last executing test programs: 33.390257874s ago: executing program 4: socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1208, &(0x7f0000002780)="$eJzs3E9rHGUcB/BftoltU/NHrdX2oA968TQ0OXgSJEgKkj1IbYRWEKZ2osuOu8vOElhRW09eBd+FePQmiG8gF1+Dt1w89iCOsNM/id2qBc029vO5zI/5zXef52FhYZZ5Zv+Nrz/p7lTZTj6K1txctAYR6XaKFK2466Wt5nj12tZGu715OaVLG1fWXk8pLb/84/uffffKT6Mz732//MPJ2Fv9YP/X9V/2zu2d3//9ysedKnWq1OuPUp6u9/uj/HpZnIhO1c1Seqcs8qpInV5VDA/2007ZHwzGKe/dWFocDIuqSnlvnLrFOI36aTQcp/yjvNNLWZalpcXgoRb+/uT2t7fruo6o64V4Kuq6rk/HYpyJp2MpluNWRDwTz8ZzcTaej3PxQrwY5ydXHdUSAAAAAAAAAAAAAAAAAAAA4MnwV/v/V2LV/n8AAAAAAAAAAAAAAAAAAAA4Au9evba10W5vXk7pVET51e727nZzbPobO9GJMoq4GCvxW0x2/zea+tLb7c2LaWI1vixv3snf3N0+cTi/NnmdwJ38/KR3N7/W5NPh/MlYPJhfj5U4O3389Sn5hW8iXnv1QD6Llfj5w+hHGTcmY9/Pf7GW0lu3mjnFvfEvTK4DAACA/4Ms3TP1/j3LHtZv8o/w/8Cf7u/n48L8bNdORDX+tJuXZTE8XJx64Izinxet/+iTW/GYLPC4Facfj2kcq2LWv0wchftf+qxnAgAAAAAAAAAAwKP4154ZjLmIB1vzMeXJsjfj82w2qwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YgWMBAAAAAGH+1ml0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE0BAAD//7PKyQ8=") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x5f) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x15, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000140)) 31.41828409s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000001c0)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @jmp={0x6, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4c400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 11.781290899s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "6652f890"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x5be3, 0x8000) syz_open_dev$evdev(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) r3 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x40, 0x8, 0x3, {0x3, 0x30, '\v'}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0xc, 0xa6, "abb059c8896e25476125fccda9964f2bf38b0184a125ad34056780d47865a012911e349cd2dad04ace65c7c3691c6e501e47e781e6a4ff65b35918f0810b0f56ad6337fe5b7276f5a2bcb84212cdb088c8d7ce99811a888e427628874be18c4322928ca0d92b975f84915eac2f3735c768420574c80cdbfc15df1e0aef779e1c68a025abd97717af887bf174373689cc7aeb368b442e798e97ef5bae6fecb4ff79c15f9b8e58"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x81, 0x3, "d37e14"}, &(0x7f0000000440)={0x20, 0x82, 0x1, "18"}, &(0x7f0000000480)={0x20, 0x83, 0x2, "b2f3"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, '!'}, &(0x7f0000000500)={0x20, 0x85, 0x3, "e4c357"}}) ioctl$HIDIOCGRDESC(r2, 0x541b, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xb0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x138, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) write$hidraw(r5, 0x0, 0x39) 9.320314603s ago: executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345403, &(0x7f0000000300)={{0x0, 0x2}}) 8.948342501s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x409, &(0x7f0000000740)={[{@barrier}, {@autodefrag}, {@space_cache_v2}, {@max_inline={'max_inline', 0x3d, [0x74]}}, {@nodatasum}, {@treelog}, {@flushoncommit}, {@nobarrier}, {@nossd}]}, 0xfd, 0x55bd, &(0x7f000000ac40)="$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") 8.261602456s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x201, r0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000000000d00000000080000080850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) (async) keyctl$set_reqkey_keyring(0xe, 0x2) (async) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)=',\xb5)\x8c#-\x00', 0x0) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) write$binfmt_script(r8, 0x0, 0x0) (async) io_submit(r9, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r8, &(0x7f0000000080)='K', 0x1}]) (async) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000240)) (async) syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x1000, 0x0, 0x0, 0x20000}, &(0x7f0000000140), &(0x7f0000000100)) io_uring_setup(0x49aa, &(0x7f0000000040)={0x0, 0x879b, 0x0, 0x2, 0x2, 0x0, r6}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./cgroup\x00'}, 0x18) (async) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) 7.746880467s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/249, &(0x7f0000000140)=0xf9) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x5c, r3, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5}]}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000005001c"], 0x2c}}, 0x0) 6.581361089s ago: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/200, 0xc8}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x21) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000000000629edf0b955fe5000000000063f1d115614184cb02cf9eaf08beb1b389790fa0487b6b6414e15991e4e26c75e22c96224684d0799748d01dd7cbb87ce13d8a7cc8f18c244bcffcfd68051ae01fa66d"], 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) splice(r0, 0x0, r5, 0x0, 0x8001, 0x0) read(r4, &(0x7f0000000140)=""/173, 0xad) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x10034) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x3c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808044, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=winnt,shortname=mixed,shortname=mixed,utf8=0,shortname=lower,shortname=win95,shortname=winnt,iocharset=none,shortnameCwin95,shortname=lower,uni_xlate=1,rodir,iocharset=iso8859-14,\x00'], 0x1, 0x2a8, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x0) 5.597762946s ago: executing program 0: syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x444, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="2c0057a47971bd06ad497d08bf5e5750562c90cb4e7ddd743c160adf43c2d2a9d7beb73dac19170105c23680c05815a09b27fcc266bbb80a0002e2df"], 0x1, 0x66b, &(0x7f0000002140)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x4e20, 0x2, 'fo\x00', 0x1, 0x81, 0x51}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0x218, 0x229, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'pim6reg1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0x218, 0x229, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'pim6reg1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000300)=0x8, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x3, 0x20000000, 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x82, @remote, 0x4e20, 0x3, 'dh\x00', 0x2, 0x1ff, 0x15}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x82, @remote, 0x4e20, 0x3, 'dh\x00', 0x2, 0x1ff, 0x15}, 0x2c) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r4}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r4}}, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0x1, 0x5f6, &(0x7f000001f6c0)="$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") syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) 4.929999014s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000001c0)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @jmp={0x6, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4c400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 4.591723958s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "6652f890"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x5be3, 0x8000) syz_open_dev$evdev(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) r3 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x40, 0x8, 0x3, {0x3, 0x30, '\v'}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0xc, 0xa6, "abb059c8896e25476125fccda9964f2bf38b0184a125ad34056780d47865a012911e349cd2dad04ace65c7c3691c6e501e47e781e6a4ff65b35918f0810b0f56ad6337fe5b7276f5a2bcb84212cdb088c8d7ce99811a888e427628874be18c4322928ca0d92b975f84915eac2f3735c768420574c80cdbfc15df1e0aef779e1c68a025abd97717af887bf174373689cc7aeb368b442e798e97ef5bae6fecb4ff79c15f9b8e58"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x81, 0x3, "d37e14"}, &(0x7f0000000440)={0x20, 0x82, 0x1, "18"}, &(0x7f0000000480)={0x20, 0x83, 0x2, "b2f3"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, '!'}, &(0x7f0000000500)={0x20, 0x85, 0x3, "e4c357"}}) ioctl$HIDIOCGRDESC(r2, 0x541b, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xb0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x138, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) write$hidraw(r5, 0x0, 0x39) 4.566452839s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x118) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) (async) close(r4) (async) r7 = socket$inet6(0x10, 0x4, 0x2) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r7, &(0x7f0000000000)=""/36, 0x24, 0x0, 0x0, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) (async, rerun: 64) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r2, 0x0, r4, 0x0, 0x200002000622c, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x10}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7003000) 4.217005759s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000400000850000000e0000004d0000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r0], 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@bridge_dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_newneigh={0x1c, 0x1c, 0x400, 0x70bd25, 0x25dfdbfb, {0x1c, 0x0, 0x0, r7, 0x20, 0x40, 0x6}}, 0x1c}}, 0x0) 2.884025255s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b800000905816b"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 2.77125296s ago: executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xa, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44008080) io_uring_enter(r1, 0x4ac6, 0x0, 0x0, 0x0, 0x0) 2.725053391s ago: executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4004, &(0x7f0000000240)=ANY=[], 0x0, 0x1cc, &(0x7f0000002340)="$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") mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='N-N:N/N'], 0x6a) 2.459157797s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x1d, 0x1) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20}, {}, {0x6}]}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1804002, &(0x7f0000000400)=ANY=[], 0x0, 0x1d3, &(0x7f0000000200)="$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") setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000540)="ae", 0x1) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000000)=0xfffffffc, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x7344418a1b37fbff, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 1.917503364s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f0801934c4e12c5c7a00c4e3516d74ef700266baf80cb830436486ef66bafc0ced66ba200066ed67660f3a09f5f80fc73af30fc7b4ca0d000000c744240083bb0000c744240241670000c7442406000000000f011c24660f38dd21", 0x5b}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.743651321s ago: executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f00000068c0)=ANY=[], 0x5, 0x6130, &(0x7f0000000780)="$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") 1.657234065s ago: executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xe40, 0x5e, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x8, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0xce22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0xce22, 0x0, @ipv4}, 0x1c) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0xce22, 0x0, @ipv4}, 0x1c) listen(r7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="08009e"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x230, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xec, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffff75}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ed920}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa654}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x82ba}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf1c0}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x327a913c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x909}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1777}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x16}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ee0}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f4e}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe0}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}]}, 0x230}, 0x1, 0x0, 0x0, 0x20008045}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) 963.686835ms ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0xf000, 0x0, 0x0, r2, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r2, 0xb}) 703.193246ms ago: executing program 3: syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000200), &(0x7f0000000300)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) 378.680238ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000400000850000000e0000004d0000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r0], 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x38, 0x0, r3, 0x0, &(0x7f00000003c0)="8bfe618705a104f277403c7f550594d0ac0ce41048e526c04e405d1cd9ae5c391419c776b524f71a2a1c8ca1d8add5827faf667e0ec12c23cc57a1c5aa97f5e2cdb514049045c2bc1cd2c32042466d357f11570df10d2f34b1b86bc79dd774b839eddabf65d1e15563038acd17289938c87accb78d80214e08d3ab9011e03a71b38b4071b19f205336cde4339b2be95263db0f5d3a357b2dd2735ff12341366dd74cf81fb20c2635632e71d28e29a2ee08c8e71dc7e957d3380da07b25198161e3efab9b082bb736b8de9b0cc904a9da4940ee30790a3a159355531b354ccd00da", 0xe1, 0x40000203}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PIO_FONTRESET(r8, 0x89e1, 0x20000000) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="200c4700000014df"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="00004800000013f8579decc945596562a4eb648027b527ac8e49b19b323a9e6fdbacd1c98d22dc54a777ed63093cdb1a8e8149ffc84c10a436afbb933d808817471938d3c70536f158326308e0cae8718e6a4de589f8532042e81213d2823129b6c59caa13b67d4cb6acbf7d095cb5995c98e20009bb201d224d820ee24aa36a2509dd3451d170286f262d5e02da07b4bab3c596808e7730ffc72a96566904e11a"], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4: sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) r3 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet(0x2, 0xa, 0x2de) bind$inet(r5, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x1, 0xff, 0x9, 0x800, r4, 0x1, '\x00', 0x0, r4, 0x3, 0x3}, 0xffe7) sendto$inet(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000100)={0x2, 0x4c23, @rand_addr=0x64010100}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x2a}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7e, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000000)={0x1fe, 0x3, 0x0, 0x3, 0x200000}, 0x0, 0x0) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r5, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)="60dbc0f4aca2fd393c58413552ee20a6ffb194eb866939781720f1a589bd4a5c95c4be84deeeb45c8ce7954b1c1057ede4df0326ff749c8aabb67b0138b7c5bc96cb44ea1d", 0x45}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 0x81 has an invalid bInterval 0, changing to 7 [ 805.467757][ T9885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.478045][ T9885] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 805.487646][ T9885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.597788][ T9885] usb 5-1: config 0 descriptor?? [ 805.743224][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 805.772934][ T29] audit: type=1800 audit(1717990802.023:655): pid=11104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 