last executing test programs: 1m3.490539924s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x2000400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x34, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="baf1f599f321d9ae000000000000dfff", @ANYRES16=r4, @ANYRES32=r3, @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01000000004600000000010000000c0002000800000000000000100007"], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r11, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)={0x2f0, r11, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1b32016c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x95e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x398ae60e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50ee}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x266}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @local, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x77c}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff6ca2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd05e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffff800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0xc8, 0x3, "9087e61550130e50718747bb0a148e3e37169cb557bb4d654d93aba7881ee50c1dad11226d661da9df42b9cc1bbeb8501392f167d535e43f9e00e40a6fdada23b4b34229a9ee8585c28fcf18216992839092cef47fa99a8217df53e258b77334e19d9cd98196265cb54017cfb253427070365028e9decf4bc476d9b47d4ab8544b58c34eb4942b61847d5f0b0eb097c9a69e9264855692727c61dee2c5dde908c606a3577fab012d757963a61637bae2eebe6c9bb9f515c62993a0b112b612fb4918b59b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7c6f}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x48080}, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x4c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @NL80211_ATTR_FRAME={0x24, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x0, @default, @val, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x4c}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r12, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 1m2.479423509s ago: executing program 2: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) mknodat(r1, &(0x7f0000000140)='./file1\x00', 0xc000, 0x0) renameat2(r1, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) 1m2.363738666s ago: executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f000036a000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f00005ac000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') lseek(r5, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat2(r3, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x10000, 0x80}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x3, 0xd6, &(0x7f0000000100)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m2.353099248s ago: executing program 1: syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000002700)=ANY=[], 0x1, 0x275, &(0x7f0000000980)="$eJzs3T9v00AYx/HfOaEEWhX3D6qEmAqVmFBbFsSChPIOWJgQ0ASpIioSFAmYCjPiBbDzFngRTIgZiY2JF5At6M7nxgl2bKKmF5fvR0rqxPfYz8W++h5XVQTgv3Wv/fPzrV/2YaSGGpLuSJGkltSUdFkbrVcHh/uHvW5n0oYaLsI+jJJI81ebvYNuXqiNcxFebF81tZR9D7PR+hE6A8wDN/pzRNJ5Pzrd+tapZzYbR6ETCMz01ddrLYfOAwAQlr/+R/46v+Tn71EkbfnL/uj1v+YX0H7oBALLXP9dlTUw9vhecquG9Z4r4ez6KK0Sp9nXgpIza2SCacqqSpdLdOHpfq97c+95rxPpve56w61o3f3sJKduKpvtu+N3N9KFzZzadILp+77o+nDO9mE3N39p7WT3WM58Nd/MQxPrkzrH87/mwNjD5I5UPHakkvy3i7foehknrQp6ueJ2csXvwZvYy4YKKhKlZ9SKRm8QxGV5uqjVsaikdzslUWu5UbslUevjUcOzuThy1sxH88Bs6re+qJ2Z/0f2095SlZFp27iW/syY2J+maxm7sepH3dHV3JZRee5xeRNU80FPdFvLL9+8ffa41+u+qNVCOqrmJZ+6LaQnwbzkU6uFBVVvbD/kIKmmI2T67QT5rYRTNjzo/xjI32bOCjvvMkn9l6lXtt1kzT7FE+bpg7KNZ7a4U1AbrLrni8UV3Ajjbj0sFldwVWuuazek61X2mIh9nmeEaeu7HnH/HwAAAAAAAAAAAAAAAAAAoG5O7l8OWipaFbqPAAAAAAAAAAAAAAAAAAAAAADU3dx9/+99Ja/4/l9g5v4EAAD//9G4ctM=") bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9ad}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r3, 0x0) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x1ffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={r8, 0x0, 0x0, 0x0, 0x1, [], [], [], [0x0, 0x0, 0x3]}) 58.790390415s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) 58.760057609s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0) 58.69163461s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 58.556109821s ago: executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ftruncate(0xffffffffffffffff, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x41, 0x0, 0x0, 0x0, {}, [@nested={0x19, 0x4, 0x0, 0x1, [@generic='7', @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x30}}, 0x0) setresuid(0x0, 0x0, 0x0) getresgid(&(0x7f00000037c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000600)={0x0, 0x0, 0xffffff7f}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)=[{&(0x7f0000006600)={0xb4, 0x37, 0x400, 0x70bd26, 0x25dfdbfd, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x7, 0x4a, 0x0, 0x0, @str='+:\x00'}]}, @nested={0x98, 0x12a, 0x0, 0x1, [@generic, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x20000000000000}, @typed={0x8, 0xa6, 0x0, 0x0, @u32=0x7}, @generic, @typed={0x73, 0xe6, 0x0, 0x0, @binary="dd60c72b314fa9fb455342d8c5bf50a2a9b856c283f1b9a3494a5ba82c4c02ecf69563f46addb51a944fb1e88ba614e6f426af107425a5f52fd5213b28f5cf3806d82de3967c9e9a857aff03d0ba65e08cba29df2215a389588c58f4707ede1bcd233cbbbe21dc0930f5f331d66097"}, @typed={0x9, 0x127, 0x0, 0x0, @str='!]-!\x00'}]}]}, 0xb4}, {&(0x7f0000003800)=ANY=[@ANYBLOB="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"], 0x206c}, {&(0x7f0000000680)=ANY=[@ANYBLOB="d00000000000000028bd7000fddbdf250b0024006e6f6772706964006f003e80a0311a98ce01df924d101369d452b6ffd9a7185f97b5e0fd6afd0b91b732b1f51806de5e13c1d719dea9dfdd0ba6fbd67c6feee9851b3f6ffc066440cd80978119f0a38d832f2d08003c00", @ANYRES32=0xee00, @ANYBLOB="000e0063006772706a71756f74613d0000004200e18008000300000000000800d20000008e06a20db9eaefce2a5c666c86b61a97323fd322e44878cf65032fc8fed3a3a830340eb3fc2a65f8a89e412286666b290000652fecddef414adffec8ef7497908f53ba10dbddb71248d89d412137cc49bf30b7339726afeaf7adc35e3b24658705cfa9c60d6e0694306e025c9f4cb8ea433225d99553240ca4900edbf185850b851bbdb471dfcfe709ab756c645c590db560b8db3a71ebd2e1173ca751f1b0edc382a18efa6494780eba79619dd532e5c4fcd5e3106a7491c78e30592bedb9c901376f43e1d27122253263081c00"/252], 0xd0}, {&(0x7f0000000140)=ANY=[@ANYBLOB="100000005482026bd41dc9d4ffdbdf25"], 0x10}, {&(0x7f0000000340)={0x10, 0x11, 0x400, 0x70bd2b, 0x90d}, 0x10}, {&(0x7f0000000b40)={0x10, 0x28, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x6, &(0x7f0000001d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0x8810}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) bind(0xffffffffffffffff, &(0x7f0000000240)=@xdp={0x2c, 0x1, 0x0, 0x2a}, 0x80) 56.361993708s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0xffffffffdfffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) fcntl$setpipe(r2, 0x407, 0x100000) 54.121785292s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) io_setup(0x4, &(0x7f0000002c40)) signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 53.324659784s ago: executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 52.580531398s ago: executing program 1: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8993, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 51.779918792s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="32010000091c2f20c81403006c05010203010902120001000000000904"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) 46.996177466s ago: executing program 3: syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000002700)=ANY=[], 0x1, 0x275, &(0x7f0000000980)="$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") bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9ad}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r3, 0x0) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x1ffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x1, [], [], [], [0x0, 0x0, 0x3]}) 45.836377224s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x7}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@filename='./file0\x00', 0xee00, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x5, 0xff, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x68, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@rr={0x7, 0x7, 0x7c, [@remote]}, @noop, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2c}, {@multicast2}]}, @rr={0x7, 0xb, 0xcc, [@remote, @remote]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x23, '\x00', r6, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='afs_flock_op\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4d) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r9) fcntl$setlease(r8, 0x400, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010600)='./file0\x00', 0x80, &(0x7f0000000280)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d73796e632c696e6c696e655f64612c616c6c6f635f6d6f64653d72657573652c70726a6a71750800613d7573726af1756774612c00"], 0x1, 0x105c4, &(0x7f00000311c0)="$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") 43.288251365s ago: executing program 0: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) mknodat(r1, &(0x7f0000000140)='./file1\x00', 0xc000, 0x0) renameat2(r1, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) 43.200701248s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x22, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 42.207205811s ago: executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 42.101793747s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) pipe2(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r5, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r3, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x8, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 40.863404337s ago: executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd, @generic, @initr0, @exit, @printk={@llu, {0x2, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0) 37.524819999s ago: executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ftruncate(0xffffffffffffffff, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x41, 0x0, 0x0, 0x0, {}, [@nested={0x19, 0x4, 0x0, 0x1, [@generic='7', @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x30}}, 0x0) setresuid(0x0, 0x0, 0x0) getresgid(&(0x7f00000037c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000600)={0x0, 0x0, 0xffffff7f}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)=[{&(0x7f0000006600)={0xb4, 0x37, 0x400, 0x70bd26, 0x25dfdbfd, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x7, 0x4a, 0x0, 0x0, @str='+:\x00'}]}, @nested={0x98, 0x12a, 0x0, 0x1, [@generic, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x20000000000000}, @typed={0x8, 0xa6, 0x0, 0x0, @u32=0x7}, @generic, @typed={0x73, 0xe6, 0x0, 0x0, @binary="dd60c72b314fa9fb455342d8c5bf50a2a9b856c283f1b9a3494a5ba82c4c02ecf69563f46addb51a944fb1e88ba614e6f426af107425a5f52fd5213b28f5cf3806d82de3967c9e9a857aff03d0ba65e08cba29df2215a389588c58f4707ede1bcd233cbbbe21dc0930f5f331d66097"}, @typed={0x9, 0x127, 0x0, 0x0, @str='!]-!