last executing test programs: 20.053410513s ago: executing program 5 (id=1676): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x671, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1, 0xa00, 0x0, 0x0) 19.790126176s ago: executing program 5 (id=1679): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e1, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe68, 0x30, 0x0, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 19.413555716s ago: executing program 5 (id=1681): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x69) 19.234558776s ago: executing program 5 (id=1683): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00faffffff"], 0x1, 0x576, &(0x7f0000000640)="$eJzs2sFqE10YBuDvb/u3xc1kYTfiYsCNq5L2ChykhWJAqGShKwebQsmEwgQCycK6c+XC2/ByvACvo4tCJJkQE41ubBk1zwPhvHDyhm82mbM4rx/2umeX/fOPH77E7pM0NiJi4zqiMU2V/2brxjRvx6J3AQD8bU5P86zuGbhbZZnlkzPczg877U+1DAQAAAAAAAAAAMBvc/8fANaP+///vrLM8u3Z+W2Z+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAfa7H42T8i0/d8wEAt8/7HwDWz4uXr55lrdbRaZruRhTvB+1Bu1qr/ew8LqKITjQjiZuI8VyVj09aR810qhF7vauqP1k3l/sHkURjdf+g6qfL/f/j3mL/MJK4v7p/uLK/HY8fLfT3I4nPb+IyijiLSfdb/+1Bmj593vquvzP9HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKyT/XSuEXu9q0F70I6YrJvV/v7P9qt+dh4XUUQnmpHETcR4rsrHJ62j5uwHlvtb8WCr3mcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlvWHo25eFJ1SEARhHur+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOrSH466eVF0yn7dkwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf4r+cNTNi6JT3mGo+xkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuH1fAwAA//9JmLyV") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 18.92497419s ago: executing program 5 (id=1687): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791097"], 0x0}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto(0xffffffffffffffff, &(0x7f00000000c0)="1f89923372db0c0bdcf1e46f946be6915876c838e85e0ac7f85d219d983fd4a2774f51a2bf17e1db1a15482e71e61c03a5a290a96054490118ece8f37355c951e122a5152f95acd9f5f97ad55e74383c94c44f4332abca39236bb897e9ea074a282baefd1a7c8dd1c7290db0c90983106d82b8a3bb93905c85b587a4112fab292bb333d9", 0x84, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f00000008c0)='big_key\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000140), 0x9) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000400)={0x80000001, 0x4, 0x1}) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, r3) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x1a, &(0x7f00000000c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe8) socket$inet6(0xa, 0x80002, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)=ANY=[@ANYBLOB="382f15342d3f0000000000000000"], 0xe, r2) keyctl$KEYCTL_MOVE(0x1e, r6, r3, r2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000004008000200ac1414bb0c0002800500010000000000080007400000000028000680080002007f00000108000100000000001400038006"], 0x8c}, 0x1, 0x600000000000000}, 0x0) 18.394537055s ago: executing program 5 (id=1692): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000880fc0809000300", 0x33fe0}], 0x1}, 0x0) r1 = eventfd2(0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup3(r2, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r5}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[], 0x4c}}, 0x0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 15.015217756s ago: executing program 2 (id=1715): open(0x0, 0x149442, 0x0) open(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev}, 0x10) syz_io_uring_setup(0x535e, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, 0x120}, &(0x7f00000000c0), &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0x1, 0x0}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13.946563553s ago: executing program 2 (id=1717): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000380)="1000c93bffafa6db0474d6d9f49ff947a94836ea0c39f0a4cf74b19f95cebd05ce88d6b5b2a460", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffb}, 0x4c) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x40000022) r2 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000000)=""/212) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_LOCK(r2, 0xb) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(r0) prctl$PR_SET_SECUREBITS(0x1c, 0x2f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, &(0x7f0000000780)=""/159, 0x0, 0x6322bb2a80d3f510}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r6, 0x29, 0xd4, 0x0, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@mcast1={0xff, 0x5}, @dev={0xfe, 0x80, '\x00', 0x8}, @private2={0xfc, 0x2, '\x00', 0x1}}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40a040}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file1'}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x1) 13.630431604s ago: executing program 2 (id=1719): r0 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x7058, &(0x7f0000000040)) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {{}, {0x4}}], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r4) 13.498385076s ago: executing program 2 (id=1720): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x81) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x104, 0x4, 0x3e0, 0x108, 0x1f0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x444) madvise(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x0) mkdir(0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f00000005c0)='./bus\x00') unlink(&(0x7f00000001c0)='./file0\x00') 12.35489733s ago: executing program 2 (id=1728): open(0x0, 0x149442, 0x0) open(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev}, 0x10) syz_io_uring_setup(0x535e, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, 0x120}, &(0x7f00000000c0), &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0x1, 0x0}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.5341261s ago: executing program 2 (id=1751): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = dup2(r0, 0xffffffffffffffff) sendmmsg$inet(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a00)="316f82faff29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000180)="0036d551863e1902129da79fb0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee500"/190, 0xbe}, {&(0x7f0000000c40)="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", 0x190}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbd474a418997ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3f453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a3bb6b7fbf033", 0x96}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4afc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259f5eaf5f3a71155845156bf64809dee25c0eadad25cac50b01aabdb713c8c9965a19e114c8bbc35054f6ed430aff1952b2498efc46cbaebc815cb55fee31e5922", 0x74}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="6f59bb69296212101db2d25d7d1550eabd8017f1dcae8582eee7d0417821deba372ff17566312ebdfed0dee4fcaabfcd0f157495460a5f6fcd15448f9fc823232e24c1c6c1ad896c06197a169c2c514e77d4d3ffdca3cf990954d1baf51d00417a650dc2123fb436ecb41404a3e1c3c04f76", 0x72}, {&(0x7f0000000640)="0f60ff2a5ef0b2dbd043ae8a577b5d14ad5572180dd75c8ad7306ac56a36e04439413677b7ed345c48119f6a675df47439bf683eb8fae14b16254a16a217f9a84c9a1ab97e42e99660725767620066bc1087cc16b49aded70b07366c31c0f3cfa44815f7650f5062cd2bb9104968e3c1de36f3e0ad9beabf1d88b22f7b8e8eede672ab1e24902938fd96fbdcb9a3b590ca8551418122bdca22a47eef4b72894b1d8f512fb1e2f6cb8b8bf0fdc5771af3ce4e5b2778abd5cb2ee09028dca778349ca0690d0afefd79d1d595e5f1d5ffbda7ed88c29d61733eab972b", 0xdb}, {&(0x7f0000000340)="a960304fbbbaf75453522fcd873c048fe558f164431fa431ab9728b87ed6b531f09afa2de0cefec7c3587178c4c9cf505d0df6e2", 0x34}], 0x3}}], 0x2, 0x4084) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5.62461538s ago: executing program 4 (id=1768): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) 5.386624503s ago: executing program 1 (id=1769): rmdir(&(0x7f00000002c0)='./file0\x00') 5.323344886s ago: executing program 1 (id=1770): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_allocate_inode\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x2, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000020850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x4ab, &(0x7f0000000000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 5.310090571s ago: executing program 4 (id=1771): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string}, 0x0, 0x0}, 0x0) 5.048443233s ago: executing program 1 (id=1772): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) dup3(r0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) shutdown(r0, 0x0) 4.986434732s ago: executing program 3 (id=1773): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000000c0)={[{@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4bd, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)="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", 0xfffffd00) 4.592660872s ago: executing program 3 (id=1774): open(0x0, 0x149442, 0x0) open(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev}, 0x10) syz_io_uring_setup(0x535e, &(0x7f0000000040)={0x0, 0x47c8, 0x0, 0x2, 0x120}, &(0x7f00000000c0), &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0x1, 0x0}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.592106005s ago: executing program 1 (id=1775): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = socket(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) ioperm(0xfffffffffffffffd, 0xfffc, 0x0) futex(0x0, 0x6, 0x0, &(0x7f00000000c0), 0x0, 0x0) socket(0x18, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/174, 0xae}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f0000001200)=""/141, 0x8d}], 0x3, &(0x7f0000000540)=""/70, 0x46}, 0x1}, {{&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/58, 0x3a}], 0x1, &(0x7f0000001140)=""/152, 0x98}, 0xdc}, {{&(0x7f00000007c0)=@alg, 0x80, &(0x7f0000000e80)=[{&(0x7f00000010c0)=""/73, 0x49}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/236, 0xec}, {&(0x7f0000000a80)=""/199, 0xc7}, {&(0x7f0000000b80)=""/151, 0x97}, {&(0x7f0000000c40)=""/34, 0x22}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/183, 0xb7}, {&(0x7f00000012c0)=""/149, 0x95}], 0x9, &(0x7f0000000f40)=""/201, 0xc9}, 0x2}, {{&(0x7f0000001040)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002a00)=""/209, 0xd1}, {&(0x7f0000002b00)=""/226, 0xe2}, {&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000300)=""/20, 0x14}, {&(0x7f0000002980)=""/85, 0x55}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/222, 0xde}, {&(0x7f0000002540)=""/68, 0x44}, {&(0x7f00000025c0)=""/62, 0x3e}, {0x0}], 0xa, &(0x7f0000002700)=""/148, 0x94}, 0xdc3}], 0x4, 0x6021, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) syz_open_dev$sg(0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) 4.286470639s ago: executing program 3 (id=1776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.132933278s ago: executing program 3 (id=1777): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00faffffff"], 0x1, 0x576, &(0x7f0000000640)="$eJzs2sFqE10YBuDvb/u3xc1kYTfiYsCNq5L2ChykhWJAqGShKwebQsmEwgQCycK6c+XC2/ByvACvo4tCJJkQE41ubBk1zwPhvHDyhm82mbM4rx/2umeX/fOPH77E7pM0NiJi4zqiMU2V/2brxjRvx6J3AQD8bU5P86zuGbhbZZnlkzPczg877U+1DAQAAAAAAAAAAMBvc/8fANaP+///vrLM8u3Z+W2Z+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAfa7H42T8i0/d8wEAt8/7HwDWz4uXr55lrdbRaZruRhTvB+1Bu1qr/ew8LqKITjQjiZuI8VyVj09aR810qhF7vauqP1k3l/sHkURjdf+g6qfL/f/j3mL/MJK4v7p/uLK/HY8fLfT3I4nPb+IyijiLSfdb/+1Bmj593vquvzP9HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKyT/XSuEXu9q0F70I6YrJvV/v7P9qt+dh4XUUQnmpHETcR4rsrHJ62j5uwHlvtb8WCr3mcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlvWHo25eFJ1SEARhHur+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOrSH466eVF0yn7dkwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf4r+cNTNi6JT3mGo+xkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuH1fAwAA//9JmLyV") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chdir(0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 3.86383818s ago: executing program 3 (id=1779): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) syz_usb_connect(0x0, 0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c81ab9407a250926227e0000000109021a00010000000009049c0400099c1c00080b"], 0x0) 3.657778811s ago: executing program 4 (id=1781): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) 3.334503821s ago: executing program 3 (id=1782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_allocate_inode\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x2, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000020850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x4ab, &(0x7f0000000000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 3.06854896s ago: executing program 0 (id=1784): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 3.067146255s ago: executing program 1 (id=1785): socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f00000002c0)=0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") ftruncate(0xffffffffffffffff, 0x8001) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080)=0x801, 0x0, 0x4) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 3.066265449s ago: executing program 4 (id=1786): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x104, 0x4, 0x3e0, 0x108, 0x1f0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@remote, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x444) madvise(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x0) mkdir(0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f00000005c0)='./bus\x00') unlink(&(0x7f00000001c0)='./file0\x00') 2.832149212s ago: executing program 0 (id=1787): open(0x0, 0x149442, 0x0) open(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev}, 0x10) syz_io_uring_setup(0x535e, &(0x7f0000000040)={0x0, 0x47c8, 0x0, 0x2, 0x120}, &(0x7f00000000c0), &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0x1, 0x0}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.500003289s ago: executing program 0 (id=1788): syz_read_part_table(0x105c, &(0x7f0000001080)="$eJzsz71Rw0AQBeCnQ0gioBUSOqAHEopBKZUQ0Ae9uAaPPeuR/NeB7eD7gpt7N+9mZ8N9tWxr8V+pLsmwHHPLW6bkJW0tffRTltynxlQyX77XuD91fp6/h7RNxjV9vXe7quuY1+TpePvtz29dPv9utSYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLJDAAAA//+4SRWs") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x0, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) sendto$inet(r0, &(0x7f00000002c0)="1e777778b5", 0x5, 0x50, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902720003010000000904000000010300000a240100"], 0x0) 783.762131ms ago: executing program 4 (id=1789): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00faffffff"], 0x1, 0x576, &(0x7f0000000640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chdir(0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 354.465984ms ago: executing program 0 (id=1790): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size}}, 0x8) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x20044001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100100008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00060000000000000000000900010073797a30"], 0xd8}}, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) symlink(&(0x7f0000001000)='.