806.108141][T11095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.117734][T11095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.242736][T11095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.251990][T11095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.294696][ T29] audit: type=1326 audit(1717990802.521:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11111 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c7327cf69 code=0x0 [ 806.325770][T11118] loop7: detected capacity change from 0 to 16384 [ 806.418281][ T9885] usbhid 5-1:0.0: can't add hid device: -71 [ 806.425053][ T9885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 806.480547][ T9885] usb 5-1: USB disconnect, device number 31 [ 806.584849][T11118] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 806.594575][T11118] Buffer I/O error on dev loop7, logical block 1, async page read [ 806.610073][T11118] Dev loop7: unable to read RDB block 8 [ 806.616066][T11118] loop7: unable to read partition table [ 806.679838][T11118] loop7: partition table beyond EOD, truncated [ 806.686887][T11118] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 806.853184][T11123] loop2: detected capacity change from 0 to 1024 [ 807.101170][T11119] loop1: detected capacity change from 0 to 8192 [ 807.242466][T11119] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 807.526583][T11135] fuse: Bad value for 'fd' [ 807.647367][T11136] loop2: detected capacity change from 0 to 256 [ 807.733462][T11136] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 808.006509][T11138] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 808.081580][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 808.134922][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 808.517672][T11143] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.2'. [ 808.837202][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 809.202333][ T5163] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 809.381950][T11161] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 809.517676][ T5163] usb 2-1: Using ep0 maxpacket: 32 [ 809.641739][ T29] audit: type=1326 audit(1717990805.631:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11164 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f894c27cf69 code=0x0 [ 809.665166][ T9885] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 809.668696][ T5163] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 809.682496][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.711739][T11166] loop7: detected capacity change from 0 to 16384 [ 809.720289][ T5163] usb 2-1: config 0 descriptor?? [ 809.802610][ T5163] gspca_main: sq930x-2.14.0 probing 041e:403c [ 809.863274][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 809.910059][T11166] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 809.919867][T11166] Buffer I/O error on dev loop7, logical block 3, async page read [ 809.936456][T11166] loop7: unable to read partition table [ 809.956204][T11166] loop7: partition table beyond EOD, truncated [ 809.963636][T11166] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 810.068446][T11168] loop3: detected capacity change from 0 to 1024 [ 810.102272][ T9885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.113765][ T9885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.123995][ T9885] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 810.133340][ T9885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.197289][ T9885] usb 3-1: config 0 descriptor?? [ 810.505968][ T8] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 810.515510][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.523895][ T8] usb 5-1: Product: syz [ 810.528292][ T8] usb 5-1: Manufacturer: syz [ 810.533122][ T8] usb 5-1: SerialNumber: syz [ 810.542345][ T8] usb 5-1: config 0 descriptor?? [ 810.562164][T11169] loop1: detected capacity change from 0 to 8 [ 810.617059][T11169] Filesystem uses "unknown" compression. This is not supported [ 810.639274][ T8] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 032 [ 810.716110][T11159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.725397][T11159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.756648][T11159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.765948][T11159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.916885][ T9885] usbhid 3-1:0.0: can't add hid device: -71 [ 810.923672][ T9885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 810.946361][ T5163] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 810.953004][ T5163] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 810.970198][ T9885] usb 3-1: USB disconnect, device number 24 [ 811.072440][T11163] loop4: detected capacity change from 0 to 2048 [ 811.120982][T11163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 811.230895][ T29] audit: type=1804 audit(1717990807.099:658): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/file0/root/syzkaller-testdir875534120/syzkaller.2L1pR5/268/file0" dev="sda1" ino=1967 res=1 errno=0 [ 811.405653][T11171] loop3: detected capacity change from 0 to 8192 [ 811.431501][T11171] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 811.704599][ T8] (null): failure reading functionality [ 811.741248][ T8] i2c i2c-1: failure reading functionality [ 811.752735][ T8] i2c i2c-1: connected i2c-tiny-usb device [ 811.762314][ T8] usb 5-1: USB disconnect, device number 32 [ 812.217634][ T5163] usb 2-1: USB disconnect, device number 38 [ 813.532304][T11192] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 813.613742][T11196] kernel read not supported for file /${$ (pid: 11196 comm: syz-executor.4) [ 813.686293][T11194] loop2: detected capacity change from 0 to 256 [ 813.735514][ T29] audit: type=1800 audit(1717990809.314:659): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="${$" dev="mqueue" ino=33175 res=0 errno=0 [ 813.867334][ T29] audit: type=1326 audit(1717990809.453:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5436e7cf69 code=0x0 [ 814.160368][T11189] loop3: detected capacity change from 0 to 32768 [ 814.289002][T11194] FAT-fs (loop2): Directory bread(block 64) failed [ 814.296039][T11194] FAT-fs (loop2): Directory bread(block 65) failed [ 814.303026][T11194] FAT-fs (loop2): Directory bread(block 66) failed [ 814.310036][T11194] FAT-fs (loop2): Directory bread(block 67) failed [ 814.317390][T11194] FAT-fs (loop2): Directory bread(block 68) failed [ 814.324166][T11194] FAT-fs (loop2): Directory bread(block 69) failed [ 814.331332][T11194] FAT-fs (loop2): Directory bread(block 70) failed [ 814.338332][T11194] FAT-fs (loop2): Directory bread(block 71) failed [ 814.345251][T11194] FAT-fs (loop2): Directory bread(block 72) failed [ 814.352157][T11194] FAT-fs (loop2): Directory bread(block 73) failed [ 814.756965][T11204] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 815.714606][T11215] loop2: detected capacity change from 0 to 8 [ 815.746241][T11215] Filesystem uses "unknown" compression. This is not supported [ 815.914651][T11213] loop4: detected capacity change from 0 to 2048 [ 815.986170][T11208] loop1: detected capacity change from 0 to 8192 [ 816.069615][T11208] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 816.100681][T11213] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 816.901950][T11226] loop1: detected capacity change from 0 to 2048 [ 816.909925][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.916704][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.935063][T11226] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 817.017393][T11228] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 817.019649][T11226] syz-executor.1: attempt to access beyond end of device [ 817.019649][T11226] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 817.540936][ T29] audit: type=1326 audit(1717990812.914:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5436e7cf69 code=0x0 [ 817.861926][T11242] delete_channel: no stack [ 817.866895][T11242] delete_channel: no stack [ 818.189884][T11248] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 819.065280][T11263] loop3: detected capacity change from 0 to 47 [ 819.608690][T11268] loop4: detected capacity change from 0 to 256 [ 819.752043][T11268] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 819.881214][T11277] loop1: detected capacity change from 0 to 512 [ 820.521975][ T29] audit: type=1326 audit(1717990815.628:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5436e7cf69 code=0x0 [ 820.613502][T11289] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.682103][T11288] loop2: detected capacity change from 0 to 16 [ 820.874108][T11282] loop3: detected capacity change from 0 to 32768 [ 820.897145][T11282] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11282) [ 820.922776][T11282] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 820.933381][T11282] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 820.943600][T11282] BTRFS info (device loop3): using free-space-tree [ 821.206844][T11282] loop3: detected capacity change from 32768 to 11 [ 821.468066][ T3402] kworker/u8:21: attempt to access beyond end of device [ 821.468066][ T3402] loop3: rw=67112961, sector=10440, nr_sectors = 8 limit=11 [ 821.486242][ T3402] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 821.497755][ T3402] kworker/u8:21: attempt to access beyond end of device [ 821.497755][ T3402] loop3: rw=67112961, sector=10448, nr_sectors = 8 limit=11 [ 821.512288][ T3402] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 821.522756][ T3402] kworker/u8:21: attempt to access beyond end of device [ 821.522756][ T3402] loop3: rw=67112961, sector=13448, nr_sectors = 8 limit=11 [ 821.537345][ T3402] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 821.548216][T10140] BTRFS error (device loop3 state A): Transaction aborted (error -5) [ 821.556888][T10140] BTRFS: error (device loop3 state A) in __btrfs_free_extent:3255: errno=-5 IO failure [ 821.568323][T10140] BTRFS info (device loop3 state EA): forced readonly [ 821.575975][T10140] BTRFS error (device loop3 state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5 [ 821.590630][T11317] loop4: detected capacity change from 0 to 8 [ 821.601544][T10140] BTRFS: error (device loop3 state EA) in btrfs_run_delayed_refs:2246: errno=-5 IO failure [ 821.662394][T11317] Filesystem uses "unknown" compression. This is not supported [ 821.698481][T10140] BTRFS info (device loop3 state EA): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 822.078013][T11323] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 822.861527][T11328] sctp: failed to load transform for md5: -2 [ 823.486121][T11348] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.747480][T11340] loop2: detected capacity change from 0 to 8192 [ 823.864899][T11340] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 823.947785][T11352] loop3: detected capacity change from 0 to 1024 [ 824.064999][T11352] hfsplus: request for non-existent node 1280 in B*Tree [ 824.072336][T11352] hfsplus: request for non-existent node 1280 in B*Tree [ 824.211958][ T29] audit: type=1326 audit(1717990819.080:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5436e7cf69 code=0x0 [ 824.629400][T11362] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.282128][T11375] loop4: detected capacity change from 0 to 1024 [ 825.459175][ T29] audit: type=1326 audit(1717990820.104:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c7327cf69 code=0x0 [ 825.713709][T11375] hfsplus: bad catalog entry type [ 826.103132][T11376] loop3: detected capacity change from 0 to 32768 [ 826.134461][T11376] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 826.143766][T11376] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 826.170767][T11376] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms [ 826.184594][ T5163] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 826.191821][ T5163] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 826.298677][ T9885] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 826.336346][T11387] loop2: detected capacity change from 0 to 2048 [ 826.382292][T11387] NILFS (loop2): couldn't find nilfs on the device [ 826.570562][ T9885] usb 5-1: Using ep0 maxpacket: 8 [ 826.654002][ T5163] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 426ms [ 826.662382][ T5163] gfs2: fsid=syz:syz.0: jid=0: Done [ 826.668037][T11376] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 826.712098][ T9885] usb 5-1: config 110 has an invalid interface number: 179 but max is 1 [ 826.721187][ T9885] usb 5-1: config 110 has an invalid interface number: 65 but max is 1 [ 826.729731][ T9885] usb 5-1: config 110 has an invalid descriptor of length 0, skipping remainder of the config [ 826.740819][ T9885] usb 5-1: config 110 has no interface number 0 [ 826.787367][ T9885] usb 5-1: config 110 has no interface number 1 [ 826.794450][ T9885] usb 5-1: config 110 interface 179 altsetting 255 has an invalid endpoint with address 0x1C, skipping [ 826.807684][ T9885] usb 5-1: config 110 interface 179 altsetting 255 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 826.820011][ T9885] usb 5-1: config 110 interface 179 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 826.831501][ T9885] usb 5-1: config 110 interface 179 altsetting 255 has an invalid endpoint with address 0x10, skipping [ 826.842994][ T9885] usb 5-1: config 110 interface 179 altsetting 255 has an invalid endpoint with address 0x80, skipping [ 826.897003][ T9885] usb 5-1: config 110 interface 179 altsetting 255 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 826.908741][ T9885] usb 5-1: config 110 interface 179 altsetting 255 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 826.922016][ T9885] usb 5-1: config 110 interface 179 altsetting 255 has an invalid endpoint with address 0xD5, skipping [ 826.934070][ T9885] usb 5-1: config 110 interface 179 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 826.946893][ T9885] usb 5-1: config 110 interface 179 altsetting 255 has a duplicate endpoint with address 0xD, skipping [ 826.960664][ T9885] usb 5-1: config 110 interface 65 altsetting 4 has an invalid endpoint with address 0xCF, skipping [ 826.972190][ T9885] usb 5-1: config 110 interface 65 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 826.983444][ T9885] usb 5-1: config 110 interface 65 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 826.994690][ T9885] usb 5-1: config 110 interface 65 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.006433][ T9885] usb 5-1: config 110 interface 179 has no altsetting 0 [ 827.013748][ T9885] usb 5-1: config 110 interface 65 has no altsetting 0 [ 827.341872][ T9885] usb 5-1: Dual-Role OTG device on HNP port [ 827.389736][ T9885] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=b7.92 [ 827.399518][ T9885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.407988][ T9885] usb 5-1: Product: syz [ 827.412368][ T9885] usb 5-1: Manufacturer: syz [ 827.417465][ T9885] usb 5-1: SerialNumber: syz [ 827.548636][T11375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 827.993302][ T9885] garmin_gps 5-1:110.179: Garmin GPS usb/tty converter detected [ 828.003041][ T9885] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 