\x00'}]}]}, 0xb4}, {&(0x7f0000003800)=ANY=[@ANYBLOB="6c2000003800000027bd7000fedbdf25c210548014002200ff020000000000000000000000000001ac1572d655842a2dcc1ec172c58c1a38fac5fece695104ea1e1b11a69cd2cbc489f4a64ddb488fdab60f1b41f92d1a39c8c9c092a13c2fe0a748076d219cc9054e7fa3f5ce493d497f8b1daccb0836b0d146be0c00e100c5090000000000009c9c46a6857a179d6a3efe89d3240914e71734c092f4d958d02c0b241c374b743491c53b3b410b4d21b4c49b717ca4f818d1303fefb32dd39590d492bc05f9892c152aa244f5317dfb03d0e26188648b07e9865353d62985c044a5059a876c85e38398f546e19d7a1590b9c381ed6be5edf379a3dc131bb8e247871940e749453750b97f551e991dff9368910dd26237beeaefd17297cfef25b7d1c8df9dead63703b4ca6b52892747a3694eb84d804cbcf5725655cda73f4f24b435d54acb12244df13c1301bae1c95d4cf302cfc2d31b1efa1cf2345ece9b74c3ad42b2867c6722f7a2419e33d00d301821fe26ca9e67179278bb004944cc5250108aa7418771c420a78acb6e3ce058af483d95f2dca9ced2fda3b94e50d306df40f390f7fcb5df324812339763aa22689d223614235acc2ecbcd3e3344d6153e7f2449741fb75c236a13ad59bb31e32060ca0b1707ced282828d0a6ef33a845ac12b9547f6de003d5934511a46d17769eb4b0e94fa4946115ae1f517614cf190f6b0767e953fab5acf88cd634593e4a0e0c8cdc5a547a79552a53cecc612f05e75038c6cfc0077f13e4a6e4ba35cf9dabed0f78c14bd7929dc8c9da7d9ddc2833017c8487c27a97fe093731255581df4226d016ca7c3e71648e271398c2da2713cb2f66243acb183bb8efab916f1e181e95b9de17ca47390341d3b71576ca24de1c5dcd97f16fc763600dcd71a5cdfb8448a4c7a11f5504b6d55b12b25b06abd57dea1f68feab0ab7d3a5eb49e3cf4c72d270feb351abcd39d6ab26a0f3c2254f9f606bab2d7df1140f44281924218c9a3a69c3858ad97b109d31b0c44b31243c2973e13b4a3147808fda5a7d832390d2ee635aa2e0e12c1cf4d0eaaeb73dd9b86239782c88c0e814c9ced433915118c0273556e966670eb4982b5a0f9d568765de6c257f2bb724ada48d6b9e7c9e2d3c0fd671774e587ca451474f40ce801ff74463c7d6f98556e6fbe2a18bc699685051d83ad3670a14d5cf3ae2bf49de036340ab747a4f77c676c667b8e381f96337f0f152d212d9b83f6535eeadecec3aa60874573187f593dfc86a663b8fad6f1062e462895758953cb04a81b263f10158e8e565e9e5fe78d5e6e0f93f482fd5dbf27a17412aee5cd9eb2992c4f12ffa109e0ae8c5258125f153c9e82783f5544521fc1a421ca6957cc403d874ee49228534ae724a91cce3f3bd54258ed9c635a80588a1abd8276111cc14cf67bde127901bedd315f0e405bd303e571540edb7bbebd38bbdc95bada4f8bcf32194e5390b14ce87425f38adafff6dc70d1ddf6c84168fec925c43df5d7e5b6caf46b24a4fe55455ef67523e0fe972fbbc68351ed4b82da37c7b5a9b05065d68b65aefa8d367b9c18ede1ca70d62a57f4bfd83dc1ff02cf5d8f4b8dcf0ca85241a1297e0b370b7b112e981fdace649f0246d8a8817a58135a3192a935ca992e80407a7e0609ce77c2503ff569e73f16fd744333338390fbfd2286752f6fd0a79cc197f43a0fb689e521c431a05c996baf1e3194e9fda7c12a31c6e8467d51adf5ef1b8d36092ef841bb1d40a057a91758e32d9cd7b3a0c4f919fa683b94ed006809585aba39224f1a046e2ef44c7a75ea326fa640a011aa134c1ce1ddc5856df4ad7762d572c577eb93bba6fbce920d61743117f6374d854021bda494ad1a032124e421b8607f7cb26d393c45f37c8d8ffc2d79538a33ff736c0936f32e0c411b2ea31ed811e204a2c3d537f64c3da80fa1763bfd008bea327f5ecd13f38cca50c9274f9ba7c159c11801956717e2623a0b84fd3e099e23f0f7b66264ef4259abea48d71dc7b6d683f2870019f4f5b2eae9d70083248c7cad32f18c525c966a0a9a547a683d3ad79ff59fede196ea5fe0bc58ca734924e4aa12bd4727f3ba844a7ee1dbf571421bdaaa8a03e4cd23b466f0c50c93644f578eb644710ca5ffc53e98f4432b650aff63580087c6aaa480f5ea06b51ae2db9661c8e93bcda6e5a6c5fd3211b0204f9dfd6b5e7bf71a6408e63302bbb5f4346a98b5fc13733c0c195b45075a6b411f722e5df0fddf6af072f1be873ea210ea993a35e34a59073f73086d0ea77a1167645f82ad640af6137e96290a1fdd95499ee1387eb087821c70c15df407ed4ae9000f250a38cc0ad0fd9c2ec0f09004a58a7e8656f76d4ccead56a52f28fb944ffd1a651a9661fc1ffd1f2e3c36229fa2ed9d389c37517eca801799e46437fec0a56a8ffd62637cb38a2ae3d815796b0d9866eb826efa8ae82c000a3b64027fc43613423297158b93bccb232663554d859d4c6c53c0ce7efba4f5e06fcc1562dc12a7cdacad584bbcfd3a82cc28c6bb610821e9ce2ff7965141428cdf40c5d06bc0b826f98a97671295c5f6911b0e57e279cec354a5f848c75af701c138c5e4ed7625b6f69d6a1c5365fd89e2de0e0b06188c29c52b91cc6b587b49184278c45f049ea864d796d47d29a578134f488bbb7ab07b648a2a9064072b0d8cdf91a20c34319dde797e198f7ee4f375eb3e3acf2921cdc99fe6e70ef221804f79500f8158f7b8c39ceaead95da9831e82b22e94c369239c0ec56d3d3a2bc24d144705a445b0737093848e26d9218dd4e164c2e8f325c85c1055ef470453523374bd3bc5cfb16881e986dcec22378507796da0a2b52dc9a5978758e43ea614fb432a0c24088fd36d6cb4c330e68dcce1f2f1a2df8945985afe0aeeb6c7988efd3466019200fdc0d7afc6e2f532fd9a575289e9b416d3756e207e51eb5d13a6d1868d5173bd2458c738731cfd2d4abc0e559d153b7b2d692702436ae292fdf1cc0d44180a69708cb18cd6364d614382ff3324535bc1cd87e3317e7c7a4227d789c36f9728b8e50ff75ba48e984a3b2ec942d3c50ca4e92eb052b58b32eac3eb4de02c5dadfe8612caa909d65900b0a9bff1893ba9bb8ddb021ca32a5de1cbb82b98941993f3451687a604d9ebd46435e12aa990a3867d2f23f715a0fee7371695c12c4dc2f8192f01291b26ece4321442c37863c64455075fee36548942c867ad020ebd9ebc1a47600693a655036de24a1ee3cdf9c1412c0bbeeb7e43477f723018f1b2474a1942fabd7abe78e0aa70a476a07499f9ec7f2fd13aae0ef63c38fe59d14e1fc859050d83ac110db6803a0927d413eebf2a771995b76fc0f30eb98923b87928e248d9177f4dff681c14c91a93c9a5212c523ebca82227778fed22c2c403901413e8c6117a9891113f38b8f3981b5210f77c3ab4f0a46ce88f4cfd668f26c13c315ae0cc1b6e09f02f74a6c95bec337639274c3d5c75752fd54ac9ec37b5e9404763f2b399f021540259df0773245094446fa9a1b13768e117e2f11573cdb5c4d5235ca8a210a41ee3daad01d3fcfb77e4c6e3cee7102a180e65828d92d3f9bbbefc19a44ad90fb233c6e6ea5f31a28007e0b7552574d1e081c6bbf691248812aa34b1bf8f4d115865d5545495dadaa56c12765350acc2c2cc33dde461b265444a616d69b5ad26d1467b43b26cfa74034d91fe9c94db904fb4ca7c7e3433f81b7e9397e4cd58e7554ec0efac7ac697036d7aa2d7216e04c600ab11fe80945ca61eec29ee828a185a752a45744caeb8a6e78856e690cc84ee24e60a3e80e98e0f344f4372270da29a334c5a5204a4613c699b81e20f85519bed2141b40d74f69ce6c6d8d81392c3d6725849fc118b11ab0dcf472332156b637bd9e3a3770a4c097a5367054640cfb31d45ab33e839d95aae03d3ae5e2d438fe2ce288d2e31a9f9fdf6908cd8be6a2ac8b8247317ce7db54999ff35487437f17decf17f7e79c495c51e675d5aff60a545b6a8e6a022c70e8fda58a8d5304cf9907c6a1680e39dd3be9c139f6f7799a6f5e076a15dc578aa9a52c15c9f0a37699aae2846c02998301e95f105303a3194bc97159a62012db95cab9e56cf4c9c2fd5c1f1089d2c0ee11db0756052e0e6e571704f889ef52e55929e1cfa2831990f96ae289f469bce80ffed95da92a1da3a6f5ff0321293d84e39ac68d82a96ce96a8edd67e0a7ecc438542b201300fed6db0b73cd47db29522ef258381fb3b0a53c4941b0dffa19f2493d3e1c2bcc427ab9c33cc7bbec91b4385b40758a9b3285f001aac3b59a9750bb58ecfef1d671d73038998847a61a7e3214a34ec024ded407491a45c29010ec5193b4d982569c8394b5cf464a4cf0e08056fc01994c3e0778736cb1bb356e79d32ec82fab9794f2fd43d7d3e127b5a8299a16bfbb0998fa70b786e0975578136a6b3f60b36afbc6b2f8198887763a9a011d5ea1779011ab25b778ea7beea14d8ee0d6b2ea3e0a50204291587e278d27bf49303c60c14a2b3184f55b13b043978b70007d1a84f03e08ada60959aba9e1b12fe8929b623f08f05ebdd24650baf57e2d191363111ec1d56989a5044a2823abe2819d46f34d6ed19c2b5bc68da59b30f1914060c13957f7d0a0967bbb84887adeaba718e40b24c91a7724d654cd95093c8272f654c4d5cac5a6db1dfbbe6dea63771de746e030b95443da6f870fd8ea9fa22487fc5246098be8eb6e83aac1b95605f7fae91cd44132fff6b6ff1d8885c6c7406596477fdbd3369b4558cb096a0069ae027fc0832fefccbab70bc755878292e44ba1ac4585f30eb85d7f20ccacfa5e83f806da13a57210117023cf86fbf78334516daa66069035e2ec986f9a4b246b6405ff0da357e6f3f956a804b91170833733da6ba98948ef1b276b3aed3cb795da7dce0b89e8fb32021be32ebbdb00303b964e7b8ad261a853f2693c50b0281286082cd41c1de48a0387d52849fea34886cb45619475e684b54b2962feb522c143d37a6232c2da6a950038939487443c44c13697b22ab81d985e03e9b13fcfca151c634e2f64a82d8782facfe6b205938a2ee62dcb4c2d118bb598e93edb42c7b1d848919e9f5b3cb8e57875f40ee76221b43d53c6a77e0abbe358a355e3d63c51dba82c377186a6ec25eca98652570f5b748456f0cbb9781450d189f97a2ad163092a85a39ea048c1587e5b725061d3e0ea849a7ed974c86a5e61145fede7f91c808f7512d96351f1184b1232c9035416fb9ae20ae73fbad5211c402e4328303e30dcc4dc61002976609f7e95486c2859357994be81f273c988468d3fc939b1a7dba7f9a1325b4c1442a3a6bb3196dafcc4128cf46ebf3cf83b050cd7833eefa958057093297b31a8658eb0fe7ec59fdbc8c3b86ad068e3b440aa2a44b46fe6d7a7003f8800d88a63f9090957de58d32d263b252388fe4d31c1ab1e7bd933a2ea8d6c450f576788e8195b242a306c93287311a0896f3fe1b8646a00f0d2aa8e8b15cf621ce11ea2e100b0fdac82765932a6907de6fd1861b4e7d44a83e9c974f6a264b510550f93d7ab60ba64891c4f595f6b608f3f778ba755033004c85669cec9f768dbb1c97b7f596bf9aa16b5286eb2c7ff50f61ffe9749e3547c3322a16696cc2e01fab3fa71d0f871d7b0e60c7befdd225adf6fc886e5816c2b9fa6e010500f8d3a30a203f3fd57dd79275c6e0315761df031783e38aca23de1dfad0ae0ebc1b5e4db52b893904fbe1e5806662373b3af09dc08866913906beda604901da9d45d9156127affa77f65f544f49b7d16228b11e9a93c8ccd2559b98fe0deeb59fa5743080301c506f9e51d1f11ca6e3fef00bae5ec2cc4018c59e94cf1a066a2e5446353c9d4f1f1080e88350eff5fb1ad718cd50eb6f0e4fa622d7c5c8b6595f4bfe28f2a9fe4afb7cb0c997d53908000a008f00000004001e0075a52f6ea8fb663df70ccb447928ed7d6e65bb8bcb5c32b3b2536237676502dfa44104e7dd96a72f0b554dd4ccd7ce18eab415b1b52ab968f905ffb1297aba000008004e007f000000140046800500a2000000000008002100ac1e0001040000801963af7d0f0b9154193da0021b58b0f19a6f7110c06ba3ed4d4ba263038739c8a4296f651665eb62ba5e90762726568068a903a967e9a601cbf7e88b1f3c075867435b77fcf0c906ffb91a2e850ca39f423c499359da0c8afde1148d459d0b3dcffae8b24a6c0e3a4df5f47aa09c9a05c844b3715dfa28e83a18e5399c9a5a57e9330ce9c1c3b0d7fd2f9b8a2e0b769a7724a13a1c979f182fe1d8cd9dd146f3e561375ae9e7cad73d3ecc7cf9d2594cdb99cf6b81d8f7471ba01022b063762e34b8618c23e48892fcab29b52582c31f94b1e6f1a139c464f86de8ea2be0aa605af7430913ffd9d4c8584ccff5ce3e642581677f845e272d4e1679abceb6ec6dc6edc051ebb7d0309554b61da559c85b2271f26e581a56938f69c22390a0fe4e5e4b2782a57135311d6540371d572dd50472dcc465a20ed31a3430e3e9056af0b0f546d9743500eb4c3205d47fa18ca3d83258a78855a258016442205137c39150121257674f9af8eec8c5721f1df7e2853aa7465f5225847e7ffd778a2caa93b58e073942b3f4aee9421bee0ab23d7886191922fbe4a3af8a97485e8ed2bee01be3fb3ec20cf5d89704183f4296f00c380601fca5fe4d5202fd562d1b932a1b5e09dbcfe735d59958391447507ab89bc961091701a63b4a9c87ecd767847822e7fc86d03dda37c840b2569cbfb4bd306badac897a9f90b14832c0707c2b1970030d551b81ce9eae28d2eb1b0b5ebf29d0f517170697117846f4ff9b8aad9c9ffc0892da35475b518cf3addcf44ef2b8a2572db21e1fe7dbe45f4468e791295c7a7ee8d1e1766ae5a2d505d404a46122dcb5febd3a2a0fe907a408ae57a41fa60687af68b219a9bb96a1675d7801295d00c122d2c30a3de843902cc8fa58e59b0cf59fbeac4ab5e0e30ff5259de1ac123db9376f23e9b5bfa6d2ce3b2b110aa5bbe2901612c4eaa368a4c6cd6a3171011d65775419cf96f3baab915ddc4ed3bf0721b94c68b4399b48f777f7cab698f360127a39c9101d0fb13e73b0e2abd2a1cfd54acbdab27e397938121be2de1ef0468936a368ddf266a91980f36e05a8a392a20796714576cef015afba42d578f50ad279d7f47815b94f39f49b7f828df4e131823bfb8e2a0e236fa9241e4ecc3051e2fa3414faab54be75ded9bd9eaf4cb0e66040b2f8f3b034312e393625f54edee2fd6d2f09a4b9fc1b81d38bf01127109c07e9740b5ba43ebdc2ae081f004217f8f6078209ac392558c5f8fe775087a92744c844f83c5a4d83c74920272eea0ee8b90560bb1ecf1514f2df2a07d25d088492aca424d501f1aba64edcb7b4e3d71489186bb51deb08abc518052dc2c2142fbddea4b3c784bc7f1eb07bd33058faaf68189f8e38b71a456f0224744a4d82674cbdecbebf0652cd2d7d62202358bae8f845af7e6109d0c196a0eda1be3ad341c7f9af5eb5896bc258c28a5e12e1aa939eac94be9779cb4742cb4d6df1d7fee6a2610cc9116ef364814516371d5756eb4983e237d9c6960f4711a99670b32cd8b3370e4bc2ec0615119d8e7acf1af95d6fdae043aa3be3f4a1aa645096f95c34fe7f3ccdb8cc8be7378d324b19e21d28b40d818683a1993d594d5ba4befc4baad22c4fde5b392cd234ba47f02ff3ded6d962e72bd421ba91ecafdb4984a969f6ba9b7bcba0c0a51ae9f6838c2aae130641cdd6b30edca6fa5afef2fc5dbb6b867d3c321470b38d6f093e1a2e8bc284370280e9e19c0a15e8481809616e3d4e996e1562546f1cc6106a0ce4d1878707bad76fa6a27d65d92008588f6dc5df3a4afe0b0a9a21c9ae978f01d25fa3dba04a95e1c846516f35fc2035105d1e1a0363df0761cd5ae071433f0c82e66151e978206b722ad9c3ad661464f0e8d9ec2ca0b62336617152ffa92a29efc786b73d637b1c1401b26c06860880a3371e61bd01f3e01f57119a5092afe380dd45a1ccd50bf2f8528707067f82b70fbf40fa13a064b09bab94a6104262779b28d510df45dee626fb3219ae0bacf158f63ddfd93e178c5adadb0852e8cb22d4d197638b6764e9a420849cdc26ee74e695b43b4b1af0b6d832584c9a68a8621df23f75b3618eff45df4e960c536707b56ab634eac8ff4679263bea8edc316940384b7d26079fcfd080248530b9ef9514b62f900b99667c937ba46f11806ee51044509df4c46369c02785297473af942f9421b70a5d293a9590cb0def54ad9b0841b618ca6b7b7f9699857526e0456381cc34e3b935350d2a31312b90dae47784144193d425e665a2976a4214954918cbad0259f8055d2b7aca8a1d2e5e4993dfb518c8f55bae889fb7d1dce2935dfd5071b444876e3718bc0ac07a8587c498ee2c1796e55c2446e775722ab657540b0e0cdc01e8937ded32e9e7382ec0a83a6c2811373d4819f7cf0416befdf39330726acaf39789e6a1b75cec108313b320c00077d263ff27723c5cd3f28af4b60406dcef8a1f868edddea1187a68410daff8e55d940bc42ae6714d47f57c7a8b0db2c4e2b474e0a31a9a7041c9a019b073223f6542974d663d2fa2584a6a6b7e61e16effbb237100967e31da13997db2c9c3ba57a5ee0cde131b319ae0f6386cb7fc777f04b23880ded306b64c8590ed2a3408543b9d90a5dcafa7960a4c993273e44af37cded331f0ffc46119d9a3961c776e88a2a48ee62672cc3abf1a4e9459f1fdcf1c2cd5630f56f997422021a0dfe4b2c29dbda7daa94295cd6de180ebb481c81844369c805aa858c771d3e18143d394c3196564af92eee455edbf37404b718b8acf393028384ee19f6751add7140db80c96c9a37cdef33f64f38f06cac3e000fa8b73c7afc31ed002e435ed6c522cdceccfcffe6cb4d910bac786143366a636c536d3225085c14d5699de479c60de4a276d1bd8ca483b1f0d1df08e8e9608d77ab05d88033f6f88eef3b313cd9b5420e3b21db2714675ccc7e7670185683379ee416dee535739561c29bd27a1adef48f4a50c5107515ff78be605752602e0639960d5040c39575317a78abb7e43b735e7e840423df21785eed58d8838c5b198269300cdc87bb63dda2a14c7ea9d9ba7169a87a754f9a9db6ebd22668421ac18957bd3f3b504da74c15e48c5f770c8c25ced691c0122f1129adc071df94df0d6eebc1ec2902a5c7902844c08ca20018a547f2be7b9c8ef20be82faaeaa2786c1fc930500bc38e8b3b9d07a549eb9eff797e0e8970e973891fbb93b89f97a5e09ddd4624dec9f9ec049e9882e4ea08fb76e027eec1a208ad80c548c72770fcba83dbff7027981a