\x00', &(0x7f0000000140)='./file0\x00') readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000004040)=""/4092, 0xffc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 294.547295ms ago: executing program 4 (id=1791): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string}, 0x0, 0x0}, 0x0) 200.506412ms ago: executing program 1 (id=1792): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) syz_usb_connect(0x0, 0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c81ab9407a250926227e0000000109021a00010000000009049c0400099c1c00080b"], 0x0) 78.088418ms ago: executing program 0 (id=1793): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_allocate_inode\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x2, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000020850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x4ab, &(0x7f0000000000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 0 (id=1794): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) r3 = socket(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) ioperm(0xfffffffffffffffd, 0xfffc, 0x0) futex(0x0, 0x6, 0x0, &(0x7f00000000c0), 0x0, 0x0) socket(0x18, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/174, 0xae}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f0000001200)=""/141, 0x8d}], 0x3, &(0x7f0000000540)=""/70, 0x46}, 0x1}, {{&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/58, 0x3a}], 0x1, &(0x7f0000001140)=""/152, 0x98}, 0xdc}, {{&(0x7f00000007c0)=@alg, 0x80, &(0x7f0000000e80)=[{&(0x7f00000010c0)=""/73, 0x49}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/236, 0xec}, {&(0x7f0000000a80)=""/199, 0xc7}, {&(0x7f0000000b80)=""/151, 0x97}, {&(0x7f0000000c40)=""/34, 0x22}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/183, 0xb7}, {&(0x7f00000012c0)=""/149, 0x95}], 0x9, &(0x7f0000000f40)=""/201, 0xc9}, 0x2}, {{&(0x7f0000001040)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002a00)=""/209, 0xd1}, {&(0x7f0000002b00)=""/226, 0xe2}, {&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000300)=""/20, 0x14}, {&(0x7f0000002980)=""/85, 0x55}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/222, 0xde}, {&(0x7f0000002540)=""/68, 0x44}, {&(0x7f00000025c0)=""/62, 0x3e}, {0x0}], 0xa, &(0x7f0000002700)=""/148, 0x94}, 0xdc3}], 0x4, 0x6021, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) syz_open_dev$sg(0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) kernel console output (not intermixed with test programs): id=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.0.1307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1440175b99 code=0x0 [ 312.189649][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.246726][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.295929][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.341766][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.394787][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.435380][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.453776][ T5092] Bluetooth: hci0: command tx timeout [ 312.468381][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.487720][ T9303] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.493503][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.523541][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.539752][ T9513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.553792][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 312.566974][ T9513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.611171][ T45] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 312.627863][ T45] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 312.669108][ T45] usb 1-1: USB disconnect, device number 28 [ 312.731282][ T9303] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.813568][ T5203] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 312.897400][ T9513] team0: Port device team_slave_0 added [ 312.951426][ T9513] team0: Port device team_slave_1 added [ 313.023685][ T5203] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 313.042294][ T5203] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 313.054729][ T5203] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.071679][ T5203] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 313.124474][ T5203] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.164494][ T5203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 313.172531][ T5203] usb 5-1: SerialNumber: syz [ 313.198304][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.215293][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.227446][ T9926] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 313.288538][ T9513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.300950][ T5203] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 313.306031][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.325935][ T5203] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 313.366285][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.423576][ T9513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.618545][ T9926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.634684][ T9926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.667503][ T29] audit: type=1800 audit(1719981441.039:946): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1309" name="file2" dev="overlay" ino=892 res=0 errno=0 [ 313.680296][T10009] netlink: 'syz.0.1311': attribute type 4 has an invalid length. [ 313.727690][ T29] audit: type=1326 audit(1719981441.089:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.3.1312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26ad175b99 code=0x0 [ 313.727883][ T5153] usb 5-1: USB disconnect, device number 15 [ 313.749507][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.815719][ T9513] hsr_slave_0: entered promiscuous mode [ 313.826917][ T9513] hsr_slave_1: entered promiscuous mode [ 313.836978][ T9513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.844959][ T9513] Cannot create hsr debugfs directory [ 313.893195][ T9303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.925952][ T9303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.933660][ T924] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 313.962272][ T9303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.973597][ T5092] Bluetooth: hci5: command tx timeout [ 313.987220][ T9303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.130368][ T924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.148064][ T9513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.150999][ T924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.198677][ T924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.220219][ T924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.235962][ T924] usb 1-1: Product: syz [ 314.240152][ T924] usb 1-1: Manufacturer: syz [ 314.245263][ T924] usb 1-1: SerialNumber: syz [ 314.295990][ T9513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.436462][ T9513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.534824][ T9303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.539407][ T5092] Bluetooth: hci0: command tx timeout [ 314.579127][ T924] usb 1-1: USB disconnect, device number 29 [ 314.608031][ T9513] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.653771][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 314.693070][T10136] vlan2: entered promiscuous mode [ 314.708661][T10136] vlan2: entered allmulticast mode [ 314.797245][ T9303] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.814071][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.821279][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.881334][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.888530][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.905235][T10175] loop4: detected capacity change from 0 to 128 [ 314.922963][T10175] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 314.936637][T10175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.955184][T10175] UDF-fs: error (device loop4): udf_read_inode: (ino 87) failed !bh [ 314.993738][ T5088] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 314.993908][T10175] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=3, partition=0 [ 315.123846][ T9513] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.174571][ T9513] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.204082][ T5088] usb 2-1: Using ep0 maxpacket: 16 [ 315.222440][ T5088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.254052][ T9513] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.260086][ T5088] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 315.275522][ T5088] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 315.276238][T10193] loop4: detected capacity change from 0 to 512 [ 315.286273][ T5088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.289721][ T5088] usb 2-1: config 0 descriptor?? [ 315.311396][ T9513] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.404001][T10193] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.1323: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 315.432411][T10193] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1323: couldn't read orphan inode 15 (err -117) [ 315.465027][T10193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.511337][T10193] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.626515][ T29] audit: type=1326 audit(1719981442.999:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.0.1327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1440175b99 code=0x0 [ 315.710913][ T9513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.724844][T10210] loop3: detected capacity change from 0 to 256 [ 315.775576][ T6261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.787241][ T9513] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.856002][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.863278][ T5204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.864422][T10210] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 315.889144][ T5204] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.896436][ T5204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.925856][ T5088] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input44 [ 316.056208][ T5092] Bluetooth: hci5: command tx timeout [ 316.065282][ T5088] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 316.253326][ T9303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.615817][ T5092] Bluetooth: hci0: command tx timeout [ 316.777530][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.784296][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.846161][ T29] audit: type=1326 audit(1719981444.219:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.0.1331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1440175b99 code=0x0 [ 316.964332][T10251] netlink: 'syz.3.1330': attribute type 4 has an invalid length. [ 317.118167][T10239] loop3: detected capacity change from 0 to 8192 [ 317.167003][T10218] loop4: detected capacity change from 0 to 32768 [ 317.201603][T10218] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1328 (10218) [ 317.226805][T10239] loop3: p1 p2 p3 p4 [ 317.283529][ T5088] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 317.285108][T10239] loop3: p1 size 108922248 extends beyond EOD, [ 317.299895][ T9513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.323614][T10239] truncated [ 317.327113][T10218] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 317.346473][T10239] loop3: p2 start 861536256 is beyond EOD, truncated [ 317.402069][T10239] loop3: p3 start 851968 is beyond EOD, truncated [ 317.411197][T10218] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 317.429537][T10218] BTRFS info (device loop4): using free-space-tree [ 317.454454][T10239] loop3: p4 size 65536 extends beyond EOD, truncated [ 317.497359][ T5088] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.509106][ T5088] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.521361][ T5088] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.547671][ T5088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.563518][ T5088] usb 4-1: Product: syz [ 317.568325][ T5088] usb 4-1: Manufacturer: syz [ 317.573825][ T5088] usb 4-1: SerialNumber: syz [ 317.768359][ T9513] veth0_vlan: entered promiscuous mode [ 317.849927][ T5088] usb 4-1: USB disconnect, device number 21 [ 317.904262][ T9513] veth1_vlan: entered promiscuous mode [ 318.137533][ T5092] Bluetooth: hci5: command tx timeout [ 318.207694][ T1026] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 318.236224][ T9303] veth0_vlan: entered promiscuous mode [ 318.273281][ T9513] veth0_macvtap: entered promiscuous mode [ 318.364494][ T9513] veth1_macvtap: entered promiscuous mode [ 318.396190][ T6261] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 318.397153][ T9303] veth1_vlan: entered promiscuous mode [ 318.481197][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.530531][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.552317][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.589911][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.632966][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.671065][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.699368][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.727531][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.753394][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.791296][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.817891][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.849253][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.886741][ T9513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.921347][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.949242][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.972186][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.013399][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.045439][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.080867][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.104429][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.133410][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.163285][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.203862][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.223392][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.243389][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.280535][ T9513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.318789][ T5088] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 319.375021][ T9513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.409116][ T9513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.441266][ T9513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.460137][ T9513] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.541974][ T5088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.563652][ T5088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.603496][ T5088] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.639160][ T9303] veth0_macvtap: entered promiscuous mode [ 319.643047][ T5088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.671228][ T5088] usb 4-1: config 0 descriptor?? [ 319.697240][ T9303] veth1_macvtap: entered promiscuous mode [ 319.842115][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.863990][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.881631][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.903429][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.928367][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.946964][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.964894][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.992225][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.004946][ T5151] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 320.025190][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.042654][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.070883][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.091148][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.105403][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.126792][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.154650][ T9303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.155245][ T5088] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 320.195842][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 