828.010793][ T9885] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 828.033395][ T9885] garmin_gps 5-1:110.65: Garmin GPS usb/tty converter detected [ 828.043850][ T9885] garmin_gps ttyUSB1: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 828.145936][ T9885] garmin_gps ttyUSB1: probe with driver garmin_gps failed with error -8 [ 828.227526][ T9885] usb 5-1: USB disconnect, device number 33 [ 828.242310][ T9885] garmin_gps 5-1:110.179: device disconnected [ 828.252463][ T9885] garmin_gps 5-1:110.65: device disconnected [ 828.613066][ T29] audit: type=1804 audit(1717990823.113:665): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/file0/root/syzkaller-testdir875534120/syzkaller.2L1pR5/283/bus" dev="sda1" ino=1960 res=1 errno=0 [ 828.670062][T10307] hfsplus: bad catalog entry type [ 828.800440][T11393] loop1: detected capacity change from 0 to 8192 [ 828.974897][T11393] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 829.194462][ T3259] hfsplus: b-tree write err: -5, ino 4 [ 829.328892][ T3259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.485844][ T3259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.650125][ T3259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.830642][ T3259] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.101291][ T5133] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 830.113277][ T3259] bridge_slave_1: left allmulticast mode [ 830.119169][ T3259] bridge_slave_1: left promiscuous mode [ 830.129297][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.179941][ T3259] bridge_slave_0: left allmulticast mode [ 830.185840][ T3259] bridge_slave_0: left promiscuous mode [ 830.192674][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.401533][ T5133] usb 4-1: Using ep0 maxpacket: 16 [ 830.547402][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.559071][ T5133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 830.575682][ T5133] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 830.586066][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.711297][T11402] loop1: detected capacity change from 0 to 1024 [ 830.720532][ T5133] usb 4-1: config 0 descriptor?? [ 830.760366][T11402] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 830.797042][T11402] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 830.810111][T11402] EXT4-fs (loop1): orphan cleanup on readonly fs [ 830.824599][T11402] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=2 [ 830.835495][T11402] EXT4-fs warning (device loop1): ext4_enable_quotas:7100: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 830.851049][T11402] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 830.908789][ T3259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.912963][T11402] EXT4-fs (loop1): 1 truncate cleaned up [ 830.923536][T11402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 830.943214][ T29] audit: type=1326 audit(1717990825.236:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5436e7cf69 code=0x0 [ 830.987577][ T3259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.036391][ T3259] bond0 (unregistering): Released all slaves [ 831.263497][ T5133] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 831.322066][ T5133] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 831.333915][ T5133] microsoft 0003:045E:07DA.0010: no inputs found [ 831.340591][ T5133] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 831.452711][T10656] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.475388][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.491163][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.836980][ T5133] usb 4-1: USB disconnect, device number 43 [ 831.873764][T11413] overlayfs: missing 'lowerdir' [ 831.923208][ T3259] hsr_slave_0: left promiscuous mode [ 831.955909][ T3259] hsr_slave_1: left promiscuous mode [ 831.980413][ T3259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.988464][ T3259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.086880][T11413] loop1: detected capacity change from 0 to 512 [ 832.386563][ T3259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.394538][ T3259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.512651][ T3259] veth1_macvtap: left promiscuous mode [ 832.518891][ T3259] veth0_macvtap: left promiscuous mode [ 832.524803][ T3259] veth1_vlan: left promiscuous mode [ 832.530571][ T3259] veth0_vlan: left promiscuous mode [ 832.543682][T11413] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 256 (level 2) [ 832.833883][T11413] EXT4-fs (loop1): 2 truncates cleaned up [ 832.840068][T11413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.445270][ T29] audit: type=1326 audit(1717990827.543:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11420 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7327cf69 code=0x7ffc0000 [ 833.471356][ T29] audit: type=1326 audit(1717990827.543:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11420 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7327cf69 code=0x7ffc0000 [ 833.495967][ T29] audit: type=1326 audit(1717990827.599:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11420 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7327cf69 code=0x7ffc0000 [ 833.546226][ T29] audit: type=1326 audit(1717990827.691:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11420 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7327cf69 code=0x7ffc0000 [ 833.574074][ T29] audit: type=1326 audit(1717990827.691:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11420 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7327cf69 code=0x7ffc0000 [ 833.648882][T11424] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.709574][ T29] audit: type=1326 audit(1717990827.783:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11420 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7327cf69 code=0x7ffc0000 [ 833.733045][ T29] audit: type=1326 audit(1717990827.783:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11420 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7327cf69 code=0x7ffc0000 [ 833.756426][ T29] audit: type=1326 audit(1717990827.783:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11420 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0c7327a6e7 code=0x7ffc0000 [ 834.018838][ T3259] team0 (unregistering): Port device team_slave_1 removed [ 834.139375][T11430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 834.166957][ T3259] team0 (unregistering): Port device team_slave_0 removed [ 834.175872][T10656] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.286253][T11430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 834.295913][T11430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 834.311552][T11430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 834.322960][T11430] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 834.332260][T11430] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 835.117601][ T9885] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 835.139378][ T4681] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 835.334360][ T9885] usb 3-1: device descriptor read/64, error -71 [ 835.356780][ T4681] usb 2-1: device descriptor read/64, error -71 [ 835.506454][T11427] chnl_net:caif_netlink_parms(): no params data found [ 835.649378][ T9885] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 835.671812][ T4681] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 835.719063][T11439] loop3: detected capacity change from 0 to 8192 [ 835.848213][T11439] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 835.898377][ T9885] usb 3-1: device descriptor read/64, error -71 [ 835.905134][ T4681] usb 2-1: device descriptor read/64, error -71 [ 836.040217][ T9885] usb usb3-port1: attempt power cycle [ 836.052316][ T4681] usb usb2-port1: attempt power cycle [ 836.515304][ T9885] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 836.537002][T11430] Bluetooth: hci3: command tx timeout [ 836.547680][ T4681] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 836.623060][ T9885] usb 3-1: device descriptor read/8, error -71 [ 836.667352][ T4681] usb 2-1: device descriptor read/8, error -71 [ 836.726295][T11451] loop3: detected capacity change from 0 to 256 [ 836.769873][T11451] udf: Unknown parameter '' [ 836.770115][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.787826][T11427] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.795662][T11427] bridge_slave_0: entered allmulticast mode [ 836.804834][T11427] bridge_slave_0: entered promiscuous mode [ 836.836586][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.844541][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.852826][T11427] bridge_slave_1: entered allmulticast mode [ 836.862078][T11427] bridge_slave_1: entered promiscuous mode [ 836.948710][ T9885] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 836.983506][ T4681] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 837.034316][T11427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.069418][ T9885] usb 3-1: device descriptor read/8, error -71 [ 837.082137][T11427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.101215][ T4681] usb 2-1: device descriptor read/8, error -71 [ 837.205824][ T9885] usb usb3-port1: unable to enumerate USB device [ 837.244793][ T4681] usb usb2-port1: unable to enumerate USB device [ 837.291231][T11427] team0: Port device team_slave_0 added [ 837.332986][T11427] team0: Port device team_slave_1 added [ 837.366229][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 837.366302][ T29] audit: type=1326 audit(1717990831.226:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f894c27cf69 code=0x0 [ 837.500805][T11456] loop7: detected capacity change from 0 to 16384 [ 837.507642][T11427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.507712][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.541309][T11427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.622217][T11427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.629411][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.655720][T11427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.769862][T11456] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.783332][T11456] Buffer I/O error on dev loop7, logical block 1, async page read [ 837.791429][T11456] Dev loop7: unable to read RDB block 8 [ 837.798243][T11456] loop7: unable to read partition table [ 837.827579][T11456] loop7: partition table beyond EOD, truncated [ 837.834126][T11456] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 837.914163][T11460] loop3: detected capacity change from 0 to 1024 [ 837.979092][T11427] hsr_slave_0: entered promiscuous mode [ 838.007020][T11427] hsr_slave_1: entered promiscuous mode [ 838.038629][T11427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 838.046691][T11427] Cannot create hsr debugfs directory [ 838.315516][T11464] IPVS: set_ctl: invalid protocol: 30768 48.48.48.48:12336 [ 838.546188][T11471] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 838.790961][T11430] Bluetooth: hci3: command tx timeout [ 839.368936][T11427] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 839.453151][T11427] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 839.502243][T11427] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 839.590084][T11427] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 840.058366][T11489] loop3: detected capacity change from 0 to 1024 [ 840.095622][T11489] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 840.150389][T11489] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 840.221293][T11489] EXT4-fs (loop3): orphan cleanup on readonly fs [ 840.245680][T11489] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=2 [ 840.255875][T11489] EXT4-fs warning (device loop3): ext4_enable_quotas:7100: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 840.270932][T11489] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 840.356636][T11489] EXT4-fs (loop3): 1 truncate cleaned up [ 840.363117][T11489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 840.383119][ T5133] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 840.882099][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.882754][T11427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.895769][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.912328][ T5133] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 840.921737][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.959236][ T5133] usb 2-1: config 0 descriptor?? [ 841.035109][T10140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.047689][T11430] Bluetooth: hci3: command tx timeout [ 841.099848][T11427] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.127191][T11493] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 841.154743][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.162437][ T9882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.235537][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.243458][ T9882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.555715][ T5133] prodikeys 0003:041E:2801.0011: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 841.731387][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.744452][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.888968][ T5133] usb 2-1: USB disconnect, device number 43 [ 842.889853][T11427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.914785][ T29] audit: type=1326 audit(1717990836.294:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7eac7cf69 code=0x0 [ 842.921777][T11509] loop7: detected capacity change from 0 to 16384 [ 843.209270][T11509] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 843.221831][T11509] Buffer I/O error on dev loop7, logical block 0, async page read [ 843.230517][T11509] ldm_validate_partition_table(): Disk read failed. [ 843.238308][T11509] Dev loop7: unable to read RDB block 0 [ 843.244230][T11509] loop7: unable to read partition table [ 843.264957][T11515] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 843.310583][T11430] Bluetooth: hci3: command tx timeout [ 843.343699][T11513] loop1: detected capacity change from 0 to 1024 [ 843.400028][T11509] loop7: partition table beyond EOD, truncated [ 843.407407][T11509] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 844.246705][T11524] 9pnet_fd: Insufficient options for proto=fd [ 844.268585][ T29] audit: type=1800 audit(1717990837.558:713): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1946 res=0 errno=0 [ 844.591385][T11532] loop2: detected capacity change from 0 to 256 [ 844.719307][T11427] veth0_vlan: entered promiscuous mode [ 844.722612][T11532] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 844.776124][T11427] veth1_vlan: entered promiscuous mode [ 844.980782][T11532] loop2: detected capacity change from 256 to 0 [ 845.000746][T11534] syz-executor.2: attempt to access beyond end of device [ 845.000746][T11534] loop2: rw=2049, sector=160, nr_sectors = 1 limit=0 [ 845.015551][T11534] Buffer I/O error on dev loop2, logical block 160, lost sync page write [ 845.024338][T11534] syz-executor.2: attempt to access beyond end of device [ 845.024338][T11534] loop2: rw=2049, sector=161, nr_sectors = 1 