807ea25700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 336.021990][ T8111] ================================================================== [ 336.030082][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.036119][ T8111] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 336.043317][ T8111] CPU: 0 PID: 8111 Comm: syz.4.1397 Not tainted 6.1.102-syzkaller #0 [ 336.051415][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 336.061537][ T8111] Call Trace: [ 336.064587][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.072080][ T8111] [ 336.075017][ T8111] dump_stack_lvl+0x1e3/0x2cb [ 336.079719][ T8111] ? nf_tcp_handle_invalid+0x642/0x642 [ 336.085208][ T8111] ? panic+0x764/0x764 [ 336.089296][ T8111] ? vscnprintf+0x59/0x80 [ 336.093659][ T8111] panic+0x318/0x764 [ 336.097562][ T8111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 336.103733][ T8111] ? check_panic_on_warn+0x1d/0xa0 [ 336.108862][ T8111] ? memcpy_page_flushcache+0xfc/0xfc [ 336.114251][ T8111] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 336.120186][ T8111] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 336.126112][ T8111] ? _raw_spin_unlock+0x40/0x40 [ 336.130986][ T8111] check_panic_on_warn+0x7e/0xa0 [ 336.135939][ T8111] ? cpu_map_enqueue+0xb6/0x370 [ 336.140810][ T8111] end_report+0x66/0x110 [ 336.145073][ T8111] kasan_report+0x143/0x160 [ 336.149599][ T8111] ? cpu_map_enqueue+0xb6/0x370 [ 336.154483][ T8111] cpu_map_enqueue+0xb6/0x370 [ 336.159191][ T8111] xdp_do_redirect+0x666/0xb90 [ 336.163989][ T8111] tun_xdp_act+0xdc/0xd50 [ 336.168353][ T8111] ? tun_get_user+0x816/0x42d0 [ 336.173144][ T8111] ? __cant_sleep+0x270/0x270 [ 336.177841][ T8111] ? alloc_pages+0x50c/0x770 [ 336.182445][ T8111] ? __tun_build_skb+0x2f0/0x2f0 [ 336.187393][ T8111] tun_get_user+0x3118/0x42d0 [ 336.192077][ T8111] ? tun_get_user+0x816/0x42d0 [ 336.196850][ T8111] ? rcu_read_unlock+0xa0/0xa0 [ 336.201628][ T8111] ? __lock_acquire+0x1f80/0x1f80 [ 336.206672][ T8111] ? tun_get+0x1e/0x2f0 [ 336.210856][ T8111] ? tun_get+0x27d/0x2f0 [ 336.215115][ T8111] tun_chr_write_iter+0x10c/0x1f0 [ 336.220153][ T8111] vfs_write+0x857/0xbc0 [ 336.224402][ T8111] ? file_end_write+0x250/0x250 [ 336.229253][ T8111] ? do_futex+0x3b5/0x490 [ 336.233591][ T8111] ? __fdget_pos+0x1db/0x360 [ 336.238185][ T8111] ksys_write+0x19c/0x2c0 [ 336.242510][ T8111] ? print_irqtrace_events+0x210/0x210 [ 336.247979][ T8111] ? __ia32_sys_read+0x80/0x80 [ 336.252740][ T8111] ? syscall_enter_from_user_mode+0x2e/0x230 [ 336.258720][ T8111] ? lockdep_hardirqs_on+0x94/0x130 [ 336.263915][ T8111] ? syscall_enter_from_user_mode+0x2e/0x230 [ 336.269910][ T8111] do_syscall_64+0x3b/0xb0 [ 336.274341][ T8111] ? clear_bhb_loop+0x45/0xa0 [ 336.279026][ T8111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.284923][ T8111] RIP: 0033:0x7fdd78575e1f [ 336.289335][ T8111] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 336.308942][ T8111] RSP: 002b:00007fdd7925f010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 336.317359][ T8111] RAX: ffffffffffffffda RBX: 00007fdd78705f80 RCX: 00007fdd78575e1f [ 336.325336][ T8111] RDX: 0000000000000106 RSI: 0000000020000900 RDI: 00000000000000c8 [ 336.333306][ T8111] RBP: 00007fdd785e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 336.341296][ T8111] R10: 0000000000000106 R11: 0000000000000293 R12: 0000000000000000 [ 336.349266][ T8111] R13: 000000000000000b R14: 00007fdd78705f80 R15: 00007ffc89a1b098 [ 336.357245][ T8111] [ 336.360569][ T8111] Kernel Offset: disabled [ 336.364891][ T8111] Rebooting in 86400 seconds..