320.225982][ T5088] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input45 [ 320.239418][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.254143][ T5151] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.276736][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.287295][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.295255][ T5151] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.323411][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.333236][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.366527][ T5088] keytouch 0003:0926:3333.0008: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 320.385058][ T5151] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.394740][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.410272][T10382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.428269][ T5151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.455404][T10382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.463192][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.473792][ T5151] usb 5-1: Product: చ [ 320.478056][ T5151] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 320.513441][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.523264][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.553470][ T5151] usb 5-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧 [ 320.563621][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.584634][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.633386][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.643239][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.695239][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.713463][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.725065][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.754787][ T9303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.816612][ T9303] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.843319][ T9303] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.852746][ T9303] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.884170][ T9303] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.978307][ T5151] usb 5-1: 0:2 : does not exist [ 320.994458][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.019309][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.055654][ T5151] usb 5-1: USB disconnect, device number 16 [ 321.257155][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.305925][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.415260][ T943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.443696][ T943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.516858][ T5203] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 321.941154][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1348'. [ 322.029310][T10443] vlan2: entered promiscuous mode [ 322.049216][T10443] vlan2: entered allmulticast mode [ 322.214538][T10437] loop4: detected capacity change from 0 to 8192 [ 322.278106][T10444] netlink: 'syz.4.1346': attribute type 4 has an invalid length. [ 322.339698][T10437] loop4: p1 p2 p3 p4 [ 322.374687][T10437] loop4: p1 size 108922248 extends beyond EOD, truncated [ 322.438027][T10437] loop4: p2 start 861536256 is beyond EOD, truncated [ 322.445886][ T5153] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 322.623472][T10437] loop4: p3 start 851968 is beyond EOD, truncated [ 322.630015][T10437] loop4: p4 size 65536 extends beyond EOD, truncated [ 323.143077][T10472] loop3: detected capacity change from 0 to 512 [ 323.237421][T10472] EXT4-fs: Ignoring removed nobh option [ 323.243088][T10472] EXT4-fs: quotafile must be on filesystem root [ 323.250253][ T5088] usb 4-1: USB disconnect, device number 22 [ 323.546099][ T5153] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.582879][ T5153] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.687273][ T5153] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.708929][ T5153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.764790][ T5153] usb 5-1: Product: syz [ 324.459189][ T5153] usb 5-1: Manufacturer: syz [ 324.471038][ T5153] usb 5-1: SerialNumber: syz [ 324.889045][ T5153] usb 5-1: USB disconnect, device number 17 [ 324.913547][ T5088] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 324.974201][ T5151] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 325.230570][ T5151] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 325.281128][ T5151] usb 6-1: config 0 has no interface number 0 [ 325.308046][ T5151] usb 6-1: config 0 interface 156 has no altsetting 0 [ 325.326041][ T29] audit: type=1326 audit(1719981452.669:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.2.1368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f25b75b99 code=0x0 [ 325.354836][ T5151] usb 6-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 325.389266][ T5151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.748969][ T5088] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.922355][ T5088] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.008282][ T5088] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.008386][ T5088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.008413][ T5088] usb 1-1: Product: చ [ 326.008432][ T5088] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 326.008509][ T5088] usb 1-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧 [ 326.125415][ T5151] usb 6-1: config 0 descriptor?? [ 326.258476][ T5088] usb 1-1: 0:2 : does not exist [ 326.277890][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.279381][ T5151] hub 6-1:0.156: bad descriptor, ignoring hub [ 326.302922][ T5151] hub 6-1:0.156: probe with driver hub failed with error -5 [ 326.303089][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.328522][ T5088] usb 1-1: USB disconnect, device number 30 [ 326.334752][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.359273][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.368551][ T5151] option 6-1:0.156: GSM modem (1-port) converter detected [ 326.386513][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 326.403690][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 326.534907][ T5151] usb 6-1: USB disconnect, device number 17 [ 326.542991][ T5151] option 6-1:0.156: device disconnected [ 328.412567][T10568] chnl_net:caif_netlink_parms(): no params data found [ 328.443808][ T5153] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 328.453655][ T53] Bluetooth: hci6: command tx timeout [ 328.663574][ T5153] usb 1-1: Using ep0 maxpacket: 16 [ 328.691513][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.699178][T10592] loop2: detected capacity change from 0 to 32768 [ 328.743391][ T5153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.759013][T10592] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1370 (10592) [ 328.793555][ T5153] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 328.857982][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.910022][ T5153] usb 1-1: config 0 descriptor?? [ 329.054104][T10592] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 329.114491][T10592] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 329.153588][T10592] BTRFS info (device loop2): using free-space-tree [ 329.196409][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.242279][T10568] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.283050][T10568] bridge_slave_0: entered allmulticast mode [ 329.315579][T10568] bridge_slave_0: entered promiscuous mode [ 329.355941][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.363188][T10568] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.505866][T10568] bridge_slave_1: entered allmulticast mode [ 329.513657][T10771] loop5: detected capacity change from 0 to 8192 [ 329.532313][ T5153] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input46 [ 329.587097][T10568] bridge_slave_1: entered promiscuous mode [ 329.644868][T10592] BTRFS error (device loop2): open_ctree failed [ 329.663607][T10798] netlink: 'syz.5.1377': attribute type 4 has an invalid length. [ 329.673674][T10771] loop5: p1 p2 p3 p4 [ 329.677876][T10771] loop5: p1 size 108922248 extends beyond EOD, truncated [ 329.718319][ T5153] microsoft 0003:045E:07DA.0009: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 329.784065][ T924] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 329.806391][T10771] loop5: p2 start 861536256 is beyond EOD, truncated [ 329.813151][T10771] loop5: p3 start 851968 is beyond EOD, truncated [ 329.883660][T10771] loop5: p4 size 65536 extends beyond EOD, truncated [ 330.054574][ T924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.094994][ T924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.143282][ T924] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.184579][ T924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.229685][ T924] usb 6-1: Product: syz [ 330.256763][ T924] usb 6-1: Manufacturer: syz [ 330.302262][ T924] usb 6-1: SerialNumber: syz [ 330.398446][ T5203] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 330.497473][T10568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.533936][ T53] Bluetooth: hci6: command tx timeout [ 330.572063][T10568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.596462][ T5203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 330.623836][ T5203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 330.624955][ T924] usb 6-1: USB disconnect, device number 18 [ 330.684398][ T5203] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.741642][ T5203] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.784836][ T5203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.828257][ T5203] usb 5-1: config 0 descriptor?? [ 330.855757][T10841] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 330.958570][T10568] team0: Port device team_slave_0 added [ 330.989905][T10568] team0: Port device team_slave_1 added [ 331.225867][T10568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.232894][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.272864][ T29] audit: type=1326 audit(1719981458.639:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10933 comm="syz.2.1381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f25b75b99 code=0x0 [ 331.310361][ T5203] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 331.340985][ T5203] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 331.393588][T10568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.410531][ T5203] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 331.446146][T10568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.466857][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.501234][T10568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.618343][ T5203] usb 5-1: USB disconnect, device number 18 [ 331.750093][T10568] hsr_slave_0: entered promiscuous mode [ 331.785649][T10568] hsr_slave_1: entered promiscuous mode [ 331.792623][T10568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.811876][T10568] Cannot create hsr debugfs directory [ 331.893677][ T924] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 332.100072][ T924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.131424][ T924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.187080][ T924] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.214783][ T924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.243281][ T924] usb 6-1: Product: చ [ 332.273797][ T924] usb 6-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 332.377212][ T924] usb 6-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗 [ 332.450678][T10568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.587581][T10568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.614904][ T53] Bluetooth: hci6: command tx timeout [ 332.620472][ T5204] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 332.687396][ T5151] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 332.704665][ T924] usb 6-1: 0:2 : does not exist [ 332.768282][ T924] usb 6-1: USB disconnect, device number 19 [ 332.859071][T10568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.873528][ T5204] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 332.892464][ T5204] usb 3-1: config 0 has no interface number 0 [ 332.906597][ T5151] usb 5-1: Using ep0 maxpacket: 32 [ 332.922881][ T5204] usb 3-1: config 0 interface 156 has no altsetting 0 [ 332.927624][ T5151] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 332.946185][ T5204] usb 3-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 332.974481][ T5204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.982197][ T5151] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58983, setting to 1024 [ 333.002147][ T5204] usb 3-1: config 0 descriptor?? [ 333.023935][ T5151] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 333.046900][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.047472][ T5204] hub 3-1:0.156: bad descriptor, ignoring hub [ 333.091413][T11060] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 333.109587][ T5204] hub 3-1:0.156: probe with driver hub failed with error -5 [ 333.130591][T10568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.135155][ T5204] option 3-1:0.156: GSM modem (1-port) converter detected [ 333.143109][ T5151] hub 5-1:4.0: USB hub found [ 333.344486][T11107] netlink: 'syz.3.1389': attribute type 10 has an invalid length. [ 333.357793][ T5151] hub 5-1:4.0: 2 ports detected [ 333.363953][ T5204] usb 3-1: USB disconnect, device number 19 [ 333.371445][ T5204] option 3-1:0.156: device disconnected [ 333.454497][T11107] batman_adv: batadv0: Adding interface: team0 [ 333.484865][T11107] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.545990][T11107] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 333.560877][ T5151] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 333.604312][ T5151] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 333.679045][ T5151] usb 5-1: USB disconnect, device number 19 [ 333.760657][T10568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 333.792315][T10568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 333.841544][T10568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.892451][T10568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.357794][ T29] audit: type=1326 audit(1719981461.729:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11145 comm="syz.4.1395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x0 [ 334.400499][T10568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.450097][T10568] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.483692][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.490987][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.518730][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.526133][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.645444][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 334.695831][ T53] Bluetooth: hci6: command tx timeout [ 334.829187][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 334.868776][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 334.910570][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.961273][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.995464][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.056649][ T8] usb 4-1: config 0 descriptor?? [ 335.084671][T11148] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 335.488067][T10568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.535708][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 335.587029][ T8] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 335.649463][ T8] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 335.830581][ T8] usb 4-1: USB disconnect, device number 23 [ 335.848419][T10568] veth0_vlan: entered promiscuous mode [ 