limit=0 [ 845.038565][T11534] Buffer I/O error on dev loop2, logical block 161, lost sync page write [ 845.056675][T11427] veth0_macvtap: entered promiscuous mode [ 845.086593][T11427] veth1_macvtap: entered promiscuous mode [ 845.115504][T11532] syz-executor.2: attempt to access beyond end of device [ 845.115504][T11532] loop2: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 845.135247][T11532] syz-executor.2: attempt to access beyond end of device [ 845.135247][T11532] loop2: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 845.150369][T11532] syz-executor.2: attempt to access beyond end of device [ 845.150369][T11532] loop2: rw=0, sector=160, nr_sectors = 1 limit=0 [ 845.245277][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.256155][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.266335][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.277777][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.288003][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.303245][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.314820][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.328604][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.345046][T11427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.499906][ T8190] syz-executor.2: attempt to access beyond end of device [ 845.499906][ T8190] loop2: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 845.515059][ T8190] syz-executor.2: attempt to access beyond end of device [ 845.515059][ T8190] loop2: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 845.530232][ T8190] syz-executor.2: attempt to access beyond end of device [ 845.530232][ T8190] loop2: rw=0, sector=160, nr_sectors = 1 limit=0 [ 845.553362][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.566027][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.576320][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.587045][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.597379][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.608127][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.618290][T11427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.630569][T11427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.635981][T11539] loop3: detected capacity change from 0 to 128 [ 845.645412][T11427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.693157][ T8190] syz-executor.2: attempt to access beyond end of device [ 845.693157][ T8190] loop2: rw=0, sector=161, nr_sectors = 1 limit=0 [ 845.756758][T11539] udf: Unknown parameter 'fowner>18446744073709551615' [ 845.829522][ T8190] syz-executor.2: attempt to access beyond end of device [ 845.829522][ T8190] loop2: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 845.844805][ T8190] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 845.883683][T11427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.893161][T11427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.902386][T11427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.911496][T11427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.173957][T11546] geneve2: entered promiscuous mode [ 846.179595][T11546] geneve2: entered allmulticast mode [ 846.516566][ T780] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 846.927662][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.939051][ T780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.949309][ T780] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 846.958663][ T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.971745][T11430] Bluetooth: hci1: command 0x0406 tx timeout [ 847.091417][ T780] usb 2-1: config 0 descriptor?? [ 847.344897][ T2953] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.605584][ T2953] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.632170][ T29] audit: type=1800 audit(1717990840.632:714): pid=11546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1955 res=0 errno=0 [ 847.732371][ T780] prodikeys 0003:041E:2801.0012: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 847.800894][ T2953] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.919264][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.928391][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.060556][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.069891][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.124467][ T2953] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.269057][ T9885] usb 2-1: USB disconnect, device number 44 [ 848.530940][ T2953] bridge_slave_1: left allmulticast mode [ 848.536845][ T2953] bridge_slave_1: left promiscuous mode [ 848.549000][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.578500][T11565] loop7: detected capacity change from 0 to 16384 [ 848.585391][ T29] audit: type=1326 audit(1717990841.518:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f894c27cf69 code=0x0 [ 848.639421][ T2953] bridge_slave_0: left allmulticast mode [ 848.645331][ T2953] bridge_slave_0: left promiscuous mode [ 848.655647][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.087169][T11565] loop3: detected capacity change from 0 to 1024 [ 849.388092][ T2953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.456291][ T2953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.546217][ T2953] bond0 (unregistering): Released all slaves [ 849.583004][T11571] loop1: detected capacity change from 0 to 16 [ 849.685743][T11571] erofs: Unknown parameter 'xen_cpu_write_gdt_entry' [ 850.204727][ T2953] hsr_slave_0: left promiscuous mode [ 850.223931][ T2953] hsr_slave_1: left promiscuous mode [ 850.238464][T11578] loop3: detected capacity change from 0 to 1024 [ 850.272449][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.280384][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.332550][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.340486][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.401218][ T2953] veth1_macvtap: left promiscuous mode [ 850.408558][ T2953] veth0_macvtap: left promiscuous mode [ 850.414516][ T2953] veth1_vlan: left promiscuous mode [ 850.420342][ T2953] veth0_vlan: left promiscuous mode [ 850.487263][T11430] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 850.508866][T11430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 850.519031][T11430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 850.574175][T11430] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 850.592292][T11430] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 850.601769][T11430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 850.862500][ T5134] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 850.985554][ T29] audit: type=1326 audit(1717990843.751:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5436e7cf69 code=0x0 [ 851.143251][ T5134] usb 2-1: device descriptor read/64, error -71 [ 851.337888][ T2953] team0 (unregistering): Port device team_slave_1 removed [ 851.367810][ T2953] team0 (unregistering): Port device team_slave_0 removed [ 851.703547][T11593] loop3: detected capacity change from 0 to 1024 [ 851.915194][ T5134] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 852.018328][T11593] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 852.025858][T11593] hfsplus: xattr searching failed [ 852.128044][ T5134] usb 2-1: device descriptor read/64, error -71 [ 852.238040][ T29] audit: type=1800 audit(1717990844.896:717): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 852.269604][ T5134] usb usb2-port1: attempt power cycle [ 852.777461][ T5134] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 852.833800][T11430] Bluetooth: hci2: command tx timeout [ 853.397593][T11582] chnl_net:caif_netlink_parms(): no params data found [ 853.576872][T11614] loop3: detected capacity change from 0 to 32768 [ 853.742042][ T5134] usb 2-1: device descriptor read/8, error -71 [ 853.783170][T11614] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 854.122699][T11614] XFS (loop3): Ending clean mount [ 854.140606][T11614] XFS (loop3): Quotacheck needed: Please wait. [ 854.147919][T11630] loop1: detected capacity change from 0 to 256 [ 854.265701][T11614] XFS (loop3): Quotacheck: Done. [ 854.350073][T11630] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 854.515080][T10140] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 854.532734][T11630] loop1: detected capacity change from 256 to 64 [ 854.789728][T10656] exFAT-fs (loop1): error, failed to access to FAT (entry 0x00000005, err:-5) [ 854.799258][T10656] exFAT-fs (loop1): Filesystem has been set read-only [ 854.934944][T10656] exFAT-fs (loop1): error, failed to access to FAT (entry 0x00000005, err:-5) [ 855.081019][T11582] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.088103][T11430] Bluetooth: hci2: command tx timeout [ 855.092920][T11582] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.101608][T11582] bridge_slave_0: entered allmulticast mode [ 855.110779][T11582] bridge_slave_0: entered promiscuous mode [ 855.233441][T11582] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.241622][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.249569][T11582] bridge_slave_1: entered allmulticast mode [ 855.258944][T11582] bridge_slave_1: entered promiscuous mode [ 855.288517][ T3259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.297587][ T3259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.471807][T11582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.504464][ T9885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.513097][ T9885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.572622][T11582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.825077][T11582] team0: Port device team_slave_0 added [ 855.869731][T11582] team0: Port device team_slave_1 added [ 855.878367][T11647] loop1: detected capacity change from 0 to 16 [ 855.924448][T11647] erofs: Unknown parameter 'xen_cpu_write_gdt_entry' [ 856.103197][T11582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.110546][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.136874][T11582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.315943][T11582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.323613][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.351105][T11582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.662427][T11653] loop1: detected capacity change from 0 to 128 [ 856.725601][T11653] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 856.773114][T11653] ext4 filesystem being mounted at /root/syzkaller-testdir3048590729/syzkaller.MNNKQ9/45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 856.867008][T11582] hsr_slave_0: entered promiscuous mode [ 856.877583][T11582] hsr_slave_1: entered promiscuous mode [ 857.162334][ T29] audit: type=1326 audit(1717990849.483:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f894c27cf69 code=0x0 [ 857.257665][T11663] loop7: detected capacity change from 0 to 16384 [ 857.350576][T11430] Bluetooth: hci2: command tx timeout [ 857.689327][T11663] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 857.699997][T11663] Buffer I/O error on dev loop7, logical block 1, async page read [ 857.708379][T11663] Dev loop7: unable to read RDB block 8 [ 857.714207][T11663] loop7: unable to read partition table [ 857.943830][T11663] loop7: partition table beyond EOD, truncated [ 857.950786][T11663] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 858.143337][T11666] loop3: detected capacity change from 0 to 1024 [ 858.269599][T10656] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 858.629607][T11582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 858.658695][T11582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 858.697338][T11582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 858.823466][T11582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 858.936159][T11675] loop3: detected capacity change from 0 to 1024 [ 859.594597][T11430] Bluetooth: hci2: command tx timeout [ 859.680269][ T5133] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 859.688457][T11582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.768927][T11582] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.823415][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.831205][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.894627][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.902646][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.949884][ T780] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 860.113656][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.125079][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.135670][ T5133] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 860.145217][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.181490][ T780] usb 4-1: device descriptor read/64, error -71 [ 860.214243][ T5133] usb 2-1: config 0 descriptor?? [ 860.323023][T11683] bridge0: port 3(syz_tun) entered blocking state [ 860.330274][T11683] bridge0: port 3(syz_tun) entered disabled state [ 860.337454][T11683] syz_tun: entered allmulticast mode [ 860.346211][T11683] syz_tun: entered promiscuous mode [ 860.354264][T11683] bridge0: port 3(syz_tun) entered blocking state [ 860.361516][T11683] bridge0: port 3(syz_tun) entered forwarding state [ 860.492564][ T780] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 860.741083][ T780] usb 4-1: device descriptor read/64, error -71 [ 860.820099][ T5133] prodikeys 0003:041E:2801.0013: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 860.895214][ T780] usb usb4-port1: attempt power cycle [ 860.997262][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.006906][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.029344][ T29] audit: type=1800 audit(1717990853.028:719): pid=11690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1958 res=0 errno=0 [ 861.088735][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.097800][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.248385][ T5133] usb 2-1: USB disconnect, device number 49 [ 861.381095][ T780] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 861.457813][T11697] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.500274][ T780] usb 4-1: device descriptor read/8, error -71 [ 861.625945][T11582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.802875][ T780] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 861.922184][ T780] usb 4-1: device descriptor read/8, error -71 [ 861.981638][T11582] veth0_vlan: entered promiscuous mode [ 862.032632][T11582] veth1_vlan: entered promiscuous mode [ 862.054118][ T780] usb usb4-port1: unable to enumerate USB device [ 862.253909][T11582] veth0_macvtap: entered promiscuous mode [ 862.294777][T11582] veth1_macvtap: entered promiscuous mode [ 862.476482][ T9885] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 