5282f9131a4af4e9780aaddb084fa3f9b427a78e76917d47744ab0338ab904fe78e47302874b07e4d910efa0598d4c5a5804c98a349345471d1fc6885b06ca2c1a0c12b00b5e8494145a630ad3b413cdbb09d8213081d60b1b6f10b5941d8bb24f29987533f52fc7f083d15a0dee1e3ac511dd062807ee6141aacc9d2088628ff5f28f44e1090b9290054330c79cf64ac717e0ef77a39dcbabc3e3bc09b0d01e7532c74809d3a70bc7979924a04e802f797391cd3e062bb1dd1a680558ef60fc18762dea39a8e8eda485fb93bdfaaffcdb6219b5065091f82083bce7c69f1b6ef0003cf9abdcccc0e2122433912dfda83f4ae0920c97ac02b1986a733a72469012a3f5d01648685c7d73f076273e16cc00a1bbf97fc678f4f920b1da55f4819109e26af6653bb44b063137b02a5606960a256cd455bdb56b412c7e11d561e9612fc1a2ae040a9139e993f18414ff9a7c1cfbeb1b98e4cf020bcf603b8b07ab0c5caa35195e0a3718194690ebecb874e88ebd90088d9a785766e4aab03f3361a3ac87adaf8042e6e2e09bfb91ada59e51f8a462d697512711dc260293719b227b7c31908c975bdf012a2a47e7dfd8d2487d528b9fcb863eb08e20d7960127f9e3fd1c14de4bd7dfe63346b2d27a9889feb3045854528bc3aa76fc432acf0e385738f14696148d5d2e2def5a5eb7e8ce3c98adc0aed930abda3fddd4105c93d3c548678fb11ebe97c4a7f99b28eec6f1489c0ac3a0bac8c0d46c36b45081eabca207ada951336b55687e672f3b4b3f681aa0c5762395fce1a4e8e3875c8ee45ff2aa98bdefc94fb6a0e221446ce3776a96e1e50a79d584f75bbdc59361abbd19ed0f160ef5568dde370ca9aa688b3f016f240438bbbadb51bb62c98a2ba4e1a6fdcd01c01743957f41684685043d7b8dc9b86611d242c589f402b724569877c1b86e1b646e351be54b7c3f30e6478558ed755452c11e7d56ea703adfec056b9b117205c7cf84fb5e3f446f7ad5841f62cf05da124ce63a4921810fd3e35aed288fe13249395d5e2e63bfba2d1ab7b5590f6f19e0ce49a25908e2019b540f8807336f5ff5da82704c7361c8f2846eecb34d48da24cdc74a7074df000ee4085fc319cec9f50d59a3b6656a57ca724b21d798042162bfb1c56385ec3b4ef5ca66ae682addbf220052cdc3c71d27288a8c9c9f3d8b2aca87754278395ca47edf3a178d3ae7b520b23dd174cfbe3bbaafb2892a8ebb0f7ebbcf82d757ce83f06d0cc01b419efa9df76f2667fc9a79a481bb87a11329e615d50900c06de6686a6626ecbd8b5b1415ecd40f6397f43b395622f3dea44926fd53042df10adc7abbfdf291a587ba6db0db558560310116bc947a4419df120e555a0d42b513ff2faa18f5c31f56a389928fcd1d39cd8c918188e93f21244418d09a846ffa99c24daea5ea20c530ffa6782a28a3732339f97b3ce1d07485faefc160b120da94496f03bc58d0b0595da860a5a720b3bb81e2898c924e761e171e47892d5e2d51ad829980837910995ab7774d1ee381654699f6ee88a34715fb8c8852bc2cfda1ab2d83bc5e51d4f6cd4c49891f49fa71c4758345d072b3980e987fe973024dab840ecda56c5490d8381c42ea1128014e86f9cf3fd52770d0c7b2908ad9140f5b83e70898d1ae2249d119bf559ba9e2f1b2434be1d0bdce9295c4e99ae43fcd292b65e6f6601ff2f4a33e7d8b213b3aaaa544f5eaff61c5a9b076188c2d00e839cb2ccbae3b78112b9f3951fad95ebb0ba8f36d25a6bf7b757885cc6819c11fe0e1e339f94a919d3c98b25dec8fcfdc39caa895240ec7a62993c0b4f5811323ae0315fed6c803427a4dca74bcbee0753a1f2ee3232f27d68a6baa8e9afec8a1b38f654d66a5123fb857507ba5a7810de78ec83a4ed982e82a7a1901199617d592f09aa98ee5bc02970bc60f089f2f9ec6a42f8c607f9b9aaf1b8b0383f99418fa70b88dd308ea417d8d0bf2139fd86c95760659ef8cf468b23ae7ce084d97143c8d8cc435de3d424e8fe9c2e348acdb1c72ac71852560dbbd64ab91249803d33f96312275f96df8b657b677277c58ff7b64e605a97f9aaebdf421fa4d0e0892f92e95a202bb0aa354a44e6d87a284fd82a36fae7725ec9b3b01b50e5afba9cca16413698412544ac6998e6290677d59142c2b396cfd2945e6538605521a70cab8a4869697b5b44f6087549c0a8af14424c4cfaa792ae1e26488a324720f64046469c937d8e63e8e7a040e3a4bb828963e5510fe3695c64683c127e2bab2f68c7b6e9857af006f90572a643719442106dda04187354172ea7084722a0852e0118bf496308713645e8ad5ff90b4ec530170c9c0013e0d4ff5a"], 0x206c}, {&(0x7f0000000680)=ANY=[@ANYBLOB="d00000000000000028bd7000fddbdf250b0024006e6f6772706964006f003e80a0311a98ce01df924d101369d452b6ffd9a7185f97b5e0fd6afd0b91b732b1f51806de5e13c1d719dea9dfdd0ba6fbd67c6feee9851b3f6ffc066440cd80978119f0a38d832f2d08003c00", @ANYRES32=0xee00, @ANYBLOB="000e0063006772706a71756f74613d0000004200e18008000300000000000800d20000008e06a20db9eaefce2a5c666c86b61a97323fd322e44878cf65032fc8fed3a3a830340eb3fc2a65f8a89e412286666b290000652fecddef414adffec8ef7497908f53ba10dbddb71248d89d412137cc49bf30b7339726afeaf7adc35e3b24658705cfa9c60d6e0694306e025c9f4cb8ea433225d99553240ca4900edbf185850b851bbdb471dfcfe709ab756c645c590db560b8db3a71ebd2e1173ca751f1b0edc382a18efa6494780eba79619dd532e5c4fcd5e3106a7491c78e30592bedb9c901376f43e1d27122253263081c00"/252], 0xd0}, {&(0x7f0000000140)=ANY=[@ANYBLOB="100000005482026bd41dc9d4ffdbdf25"], 0x10}, {&(0x7f0000000340)={0x10, 0x11, 0x400, 0x70bd2b, 0x90d}, 0x10}, {&(0x7f0000000b40)={0x10, 0x28, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x6, &(0x7f0000001d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0x8810}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) bind(0xffffffffffffffff, &(0x7f0000000240)=@xdp={0x2c, 0x1, 0x0, 0x2a}, 0x80) 34.001264001s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000bc"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x88) linkat(r7, &(0x7f0000000180)='./file1\x00', r7, &(0x7f00000001c0)='./file3\x00', 0x0) openat(r7, &(0x7f0000000080)='./file3\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) 33.066687964s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00C\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 30.915636834s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) alarm(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r7, 0xffffffffffffffff, 0x0) 30.025354531s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c"], 0xffdd) 23.288691675s ago: executing program 2: sendto$packet(0xffffffffffffffff, 0x0, 0xffffff85, 0x0, 0x0, 0xfffffffffffffca9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 22.554187328s ago: executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 15.797976445s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) pipe2(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r5 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r5, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r3, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x8, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 10.848226414s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x22, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 0s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) alarm(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.204693][ T3582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.216167][ T3582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.227878][ T3582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.239696][ T3582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.503952][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.516614][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.548179][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.577377][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.596371][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.631844][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.640481][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.688807][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.743719][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.756964][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.776167][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.809359][ T3574] Bluetooth: hci2: command tx timeout [ 62.814801][ T3574] Bluetooth: hci1: command tx timeout [ 62.820465][ T3578] Bluetooth: hci0: command tx timeout [ 62.826688][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.843932][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.852072][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.865021][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.892900][ T3574] Bluetooth: hci3: command tx timeout [ 62.898980][ T3574] Bluetooth: hci4: command tx timeout [ 62.947502][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.001491][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.010961][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.409231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 63.419526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.439144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.449102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.457331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.465536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.473734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.481930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.490122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 64.258070][ T27] audit: type=1804 audit(1719144194.946:2): pid=3722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2446102671/syzkaller.sXKft1/2/file0" dev="sda1" ino=1966 res=1 errno=0 [ 64.498897][ T27] audit: type=1804 audit(1719144194.946:3): pid=3724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2446102671/syzkaller.sXKft1/2/file0" dev="sda1" ino=1966 res=1 errno=0 [ 64.534283][ T3730] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 64.919507][ T3744] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.351231][ T3755] loop0: detected capacity change from 0 to 1024 [ 65.631530][ T3723] hfsplus: b-tree write err: -5, ino 4 [ 65.959306][ T3753] mmap: syz-executor.2 (3753) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.839256][ T27] audit: type=1804 audit(1719144197.316:4): pid=3766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/8/file0" dev="sda1" ino=1966 res=1 errno=0 [ 66.969114][ T27] audit: type=1804 audit(1719144197.326:5): pid=3767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/8/file0" dev="sda1" ino=1966 res=1 errno=0 [ 67.170706][ T3757] loop4: detected capacity change from 0 to 32768 [ 67.416726][ T3778] loop0: detected capacity change from 0 to 1024 [ 67.749143][ T3786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.762896][ T3786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.773518][ T9] hfsplus: b-tree write err: -5, ino 4 [ 67.807035][ T3786] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.906948][ T3786] device bridge_slave_1 left promiscuous mode [ 67.940144][ T3786] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.147678][ T3772] loop3: detected capacity change from 0 to 32768 [ 68.186939][ T3772] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (3772) [ 68.262006][ T27] audit: type=1326 audit(1719144199.096:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4999e7d0a9 code=0x0 [ 68.293764][ T3772] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 68.366442][ T3772] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 68.409317][ T3772] BTRFS info (device loop3): force zlib compression, level 3 [ 68.430705][ T3772] BTRFS info (device loop3): force clearing of disk cache [ 68.447829][ T3772] BTRFS info (device loop3): setting nodatasum [ 68.463171][ T3772] BTRFS info (device loop3): allowing degraded mounts [ 68.572440][ T3772] BTRFS info (device loop3): enabling disk space caching [ 68.599615][ T3772] BTRFS info (device loop3): disk space caching is enabled [ 70.014666][ T27] audit: type=1804 audit(1719144199.756:7): pid=3801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/9/file0" dev="sda1" ino=1948 res=1 errno=0 [ 70.040199][ C0] vkms_vblank_simulate: vblank timer overrun [ 70.131505][ T27] audit: type=1804 audit(1719144199.756:8): pid=3804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/9/file0" dev="sda1" ino=1948 res=1 errno=0 [ 70.277235][ T3772] BTRFS error (device loop3): open_ctree failed [ 70.787302][ T3844] loop1: detected capacity change from 0 to 32768 [ 70.804834][ T3844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (3844) [ 70.831848][ T27] audit: type=1326 audit(1719144201.666:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3865 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb48ec7d0a9 code=0x0 [ 70.871613][ T3844] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.924942][ T3844] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 71.030603][ T3844] BTRFS info (device loop1): force clearing of disk cache [ 71.038052][ T3844] BTRFS info (device loop1): using free space tree [ 71.296099][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.302814][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.789222][ T27] audit: type=1804 audit(1719144202.266:10): pid=3889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2446102671/syzkaller.sXKft1/15/file0" dev="sda1" ino=1967 res=1 errno=0 [ 71.919290][ T3844] BTRFS info (device loop1): enabling ssd optimizations [ 71.964057][ T27] audit: type=1804 audit(1719144202.266:11): pid=3890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2446102671/syzkaller.sXKft1/15/file0" dev="sda1" ino=1967 res=1 errno=0 [ 71.988566][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.002590][ T3844] BTRFS info (device loop1): rebuilding free space tree [ 72.009792][ T3574] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 72.019725][ T3574] Bluetooth: hci0: Injecting HCI hardware error event [ 72.040142][ T3576] Bluetooth: hci0: hardware error 0x00 [ 72.666181][ T3570] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 72.761069][ T27] audit: type=1326 audit(1719144203.596:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3920 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb48ec7d0a9 code=0x0 [ 73.236297][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 73.713718][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 74.249217][ T3576] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 74.327452][ T3964] loop2: detected capacity change from 0 to 32768 [ 74.347045][ T3964] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (3964) [ 74.396194][ T3964] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 74.420653][ T3964] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 74.460021][ T3964] BTRFS info (device loop2): force clearing of disk cache [ 74.467188][ T3964] BTRFS info (device loop2): using free space tree [ 75.091207][ T27] audit: type=1326 audit(1719144205.926:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4006 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d3f27d0a9 code=0x0 [ 75.153127][ T3964] BTRFS info (device loop2): enabling ssd optimizations [ 75.168593][ T3964] BTRFS info (device loop2): rebuilding free space tree [ 75.410271][ T3582] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.568034][ T4027] loop0: detected capacity change from 0 to 1024 [ 75.594596][ T3987] loop4: detected capacity change from 0 to 40427 [ 75.647276][ T3987] F2FS-fs (loop4): invalid crc value [ 75.670970][ T3987] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.693826][ T4031] debugfs: Directory 'netdev:nicvf0' with parent 'phy9' already present! [ 75.714480][ T4027] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 75.909412][ T3577] EXT4-fs (loop0): unmounting filesystem. [ 75.945198][ T4038] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 75.975977][ T3987] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 76.042153][ T4039] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 76.056118][ T3987] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.131143][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 76.166630][ T3574] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.176027][ T3574] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.184288][ T3578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.193699][ T3574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.210447][ T3574] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.214404][ T4038] syz-executor.1 (4038) used greatest stack depth: 19992 bytes left [ 76.226131][ T3574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.369890][ T4039] syz-executor.1 (4039) used greatest stack depth: 19960 bytes left [ 76.411415][ T935] cfg80211: failed to load regulatory.db [ 76.473749][ T3567] syz-executor.4: attempt to access beyond end of device [ 76.473749][ T3567] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 76.633842][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.431958][ T27] audit: type=1804 audit(1719144207.586:14): pid=4052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1561295869/syzkaller.j7JeA1/11/bus" dev="sda1" ino=1944 res=1 errno=0 [ 77.532313][ T4045] loop0: detected capacity change from 0 to 32768 [ 77.600701][ T4045] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4045) [ 77.613578][ T27] audit: type=1804 audit(1719144207.586:15): pid=4052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1561295869/syzkaller.j7JeA1/11/bus" dev="sda1" ino=1944 res=1 errno=0 [ 77.682261][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.700770][ T4045] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.739450][ T4045] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 77.749033][ T27] audit: type=1804 audit(1719144207.596:16): pid=4052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1561295869/syzkaller.j7JeA1/11/bus" dev="sda1" ino=1944 res=1 errno=0 [ 77.799351][ T4045] BTRFS info (device loop0): using free space tree [ 77.815129][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 77.875919][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.108706][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.129135][ T1091] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0x069db4c1f964a3fa7920222c4cd8dd34649c9e9233b7b654e99777786dec5adc found 0x1d5c7e68e4f085bef52cc8570e5d3d6c2912be6c9e14c7e2cd09c19b770e3db0 level 0 [ 78.370363][ T3574] Bluetooth: hci2: command tx timeout [ 78.422836][ T4045] BTRFS error (device loop0): failed to load root extent [ 78.526436][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.566825][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.634983][ T4043] device bridge_slave_0 entered promiscuous mode [ 78.700979][ T4045] BTRFS error (device loop0): open_ctree failed [ 78.755076][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.792834][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.814549][ T4043] device bridge_slave_1 entered promiscuous mode [ 78.997246][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.028366][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.193784][ T4043] team0: Port device team_slave_0 added [ 79.248668][ T4043] team0: Port device team_slave_1 added [ 79.299030][ T27] audit: type=1326 audit(1719144210.126:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f700f87d0a9 code=0x0 [ 79.321383][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.362700][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.371617][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.406464][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.474513][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.489125][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.538055][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.561542][ T4090] loop2: detected capacity change from 0 to 32768 [ 79.611915][ T4090] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4090) [ 79.677820][ T4090] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.725177][ T4090] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 79.739316][ T4090] BTRFS info (device loop2): force clearing of disk cache [ 79.749010][ T4090] BTRFS info (device loop2): using free space tree [ 79.802345][ T4109] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 80.012664][ T4090] BTRFS info (device loop2): enabling ssd optimizations [ 80.103431][ T4043] device hsr_slave_0 entered promiscuous mode [ 80.114055][ T4090] BTRFS info (device loop2): rebuilding free space tree [ 80.123451][ T4043] device hsr_slave_1 entered promiscuous mode [ 80.136629][ T4145] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.162897][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.191794][ T4043] Cannot create hsr debugfs directory [ 80.293839][ T4135] team0: Port device macvlan2 added [ 80.418705][ T3574] Bluetooth: hci2: command tx timeout [ 80.489834][ T3582] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 80.853287][ T4176] debugfs: Directory 'netdev:nicvf0' with parent 'phy8' already present! [ 81.286152][ T27] audit: type=1804 audit(1719144212.116:18): pid=4184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/24/file0" dev="sda1" ino=1960 res=1 errno=0 [ 81.468418][ T27] audit: type=1804 audit(1719144212.146:19): pid=4185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/24/file0" dev="sda1" ino=1960 res=1 errno=0 [ 81.755868][ T9] device hsr_slave_0 left promiscuous mode [ 81.769931][ T9] device hsr_slave_1 left promiscuous mode [ 81.788968][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.808731][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.848264][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.881468][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.972248][ T9] device bridge_slave_1 left promiscuous mode [ 81.979989][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.026210][ T9] device bridge_slave_0 left promiscuous mode [ 82.037489][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.079451][ T9] device veth1_macvtap left promiscuous mode [ 82.085924][ T9] device veth0_macvtap left promiscuous mode [ 82.102461][ T9] device veth1_vlan left promiscuous mode [ 82.108538][ T9] device veth0_vlan left promiscuous mode [ 82.489334][ T3574] Bluetooth: hci2: command tx timeout [ 82.567836][ T9] team0 (unregistering): Port device team_slave_1 removed [ 82.585207][ T9] team0 (unregistering): Port device team_slave_0 removed [ 82.601834][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.627978][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.713841][ T9] bond0 (unregistering): Released all slaves [ 82.808328][ T4232] debugfs: Directory 'netdev:nicvf0' with parent 'phy9' already present! [ 83.033032][ T4043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.118554][ T4043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.176972][ T4043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.219863][ T4043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.399305][ T3927] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.520610][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.563378][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 83.574022][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.596720][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.631533][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.649474][ T3927] usb 2-1: Using ep0 maxpacket: 8 [ 83.674040][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.695651][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.733039][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.740260][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.769502][ T3927] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 83.793922][ T3927] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 83.854362][ T3927] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.901221][ T4043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.949384][ T4043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.994852][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.010358][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.053462][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.079446][ T3927] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 84.112324][ T3927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.139656][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.147620][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.156756][ T27] audit: type=1326 audit(1719144214.996:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f700f87d0a9 code=0x0 [ 84.189182][ T3927] usb 2-1: Product: syz [ 84.198941][ T3927] usb 2-1: Manufacturer: syz [ 84.206399][ T3927] usb 2-1: SerialNumber: syz [ 84.213901][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.244933][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.258494][ T3927] usb 2-1: config 0 descriptor?? [ 84.287272][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.299915][ T4253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.322565][ T3927] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 84.364726][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.378824][ T3927] imon 2-1:0.0: unable to initialize intf0, err -19 [ 84.404290][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.422965][ T3927] imon:imon_probe: failed to initialize context! [ 84.435273][ T3927] imon 2-1:0.0: unable to register, err -19 [ 84.463129][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.528452][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.569430][ T3574] Bluetooth: hci2: command tx timeout [ 84.583484][ T3927] usb 2-1: USB disconnect, device number 2 [ 84.616959][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.717836][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.753183][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.801091][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.828290][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.124183][ T4292] debugfs: Directory 'netdev:nicvf0' with parent 'phy4' already present! [ 85.467446][ T4308] random: crng reseeded on system resumption [ 85.591857][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.610724][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.636582][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.720425][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.729328][ T935] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.743610][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.810677][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.832982][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.867379][ T4043] device veth0_vlan entered promiscuous mode [ 85.883002][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.900995][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.932753][ T4043] device veth1_vlan entered promiscuous mode [ 86.027409][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.044919][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.081316][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.100022][ T935] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 86.114878][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.140653][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.175765][ T935] usb 1-1: config 0 descriptor?? [ 86.212146][ T4043] device veth0_macvtap entered promiscuous mode [ 86.234750][ T4043] device veth1_macvtap entered promiscuous mode [ 86.341617][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.423105][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.499666][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.523017][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.539635][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.592769][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.633504][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.681178][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.726322][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.767410][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.783721][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.835861][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.873272][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.944547][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.009691][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.017140][ T4330] random: crng reseeded on system resumption [ 87.040494][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.096432][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.137169][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.176492][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.194564][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.232567][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.302130][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.345980][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.366094][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.408027][ T4043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.439953][ T4043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.470037][ T4043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.504791][ T4043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.106817][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.123297][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.161135][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.235491][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.254752][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.276995][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.289340][ T4178] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.399264][ T935] usb 1-1: string descriptor 0 read error: -71 [ 88.408269][ T935] ldusb 1-1:0.0: Interrupt in endpoint not found [ 88.441491][ T935] usb 1-1: USB disconnect, device number 2 [ 88.539247][ T4178] usb 2-1: Using ep0 maxpacket: 8 [ 88.659602][ T4178] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.672534][ T4331] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 88.686750][ T4178] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.425470][ T27] audit: type=1804 audit(1719144219.596:21): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/41/bus" dev="sda1" ino=1964 res=1 errno=0 [ 89.467692][ T4178] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.478900][ T4178] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.492876][ T4178] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.502520][ T4178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.638813][ T27] audit: type=1804 audit(1719144220.166:22): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/41/bus" dev="sda1" ino=1964 res=1 errno=0 [ 89.665001][ T3927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.731568][ T27] audit: type=1804 audit(1719144220.176:23): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/41/bus" dev="sda1" ino=1964 res=1 errno=0 [ 89.939607][ T4178] usb 2-1: GET_CAPABILITIES returned 0 [ 89.947621][ T4178] usbtmc 2-1:16.0: can't read capabilities [ 90.039284][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.059967][ T3927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.079350][ T3927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.093216][ T3927] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 90.102584][ T3927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.121280][ T3927] usb 3-1: config 0 descriptor?? [ 90.173791][ T4178] usb 2-1: USB disconnect, device number 3 [ 90.639220][ T3927] usbhid 3-1:0.0: can't add hid device: -71 [ 90.645551][ T3927] usbhid: probe of 3-1:0.0 failed with error -71 [ 90.672987][ T3927] usb 3-1: USB disconnect, device number 2 [ 91.107757][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058a56400: rx timeout, send abort [ 91.118134][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888058a56400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 91.266011][ T4400] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 92.271258][ T27] audit: type=1804 audit(1719144222.406:24): pid=4408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/37/bus" dev="sda1" ino=1948 res=1 errno=0 [ 92.416221][ T27] audit: type=1804 audit(1719144222.416:25): pid=4408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/37/bus" dev="sda1" ino=1948 res=1 errno=0 [ 92.560959][ T27] audit: type=1804 audit(1719144222.416:26): pid=4408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/37/bus" dev="sda1" ino=1948 res=1 errno=0 [ 92.586615][ T3576] Bluetooth: hci2: command tx timeout [ 92.636822][ T4422] loop4: detected capacity change from 0 to 1024 [ 92.743813][ T4422] hfsplus: unable to parse mount options [ 94.638068][ T27] audit: type=1804 audit(1719144224.676:27): pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/41/bus" dev="sda1" ino=1964 res=1 errno=0 [ 94.772161][ T27] audit: type=1804 audit(1719144224.686:28): pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/41/bus" dev="sda1" ino=1964 res=1 errno=0 [ 94.859657][ T4452] loop4: detected capacity change from 0 to 2048 [ 94.873568][ T27] audit: type=1804 audit(1719144224.686:29): pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/41/bus" dev="sda1" ino=1964 res=1 errno=0 [ 94.960462][ T4461] loop1: detected capacity change from 0 to 512 [ 95.007770][ T4452] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 8192 [ 95.023415][ T4452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.160703][ T3567] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 95.191510][ T3567] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 95.544355][ T3567] EXT4-fs (loop4): unmounting filesystem. [ 95.797419][ T4478] binder: 4475:4478 ioctl 4018620d 0 returned -22 [ 96.774906][ T4485] loop0: detected capacity change from 0 to 512 [ 97.556930][ T27] audit: type=1804 audit(1719144227.676:30): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/45/bus" dev="sda1" ino=1965 res=1 errno=0 [ 97.679982][ T27] audit: type=1804 audit(1719144227.686:31): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/45/bus" dev="sda1" ino=1965 res=1 errno=0 [ 97.737480][ T4485] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.822373][ T4485] ext4 filesystem being mounted at /root/syzkaller-testdir691655337/syzkaller.su6d0h/53/bus supports timestamps until 2038 (0x7fffffff) [ 97.881095][ T27] audit: type=1804 audit(1719144227.686:32): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2434783922/syzkaller.veGx7N/45/bus" dev="sda1" ino=1965 res=1 errno=0 [ 98.018859][ T4485] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #12: block 32: comm syz-executor.0: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 98.149245][ T4485] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 98.289776][ T4485] CIFS mount error: No usable UNC path provided in device string! [ 98.289776][ T4485] [ 98.320118][ T4277] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.340772][ T4505] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #12: block 32: comm syz-executor.0: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 98.587562][ T4516] binder: 4508:4516 ioctl 4018620d 0 returned -22 [ 99.431928][ T4515] sched: RT throttling activated [ 99.952253][ T4485] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 99.996978][ T4505] EXT4-fs error (device loop0) in ext4_delete_entry:2751: Corrupt filesystem [ 100.019766][ T3574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.108601][ T3574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.116748][ T3574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.124906][ T4505] EXT4-fs warning (device loop0): ext4_rename_delete:3735: inode #12: comm syz-executor.0: Deleting old file: nlink 2, error=-117 [ 100.141758][ T3574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.143856][ T4277] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.977069][ T27] audit: type=1804 audit(1719144231.046:33): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1561295869/syzkaller.j7JeA1/33/bus" dev="sda1" ino=1959 res=1 errno=0 [ 101.002996][ T3574] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.012710][ T3574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.089330][ T27] audit: type=1804 audit(1719144231.056:34): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1561295869/syzkaller.j7JeA1/33/bus" dev="sda1" ino=1959 res=1 errno=0 [ 101.115431][ T27] audit: type=1804 audit(1719144231.066:35): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1561295869/syzkaller.j7JeA1/33/bus" dev="sda1" ino=1959 res=1 errno=0 [ 101.144015][ T27] audit: type=1326 audit(1719144231.846:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f87d0a9 code=0x7fc00000 [ 101.190310][ T4277] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.287285][ T3577] EXT4-fs (loop0): unmounting filesystem. [ 101.297800][ T27] audit: type=1326 audit(1719144231.846:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f700f87d0a9 code=0x7fc00000 [ 101.336950][ T4277] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.391486][ T27] audit: type=1326 audit(1719144231.846:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f87d0a9 code=0x7fc00000 [ 101.682403][ T27] audit: type=1326 audit(1719144231.846:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f87d0a9 code=0x7fc00000 [ 101.774691][ T4525] chnl_net:caif_netlink_parms(): no params data found [ 101.967862][ T27] audit: type=1326 audit(1719144231.846:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f87d0a9 code=0x7fc00000 [ 102.177956][ T27] audit: type=1326 audit(1719144231.846:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f87d0a9 code=0x7fc00000 [ 102.233704][ T27] audit: type=1326 audit(1719144231.846:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f87d0a9 