335.929071][T10568] veth1_vlan: entered promiscuous mode [ 336.093410][T10568] veth0_macvtap: entered promiscuous mode [ 336.142558][T10568] veth1_macvtap: entered promiscuous mode [ 336.234985][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.282729][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.323477][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.373412][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.408549][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.450882][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.482660][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.523455][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.533334][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.705181][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.770073][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.852244][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.149642][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.443775][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.510269][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.592200][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.663235][T10568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.760337][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.831268][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.875213][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.885941][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.896398][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.906917][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.920005][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.930517][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.940429][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.962568][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.987264][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.008356][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.043642][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.078935][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.110205][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.135545][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.166019][T10568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.253622][ T5153] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 338.266696][T10568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.331824][T10568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.373454][T10568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.410818][T10568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.501122][ T5153] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 338.523541][ T5153] usb 4-1: config 0 has no interface number 0 [ 338.558188][ T5153] usb 4-1: config 0 interface 156 has no altsetting 0 [ 338.603542][ T5153] usb 4-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 338.648400][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.700823][ T5153] usb 4-1: config 0 descriptor?? [ 338.739002][ T5153] hub 4-1:0.156: bad descriptor, ignoring hub [ 338.771852][ T5153] hub 4-1:0.156: probe with driver hub failed with error -5 [ 338.812151][ T5153] option 4-1:0.156: GSM modem (1-port) converter detected [ 338.820357][ T7679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.850973][ T7679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.964196][ T7679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.972128][ T7679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.043612][ T5154] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 339.073935][ T5153] usb 4-1: USB disconnect, device number 24 [ 339.086606][ T5153] option 4-1:0.156: device disconnected [ 339.257057][ T5154] usb 5-1: Using ep0 maxpacket: 32 [ 339.300818][ T5154] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 339.363538][ T5154] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58983, setting to 1024 [ 339.366866][ T29] audit: type=1326 audit(1719981466.739:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f25b75b99 code=0x0 [ 339.390760][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1408'. [ 339.423644][ T5154] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 339.454736][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.464706][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.472477][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.503490][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.526466][T11209] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 339.543524][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.560899][ T5154] hub 5-1:4.0: USB hub found [ 339.568105][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.581961][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.044657][ T5154] hub 5-1:4.0: 2 ports detected [ 340.052394][ T5154] hub 5-1:4.0: config failed, can't get hub status (err -5) [ 342.814434][ T5154] usb 5-1: USB disconnect, device number 20 [ 342.825795][ T53] Bluetooth: hci1: command tx timeout [ 342.975923][T11344] 9pnet_fd: Insufficient options for proto=fd [ 343.157062][T11366] loop2: detected capacity change from 0 to 764 [ 343.385050][T11245] chnl_net:caif_netlink_parms(): no params data found [ 343.423469][ T29] audit: type=1326 audit(1719981470.789:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11389 comm="syz.5.1422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6332575b99 code=0x0 [ 343.510534][T11398] loop1: detected capacity change from 0 to 1024 [ 343.610110][T11398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.673427][ T29] audit: type=1326 audit(1719981471.019:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11417 comm="syz.3.1426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26ad175b99 code=0x0 [ 343.871084][T11437] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.1423'. [ 343.873861][ T943] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 343.898908][T11454] Invalid ELF section header overflow [ 343.912016][ T943] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 343.930631][T11437] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.1423'. [ 343.940039][ T943] EXT4-fs (loop1): This should not happen!! Data will be lost [ 343.940039][ T943] [ 343.942497][T11245] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.951694][ T943] EXT4-fs (loop1): Total free blocks count 0 [ 344.000342][T11245] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.000691][T11245] bridge_slave_0: entered allmulticast mode [ 344.013650][T11245] bridge_slave_0: entered promiscuous mode [ 344.017763][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1423'. [ 344.027634][ T943] EXT4-fs (loop1): Free/Dirty block details [ 344.027759][ T943] EXT4-fs (loop1): free_blocks=68451041280 [ 344.027848][ T943] EXT4-fs (loop1): dirty_blocks=32 [ 344.027867][ T943] EXT4-fs (loop1): Block reservation details [ 344.027911][ T943] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 344.029138][ T943] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 4 with error 28 [ 344.030563][T11245] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.031374][T11245] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.031600][T11245] bridge_slave_1: entered allmulticast mode [ 344.040495][T11245] bridge_slave_1: entered promiscuous mode [ 344.421096][T11245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.446858][T11245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.021201][ T53] Bluetooth: hci1: command tx timeout [ 347.093700][ T53] Bluetooth: hci1: command tx timeout [ 347.717186][T11532] 9pnet_fd: Insufficient options for proto=fd [ 347.750117][T11245] team0: Port device team_slave_0 added [ 347.850478][T11245] team0: Port device team_slave_1 added [ 348.238521][T11245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.263593][ T5154] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 348.283606][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.363226][T11572] loop5: detected capacity change from 0 to 2048 [ 348.403578][T11245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.444674][T11572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.485481][T11245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.504961][T11575] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.1439'. [ 348.523807][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.572214][T11575] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.1439'. [ 348.583251][T11245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.594097][ T5154] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.594127][ T5154] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.654446][T11572] EXT4-fs error (device loop5): ext4_search_dir:1548: inode #2: block 16: comm syz.5.1437: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 348.723742][ T5154] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.749171][ T45] usb 2-1: USB disconnect, device number 13 [ 348.755163][T11572] EXT4-fs error (device loop5): ext4_find_dest_de:2111: inode #2: block 16: comm syz.5.1437: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 348.757218][ T5154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.859266][ T5154] usb 4-1: Product: చ [ 348.887709][ T5154] usb 4-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 348.914706][T11578] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 348.989716][ T9303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.004582][ T5154] usb 4-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 349.135763][T11245] hsr_slave_0: entered promiscuous mode [ 349.174868][ T53] Bluetooth: hci1: command tx timeout [ 349.198885][T11245] hsr_slave_1: entered promiscuous mode [ 349.249578][T11245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.268860][T11245] Cannot create hsr debugfs directory [ 349.294767][ T5154] usb 4-1: 0:2 : does not exist [ 349.356575][ T5154] usb 4-1: USB disconnect, device number 25 [ 349.500297][ T29] audit: type=1326 audit(1719981476.869:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11660 comm="syz.4.1445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x0 [ 349.682084][T11695] Invalid ELF section header overflow [ 349.788995][ T25] usb 1-1: USB disconnect, device number 31 [ 349.897385][ T8] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 350.025804][ T7679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.081652][T11739] loop3: detected capacity change from 0 to 2048 [ 350.095824][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.123539][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 350.136444][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 350.147498][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 350.167934][T11739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.204680][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.232503][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 350.249467][ T8] usb 6-1: SerialNumber: syz [ 350.260070][T11686] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.267708][T11686] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.285521][ T8] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 350.289572][ T7679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.365387][T11739] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 350.427006][T11739] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 135 with error 28 [ 350.457216][T11739] EXT4-fs (loop3): This should not happen!! Data will be lost [ 350.457216][T11739] [ 350.482006][T11739] EXT4-fs (loop3): Total free blocks count 0 [ 350.515597][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.524327][T11739] EXT4-fs (loop3): Free/Dirty block details [ 350.536211][ T7679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.548825][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.561266][ T8] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 350.578913][T11739] EXT4-fs (loop3): free_blocks=2415919104 [ 350.591379][ T8] usb 6-1: USB disconnect, device number 20 [ 350.600091][T11739] EXT4-fs (loop3): dirty_blocks=144 [ 350.620176][T11739] EXT4-fs (loop3): Block reservation details [ 350.632834][T11739] EXT4-fs (loop3): i_reserved_data_blocks=9 [ 350.728023][ T7679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.771968][ T6408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.832789][T11780] loop2: detected capacity change from 0 to 512 [ 350.965758][ T7679] bridge_slave_1: left allmulticast mode [ 350.971444][ T7679] bridge_slave_1: left promiscuous mode [ 350.990647][T11795] loop3: detected capacity change from 0 to 2048 [ 350.997395][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.010796][T11795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.030899][ T7679] bridge_slave_0: left allmulticast mode [ 351.039530][ T7679] bridge_slave_0: left promiscuous mode [ 351.046881][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.051197][ T29] audit: type=1800 audit(1719981478.419:957): pid=11795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1455" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 351.237191][T11805] loop5: detected capacity change from 0 to 512 [ 351.282816][T11805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.302938][T11805] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.332502][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 351.440742][ T9303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.467771][T11813] fuse: Unknown parameter 'user_i00000000000000000000' [ 351.575598][ T8] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 351.617343][ T8] usb 3-1: config 0 has no interface number 0 [ 351.625322][ T8] usb 3-1: config 0 interface 156 has no altsetting 0 [ 351.658638][ T8] usb 3-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 351.675613][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.688880][ T8] usb 3-1: config 0 descriptor?? [ 351.709270][ T8] hub 3-1:0.156: bad descriptor, ignoring hub [ 351.728524][ T8] hub 3-1:0.156: probe with driver hub failed with error -5 [ 351.756808][ T8] option 3-1:0.156: GSM modem (1-port) converter detected [ 352.029222][ T7679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.038911][ T8] usb 3-1: USB disconnect, device number 20 [ 352.057214][ T8] option 3-1:0.156: device disconnected [ 352.081939][ T7679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.110194][ T7679] bond0 (unregistering): Released all slaves [ 352.130431][ T7679] bond1 (unregistering): Released all slaves [ 352.553596][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 352.771496][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 352.778899][T11873] netlink: 'syz.4.1468': attribute type 1 has an invalid length. [ 352.802837][ T8] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 352.823214][T11881] loop5: detected capacity change from 0 to 512 [ 352.844052][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.891814][ T8] usb 4-1: config 0 descriptor?? [ 352.930218][T11881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.955278][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 352.995487][T11881] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.008822][T11933] fuse: Unknown parameter 'user_i00000000000000000000' [ 353.020746][T11877] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 353.034915][T11877] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 353.112727][T11882] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 353.132895][ T9303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.168983][T11882] bond3 (unregistering): Released all slaves [ 353.184915][ T5154] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 353.257925][ T7679] hsr_slave_0: left promiscuous mode [ 353.289358][ T7679] hsr_slave_1: left promiscuous mode [ 353.309476][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.329778][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.360548][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.371872][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.383715][ T5154] usb 3-1: Using ep0 maxpacket: 16 [ 353.394178][ T5154] usb 3-1: descriptor type invalid, skip [ 353.404158][ T5154] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 353.435374][ T5154] usb 3-1: string descriptor 0 read error: -22 [ 353.442129][ T5154] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.40 [ 353.455558][ T7679] veth1_macvtap: left promiscuous mode [ 353.469395][ T7679] veth0_macvtap: left promiscuous mode [ 353.485644][ T7679] veth1_vlan: left promiscuous mode [ 353.486508][ T5154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.497699][ T7679] veth0_vlan: left promiscuous mode [ 353.527201][T11980] loop5: detected capacity change from 0 to 512 [ 353.541601][ T5154] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 353.571753][T11980] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 353.595196][T11980] EXT4-fs (loop5): orphan cleanup on readonly fs [ 353.602835][T11980] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 353.613651][T11980] EXT4-fs warning (device loop5): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 353.630704][T11980] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 353.638549][T11980] EXT4-fs error (device loop5): ext4_orphan_get:1394: inode #16: comm syz.5.1479: casefold flag without casefold feature [ 353.656069][T11980] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.1479: couldn't read orphan inode 16 (err -117) [ 353.670986][T11980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.726164][ T9303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.778854][ T5154] usb 3-1: USB disconnect, device number 21 [ 353.835251][ T8] gspca_nw80x: reg_w err -110 [ 353.840146][ T8] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 353.971808][T12005] loop1: detected capacity change from 0 to 2048 [ 354.025918][T12005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.073851][ T53] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 354.082688][ T53] Bluetooth: hci5: Injecting HCI hardware error event [ 354.095085][ T53] Bluetooth: hci5: hardware error 0x00 [ 354.189146][ T8] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 354.710283][ T29] audit: type=1804 audit(1719981481.939:958): pid=12011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1482" name="/newroot/17/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 355.170092][T10568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.186780][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.236570][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.247274][ T8] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 355.274214][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.309009][ T8] usb 6-1: config 0 descriptor?? [ 355.351367][T12027] loop2: detected capacity change from 0 to 512 [ 355.431367][T12027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.449930][T12027] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.566508][ T9513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.579273][T12039] loop1: detected capacity change from 0 to 64 [ 355.743598][ T7679] team0 (unregistering): Port device team_slave_1 removed [ 355.862659][ T7679] team0 (unregistering): Port device team_slave_0 removed [ 355.865663][T12050] fuse: Unknown parameter 'user_i00000000000000000000' [ 356.144046][ T53] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 356.152174][ T8] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71 [ 356.162761][ T8] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 356.170660][ T8] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 356.183981][ T8] usb 6-1: USB disconnect, device number 21 [ 356.283629][ T5154] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 356.477911][ T5154] usb 2-1: Using ep0 maxpacket: 16 [ 356.486926][ T5154] usb 2-1: descriptor type invalid, skip [ 356.494211][ T5154] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 356.508171][ T5154] usb 2-1: string descriptor 0 read error: -22 [ 356.514746][ T5154] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.40 [ 356.524214][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.565417][ T5154] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 356.665563][ T5088] usb 4-1: USB disconnect, device number 26 [ 356.814211][ T5204] usb 2-1: USB disconnect, device number 14 [ 356.877164][T11245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.921938][T11245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.946134][T11245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.969853][T12094] loop2: detected capacity change from 0 to 2048 [ 356.982567][T11245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.023254][T12094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.150614][T12113] loop5: detected capacity change from 0 to 64 [ 357.898835][ T29] audit: type=1804 audit(1719981485.259:959): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1498" name="/newroot/35/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 358.281027][T11245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.352575][T12135] fuse: Unknown parameter 'user_id00000000000000000000' [ 358.365390][ T9513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.426822][T11245] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.504551][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.511836][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.554941][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.562236][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.603681][ T5204] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 358.804345][ T5204] usb 5-1: Using ep0 maxpacket: 32 [ 358.841843][ T5204] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 358.861979][ T5204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.888716][ T5204] usb 5-1: config 0 descriptor?? [ 358.901069][ T5204] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 359.178298][T11245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.313895][ T5088] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 359.339913][T12172] program syz.5.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.376285][T11245] veth0_vlan: entered promiscuous mode [ 359.445943][T11245] veth1_vlan: entered promiscuous mode [ 359.549664][ T5088] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.562731][T11245] veth0_macvtap: entered promiscuous mode [ 359.591725][ T53] Bluetooth: hci3: unexpected event for opcode 0x041a [ 359.599020][ T5088] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 359.615089][ T5088] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 359.629371][ T5088] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 359.639690][T11245] veth1_macvtap: entered promiscuous mode [ 359.646935][ T5088] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.661323][ T5088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.670973][ T5088] usb 2-1: SerialNumber: syz [ 359.696519][T12162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 359.714800][T12162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 359.736071][ T5088] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 359.750450][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.762643][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.777126][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.798174][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.814834][ T5204] gspca_nw80x: reg_w err -110 [ 359.823841][ T5204] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 359.843519][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.882721][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.980809][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.023581][T12162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.065833][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.083907][T12162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.093691][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.123652][ T29] audit: type=1800 audit(1719981487.489:960): pid=12162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1517" name="file2" dev="overlay" ino=166 res=0 errno=0 [ 360.136643][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.173599][ T5088] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 360.200057][ T5088] usb 2-1: USB disconnect, device number 15 [ 360.206743][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.239162][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.262509][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.286759][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.308389][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.342627][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.365790][ T5204] usb 5-1: USB disconnect, device number 21 [ 360.376540][T11245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.430897][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.448955][T12202] loop2: detected capacity change from 0 to 2048 [ 360.458852][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.475931][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.488443][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.501956][T12202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.516830][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.536023][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.587635][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.625745][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.674761][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.741583][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.791943][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.833705][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.878738][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.963183][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.000252][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.010928][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.023117][T11245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.040528][T11245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.068110][T11245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.102641][T11245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.155441][T11245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.357934][ T9513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.446124][T12225] loop1: detected capacity change from 0 to 512 [ 361.582611][T12225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.764007][T12225] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.358864][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.392929][T10568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.423158][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.584808][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.643479][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.901379][T12256] fuse: Unknown parameter 'user_id00000000000000000000' [ 363.453540][ T5154] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 363.636990][ T5154] usb 5-1: Using ep0 maxpacket: 32 [ 363.674956][ T5154] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 143, changing to 11 [ 363.706737][ T5154] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41661, setting to 1024 [ 363.753480][ T5154] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 364.018373][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.035542][ T5154] hub 5-1:4.0: USB hub found [ 367.448561][ T5154] hub 5-1:4.0: 2 ports detected [ 367.474849][ T5154] hub 5-1:4.0: config failed, can't get hub status (err -5) [ 367.545279][ T5154] usb 5-1: USB disconnect, device number 22 [ 367.656478][T12295] loop5: detected capacity change from 0 to 512 [ 367.752680][T12295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.766623][T12295] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.935538][ T9303] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.198881][T12308] loop3: detected capacity change from 0 to 2048 [ 368.296832][T12308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.418402][T12321] fuse: Unknown parameter 'user_id00000000000000000000' [ 369.107219][ T29] audit: type=1804 audit(1719981496.449:961): pid=12332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1546" name="/newroot/185/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 369.625351][ T6408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.520309][T12353] loop3: detected capacity change from 0 to 512 [ 370.804995][T12353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.853786][T12353] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.125926][ T6408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.176786][T12368] fuse: Bad value for 'fd' [ 371.563917][ T5154] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 371.753521][ T5154] usb 1-1: Using ep0 maxpacket: 16 [ 371.771171][ T5154] usb 1-1: descriptor type invalid, skip [ 371.784458][ T5154] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 371.806231][ T5154] usb 1-1: string descriptor 0 read error: -22 [ 371.838697][ T5154] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.40 [ 371.862415][T12384] loop2: detected capacity change from 0 to 512 [ 371.869774][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.888958][T12384] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.1565: corrupted in-inode xattr: invalid ea_ino [ 371.906517][ T5154] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 371.916084][T12390] loop4: detected capacity change from 0 to 256 [ 371.944887][T12384] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1565: couldn't read orphan inode 15 (err -117) [ 371.961508][T12384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.029141][ T9513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.120299][T12397] loop5: detected capacity change from 0 to 256 [ 372.139546][ T5154] usb 1-1: USB disconnect, device number 32 [ 372.196064][T12397] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3bed3e2a, utbl_chksum : 0xe619d30d) [ 373.171501][T12423] loop3: detected capacity change from 0 to 2048 [ 373.858794][T12423] loop3: p1 < > p4 [ 373.884053][T12423] loop3: p4 size 8388608 extends beyond EOD, truncated [ 374.417008][T12440] fuse: Bad value for 'fd' [ 375.111780][T12458] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 377.429645][T12498] loop3: detected capacity change from 0 to 1024 [ 377.466041][T12498] EXT4-fs: Ignoring removed orlov option [ 377.471757][T12498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.511131][T12503] fuse: Bad value for 'fd' [ 377.560488][T12498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.613524][ T5204] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 377.647318][ T6408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.806095][ T5204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.825705][ T5204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.850333][ T5204] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 377.872165][ T5204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.901479][ T5204] usb 1-1: config 0 descriptor?? [ 378.226624][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.233084][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.330101][ T5204] usbhid 1-1:0.0: can't add hid device: -71 [ 378.351246][ T5204] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 378.385044][ T5204] usb 1-1: USB disconnect, device number 