862.491697][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.503653][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.514147][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.526947][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.537781][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.549083][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.559578][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.570349][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.585768][T11582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.655997][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.667849][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.678063][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.688845][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.699024][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.710149][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.720401][T11582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.731202][T11582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.749265][T11582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.837603][T11582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.848764][T11582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.859363][T11582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.870796][T11582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.083614][ T9885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.095146][ T9885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 863.108623][ T9885] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.118082][ T9885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.186700][ T9885] usb 5-1: config 0 descriptor?? [ 863.198212][T11713] syz-executor.0[11713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 863.202634][T11713] syz-executor.0[11713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 863.241658][ T29] audit: type=1326 audit(1717990855.095:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f894c27cf69 code=0x0 [ 863.296161][T11718] loop7: detected capacity change from 0 to 16384 [ 863.589179][ T9885] usbhid 5-1:0.0: can't add hid device: -71 [ 863.596206][ T9885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 863.679583][ T9885] usb 5-1: USB disconnect, device number 34 [ 863.705472][T11718] loop3: detected capacity change from 0 to 1024 [ 864.476791][ T29] audit: type=1800 audit(1717990856.212:721): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1949 res=0 errno=0 [ 864.630986][ T29] audit: type=1804 audit(1717990856.360:722): pid=11740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3048590729/syzkaller.MNNKQ9/51/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 864.732360][T11737] bridge0: port 3(syz_tun) entered blocking state [ 864.742187][T11737] bridge0: port 3(syz_tun) entered disabled state [ 864.749556][T11737] syz_tun: entered allmulticast mode [ 864.757873][T11737] syz_tun: entered promiscuous mode [ 864.765618][T11737] bridge0: port 3(syz_tun) entered blocking state [ 864.772839][T11737] bridge0: port 3(syz_tun) entered forwarding state [ 865.507729][ T7711] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 865.931424][ T7711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.943793][ T7711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.954950][ T7711] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 865.966078][ T7711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.008435][ T7711] usb 5-1: config 0 descriptor?? [ 866.196412][ T9885] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 866.418070][ T9885] usb 4-1: device descriptor read/64, error -71 [ 866.573471][ T7711] prodikeys 0003:041E:2801.0014: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 866.732131][ T9885] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 866.750960][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.760416][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.856229][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.865626][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.912160][ T780] usb 5-1: USB disconnect, device number 35 [ 866.914318][T11766] loop1: detected capacity change from 0 to 4096 [ 866.975471][T11766] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 866.987035][ T9885] usb 4-1: device descriptor read/64, error -71 [ 867.130643][T11766] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 867.143198][ T9885] usb usb4-port1: attempt power cycle [ 867.293685][ T29] audit: type=1800 audit(1717990858.805:723): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="loop1" ino=0 res=0 errno=0 [ 867.611669][ T9885] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 867.771332][ T9885] usb 4-1: device descriptor read/8, error -71 [ 867.836971][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.846660][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.888398][ T29] audit: type=1326 audit(1717990859.359:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7eac7cf69 code=0x0 [ 867.950423][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.960728][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.964974][T11784] loop7: detected capacity change from 0 to 16384 [ 868.024766][T11783] loop4: detected capacity change from 0 to 256 [ 868.087638][ T9885] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 868.103829][T11783] MINIX-fs: mounting file system with errors, running fsck is recommended [ 868.217031][ T9885] usb 4-1: device descriptor read/8, error -71 [ 868.259066][T11785] loop1: detected capacity change from 0 to 1024 [ 868.348682][ T29] audit: type=1804 audit(1717990859.775:725): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4259654879/syzkaller.uxjyWn/6/file0/bus" dev="loop4" ino=8 res=1 errno=0 [ 868.376387][ T9885] usb usb4-port1: unable to enumerate USB device [ 869.021497][T11797] loop2: detected capacity change from 0 to 64 [ 869.461441][T11805] 9pnet_fd: Insufficient options for proto=fd [ 869.477175][T11800] minix_free_block (loop2:1): bit already cleared [ 869.484150][T11800] minix_free_block (loop2:4): bit already cleared [ 869.490788][T11800] minix_free_block (loop2:3): bit already cleared [ 869.497827][T11800] minix_free_block (loop2:2): bit already cleared [ 869.506285][T11806] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 870.704802][T11828] loop3: detected capacity change from 0 to 47 [ 870.982466][ T780] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 871.311386][ T29] audit: type=1326 audit(1717990862.544:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f894c27cf69 code=0x0 [ 871.369074][T11838] loop7: detected capacity change from 0 to 16384 [ 871.445526][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.456926][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.467447][ T780] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 871.476796][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.554370][ T780] usb 3-1: config 0 descriptor?? [ 871.610401][ T5134] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 871.741510][ T5133] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 871.857017][ T5134] usb 2-1: device descriptor read/64, error -71 [ 871.890186][T11842] loop3: detected capacity change from 0 to 1024 [ 872.041029][ T5133] usb 5-1: Using ep0 maxpacket: 8 [ 872.137424][ T780] prodikeys 0003:041E:2801.0015: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 872.178065][ T5134] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 872.203808][ T5133] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 872.215187][ T5133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.226591][ T5133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.236731][ T5133] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 872.250172][ T5133] usb 5-1: New USB device found, idVendor=05ad, idProduct=029f, bcdDevice= 0.00 [ 872.259617][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.325008][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.336472][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.358132][ T5133] usb 5-1: config 0 descriptor?? [ 872.390139][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.402927][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.433147][T11841] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 872.443681][T11841] Buffer I/O error on dev loop7, logical block 1, async page read [ 872.451793][T11841] Dev loop7: unable to read RDB block 8 [ 872.457887][T11841] loop7: unable to read partition table [ 872.471606][T11841] loop7: partition table beyond EOD, truncated [ 872.479298][T11841] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 872.551809][ T5134] usb 2-1: device descriptor read/64, error -71 [ 872.575276][ T780] usb 3-1: USB disconnect, device number 29 [ 872.691932][ T5134] usb usb2-port1: attempt power cycle [ 873.662191][T11840] loop4: detected capacity change from 0 to 32768 [ 873.736750][T11840] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11840) [ 873.765666][ T5134] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 873.921213][ T5134] usb 2-1: device descriptor read/8, error -71 [ 874.283517][ T5134] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 874.430942][ T5134] usb 2-1: device descriptor read/8, error -71 [ 874.670792][ T5134] usb usb2-port1: unable to enumerate USB device [ 874.714653][T11848] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 874.768874][ T5133] usbhid 5-1:0.0: can't add hid device: -71 [ 874.775691][ T5133] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 874.913451][ T5133] usb 5-1: USB disconnect, device number 36 [ 875.417381][T11849] loop3: detected capacity change from 0 to 32768 [ 875.469862][T11849] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11849) [ 875.608622][T11849] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 875.625474][T11849] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 875.636951][T11849] BTRFS info (device loop3): using free-space-tree [ 875.936846][T11849] BTRFS info (device loop3): rebuilding free space tree [ 876.432316][ T29] audit: type=1800 audit(1717990867.048:727): pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 877.541651][ T7711] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 877.965947][ T7711] usb 4-1: Using ep0 maxpacket: 8 [ 878.039704][T10140] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 878.091068][ T7711] usb 4-1: device descriptor read/all, error -71 [ 879.136175][ T29] audit: type=1326 audit(1717990869.752:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7eac7cf69 code=0x0 [ 879.261648][T11889] loop7: detected capacity change from 0 to 16384 [ 879.581831][ T9885] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 879.625442][T11894] loop1: detected capacity change from 0 to 1024 [ 879.769638][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 879.987936][ T9885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.999946][ T9885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.011280][ T9885] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 880.020755][ T9885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.058098][ T9885] usb 3-1: config 0 descriptor?? [ 880.534919][ T7711] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 880.593929][ T9885] prodikeys 0003:041E:2801.0016: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 880.820495][T11891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.834704][T11891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.849318][ T7711] usb 2-1: Using ep0 maxpacket: 32 [ 880.894004][ T7711] usb 2-1: no configurations [ 880.896029][T11891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.898850][ T7711] usb 2-1: can't read configurations, error -22 [ 880.907777][T11891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.044191][ T9885] usb 3-1: USB disconnect, device number 30 [ 881.049364][T11909] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 881.131608][ T7711] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 881.423835][ T7711] usb 2-1: Using ep0 maxpacket: 32 [ 881.472365][ T7711] usb 2-1: no configurations [ 881.477776][ T7711] usb 2-1: can't read configurations, error -22 [ 881.500533][ T7711] usb usb2-port1: attempt power cycle [ 881.965881][ T7711] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 882.084336][ T7711] usb 2-1: Using ep0 maxpacket: 32 [ 882.129180][ T7711] usb 2-1: no configurations [ 882.134124][ T7711] usb 2-1: can't read configurations, error -22 [ 882.179550][T11919] loop4: detected capacity change from 0 to 2048 [ 882.291113][T11919] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 882.380659][ T7711] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 882.496517][ T7711] usb 2-1: Using ep0 maxpacket: 32 [ 882.549855][ T7711] usb 2-1: no configurations [ 882.554961][ T7711] usb 2-1: can't read configurations, error -22 [ 882.606777][ T7711] usb usb2-port1: unable to enumerate USB device [ 883.414828][T11931] loop3: detected capacity change from 0 to 4096 [ 883.452903][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 883.459594][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.498891][T11931] NILFS (loop3): unrecognized mount option "/dev/net/tun" [ 883.738876][T11935] loop4: detected capacity change from 0 to 256 [ 883.755801][T11935] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 883.915783][ T29] audit: type=1326 audit(1717990874.137:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7eac7cf69 code=0x0 [ 883.991947][T11939] loop7: detected capacity change from 0 to 16384 [ 884.202042][T11939] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 884.212562][T11939] Buffer I/O error on dev loop7, logical block 0, async page read [ 884.221062][T11939] ldm_validate_partition_table(): Disk read failed. [ 884.227984][T11939] Dev loop7: unable to read RDB block 0 [ 884.234004][T11939] loop7: unable to read partition table [ 884.285441][T11939] loop7: partition table beyond EOD, truncated [ 884.292073][T11939] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 884.421681][T11945] loop1: detected capacity change from 0 to 1024 [ 884.429622][T11948] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 884.910561][ T29] audit: type=1800 audit(1717990875.060:730): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 884.935409][ T29] audit: type=1800 audit(1717990875.060:731): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 885.245279][T11964] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 885.561960][ T7711] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 885.583793][T11964] loop1: detected capacity change from 0 to 256 [ 885.664174][T11964] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 885.677564][T11964] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 885.970737][ T29] audit: type=1800 audit(1717990876.075:732): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1966 res=0 errno=0 [ 885.993584][ T29] audit: type=1804 audit(1717990876.084:733): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3020492888/syzkaller.b9qCqH/100/file0" dev="sda1" ino=1966 res=1 errno=0 [ 886.029619][ T7711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.044299][ T7711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.055546][ T7711] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 886.065029][ T7711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.094895][ T7711] usb 3-1: config 0 descriptor?? [ 886.270317][ T9885] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 886.496422][T11986] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 