33 [ 378.420395][T12535] program syz.5.1607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.602870][T12546] netlink: 'syz.5.1612': attribute type 7 has an invalid length. [ 378.612673][T12547] netlink: 'syz.1.1611': attribute type 6 has an invalid length. [ 378.634703][T12546] netlink: 'syz.5.1612': attribute type 39 has an invalid length. [ 378.646732][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'. [ 378.676549][T12547] netlink: 'syz.1.1611': attribute type 5 has an invalid length. [ 378.704655][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'. [ 378.729757][T12551] netlink: 'syz.5.1612': attribute type 7 has an invalid length. [ 378.781581][T12551] netlink: 'syz.5.1612': attribute type 39 has an invalid length. [ 379.003605][ T5154] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 379.244402][ T5154] usb 3-1: Using ep0 maxpacket: 16 [ 379.269568][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 379.310692][ T5154] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 379.326749][T12571] loop3: detected capacity change from 0 to 1024 [ 379.343983][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.359335][ T5154] usb 3-1: config 0 descriptor?? [ 379.764564][T12571] EXT4-fs: Ignoring removed orlov option [ 379.785240][T12571] EXT4-fs (loop3): Test dummy encryption mode enabled [ 379.834045][T12571] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 379.922591][T12541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.939637][T12571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.988511][T12541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.009452][T12588] fuse: Bad value for 'fd' [ 380.199720][ T5154] hid (null): unknown global tag 0xa5 [ 380.211474][ T5154] hid (null): unknown global tag 0xd [ 380.218720][ T5154] hid (null): unknown global tag 0xc [ 380.224183][ T5154] hid (null): global environment stack underflow [ 380.235961][ T5154] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 380.244148][ T5154] hid-generic 0003:0158:0100.000D: unexpected long global item [ 380.252714][ T5154] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 380.268236][T12571] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 380.343629][T12591] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 380.489499][ T5154] usb 3-1: USB disconnect, device number 22 [ 380.557441][ T6408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.148248][T12606] loop1: detected capacity change from 0 to 32768 [ 381.369110][T12606] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 381.402098][T12606] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 381.543633][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 381.562901][T12606] bcachefs (loop1): alloc_read... [ 381.564762][ T5154] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 381.572494][T12606] done [ 381.600154][T12606] bcachefs (loop1): stripes_read... done [ 381.620507][T12606] bcachefs (loop1): snapshots_read... done [ 381.667774][T12606] bcachefs (loop1): journal_replay... done [ 381.693738][T12606] bcachefs (loop1): resume_logged_ops... done [ 381.712752][T12606] bcachefs (loop1): going read-write [ 381.768816][T12606] bcachefs (loop1): done starting filesystem [ 381.786893][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.821468][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.852283][ T25] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 381.874070][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.904042][ T25] usb 3-1: config 0 descriptor?? [ 381.913484][ T5154] usb 5-1: Using ep0 maxpacket: 16 [ 381.933899][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 381.984663][ T5154] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 382.013803][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.039612][ T5154] usb 5-1: config 0 descriptor?? [ 382.135816][T12675] fuse: Bad value for 'fd' [ 382.163545][ T5204] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 382.311467][T12606] syz.1.1621 (12606) used greatest stack depth: 16312 bytes left [ 382.368400][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 382.375708][ T5204] usb 4-1: Using ep0 maxpacket: 32 [ 382.383599][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 382.399577][ T5204] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 382.410768][T10568] bcachefs (loop1): shutting down [ 382.416460][ T25] usb 3-1: USB disconnect, device number 23 [ 382.423596][ T5204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.439905][T10568] bcachefs (loop1): going read-only [ 382.449220][ T5204] usb 4-1: config 0 descriptor?? [ 382.461792][T10568] bcachefs (loop1): finished waiting for writes to stop [ 382.493178][ T5204] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 382.500648][T12624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1624'. [ 382.539621][T10568] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 382.539760][T12624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.564336][T12624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.588281][ T5154] hid (null): unknown global tag 0xe [ 382.612130][ T5154] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 382.623983][T10568] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 382.631246][ T5154] hid-generic 0003:0158:0100.000E: unexpected long global item [ 382.644586][ T5154] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 382.656850][T10568] bcachefs (loop1): shutdown complete, journal seq 15 [ 382.677574][T10568] bcachefs (loop1): marking filesystem clean [ 382.749804][T10568] bcachefs (loop1): shutdown complete [ 382.990364][ T5088] usb 5-1: USB disconnect, device number 23 [ 383.446426][ T5204] gspca_nw80x: reg_w err -110 [ 383.464489][ T5204] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 383.505240][ T5204] usb 4-1: USB disconnect, device number 27 [ 383.604341][T12720] loop2: detected capacity change from 0 to 512 [ 383.633252][T12720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.673929][T12720] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.749561][ T9513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.843643][ T45] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 384.077631][ T45] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 384.123753][ T45] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 384.189458][ T45] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 384.202573][T12733] loop4: detected capacity change from 0 to 2048 [ 384.262429][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.290071][T12733] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.396763][ T29] audit: type=1800 audit(1719981511.769:962): pid=12733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1644" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 384.717986][ T5151] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 384.807669][ T29] audit: type=1326 audit(1719981512.179:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 384.883542][ T29] audit: type=1326 audit(1719981512.179:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 384.933761][ T5154] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 384.959371][ T8] usb 1-1: USB disconnect, device number 34 [ 384.963510][ T29] audit: type=1326 audit(1719981512.209:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 384.967664][ T5151] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 385.038524][T12767] loop1: detected capacity change from 0 to 256 [ 385.045564][ T5151] usb 4-1: config 0 has no interface number 0 [ 385.051696][ T5151] usb 4-1: config 0 interface 156 has no altsetting 0 [ 385.054582][ T29] audit: type=1326 audit(1719981512.209:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 385.070406][ T5151] usb 4-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 385.131064][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.134678][ T29] audit: type=1326 audit(1719981512.209:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 385.163900][ T5154] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.178114][ T5154] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.189353][ T29] audit: type=1326 audit(1719981512.209:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 385.214203][ T5151] usb 4-1: config 0 descriptor?? [ 385.227134][ T5151] hub 4-1:0.156: bad descriptor, ignoring hub [ 385.234728][ T5151] hub 4-1:0.156: probe with driver hub failed with error -5 [ 385.243159][ T29] audit: type=1326 audit(1719981512.209:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 385.273535][ T5151] option 4-1:0.156: GSM modem (1-port) converter detected [ 385.283824][ T5154] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.293497][ T5154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.301543][ T5154] usb 6-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 385.349610][ T29] audit: type=1326 audit(1719981512.209:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 385.350352][ T5154] usb 6-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 385.551014][ T45] usb 4-1: USB disconnect, device number 28 [ 385.564852][ T45] option 4-1:0.156: device disconnected [ 385.745317][ T5154] usb 6-1: 0:2 : does not exist [ 385.785417][T12783] loop1: detected capacity change from 0 to 4096 [ 385.878533][ T5154] usb 6-1: USB disconnect, device number 22 [ 386.003527][ T29] audit: type=1326 audit(1719981513.279:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12759 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 386.220477][T12811] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.024096][T12825] Invalid ELF section header overflow [ 387.159682][T12827] loop2: detected capacity change from 0 to 1024 [ 387.724083][T12848] loop5: detected capacity change from 0 to 512 [ 387.746469][T12848] EXT4-fs: quotafile must be on filesystem root [ 387.897209][T12848] evm: overlay not supported [ 387.900626][T12861] loop1: detected capacity change from 0 to 1024 [ 387.926704][T12861] EXT4-fs: Ignoring removed orlov option [ 387.942816][T12861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.993759][ T25] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 388.011740][T12861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.105563][T10568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.201867][T12876] loop5: detected capacity change from 0 to 1024 [ 388.209243][ T25] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 388.232289][ T25] usb 5-1: config 0 has no interface number 0 [ 388.252729][ T25] usb 5-1: config 0 interface 156 has no altsetting 0 [ 388.289541][ T25] usb 5-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 388.335478][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.369216][ T25] usb 5-1: config 0 descriptor?? [ 388.389355][ T25] hub 5-1:0.156: bad descriptor, ignoring hub [ 388.412337][ T25] hub 5-1:0.156: probe with driver hub failed with error -5 [ 388.439911][ T25] option 5-1:0.156: GSM modem (1-port) converter detected [ 388.717795][ T45] usb 5-1: USB disconnect, device number 24 [ 388.730946][ T45] option 5-1:0.156: device disconnected [ 388.945977][T12919] loop5: detected capacity change from 0 to 2048 [ 389.059312][T12871] loop3: detected capacity change from 0 to 32768 [ 389.089714][T12921] loop1: detected capacity change from 0 to 4096 [ 389.254835][T12871] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 389.267272][T12931] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 389.647070][T12871] XFS (loop3): Ending clean mount [ 389.689726][T12871] XFS (loop3): Quotacheck needed: Please wait. [ 389.853513][ T5153] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 389.931121][ T943] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.964575][T12871] XFS (loop3): Quotacheck: Done. [ 390.063878][ T5153] usb 3-1: Using ep0 maxpacket: 32 [ 390.075691][ T5153] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 390.076461][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 390.076477][ T29] audit: type=1804 audit(1719981517.449:1013): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1674" name="/newroot/209/file0/file1" dev="loop3" ino=9286 res=1 errno=0 [ 390.103442][ T5153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.177122][ T5153] usb 3-1: config 0 descriptor?? [ 390.223177][ T5153] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 390.228116][ T943] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.439839][ T6408] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.528175][ T943] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.745256][ T943] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.826891][T12984] CIFS: VFS: Malformed UNC in devname [ 391.085744][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.104865][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.135886][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.146530][ T5153] gspca_nw80x: reg_w err -110 [ 391.151401][ T5153] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 391.168402][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.174142][ T943] bridge_slave_1: left allmulticast mode [ 391.182949][ T25] usb 3-1: USB disconnect, device number 24 [ 391.189896][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 391.190690][ T943] bridge_slave_1: left promiscuous mode [ 391.215380][ T943] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.223190][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.274127][ T943] bridge_slave_0: left allmulticast mode [ 391.287495][T13018] loop3: detected capacity change from 0 to 512 [ 391.297308][ T943] bridge_slave_0: left promiscuous mode [ 391.306811][ T943] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.307414][T13018] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1697: casefold flag without casefold feature [ 391.331913][T13018] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1697: couldn't read orphan inode 15 (err -117) [ 391.348462][T13018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.437523][ T6408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.457568][T13030] netlink: 210620 bytes leftover after parsing attributes in process `syz.4.1705'. [ 391.493803][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 391.573881][ T8] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 391.617345][T13035] loop2: detected capacity change from 0 to 128 [ 391.669562][ T29] audit: type=1800 audit(1719981519.039:1014): pid=13035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1707" name="bus" dev="loop2" ino=1048671 res=0 errno=0 [ 391.712408][ T29] audit: type=1800 audit(1719981519.039:1015): pid=13035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1707" name="bus" dev="loop2" ino=1048671 res=0 errno=0 [ 391.739775][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 391.756995][ T45] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 391.772483][ T45] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.783675][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 391.791205][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 391.795823][ T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.829921][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 391.837525][ T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 391.842873][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.892837][ T45] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.897694][ T8] usb 1-1: config 0 descriptor?? [ 391.932390][ T45] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 391.958072][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.234716][ T45] usb 2-1: usb_control_msg returned -32 [ 392.244642][ T45] usbtmc 2-1:16.0: can't read capabilities [ 392.339023][T13023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1704'. [ 392.374095][ T5092] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 392.382930][ T5092] Bluetooth: hci1: Injecting HCI hardware error event [ 392.396380][ T5092] Bluetooth: hci1: hardware error 0x00 [ 392.424143][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 392.443582][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 392.501957][T13063] loop4: detected capacity change from 0 to 256 [ 392.533042][ T8] usb 1-1: USB disconnect, device number 35 [ 392.651932][T13038] loop3: detected capacity change from 0 to 32768 [ 392.803128][T13082] CIFS: VFS: Malformed UNC in devname [ 392.830820][T13038] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 393.083674][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 393.336236][ T53] Bluetooth: hci0: command tx timeout [ 393.443745][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 393.514647][ T943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.644965][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.718895][T13038] XFS (loop3): Ending clean mount [ 393.791705][ T943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.801374][T13038] XFS (loop3): Quotacheck needed: Please wait. [ 393.809091][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.812310][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.812372][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 393.812401][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.822075][ T943] bond0 (unregistering): Released all slaves [ 393.846684][ T25] usb 5-1: config 0 descriptor?? [ 393.916973][T13038] XFS (loop3): Quotacheck: Done. [ 393.923431][T13063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1712'. [ 394.013583][ T29] audit: type=1804 audit(1719981521.369:1016): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1708" name="/newroot/212/file0/file1" dev="loop3" ino=9286 res=1 errno=0 [ 394.185853][ T6408] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 394.274889][ T25] microsoft 0003:045E:07DA.000F: item 0 4 0 8 parsing failed [ 394.307958][ T25] microsoft 0003:045E:07DA.000F: parse failed [ 394.329396][ T25] microsoft 0003:045E:07DA.000F: probe with driver microsoft failed with error -22 [ 394.533835][ T5092] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 394.552239][ T5151] usb 5-1: USB disconnect, device number 25 [ 394.647538][ T943] hsr_slave_0: left promiscuous mode [ 394.661778][ T943] hsr_slave_1: left promiscuous mode [ 394.675422][T13154] loop2: detected capacity change from 0 to 512 [ 394.684225][ T943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.707538][ T943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.721229][T13154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 394.737316][T13154] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.739182][ T943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.793995][ T943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.909587][ T943] veth1_macvtap: left promiscuous mode [ 394.935865][ T8] usb 2-1: USB disconnect, device number 16 [ 394.945034][ T943] veth0_macvtap: left promiscuous mode [ 394.979588][ T943] veth1_vlan: left promiscuous mode [ 395.001303][ T943] veth0_vlan: left promiscuous mode [ 395.223317][T13171] xt_NFQUEUE: number of total queues is 0 [ 395.423742][ T5092] Bluetooth: hci0: command tx timeout [ 395.755982][T13182] CIFS: VFS: Malformed UNC in devname [ 395.826795][ T9513] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 395.859524][ T9513] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 395.869870][ T9513] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz-executor: Failed to acquire dquot type 0 [ 395.910888][T13193] loop4: detected capacity change from 0 to 128 [ 395.923221][T13191] loop3: detected capacity change from 0 to 512 [ 396.005363][T13193] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.020147][T13193] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 396.030312][T13191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.066285][T13191] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.153599][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 396.194436][ T6408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.256210][ T6261] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.328875][ T29] audit: type=1326 audit(1719981523.689:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.1731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26ad175b99 code=0x0 [ 396.363533][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 396.392302][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 396.413507][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 396.443257][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.464500][ T25] usb 1-1: config 0 descriptor?? [ 396.674649][T13220] loop4: detected capacity change from 0 to 512 [ 396.682684][T13220] EXT4-fs: quotafile must be on filesystem root [ 396.889356][T13187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1727'. [ 396.899043][T13224] loop4: detected capacity change from 0 to 512 [ 396.925277][T13224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 396.927884][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 396.942785][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 396.969133][ T25] usb 1-1: USB disconnect, device number 36 [ 396.993083][T13224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.012721][T13224] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.097822][ T6261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.109483][ T943] team0 (unregistering): Port device team_slave_1 removed [ 397.245179][ T943] team0 (unregistering): Port device team_slave_0 removed [ 397.494095][ T5092] Bluetooth: hci0: command tx timeout [ 397.804708][T13250] loop4: detected capacity change from 0 to 8192 [ 397.848270][T13250] loop4: p1 p2 p3 p4 [ 397.852480][T13250] loop4: p1 size 108922248 extends beyond EOD, truncated [ 397.874279][T13250] loop4: p2 start 861536256 is beyond EOD, truncated [ 397.881031][T13250] loop4: p3 start 851968 is beyond EOD, truncated [ 397.887817][T13250] loop4: p4 size 65536 extends beyond EOD, truncated [ 398.185440][ T924] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 398.421726][T13271] xt_NFQUEUE: number of total queues is 0 [ 399.017863][T13273] loop3: detected capacity change from 0 to 512 [ 399.042967][T13273] EXT4-fs: quotafile must be on filesystem root [ 399.220979][ T924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.231381][T13256] netlink: 'syz.4.1742': attribute type 4 has an invalid length. [ 399.274943][ T924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.308496][ T924] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.346341][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.383571][ T924] usb 5-1: Product: syz [ 399.386012][T10909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 399.387768][ T924] usb 5-1: Manufacturer: syz [ 399.429394][ T924] usb 5-1: SerialNumber: syz [ 399.443756][ T29] audit: type=1326 audit(1719981526.799:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.1.1749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69b6375b99 code=0x0 [ 399.586329][ T5092] Bluetooth: hci0: command tx timeout [ 399.601629][T12996] chnl_net:caif_netlink_parms(): no params data found [ 399.743914][ T5092] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 399.753510][ T5092] Bluetooth: hci6: Injecting HCI hardware error event [ 399.766912][ T5092] Bluetooth: hci6: hardware error 0x00 [ 399.779993][ T924] usb 5-1: USB disconnect, device number 26 [ 400.096604][T12996] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.125887][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.133202][T12996] bridge_slave_0: entered allmulticast mode [ 400.171418][T12996] bridge_slave_0: entered promiscuous mode [ 400.211856][T12996] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.249649][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.287976][T12996] bridge_slave_1: entered allmulticast mode [ 400.318750][T12996] bridge_slave_1: entered promiscuous mode [ 400.336573][ T25] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 400.529864][T12996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.553098][T12996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.568187][ T29] audit: type=1326 audit(1719981527.939:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 400.573624][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 400.619147][T13495] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.640953][T13495] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.654432][ T29] audit: type=1326 audit(1719981527.939:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 400.679167][T13495] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.706178][T13495] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.711551][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 400.744336][T13495] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 400.750050][ T29] audit: type=1326 audit(1719981527.969:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 400.782032][T13495] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.793546][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 400.817275][T12996] team0: Port device team_slave_0 added [ 400.830075][T13522] loop3: detected capacity change from 0 to 512 [ 400.836821][ T29] audit: type=1326 audit(1719981527.969:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 400.857185][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.865119][T12996] team0: Port device team_slave_1 added [ 400.874341][T13522] EXT4-fs: quotafile must be on filesystem root [ 400.882476][ T25] usb 1-1: config 0 descriptor?? [ 400.895885][ T29] audit: type=1326 audit(1719981527.969:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 400.950581][ T29] audit: type=1326 audit(1719981527.969:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 401.026817][ T29] audit: type=1326 audit(1719981527.979:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 401.063914][T12996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.072679][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.099536][ T29] audit: type=1326 audit(1719981527.979:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 401.099609][ T29] audit: type=1326 audit(1719981527.979:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 401.164074][T12996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.201224][T12996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.218664][T12996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.244779][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.276909][T12996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.369147][T13428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1753'. [ 401.392489][ T29] audit: type=1326 audit(1719981528.759:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 401.417572][T13568] loop1: detected capacity change from 0 to 512 [ 401.443560][T13568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.452818][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 401.465236][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 401.482730][ T29] audit: type=1326 audit(1719981528.759:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 401.537973][ T25] usb 1-1: USB disconnect, device number 37 [ 401.539159][T13568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.617938][ T29] audit: type=1326 audit(1719981528.789:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 401.642563][ T29] audit: type=1326 audit(1719981528.789:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.4.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204e375b99 code=0x7ffc0000 [ 401.683575][T13568] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.729332][T12996] hsr_slave_0: entered promiscuous mode [ 401.756312][T12996] hsr_slave_1: entered promiscuous mode [ 401.813088][T10568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.893800][ T5092] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 402.248799][ T5092] Bluetooth: hci3: unexpected event for opcode 0x202a [ 402.509069][T13773] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 402.517967][T13758] netlink: 'syz.0.1765': attribute type 4 has an invalid length. [ 402.590773][T13493] chnl_net:caif_netlink_parms(): no params data found [ 402.784561][ T8] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 402.854484][ T5092] Bluetooth: hci2: command tx timeout [ 402.891596][T13820] loop1: detected capacity change from 0 to 512 [ 402.917380][T13820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.931223][T13820] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.977614][T13493] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.985221][T13493] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.993043][T13493] bridge_slave_0: entered allmulticast mode [ 403.000837][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.001652][T13493] bridge_slave_0: entered promiscuous mode [ 403.021122][T13493] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.029415][T13493] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.033209][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.045678][T13493] bridge_slave_1: entered allmulticast mode [ 403.061477][T13493] bridge_slave_1: entered promiscuous mode [ 403.075391][T10568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.092983][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.093958][ T5203] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 403.110198][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.128772][ T8] usb 1-1: Product: syz [ 403.133276][ T8] usb 1-1: Manufacturer: syz [ 403.151918][ T8] usb 1-1: SerialNumber: syz [ 403.195122][T13861] loop3: detected capacity change from 0 to 512 [ 403.232417][T13861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 403.267562][T13493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.306787][T13861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.315022][T13493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.335341][ T5203] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 403.337930][T13861] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.345935][ T5203] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 403.369106][ T5203] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 403.379398][ T5203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.479506][ T8] usb 1-1: USB disconnect, device number 38 [ 403.510575][ T6408] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.628040][T13493] team0: Port device team_slave_0 added [ 403.635737][ T5203] usb 5-1: string descriptor 0 read error: -22 [ 403.647542][T13493] team0: Port device team_slave_1 added [ 403.802759][T13493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.821890][T13493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.847842][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.863829][ T8] usb 5-1: USB disconnect, device number 27 [ 403.878484][T13493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.905592][T13493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.912596][T13493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.970376][T13493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.059073][T13991] loop3: detected capacity change from 0 to 2048 [ 404.199609][T12996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 404.237817][T12996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 404.352549][T13493] hsr_slave_0: entered promiscuous mode [ 404.360822][T13493] hsr_slave_1: entered promiscuous mode [ 404.367679][T13493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.377523][T13493] Cannot create hsr debugfs directory [ 404.396416][T12996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 404.470117][T14034] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 404.518942][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'. [ 404.559622][T12996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 404.934420][ T5092] Bluetooth: hci2: command tx timeout [ 405.060699][T14095] loop4: detected capacity change from 0 to 512 [ 405.141782][T14101] loop1: detected capacity change from 0 to 512 [ 405.149553][T14097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1784'. [ 405.161178][T14097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1784'. [ 405.175187][T14101] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 405.206701][T14095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 405.221676][T14095] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.342393][T13493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.707927][T12996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.718491][T14111] xt_NFQUEUE: number of total queues is 0 [ 405.836740][T13495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.853986][T13495] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.869764][T13495] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.897617][T13493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.926566][T13495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.941186][T13495] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 405.949044][T13495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.146298][T13493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.239583][T14120] netlink: 'syz.0.1788': attribute type 4 has an invalid length. [ 406.293978][ T5092] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 406.306182][ T5092] Bluetooth: hci3: Injecting HCI hardware error event [ 406.322213][T13495] Bluetooth: hci3: hardware error 0x00 [ 406.458349][T13493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.473541][ T45] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 406.568729][T12996] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.674201][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.708867][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.746311][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.766663][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.773964][ T5203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.793619][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.801948][ T45] usb 1-1: Product: syz [ 406.816380][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.823676][ T5203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.832863][ T45] usb 1-1: Manufacturer: syz [ 406.843651][ T45] usb 1-1: SerialNumber: syz [ 407.014578][ T5092] Bluetooth: hci2: command tx timeout [ 407.180674][ T45] usb 1-1: USB disconnect, device number 39 [ 407.299888][ T6261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 407.383810][T13493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.559590][T13493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.575762][T14272] loop4: detected capacity change from 0 to 2048 [ 407.588075][T13493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.645062][T13493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.757410][T14118] chnl_net:caif_netlink_parms(): no params data found [ 408.055684][ T5092] Bluetooth: hci4: command tx timeout [ 408.220277][T14118] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.231170][T14118] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.240070][T14118] bridge_slave_0: entered allmulticast mode [ 408.248195][T14118] bridge_slave_0: entered promiscuous mode [ 408.268566][T14118] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.275901][T14118] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.283275][T14118] bridge_slave_1: entered allmulticast mode [ 408.293919][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 408.312318][T14118] bridge_slave_1: entered promiscuous mode [ 408.429275][T14118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.454270][T13495] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 408.472763][T13495] [ 408.475139][T13495] ============================================ [ 408.481302][T13495] WARNING: possible recursive locking detected [ 408.487457][T13495] 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 Not tainted [ 408.494571][T13495] -------------------------------------------- [ 408.500728][T13495] kworker/u9:1/13495 is trying to acquire lock: [ 408.507008][T13495] ffff8880223fc148 ((wq_completion)hci3){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 [ 408.516897][T13495] [ 408.516897][T13495] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 408.524276][T13495] ffff8880223fc148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 408.534678][T13495] [ 408.534678][T13495] other info that might help us debug this: [ 408.542744][T13495] Possible unsafe locking scenario: [ 408.542744][T13495] [ 408.550201][T13495] CPU0 [ 408.553486][T13495] ---- [ 408.556769][T13495] lock((wq_completion)hci3); [ 408.561552][T13495] lock((wq_completion)hci3); [ 408.566343][T13495] [ 408.566343][T13495] *** DEADLOCK *** [ 408.566343][T13495] [ 408.574494][T13495] May be due to missing lock nesting notation [ 408.574494][T13495] [ 408.582828][T13495] 2 locks held by kworker/u9:1/13495: [ 408.588246][T13495] #0: ffff8880223fc148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 408.599110][T13495] #1: ffffc900113b7d00 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 408.603664][T12996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.611501][T13495] [ 408.611501][T13495] stack backtrace: [ 408.611513][T13495] CPU: 1 PID: 13495 Comm: kworker/u9:1 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 408.634472][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 408.644556][T13495] Workqueue: hci3 hci_error_reset [ 408.649636][T13495] Call Trace: [ 408.652921][T13495] [ 408.655855][T13495] dump_stack_lvl+0x241/0x360 [ 408.660557][T13495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.665770][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.671408][T13495] ? print_deadlock_bug+0x479/0x620 [ 408.676627][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.682266][T13495] validate_chain+0x15d3/0x5900 [ 408.687140][T13495] ? __pfx_validate_chain+0x10/0x10 [ 408.692355][T13495] ? __pfx_validate_chain+0x10/0x10 [ 408.697572][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.703213][T13495] ? __pfx_validate_chain+0x10/0x10 [ 408.708430][T13495] ? __pfx_validate_chain+0x10/0x10 [ 408.713642][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.719279][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.724907][T13495] ? mark_lock+0x9a/0x350 [ 408.729240][T13495] __lock_acquire+0x1346/0x1fd0 [ 408.734104][T13495] lock_acquire+0x1ed/0x550 [ 408.738603][T13495] ? __flush_workqueue+0x1b0/0x1710 [ 408.743803][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.749434][T13495] ? __pfx_lock_acquire+0x10/0x10 [ 408.754456][T13495] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 408.760270][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.765900][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.771526][T13495] ? __init_swait_queue_head+0xae/0x150 [ 408.777084][T13495] ? __flush_workqueue+0x1b0/0x1710 [ 408.782287][T13495] __flush_workqueue+0x1c9/0x1710 [ 408.787314][T13495] ? __flush_workqueue+0x1b0/0x1710 [ 408.792514][T13495] ? rcu_is_watching+0x15/0xb0 [ 408.797321][T13495] ? trace_contention_end+0x3c/0x120 [ 408.802637][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.808300][T13495] ? __pfx___flush_workqueue+0x10/0x10 [ 408.813786][T13495] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 408.819776][T13495] ? rcu_read_unlock_special+0x470/0x550 [ 408.825428][T13495] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 408.831431][T13495] drain_workqueue+0xc9/0x3a0 [ 408.836129][T13495] destroy_workqueue+0xba/0xc40 [ 408.840992][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.846630][T13495] ? __rcu_read_unlock+0xa1/0x110 [ 408.851668][T13495] hci_release_dev+0x169/0x16b0 [ 408.856541][T13495] ? devres_release_all+0x1eb/0x250 [ 408.861906][T13495] ? __pfx_hci_release_dev+0x10/0x10 [ 408.867217][T13495] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.872857][T13495] ? rcu_is_watching+0x15/0xb0 [ 408.877639][T13495] ? device_release+0x66/0x1c0 [ 408.882418][T13495] bt_host_release+0x83/0x90 [ 408.887019][T13495] ? __pfx_bt_host_release+0x10/0x10 [ 408.892326][T13495] device_release+0x9b/0x1c0 [ 408.896928][T13495] kobject_put+0x231/0x480 [ 408.901360][T13495] ? process_scheduled_works+0x945/0x1830 [ 408.907081][T13495] process_scheduled_works+0xa2e/0x1830 [ 408.912652][T13495] ? __pfx_process_scheduled_works+0x10/0x10 [ 408.918662][T13495] ? assign_work+0x364/0x3d0 [ 408.923290][T13495] worker_thread+0x86d/0xd50 [ 408.927898][T13495] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 408.933800][T13495] ? __kthread_parkme+0x169/0x1d0 [ 408.938846][T13495] ? __pfx_worker_thread+0x10/0x10 [ 408.944055][T13495] kthread+0x2f2/0x390 [ 408.948132][T13495] ? __pfx_worker_thread+0x10/0x10 [ 408.953245][T13495] ? __pfx_kthread+0x10/0x10 [ 408.957845][T13495] ret_from_fork+0x4d/0x80 [ 408.962279][T13495] ? __pfx_kthread+0x10/0x10 [ 408.966882][T13495] ret_from_fork_asm+0x1a/0x30 [ 408.971667][T13495] [ 408.986582][ T45] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 408.995852][ T45] usb 2-1: config 0 has no interface number 0 [ 409.001970][ T45] usb 2-1: config 0 interface 156 has no altsetting 0 [ 409.011937][ T45] usb 2-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 409.021237][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.083291][ T45] usb 2-1: config 0 descriptor?? [ 409.095440][ T5092] Bluetooth: hci2: command tx timeout [ 409.356647][T14118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.821365][ T7678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.836427][ T45] usb 2-1: can't set config #0, error -71 [ 409.867782][ T45] usb 2-1: USB disconnect, device number 17 [ 409.997987][ T7678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.081830][ T7678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.185874][ T7678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.395077][ T7678] bridge_slave_1: left allmulticast mode [ 410.400776][ T7678] bridge_slave_1: left promiscuous mode [ 410.409153][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.421302][ T7678] bridge_slave_0: left allmulticast mode [ 410.427223][ T7678] bridge_slave_0: left promiscuous mode [ 410.432938][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.582144][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.593699][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.604412][ T7678] bond0 (unregistering): Released all slaves [ 410.622398][ T7678] bond1 (unregistering): Released all slaves [ 410.637846][ T7678] bond2 (unregistering): Released all slaves [ 410.754075][ T7678] IPVS: stopping master sync thread 6822 ... [ 410.902779][ T7678] hsr_slave_0: left promiscuous mode [ 410.909221][ T7678] hsr_slave_1: left promiscuous mode [ 410.915391][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.922834][ T7678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.933240][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.940708][ T7678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.952791][ T7678] veth1_macvtap: left promiscuous mode [ 410.958637][ T7678] veth0_macvtap: left promiscuous mode [ 410.964630][ T7678] veth1_vlan: left promiscuous mode [ 410.969943][ T7678] veth0_vlan: left promiscuous mode [ 411.237476][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 411.252921][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 412.212290][ T7678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.301231][ T7678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.351763][ T7678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.412025][ T7678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.491531][ T7678] bridge_slave_1: left allmulticast mode [ 412.497272][ T7678] bridge_slave_1: left promiscuous mode [ 412.503075][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.512881][ T7678] bridge_slave_0: left allmulticast mode [ 412.520630][ T7678] bridge_slave_0: left promiscuous mode [ 412.526404][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.536877][ T7678] bridge_slave_1: left allmulticast mode [ 412.542518][ T7678] bridge_slave_1: left promiscuous mode [ 412.549061][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.559443][ T7678] bridge_slave_0: left allmulticast mode [ 412.566393][ T7678] bridge_slave_0: left promiscuous mode [ 412.572111][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.582552][ T7678] bridge_slave_1: left allmulticast mode [ 412.588465][ T7678] bridge_slave_1: left promiscuous mode [ 412.594880][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.604191][ T7678] bridge_slave_0: left allmulticast mode [ 412.609848][ T7678] bridge_slave_0: left promiscuous mode [ 412.616286][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.626318][ T7678] bridge_slave_1: left allmulticast mode [ 412.631981][ T7678] bridge_slave_1: left promiscuous mode [ 412.637936][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.647267][ T7678] bridge_slave_0: left allmulticast mode [ 412.652914][ T7678] bridge_slave_0: left promiscuous mode [ 412.658756][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.160728][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.171734][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.185591][ T7678] bond0 (unregistering): Released all slaves [ 413.201124][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.212263][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.222476][ T7678] bond0 (unregistering): Released all slaves [ 413.239894][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.261499][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.272980][ T7678] bond0 (unregistering): Released all slaves [ 413.288451][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.298969][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.309706][ T7678] bond0 (unregistering): Released all slaves [ 413.547994][ T7678] hsr_slave_0: left promiscuous mode [ 413.554075][ T7678] hsr_slave_1: left promiscuous mode [ 413.560035][ T7678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.570112][ T7678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.582447][ T7678] hsr_slave_0: left promiscuous mode [ 413.595883][ T7678] hsr_slave_1: left promiscuous mode [ 413.601961][ T7678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.612775][ T7678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.624915][ T7678] hsr_slave_0: left promiscuous mode [ 413.630877][ T7678] hsr_slave_1: left promiscuous mode [ 413.637481][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.647874][ T7678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.656591][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.664354][ T7678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.676564][ T7678] veth1_macvtap: left promiscuous mode [ 413.682116][ T7678] veth0_macvtap: left promiscuous mode [ 413.687818][ T7678] veth1_vlan: left promiscuous mode [ 413.697821][ T7678] veth0_vlan: left promiscuous mode [ 413.991612][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 414.026188][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 414.272075][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 414.325896][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 414.587729][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 414.621966][ T7678] team0 (unregistering): Port device team_slave_0 removed