886.571029][ T9885] usb 5-1: Using ep0 maxpacket: 32 [ 886.618826][ T9885] usb 5-1: no configurations [ 886.624551][ T9885] usb 5-1: can't read configurations, error -22 [ 886.693466][ T7711] prodikeys 0003:041E:2801.0017: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 886.750356][ T9882] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 886.795167][ T29] audit: type=1326 audit(1717990876.850:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7eac7cf69 code=0x0 [ 886.840535][ T9885] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 886.859690][T11993] loop7: detected capacity change from 0 to 16384 [ 886.891923][T11962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.901413][T11962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.920858][T11962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.933164][T11962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.962264][ T7711] usb 3-1: USB disconnect, device number 31 [ 887.019333][ T9882] usb 4-1: Using ep0 maxpacket: 32 [ 887.045385][T11993] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 887.055756][T11993] Buffer I/O error on dev loop7, logical block 1, async page read [ 887.064119][T11993] Dev loop7: unable to read RDB block 8 [ 887.070152][T11993] loop7: unable to read partition table [ 887.083245][T11993] loop7: partition table beyond EOD, truncated [ 887.090104][T11993] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 887.119666][T11995] loop1: detected capacity change from 0 to 1024 [ 887.132815][ T9885] usb 5-1: Using ep0 maxpacket: 32 [ 887.177923][ T9885] usb 5-1: no configurations [ 887.183126][ T9885] usb 5-1: can't read configurations, error -22 [ 887.190855][ T9882] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.202304][ T9882] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.212557][ T9882] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 887.222050][ T9882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.237251][ T9885] usb usb5-port1: attempt power cycle [ 887.290310][ T9882] hub 4-1:4.0: USB hub found [ 887.527510][ T9882] hub 4-1:4.0: 2 ports detected [ 887.690215][ T9885] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 887.817518][ T9885] usb 5-1: Using ep0 maxpacket: 32 [ 887.842262][T11983] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=4246271343 (8492542686 ns) > initial count (1169902144 ns). Using initial count to start timer. [ 887.904147][ T9885] usb 5-1: no configurations [ 887.909008][ T9885] usb 5-1: can't read configurations, error -22 [ 888.075626][ T7711] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 888.097772][ T9885] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 888.194958][ T9885] usb 5-1: Using ep0 maxpacket: 32 [ 888.263875][ T9885] usb 5-1: no configurations [ 888.268903][ T9885] usb 5-1: can't read configurations, error -22 [ 888.309342][ T9885] usb usb5-port1: unable to enumerate USB device [ 888.498202][ T7711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.510070][ T7711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.520550][ T7711] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 888.529907][ T7711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.551037][ T7711] usb 3-1: config 0 descriptor?? [ 889.110396][T11997] loop2: detected capacity change from 0 to 512 [ 889.183540][T11997] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 889.432834][T11997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.442354][T11997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.895569][ T7711] pantherlord 0003:0810:0002.0018: item fetching failed at offset 2/3 [ 890.007477][ T7711] pantherlord 0003:0810:0002.0018: parse failed [ 890.014251][ T7711] pantherlord 0003:0810:0002.0018: probe with driver pantherlord failed with error -22 [ 890.135052][ T9882] hub 4-1:4.0: hub_ext_port_status failed (err = -32) [ 890.552110][T12027] loop1: detected capacity change from 0 to 2048 [ 890.612443][T12027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.760297][T12025] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 890.800265][ T7711] usb 4-1: USB disconnect, device number 54 [ 890.845249][T12025] EXT4-fs (loop1): Remounting filesystem read-only [ 890.877408][T12025] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 18, error -5) [ 890.956334][ T29] audit: type=1326 audit(1717990880.690:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5436e7cf69 code=0x0 [ 891.074028][T10656] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.389304][ T9885] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 891.415051][ T7711] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 891.448259][T12044] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 891.708574][ T7711] usb 5-1: Using ep0 maxpacket: 32 [ 891.815505][ T9885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.827058][ T9885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.838402][ T9885] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 891.847895][ T9885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.891693][ T9885] usb 4-1: config 0 descriptor?? [ 891.955524][ T7711] usb 5-1: config index 0 descriptor too short (expected 17700, got 27) [ 891.964341][ T7711] usb 5-1: config 130 has too many interfaces: 95, using maximum allowed: 32 [ 891.974353][ T7711] usb 5-1: config 130 contains an unexpected descriptor of type 0x2, skipping [ 891.983702][ T7711] usb 5-1: config 130 has an invalid descriptor of length 0, skipping remainder of the config [ 891.994340][ T5133] usb 3-1: USB disconnect, device number 32 [ 891.994357][ T7711] usb 5-1: config 130 has 0 interfaces, different from the descriptor's value: 95 [ 892.398786][ T7711] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 892.408179][ T7711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.416649][ T7711] usb 5-1: Product: syz [ 892.421784][ T7711] usb 5-1: Manufacturer: syz [ 892.426625][ T7711] usb 5-1: SerialNumber: syz [ 892.440788][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 892.498473][ T9885] prodikeys 0003:041E:2801.0019: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 892.683160][T12040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.692353][T12040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.728372][T12058] Process accounting resumed [ 892.814902][T12040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.826379][T12040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.003467][ T7711] usb 4-1: USB disconnect, device number 55 [ 893.266109][ T9882] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 893.558032][ T9882] usb 3-1: Using ep0 maxpacket: 32 [ 893.607619][ T9882] usb 3-1: no configurations [ 893.613209][ T9882] usb 3-1: can't read configurations, error -22 [ 893.807833][ T9882] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 893.989379][ T29] audit: type=1326 audit(1717990883.450:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5436e7cf69 code=0x7ffc0000 [ 894.013179][ T29] audit: type=1326 audit(1717990883.450:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f5436e7cf69 code=0x7ffc0000 [ 894.039665][ T29] audit: type=1326 audit(1717990883.450:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5436e7cf69 code=0x7ffc0000 [ 894.064148][ T29] audit: type=1326 audit(1717990883.468:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5436e7cf69 code=0x7ffc0000 [ 894.089843][ T29] audit: type=1326 audit(1717990883.468:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5436e7cf69 code=0x7ffc0000 [ 894.113388][ T29] audit: type=1326 audit(1717990883.477:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5436e7bb60 code=0x7ffc0000 [ 894.139989][ T29] audit: type=1326 audit(1717990883.477:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5436e7cf69 code=0x7ffc0000 [ 894.164465][ T29] audit: type=1326 audit(1717990883.477:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5436e7ece7 code=0x7ffc0000 [ 894.187817][ T29] audit: type=1326 audit(1717990883.477:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5436e7ec5c code=0x7ffc0000 [ 894.264296][ T9882] usb 3-1: Using ep0 maxpacket: 32 [ 894.333084][ T9882] usb 3-1: no configurations [ 894.338254][ T9882] usb 3-1: can't read configurations, error -22 [ 894.372678][ T9882] usb usb3-port1: attempt power cycle [ 894.407654][ T5133] usb 5-1: USB disconnect, device number 41 [ 894.504919][T12078] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 894.849067][ T9882] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 894.931198][ T5133] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 894.967156][ T9882] usb 3-1: Using ep0 maxpacket: 32 [ 895.043253][ T9882] usb 3-1: no configurations [ 895.048272][ T9882] usb 3-1: can't read configurations, error -22 [ 895.250122][ T9882] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 895.370662][ T9882] usb 3-1: Using ep0 maxpacket: 32 [ 895.390652][ T5133] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 895.399551][ T5133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.417867][ T9882] usb 3-1: no configurations [ 895.423394][ T9882] usb 3-1: can't read configurations, error -22 [ 895.465140][ T9882] usb usb3-port1: unable to enumerate USB device [ 895.606872][ T5133] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 895.616402][ T5133] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 895.624663][ T5133] usb 2-1: Manufacturer: syz [ 895.695563][ T5133] usb 2-1: config 0 descriptor?? [ 895.751958][ T5133] igorplugusb 2-1:0.0: incorrect number of endpoints [ 896.044658][ T7711] usb 2-1: USB disconnect, device number 58 [ 896.117652][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 897.117893][T12098] loop4: detected capacity change from 0 to 32768 [ 897.140773][T12098] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (12098) [ 897.189066][T12098] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 897.200076][T12098] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 897.211385][T12098] BTRFS info (device loop4): using free-space-tree [ 897.276378][T12107] 9pnet_fd: Insufficient options for proto=fd [ 897.286025][T12107] 9pnet_fd: Insufficient options for proto=fd [ 897.397602][ T9882] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 897.850519][ T9882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.861962][ T9882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.872451][ T9882] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 897.882004][ T9882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.947435][T11427] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 898.001656][ T9882] usb 4-1: config 0 descriptor?? [ 898.520002][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 898.520081][ T29] audit: type=1326 audit(1717990887.649:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74eec7cf69 code=0x0 [ 898.590782][ T9882] prodikeys 0003:041E:2801.001A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 898.611669][T12127] loop7: detected capacity change from 0 to 16384 [ 898.818016][T12101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.827274][T12101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.905177][T12101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.917673][T12101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.972945][T12128] loop2: detected capacity change from 0 to 1024 [ 899.085647][ T5133] usb 4-1: USB disconnect, device number 56 [ 899.777570][T12131] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 900.124101][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 900.138634][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 900.152205][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 900.167343][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 900.182012][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 900.200944][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 900.385104][ T9882] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 900.486229][T12143] loop4: detected capacity change from 0 to 16 [ 900.731495][ T9882] usb 4-1: Using ep0 maxpacket: 32 [ 900.881852][ T9882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.892762][ T9882] usb 4-1: config 0 has no interfaces? [ 900.898521][ T9882] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 900.911217][ T9882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.946923][T12140] chnl_net:caif_netlink_parms(): no params data found [ 900.959243][ T9882] usb 4-1: config 0 descriptor?? [ 901.268452][ T29] audit: type=1326 audit(1717990890.169:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74eec7cf69 code=0x7ffc0000 [ 901.292421][ T29] audit: type=1326 audit(1717990890.178:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74eec7cf69 code=0x7ffc0000 [ 901.316074][ T29] audit: type=1326 audit(1717990890.197:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74eec7cf69 code=0x7ffc0000 [ 901.339480][ T29] audit: type=1326 audit(1717990890.197:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74eec7cf69 code=0x7ffc0000 [ 901.366125][ T29] audit: type=1326 audit(1717990890.197:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74eec7cf69 code=0x7ffc0000 [ 901.390766][ T29] audit: type=1326 audit(1717990890.206:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74eec7a6e7 code=0x7ffc0000 [ 901.414117][ T29] audit: type=1326 audit(1717990890.206:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74eec403b9 code=0x7ffc0000 [ 901.437413][ T29] audit: type=1326 audit(1717990890.224:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74eec7a6e7 code=0x7ffc0000 [ 901.464320][ T29] audit: type=1326 audit(1717990890.224:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74eec403b9 code=0x7ffc0000 [ 901.777087][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 901.892593][T12160] loop1: detected capacity change from 0 to 128 [ 901.934769][T12160] FAT-fs (loop1): invalid media value (0x00) [ 901.941183][T12160] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 901.947799][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 901.950850][T12160] FAT-fs (loop1): Can't find a valid FAT filesystem [ 902.078097][T12163] loop3: detected capacity change from 0 to 8 [ 902.142463][T12140] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.152867][T12140] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.161121][T12140] bridge_slave_0: entered allmulticast mode [ 902.170295][T12140] bridge_slave_0: entered promiscuous mode [ 902.188119][T12163] Filesystem uses "unknown" compression. This is not supported [ 902.243825][T12140] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.251817][T12140] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.260125][T12140] bridge_slave_1: entered allmulticast mode [ 902.269407][T12140] bridge_slave_1: entered promiscuous mode [ 902.409137][ T5088] Bluetooth: hci4: command tx timeout [ 902.431789][T12140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.503679][T12140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.642748][T12140] team0: Port device team_slave_0 added [ 902.663980][T12140] team0: Port device team_slave_1 added [ 902.786503][T12140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.798693][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.827953][T12140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.890956][T12140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.898364][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.928701][T12140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.155412][T11427] bridge0: port 3(syz_tun) entered disabled state [ 903.195642][T11427] syz_tun (unregistering): left allmulticast mode [ 903.202498][T11427] syz_tun (unregistering): left promiscuous mode [ 903.209315][T11427] bridge0: port 3(syz_tun) entered disabled state [ 903.325759][T12140] hsr_slave_0: entered promiscuous mode [ 903.364737][T12140] hsr_slave_1: entered promiscuous mode [ 903.382286][T12140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 903.390354][T12140] Cannot create hsr debugfs directory [ 903.591451][ T8] usb 4-1: USB disconnect, device number 57 [ 903.593986][ T3344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.833331][T12176] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 903.873814][ T3344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.944360][T12178] loop3: detected capacity change from 0 to 256 [ 903.994686][T12178] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 903.995810][T12180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.018203][T12180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.041031][ T3344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.154172][ T9885] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 904.156998][ T3344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.259139][T12178] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 904.284931][ T8] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 904.511426][ T3344] bridge_slave_1: left allmulticast mode [ 904.517384][ T3344] bridge_slave_1: left promiscuous mode [ 904.524116][ T3344] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.561246][ T3344] bridge_slave_0: left allmulticast mode [ 904.571722][ T3344] bridge_slave_0: left promiscuous mode [ 904.578495][ T3344] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.588831][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 904.652281][ T9885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.663587][ T9885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.673704][ T9885] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 904.673745][ T5088] Bluetooth: hci4: command tx timeout [ 904.673867][ T9885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.711887][ T8] usb 4-1: device descriptor read/all, error -71 [ 904.880814][ T9885] usb 3-1: config 0 descriptor?? [ 905.178930][ T3344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.251311][ T3344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.294597][ T3344] bond0 (unregistering): Released all slaves [ 905.519913][ T9885] prodikeys 0003:041E:2801.001B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 905.666458][T12177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.679144][T12177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.871190][T12177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.881494][T12177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.884086][T12184] syz-executor.1 (12184): drop_caches: 1 [ 905.949504][T12140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.956777][ T780] usb 3-1: USB disconnect, device number 37 [ 906.054285][T12190] loop3: detected capacity change from 0 to 512 [ 906.198047][T12140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.568997][T12190] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 906.608228][T12140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.755170][ T3344] hsr_slave_0: left promiscuous mode [ 906.794580][ T3344] hsr_slave_1: left promiscuous mode [ 906.816996][T12190] loop3: detected capacity change from 0 to 512 [ 906.911510][T12190] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 906.921366][T12190] EXT4-fs (loop3): #clusters per group too big: 2130739200 [ 906.944944][ T5088] Bluetooth: hci4: command tx timeout [ 906.953359][ T3344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.963312][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.062796][ T3344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.070766][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.070872][T12196] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 907.122997][ T3344] veth1_macvtap: left promiscuous mode [ 907.128867][ T3344] veth0_macvtap: left promiscuous mode [ 907.134960][ T3344] veth1_vlan: left promiscuous mode [ 907.140539][ T3344] veth0_vlan: left promiscuous mode [ 907.153083][T11430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 907.263714][T11430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 907.273063][T11430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 907.288813][T11430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 907.300174][T11430] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 907.309595][T11430] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 907.902633][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 907.902713][ T29] audit: type=1326 audit(1717990896.316:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12209 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f894c27cf69 code=0x0 [ 907.964930][T12211] loop7: detected capacity change from 0 to 16384 [ 908.040244][ T3344] team0 (unregistering): Port device team_slave_1 removed [ 908.163394][ T3344] team0 (unregistering): Port device team_slave_0 removed [ 908.348681][T12213] loop3: detected capacity change from 0 to 1024 [ 908.480534][T12212] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.490608][T12212] Buffer I/O error on dev loop7, logical block 3, async page read [ 908.499174][T12212] loop7: unable to read partition table [ 908.572436][T12212] loop7: partition table beyond EOD, truncated [ 908.579340][T12212] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 908.668201][T12140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.173082][T12140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 909.174824][T11430] Bluetooth: hci4: command tx timeout [ 909.235911][T12140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 909.296246][T12140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 909.386485][ T9882] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 909.389222][T12140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 909.416551][T12218] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 909.621901][T11430] Bluetooth: hci3: command tx timeout [ 909.639931][T12220] loop1: detected capacity change from 0 to 4096 [ 909.689155][T12220] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 909.722717][ T9882] usb 3-1: Using ep0 maxpacket: 32 [ 909.853323][ T9882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.864615][ T9882] usb 3-1: config 0 has no interfaces? [ 909.870390][ T9882] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 909.879973][ T9882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.929859][ T9882] usb 3-1: config 0 descriptor?? [ 910.393101][T12198] chnl_net:caif_netlink_parms(): no params data found [ 911.070451][T12226] loop3: detected capacity change from 0 to 40427 [ 911.102172][T12140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.124689][T12226] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 911.132950][T12226] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 911.153580][T12235] loop2: detected capacity change from 0 to 8 [ 911.207138][T12235] Filesystem uses "unknown" compression. This is not supported [ 911.244921][T12226] F2FS-fs (loop3): Found nat_bits in checkpoint [ 911.357745][T12140] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.452861][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.460736][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.560411][T12226] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 911.567947][T12226] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 911.622372][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.630234][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.900508][T11430] Bluetooth: hci3: command tx timeout [ 912.044839][T12242] loop1: detected capacity change from 0 to 256 [ 912.263076][T12198] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.271146][T12198] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.279098][T12198] bridge_slave_0: entered allmulticast mode [ 912.288394][T12198] bridge_slave_0: entered promiscuous mode [ 912.425370][T12198] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.435519][T12198] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.447506][T12198] bridge_slave_1: entered allmulticast mode [ 912.457422][T12198] bridge_slave_1: entered promiscuous mode [ 912.784290][T12198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.826935][ T8] usb 3-1: USB disconnect, device number 38 [ 912.905844][T12198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.145159][T12198] team0: Port device team_slave_0 added [ 913.209416][T12198] team0: Port device team_slave_1 added [ 913.366826][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 913.605068][T12198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.612427][T12198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.638933][T12198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.654169][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 913.809882][T12198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.817093][T12198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.845039][T12198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.945276][T12254] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 914.048433][T12140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.110239][T11430] Bluetooth: hci3: command tx timeout [ 914.778125][T12198] hsr_slave_0: entered promiscuous mode [ 914.848146][T12198] hsr_slave_1: entered promiscuous mode [ 914.897335][T12198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 914.905459][T12198] Cannot create hsr debugfs directory [ 914.920515][T12258] loop1: detected capacity change from 0 to 32768 [ 915.502142][T12140] veth0_vlan: entered promiscuous mode [ 915.591362][ T9885] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 915.627897][T12140] veth1_vlan: entered promiscuous mode [ 916.035752][ T9885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.047262][ T9885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.054089][T12140] veth0_macvtap: entered promiscuous mode [ 916.057432][ T9885] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 916.072584][ T9885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.130881][ T9885] usb 4-1: config 0 descriptor?? [ 916.144597][T12140] veth1_macvtap: entered promiscuous mode [ 916.281627][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.284277][ T29] audit: type=1326 audit(1717990904.069:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12270 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74eec7cf69 code=0x0 [ 916.292483][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.292579][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.292670][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.292750][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.361845][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.372061][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.382848][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.398520][T12140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.402305][T12273] loop7: detected capacity change from 0 to 16384 [ 916.421418][T11430] Bluetooth: hci3: command tx timeout [ 916.478910][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.491800][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.503139][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.516209][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.527994][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.541028][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.555356][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.568395][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.587334][T12140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.678143][T12140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.687232][T12140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.698109][T12140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.707835][T12140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.756167][ T9885] prodikeys 0003:041E:2801.001C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 916.763349][T12273] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 916.778495][T12275] loop2: detected capacity change from 0 to 1024 [ 916.789058][T12273] Buffer I/O error on dev loop7, logical block 0, async page read [ 916.798734][T12273] ldm_validate_partition_table(): Disk read failed. [ 916.805661][T12273] Dev loop7: unable to read RDB block 0 [ 916.813895][T12273] loop7: unable to read partition table [ 916.822479][T12273] loop7: partition table beyond EOD, truncated [ 916.829028][T12273] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 916.899720][T12259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.909260][T12259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.978008][T12259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.987538][T12259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.076840][T12198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 917.165423][T12198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 917.204584][ T5134] usb 4-1: USB disconnect, device number 60 [ 917.261524][T12198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 917.329468][T12198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 918.280708][T12279] loop1: detected capacity change from 0 to 40427 [ 918.327562][T12279] F2FS-fs (loop1): invalid crc value [ 918.427435][T12279] F2FS-fs (loop1): Found nat_bits in checkpoint [ 918.691481][T12293] loop3: detected capacity change from 0 to 256 [ 918.732320][T12293] FAT-fs (loop3): Unrecognized mount option "shortnamn=lower" or missing value [ 918.773727][T12279] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 918.966419][T10656] syz-executor.1: attempt to access beyond end of device [ 918.966419][T10656] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 919.177808][T12198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.330025][T12198] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.423640][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.431542][ T9882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.561752][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.569490][ T9882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.437343][ T9882] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 920.708204][ T9882] usb 3-1: Using ep0 maxpacket: 32 [ 920.851734][ T9882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.862616][ T9882] usb 3-1: config 0 has no interfaces? [ 920.868394][ T9882] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 920.881809][ T9882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.942253][ T9882] usb 3-1: config 0 descriptor?? [ 921.200970][T12198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.088569][T12328] loop2: detected capacity change from 0 to 8 [ 922.163970][T12328] Filesystem uses "unknown" compression. This is not supported [ 923.488756][T12198] veth0_vlan: entered promiscuous mode [ 923.724040][T12198] veth1_vlan: entered promiscuous mode [ 923.786681][ T5134] usb 3-1: USB disconnect, device number 39 [ 923.973376][T12344] loop1: detected capacity change from 0 to 32768 [ 923.995539][T12344] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12344) [ 924.061194][ T3344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.069693][ T3344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.099735][T12344] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 924.111734][T12344] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 924.122063][T12344] BTRFS info (device loop1): using free-space-tree [ 924.183159][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.191601][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.282918][T12198] veth0_macvtap: entered promiscuous mode [ 924.402189][T12198] veth1_macvtap: entered promiscuous mode [ 924.530736][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.544777][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.555969][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.566774][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.577393][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.589174][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.602177][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.614074][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.624372][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.635194][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.654322][T12198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.741791][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.752756][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.772149][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.784858][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.795691][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.806504][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.816688][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.827816][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.837989][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.848756][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.866795][T12198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.945048][T12198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.954158][T12198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.963466][T12198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.972776][T12198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.063312][T10656] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 925.638849][T12374] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 99999999 (only 8 groups) [ 925.654080][ T9885] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 926.082810][ T9885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.096979][ T9885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.108052][ T9885] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 926.117603][ T9885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.207628][ T9885] usb 3-1: config 0 descriptor?? [ 926.408800][T12381] fuse: Unknown parameter 'groupEid' [ 926.841563][T12387] loop7: detected capacity change from 0 to 16384 [ 926.872105][ T29] audit: type=1326 audit(1717990913.715:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7eac7cf69 code=0x0 [ 926.958339][ T9885] prodikeys 0003:041E:2801.001D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 926.995116][T12368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.004420][T12368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.118212][T12368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.127701][T12368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.359151][ T9882] usb 3-1: USB disconnect, device number 40 [ 927.455664][T12384] loop3: detected capacity change from 0 to 40427 [ 927.469945][T12391] loop1: detected capacity change from 0 to 1024 [ 927.512514][T12384] F2FS-fs (loop3): invalid crc value [ 927.518271][T12388] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 927.531438][T12388] Buffer I/O error on dev loop7, logical block 1, async page read [ 927.544684][T12388] Dev loop7: unable to read RDB block 8 [ 927.550542][T12388] loop7: unable to read partition table [ 927.574235][T12388] loop7: partition table beyond EOD, truncated [ 927.581195][T12388] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 927.623912][T12384] F2FS-fs (loop3): Found nat_bits in checkpoint [ 927.971832][T12384] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 928.163621][T10140] syz-executor.3: attempt to access beyond end of device [ 928.163621][T10140] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 928.769095][ T4681] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 929.062935][ T4681] usb 2-1: Using ep0 maxpacket: 32 [ 929.213334][ T4681] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.223922][ T4681] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 929.233226][ T4681] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 929.243505][ T4681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.265557][ T4681] usb 2-1: config 0 descriptor?? [ 930.466811][T12427] loop1: detected capacity change from 0 to 8 [ 930.546407][T12427] Filesystem uses "unknown" compression. This is not supported [ 930.938753][T12430] loop0: detected capacity change from 0 to 256 [ 931.598862][T12441] loop0: detected capacity change from 0 to 164 [ 931.661098][T12441] Unable to read rock-ridge attributes [ 931.731715][ T4681] IPVS: starting estimator thread 0... [ 931.733050][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.745605][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.852806][ T5134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.865615][ T5134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.906291][T12442] IPVS: using max 288 ests per chain, 14400 per kthread [ 932.037073][ T9882] usb 2-1: USB disconnect, device number 59 [ 932.203866][ T4681] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 932.506938][ T4681] usb 1-1: Using ep0 maxpacket: 32 [ 932.640924][ T4681] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 932.650619][ T4681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.708872][ T4681] usb 1-1: config 0 descriptor?? [ 932.769615][ T4681] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 932.880392][ T29] audit: type=1326 audit(1717990919.373:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12459 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7eac7cf69 code=0x0 [ 932.981706][T12461] loop7: detected capacity change from 0 to 16384 [ 932.989153][ T9882] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 933.218683][ T4681] gspca_nw80x: reg_r err -32 [ 933.224788][ T4681] nw80x 1-1:0.0: probe with driver nw80x failed with error -32 [ 933.251445][T12461] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 933.261224][T12461] Buffer I/O error on dev loop7, logical block 1, async page read [ 933.269506][T12461] Dev loop7: unable to read RDB block 8 [ 933.275385][T12461] loop7: unable to read partition table [ 933.334569][T12461] loop7: partition table beyond EOD, truncated [ 933.342084][T12461] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 933.417478][ T9882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.428897][ T9882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.439257][ T9882] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 933.448641][ T9882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.475877][T12467] loop3: detected capacity change from 0 to 512 [ 933.486218][T12466] loop1: detected capacity change from 0 to 1024 [ 933.504771][ T9882] usb 5-1: config 0 descriptor?? [ 933.578131][T12467] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 933.652868][T12467] EXT4-fs (loop3): 1 truncate cleaned up [ 933.659137][T12467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.778947][T12467] AppArmor: change_hat: Invalid input '0' [ 934.085255][ T9882] prodikeys 0003:041E:2801.001E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 934.197845][T10140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.216430][ T5134] usb 1-1: USB disconnect, device number 18 [ 934.247343][T12453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.257307][T12453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.278379][T12453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.287989][T12453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.436620][ T5163] usb 5-1: USB disconnect, device number 42 [ 934.685294][ T9882] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 934.934731][ T4681] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 934.951278][ T9882] usb 3-1: Using ep0 maxpacket: 8 [ 935.194959][ T9882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.206565][ T9882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.248294][ T4681] usb 1-1: Using ep0 maxpacket: 32 [ 935.313825][ T9882] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 935.323749][ T9882] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 935.332152][ T9882] usb 3-1: Manufacturer: syz [ 935.376464][ T9882] usb 3-1: config 0 descriptor?? [ 935.389063][ T4681] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.399896][ T4681] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 935.412048][ T4681] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 935.422326][ T4681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.223422][T12499] loop4: detected capacity change from 0 to 32768 [ 936.270919][ T9882] appledisplay 3-1:0.0: Submitting URB failed [ 936.277910][ T9882] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -5 [ 936.300615][ T4681] usb 1-1: config 0 descriptor?? [ 936.387596][ T9882] usb 3-1: USB disconnect, device number 41 [ 937.070403][ T29] audit: type=1326 audit(1717990923.259:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74eec7cf69 code=0x0 [ 937.107135][T12521] ===================================================== [ 937.114874][T12521] BUG: KMSAN: uninit-value in io_issue_sqe+0x1f1b/0x22c0 [ 937.122364][T12521] io_issue_sqe+0x1f1b/0x22c0 [ 937.127304][T12521] io_wq_submit_work+0xa17/0xeb0 [ 937.132439][T12521] io_worker_handle_work+0xc04/0x2000 [ 937.138237][T12521] io_wq_worker+0x447/0x1410 [ 937.143062][T12521] ret_from_fork+0x6d/0x90 [ 937.147860][T12521] ret_from_fork_asm+0x1a/0x30 [ 937.152840][T12521] [ 937.155416][T12521] Uninit was stored to memory at: [ 937.160678][T12521] io_recv_finish+0xf10/0x1560 [ 937.167730][T12521] io_recv+0x12ec/0x1ea0 [ 937.173161][T12521] io_issue_sqe+0x429/0x22c0 [ 937.178074][T12521] io_wq_submit_work+0xa17/0xeb0 [ 937.185956][T12521] io_worker_handle_work+0xc04/0x2000 [ 937.192692][T12521] io_wq_worker+0x447/0x1410 [ 937.197631][T12521] ret_from_fork+0x6d/0x90 [ 937.202220][T12521] ret_from_fork_asm+0x1a/0x30 [ 937.207180][T12521] [ 937.209732][T12521] Uninit was created at: [ 937.214182][T12521] __kmalloc+0x6e4/0x1060 2024/06/10 03:42:03 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 937.218674][T12521] io_alloc_async_data+0xc0/0x220 [ 937.225595][T12521] io_recvmsg_prep+0xbe8/0x1a20 [ 937.230837][T12521] io_submit_sqes+0x1135/0x2f10 [ 937.235860][T12521] __se_sys_io_uring_enter+0x40f/0x3c80 [ 937.242450][T12521] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 937.248186][T12521] x64_sys_call+0x2c0/0x3b50 [ 937.255331][T12521] do_syscall_64+0xcf/0x1e0 [ 937.260050][T12521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.266629][T12521] [ 937.269062][T12521] CPU: 1 PID: 12521 Comm: iou-wrk-12515 Tainted: G W 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 937.280875][T12521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 937.291697][T12521] ===================================================== [ 937.301372][T12521] Disabling lock debugging due to kernel taint [ 937.308590][T12521] Kernel panic - not syncing: kmsan.panic set ... [ 937.315144][T12521] CPU: 1 PID: 12521 Comm: iou-wrk-12515 Tainted: G B W 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 937.326795][T12521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 937.337010][T12521] Call Trace: [ 937.340407][T12521] [ 937.343442][T12521] dump_stack_lvl+0x216/0x2d0 [ 937.348342][T12521] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 937.354365][T12521] dump_stack+0x1e/0x30 [ 937.358733][T12521] panic+0x4e2/0xcd0 [ 937.362836][T12521] ? kmsan_get_metadata+0xf1/0x1d0 [ 937.368159][T12521] kmsan_report+0x2d5/0x2e0 [ 937.372859][T12521] ? __msan_warning+0x95/0x120 [ 937.377793][T12521] ? io_issue_sqe+0x1f1b/0x22c0 [ 937.382815][T12521] ? io_wq_submit_work+0xa17/0xeb0 [ 937.388100][T12521] ? io_worker_handle_work+0xc04/0x2000 [ 937.393872][T12521] ? io_wq_worker+0x447/0x1410 [ 937.398848][T12521] ? ret_from_fork+0x6d/0x90 [ 937.403626][T12521] ? ret_from_fork_asm+0x1a/0x30 [ 937.408773][T12521] ? kmsan_get_metadata+0x146/0x1d0 [ 937.414162][T12521] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 937.420262][T12521] ? io_recv+0x19e8/0x1ea0 [ 937.424873][T12521] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 937.430877][T12521] ? kmsan_get_metadata+0x146/0x1d0 [ 937.436266][T12521] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 937.442771][T12521] ? kmsan_get_metadata+0x146/0x1d0 [ 937.448178][T12521] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 937.454211][T12521] __msan_warning+0x95/0x120 [ 937.458980][T12521] io_issue_sqe+0x1f1b/0x22c0 [ 937.463834][T12521] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 937.469855][T12521] io_wq_submit_work+0xa17/0xeb0 [ 937.474973][T12521] ? __pfx_io_wq_submit_work+0x10/0x10 [ 937.480604][T12521] io_worker_handle_work+0xc04/0x2000 [ 937.486182][T12521] ? kmsan_get_metadata+0x146/0x1d0 [ 937.491585][T12521] io_wq_worker+0x447/0x1410 [ 937.496386][T12521] ? __pfx_io_wq_worker+0x10/0x10 [ 937.501684][T12521] ? schedule_tail+0x11f/0x190 [ 937.506635][T12521] ? __pfx_io_wq_worker+0x10/0x10 [ 937.511847][T12521] ret_from_fork+0x6d/0x90 [ 937.516428][T12521] ? __pfx_io_wq_worker+0x10/0x10 [ 937.521656][T12521] ret_from_fork_asm+0x1a/0x30 [ 937.526613][T12521] RIP: 0033:0x0 [ 937.530181][T12521] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 937.537668][T12521] RSP: 002b:0000000000000000 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 937.546250][T12521] RAX: 0000000000000000 RBX: 00007f894c3b3f80 RCX: 00007f894c27cf69 [ 937.554365][T12521] RDX: 0000000000000000 RSI: 0000000000002def RDI: 0000000000000009 [ 937.562459][T12521] RBP: 00007f894c2da6fe R08: 0000000000000000 R09: 0000000000000000 [ 937.570566][T12521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.578662][T12521] R13: 000000000000000b R14: 00007f894c3b3f80 R15: 00007fff37126178 [ 937.586785][T12521] [ 937.590124][T12521] Kernel Offset: disabled [ 937.594510][T12521] Rebooting in 86400 seconds..