code=0x7fc00000 [ 102.272446][ T4525] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.301099][ T4525] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.308000][ T4561] process 'syz-executor.1' launched '/dev/fd/3' with NULL argv: empty string added [ 102.322411][ T4525] device bridge_slave_0 entered promiscuous mode [ 102.329152][ T3927] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.400790][ T4525] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.418189][ T4525] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.448596][ T4525] device bridge_slave_1 entered promiscuous mode [ 102.560686][ T4525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.647160][ T4525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.772491][ T3927] usb 1-1: config 0 has no interfaces? [ 102.778053][ T3927] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 102.812569][ T3927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.897315][ T4579] binder: 4573:4579 ioctl 4018620d 0 returned -22 [ 103.040543][ T3927] usb 1-1: config 0 descriptor?? [ 103.049626][ T3574] Bluetooth: hci0: command tx timeout [ 103.185146][ T4525] team0: Port device team_slave_0 added [ 103.575851][ T4525] team0: Port device team_slave_1 added [ 103.667421][ T4584] random: crng reseeded on system resumption [ 103.797438][ T4525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.805200][ T4525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.845341][ T4525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.920935][ T4525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.934094][ T4525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.962121][ T4525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.091887][ T4525] device hsr_slave_0 entered promiscuous mode [ 104.121880][ T4525] device hsr_slave_1 entered promiscuous mode [ 104.321725][ T4277] device hsr_slave_0 left promiscuous mode [ 104.338032][ T4277] device hsr_slave_1 left promiscuous mode [ 104.356093][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.376644][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.401723][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.433064][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.468416][ T4277] device bridge_slave_0 left promiscuous mode [ 104.481194][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.516118][ T4277] device veth1_macvtap left promiscuous mode [ 104.523218][ T4277] device veth0_macvtap left promiscuous mode [ 104.529464][ T4277] device veth1_vlan left promiscuous mode [ 104.538680][ T4277] device veth0_vlan left promiscuous mode [ 104.784177][ T4277] team0 (unregistering): Port device macvlan2 removed [ 104.954329][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 105.011065][ T4621] binder: 4617:4621 ioctl 4018620d 0 returned -22 [ 105.129243][ T3574] Bluetooth: hci0: command tx timeout [ 105.543935][ T4180] usb 1-1: USB disconnect, device number 3 [ 105.580330][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 105.700374][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.734341][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.781714][ T4627] loop2: detected capacity change from 0 to 4096 [ 105.795058][ T4627] ======================================================= [ 105.795058][ T4627] WARNING: The mand mount option has been deprecated and [ 105.795058][ T4627] and is ignored by this kernel. Remove the mand [ 105.795058][ T4627] option from the mount to silence this warning. [ 105.795058][ T4627] ======================================================= [ 105.842436][ T4277] bond0 (unregistering): Released all slaves [ 106.213160][ T4639] random: crng reseeded on system resumption [ 106.790891][ T4525] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.830945][ T4525] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.863065][ T4525] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.903588][ T4525] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.184715][ T4636] loop2: detected capacity change from 0 to 32768 [ 107.209278][ T3574] Bluetooth: hci0: command tx timeout [ 107.229523][ T4525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.242990][ T4651] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 107.279596][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.288223][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.344485][ T4636] non-latin1 character 0xffff found in JFS file name [ 107.365791][ T4525] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.373220][ T4636] mount with iocharset=utf8 to access [ 107.394065][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.416569][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.449920][ T3937] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.457083][ T3937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.501568][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055150c00: rx timeout, send abort [ 107.510105][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888055150c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 107.519807][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.610038][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.634857][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.680234][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.687356][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.770513][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.809682][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.859687][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.884055][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.931090][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.978186][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.000384][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.033600][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.046420][ T4665] loop2: detected capacity change from 0 to 47 [ 108.064538][ T4525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.163727][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.220500][ T4665] syz-executor.2: attempt to access beyond end of device [ 108.220500][ T4665] loop2: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 108.250443][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.258591][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.301763][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.319965][ T4665] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 108.403928][ T4665] syz-executor.2: attempt to access beyond end of device [ 108.403928][ T4665] loop2: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 108.534122][ T4665] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 108.579379][ T4665] syz-executor.2: attempt to access beyond end of device [ 108.579379][ T4665] loop2: rw=2049, sector=52, nr_sectors = 2 limit=47 [ 108.689933][ T4665] Buffer I/O error on dev loop2, logical block 26, lost async page write [ 108.747313][ T4665] syz-executor.2: attempt to access beyond end of device [ 108.747313][ T4665] loop2: rw=2049, sector=54, nr_sectors = 2 limit=47 [ 108.850735][ T4665] Buffer I/O error on dev loop2, logical block 27, lost async page write [ 108.977707][ T3948] kworker/u4:8: attempt to access beyond end of device [ 108.977707][ T3948] loop2: rw=1, sector=48, nr_sectors = 2 limit=47 [ 109.015225][ T3948] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 109.147847][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.187493][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.231621][ T4525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.289846][ T3574] Bluetooth: hci0: command tx timeout [ 109.871814][ T4715] loop3: detected capacity change from 0 to 1024 [ 109.924661][ T4715] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 109.985878][ T4715] EXT4-fs (loop3): invalid journal inode [ 110.018137][ T4715] EXT4-fs (loop3): can't get journal size [ 110.074193][ T4715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.240281][ T4715] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 110.314986][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.344715][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.481715][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.554390][ T4525] device veth0_vlan entered promiscuous mode [ 110.608729][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.633327][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.674990][ T4525] device veth1_vlan entered promiscuous mode [ 110.710773][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.720222][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.779235][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.787913][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.810055][ T4043] EXT4-fs (loop3): unmounting filesystem. [ 110.841886][ T4525] device veth0_macvtap entered promiscuous mode [ 110.898787][ T3642] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.921471][ T4525] device veth1_macvtap entered promiscuous mode [ 110.955892][ T3576] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.979639][ T3578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.988286][ T3578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.996949][ T3578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.004624][ T3578] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 111.012912][ T3578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.088356][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.121392][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.133671][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.144434][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.155999][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.166556][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.177871][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.188421][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.200359][ T4525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.204433][ T3642] usb 1-1: Using ep0 maxpacket: 16 [ 111.223237][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.236635][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.254408][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.266428][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.295647][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.334354][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.347033][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.363098][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.373491][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.386858][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.389351][ T3642] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 111.397240][ T4525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.425470][ T3642] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 111.428587][ T4525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.448513][ T3642] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 111.457644][ T4525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.468842][ T3642] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.504612][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.510876][ T3642] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 111.525534][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.537805][ T3642] usb 1-1: config 0 has no interface number 0 [ 111.557648][ T3642] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 111.575283][ T4525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.601203][ T3642] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 111.604662][ T4525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.633604][ T3642] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.665986][ T3642] usb 1-1: config 0 interface 125 has no altsetting 0 [ 111.669176][ T4525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.709208][ T4525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.869404][ T3642] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 111.884989][ T3642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.895622][ T3642] usb 1-1: Product: syz [ 111.903551][ T3642] usb 1-1: Manufacturer: syz [ 111.908178][ T3642] usb 1-1: SerialNumber: syz [ 111.923441][ T3642] usb 1-1: config 0 descriptor?? [ 112.083000][ T4277] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.167718][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.184673][ T3642] usb 1-1: USB disconnect, device number 4 [ 112.233952][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.235305][ T4277] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.278360][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.354651][ T4277] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.416140][ T3723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.447903][ T4277] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.477674][ T3723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.532265][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.559880][ T4743] chnl_net:caif_netlink_parms(): no params data found [ 112.846393][ T4815] loop1: detected capacity change from 0 to 128 [ 112.874972][ T4815] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 112.898724][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.900314][ T4815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.925470][ T4743] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.934522][ T4743] device bridge_slave_0 entered promiscuous mode [ 112.960785][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.016506][ T4743] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.025163][ T3642] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.050797][ T4743] device bridge_slave_1 entered promiscuous mode [ 113.060635][ T3578] Bluetooth: hci4: command tx timeout [ 113.199153][ T3927] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.443076][ T4743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.455272][ T3927] usb 5-1: Using ep0 maxpacket: 8 [ 113.526502][ T4743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.609834][ T4743] team0: Port device team_slave_0 added [ 113.619281][ T3927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.628902][ T4743] team0: Port device team_slave_1 added [ 113.642653][ T3927] usb 5-1: config 0 has no interfaces? [ 113.729438][ T3927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.749136][ T3927] usb 5-1: config 0 has no interfaces? [ 113.774477][ T4743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.782080][ T3642] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 113.810334][ T4743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.838278][ T3642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.839548][ T3927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.849499][ T3642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.870022][ T3642] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 113.894198][ T4743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.896165][ T4830] overlayfs: unrecognized mount option "dont_hash" or missing value [ 113.910013][ T4743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.920705][ T4743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.946859][ T3927] usb 5-1: config 0 has no interfaces? [ 113.947271][ T4743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.963328][ T3642] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 113.973886][ T3642] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 113.982106][ T3642] usb 4-1: Manufacturer: syz [ 113.988365][ T3642] usb 4-1: config 0 descriptor?? [ 114.150227][ T4743] device hsr_slave_0 entered promiscuous mode [ 114.163983][ T4743] device hsr_slave_1 entered promiscuous mode [ 114.172403][ T4743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.181867][ T4743] Cannot create hsr debugfs directory [ 114.211848][ T3927] usb 5-1: string descriptor 0 read error: -22 [ 114.223507][ T3927] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.273378][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 114.273393][ T27] audit: type=1326 audit(1719144245.106:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d3f27d0a9 code=0x0 [ 114.276423][ T3927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.359839][ T3927] usb 5-1: config 0 descriptor?? [ 114.539259][ T3642] usbhid 4-1:0.0: can't add hid device: -71 [ 114.545274][ T3642] usbhid: probe of 4-1:0.0 failed with error -71 [ 114.570911][ T3642] usb 4-1: USB disconnect, device number 2 [ 115.229988][ T3574] Bluetooth: hci4: command tx timeout [ 115.568884][ T4870] loop3: detected capacity change from 0 to 1764 [ 115.638289][ T4870] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 115.674015][ T4277] device hsr_slave_0 left promiscuous mode [ 115.706960][ T4277] device hsr_slave_1 left promiscuous mode [ 115.732215][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.790624][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.881914][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.958968][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.028020][ T4277] device bridge_slave_1 left promiscuous mode [ 116.034598][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.053942][ T4277] device bridge_slave_0 left promiscuous mode [ 116.064974][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.116409][ T4277] device veth1_macvtap left promiscuous mode [ 116.127942][ T4277] device veth0_macvtap left promiscuous mode [ 116.142844][ T4277] device veth1_vlan left promiscuous mode [ 116.162251][ T4277] device veth0_vlan left promiscuous mode [ 116.299940][ T3938] usb 5-1: USB disconnect, device number 2 [ 116.786237][ T4882] loop3: detected capacity change from 0 to 32768 [ 116.800304][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 116.832031][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 116.845164][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.855505][ T4882] XFS (loop3): Mounting V5 Filesystem [ 116.862988][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.936450][ T4277] bond0 (unregistering): Released all slaves [ 116.963475][ T4882] XFS (loop3): Ending clean mount [ 117.000813][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.015137][ T4043] XFS (loop3): Unmounting Filesystem [ 117.023500][ T4888] device vlan2 entered promiscuous mode [ 117.030468][ T4888] device bond0 entered promiscuous mode [ 117.036261][ T4888] device bond_slave_0 entered promiscuous mode [ 117.042806][ T4888] device bond_slave_1 entered promiscuous mode [ 117.053750][ T4888] device bond0 left promiscuous mode [ 117.059645][ T4888] device bond_slave_0 left promiscuous mode [ 117.067361][ T4888] device bond_slave_1 left promiscuous mode [ 117.126264][ T4880] bridge0: port 3(gretap0) entered blocking state [ 117.141267][ T4880] bridge0: port 3(gretap0) entered disabled state [ 117.181787][ T4880] device gretap0 entered promiscuous mode [ 117.201481][ T4880] bridge0: port 3(gretap0) entered blocking state [ 117.208409][ T4880] bridge0: port 3(gretap0) entered forwarding state [ 117.299803][ T3574] Bluetooth: hci4: command tx timeout [ 117.364116][ T4743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.424986][ T27] audit: type=1326 audit(1719144248.256:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99fa87d0a9 code=0x0 [ 117.461799][ T4743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.484846][ T4743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.530105][ T4743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.762035][ T4743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.788202][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.798509][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.844963][ T4743] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.893888][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.920020][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.928531][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.935675][ T4178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.981553][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.995089][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.007164][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.017166][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.024309][ T4180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.032487][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.052805][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.062312][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.127844][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.137624][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.139406][ T935] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.147368][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.183988][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.195894][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.208946][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.255444][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.267400][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.283271][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.399144][ T935] usb 1-1: Using ep0 maxpacket: 8 [ 118.519335][ T935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.539521][ T935] usb 1-1: config 0 has no interfaces? [ 118.619453][ T935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.639550][ T935] usb 1-1: config 0 has no interfaces? [ 118.739479][ T935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.774603][ T935] usb 1-1: config 0 has no interfaces? [ 118.851135][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.858598][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.884811][ T4743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.940484][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.955762][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.986950][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.005489][ T3937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.044628][ T935] usb 1-1: string descriptor 0 read error: -22 [ 119.053858][ T4743] device veth0_vlan entered promiscuous mode [ 119.060142][ T935] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 119.097127][ T4743] device veth1_vlan entered promiscuous mode [ 119.103341][ T935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.135115][ T935] usb 1-1: config 0 descriptor?? [ 119.151731][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.166065][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.174569][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.188526][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.226051][ T4743] device veth0_macvtap entered promiscuous mode [ 119.234211][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.257177][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.271440][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.288139][ T4743] device veth1_macvtap entered promiscuous mode [ 119.358513][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.369566][ T3574] Bluetooth: hci4: command tx timeout [ 119.381794][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.396687][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.564736][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.713746][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.918820][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.078557][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.273299][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.342735][ T4743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.371155][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.400181][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.408901][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.446626][ T27] audit: type=1326 audit(1719144251.276:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99fa87d0a9 code=0x0 [ 120.492780][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.561368][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.608383][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.631812][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.660917][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.678505][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.728293][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.750591][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.776323][ T4986] loop3: detected capacity change from 0 to 64 [ 120.790924][ T4743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.826226][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.838333][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.875171][ T4743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.896084][ T4743] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.925286][ T4743] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.943666][ T4743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.175206][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.011202][ T4180] usb 1-1: USB disconnect, device number 5 [ 122.018416][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.088476][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.129131][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.139921][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.185180][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.275162][ T5007] loop2: detected capacity change from 0 to 47 [ 122.334019][ T5007] syz-executor.2: attempt to access beyond end of device [ 122.334019][ T5007] loop2: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 122.404968][ T5007] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 122.435302][ T5007] syz-executor.2: attempt to access beyond end of device [ 122.435302][ T5007] loop2: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 122.499228][ T5007] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 122.518156][ T5007] syz-executor.2: attempt to access beyond end of device [ 122.518156][ T5007] loop2: rw=2049, sector=52, nr_sectors = 2 limit=47 [ 122.562460][ T5007] Buffer I/O error on dev loop2, logical block 26, lost async page write [ 122.579242][ T5007] syz-executor.2: attempt to access beyond end of device [ 122.579242][ T5007] loop2: rw=2049, sector=54, nr_sectors = 2 limit=47 [ 122.602343][ T5007] Buffer I/O error on dev loop2, logical block 27, lost async page write [ 122.669575][ T102] kworker/u4:4: attempt to access beyond end of device [ 122.669575][ T102] loop2: rw=1, sector=48, nr_sectors = 2 limit=47 [ 122.765677][ T102] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 123.090288][ T27] audit: type=1326 audit(1719144253.926:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb57587d0a9 code=0x0 [ 124.647589][ T5042] loop0: detected capacity change from 0 to 64 [ 126.596991][ T27] audit: type=1804 audit(1719144257.096:104): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3477167728/syzkaller.j8WHW7/2/bus" dev="sda1" ino=1956 res=1 errno=0 [ 126.649367][ T3932] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.095072][ T27] audit: type=1804 audit(1719144257.096:105): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3477167728/syzkaller.j8WHW7/2/bus" dev="sda1" ino=1956 res=1 errno=0 [ 127.169333][ T27] audit: type=1804 audit(1719144257.096:106): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3477167728/syzkaller.j8WHW7/2/bus" dev="sda1" ino=1956 res=1 errno=0 [ 127.194207][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.199258][ T3932] usb 4-1: Using ep0 maxpacket: 8 [ 127.286325][ T5067] random: crng reseeded on system resumption [ 127.319354][ T3932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.339709][ T3932] usb 4-1: config 0 has no interfaces? [ 127.419468][ T3932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.443585][ T3932] usb 4-1: config 0 has no interfaces? [ 127.610147][ T3932] usb 4-1: unable to read config index 2 descriptor/all [ 127.620483][ T3932] usb 4-1: can't read configurations, error -71 [ 128.192085][ T5056] loop1: detected capacity change from 0 to 32768 [ 128.253053][ T27] audit: type=1326 audit(1719144259.086:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d28c7d0a9 code=0x0 [ 128.275333][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.284154][ T5056] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 128.309147][ T5056] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 128.430384][ T5056] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 128.448212][ T5091] loop2: detected capacity change from 0 to 64 [ 129.299147][ T27] audit: type=1804 audit(1719144259.366:108): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/90/bus" dev="sda1" ino=1967 res=1 errno=0 [ 129.324030][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.372657][ T3927] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 129.389776][ T3927] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 129.480169][ T27] audit: type=1804 audit(1719144259.376:109): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/90/bus" dev="sda1" ino=1967 res=1 errno=0 [ 129.785097][ T27] audit: type=1804 audit(1719144259.376:110): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/90/bus" dev="sda1" ino=1967 res=1 errno=0 [ 129.810037][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.273713][ T3927] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 883ms [ 130.283851][ T3927] gfs2: fsid=syz:syz.0: jid=0: Done [ 130.291637][ T5056] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 130.321735][ T5056] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 130.624676][ T27] audit: type=1804 audit(1719144261.456:111): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3477167728/syzkaller.j8WHW7/7/file1" dev="sda1" ino=1944 res=1 errno=0 [ 130.745058][ T27] audit: type=1804 audit(1719144261.456:112): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3477167728/syzkaller.j8WHW7/7/file1" dev="sda1" ino=1944 res=1 errno=0 [ 130.876793][ T27] audit: type=1804 audit(1719144261.456:113): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3477167728/syzkaller.j8WHW7/7/file1" dev="sda1" ino=1944 res=1 errno=0 [ 131.194693][ T5131] random: crng reseeded on system resumption [ 131.834818][ T5133] loop1: detected capacity change from 0 to 128 [ 131.938182][ T5133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.982416][ T5133] ext4 filesystem being mounted at /root/syzkaller-testdir1561295869/syzkaller.j7JeA1/81/mnt supports timestamps until 2038 (0x7fffffff) [ 132.202021][ T3570] EXT4-fs (loop1): unmounting filesystem. [ 132.996648][ T27] audit: type=1804 audit(1719144263.126:114): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3649026420/syzkaller.S791fm/20/bus" dev="sda1" ino=1966 res=1 errno=0 [ 133.080933][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.087283][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.181455][ T27] audit: type=1804 audit(1719144263.126:115): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3649026420/syzkaller.S791fm/20/bus" dev="sda1" ino=1966 res=1 errno=0 [ 133.249284][ T3614] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.277128][ T5144] debugfs: Directory 'netdev:nicvf0' with parent 'phy8' already present! [ 133.289319][ T27] audit: type=1804 audit(1719144263.136:116): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3649026420/syzkaller.S791fm/20/bus" dev="sda1" ino=1966 res=1 errno=0 [ 133.629314][ T3614] usb 4-1: config index 0 descriptor too short (expected 64754, got 72) [ 133.643271][ T3614] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.676604][ T3614] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 133.712080][ T3614] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 133.859439][ T3614] usb 4-1: config index 1 descriptor too short (expected 64754, got 72) [ 133.881698][ T3614] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.903211][ T3614] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 133.927497][ T3614] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 134.019374][ T3614] usb 4-1: string descriptor 0 read error: -71 [ 134.028709][ T3614] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.052358][ T3614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.097221][ T3614] usb 4-1: can't set config #1, error -71 [ 134.107620][ T3614] usb 4-1: USB disconnect, device number 5 [ 134.193239][ T5155] loop0: detected capacity change from 0 to 512 [ 134.239711][ T5155] EXT4-fs (loop0): 1 truncate cleaned up [ 134.245512][ T5155] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.355804][ T5151] loop2: detected capacity change from 0 to 40427 [ 134.411845][ T5151] F2FS-fs (loop2): invalid crc value [ 134.466100][ T5151] F2FS-fs (loop2): Found nat_bits in checkpoint [ 134.782501][ T5151] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 135.026550][ T5175] random: crng reseeded on system resumption [ 135.332902][ T5179] loop4: detected capacity change from 0 to 512 [ 135.391915][ T5179] EXT4-fs (loop4): 1 truncate cleaned up [ 135.398067][ T5179] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.495455][ T3577] EXT4-fs (loop0): unmounting filesystem. [ 135.598381][ T27] audit: type=1800 audit(1719144266.426:117): pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 135.628552][ T5185] debugfs: Directory 'netdev:nicvf0' with parent 'phy8' already present! [ 135.659527][ T5188] usb usb8: usbfs: process 5188 (syz-executor.0) did not claim interface 0 before use [ 135.716170][ T5190] loop3: detected capacity change from 0 to 2048 [ 135.826313][ T5190] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.179371][ T3939] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.382318][ T4525] EXT4-fs (loop4): unmounting filesystem. [ 136.438881][ T4743] syz-executor.2: attempt to access beyond end of device [ 136.438881][ T4743] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.454513][ T3939] usb 2-1: Using ep0 maxpacket: 8 [ 136.580148][ T3939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.594962][ T3939] usb 2-1: config 0 has no interfaces? [ 136.699573][ T3939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.718136][ T5210] usb usb8: usbfs: process 5210 (syz-executor.0) did not claim interface 0 before use [ 136.735040][ T3939] usb 2-1: config 0 has no interfaces? [ 136.819618][ T3939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.848591][ T3939] usb 2-1: config 0 has no interfaces? [ 137.099452][ T3939] usb 2-1: string descriptor 0 read error: -22 [ 137.111617][ T3939] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 137.170432][ T3939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.244325][ T3939] usb 2-1: config 0 descriptor?? [ 137.355256][ T5221] random: crng reseeded on system resumption [ 137.657836][ T4043] EXT4-fs (loop3): unmounting filesystem. [ 138.494656][ T5229] loop4: detected capacity change from 0 to 128 [ 139.079135][ T4180] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.230499][ T5245] syz-executor.2 (pid 5245) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 139.273263][ T3932] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.762256][ T3927] usb 2-1: USB disconnect, device number 4 [ 139.850054][ T3932] usb 4-1: Using ep0 maxpacket: 8 [ 140.032388][ T4180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.052300][ T4180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.072359][ T4180] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 140.086268][ T4180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.099320][ T3932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.105834][ T4180] usb 1-1: config 0 descriptor?? [ 140.119115][ T3932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.129251][ T3932] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 140.138413][ T3932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.152368][ T3932] usb 4-1: config 0 descriptor?? [ 140.430838][ T5255] loop4: detected capacity change from 0 to 2048 [ 140.475916][ T5255] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.541483][ T5255] syz-executor.4[5255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.541553][ T5255] syz-executor.4[5255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.664806][ T4525] EXT4-fs (loop4): unmounting filesystem. [ 140.969151][ T27] audit: type=1800 audit(1719144271.626:118): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 141.143639][ T3932] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0xd [ 141.155716][ T3932] steelseries_srws1 0003:1038:1410.0001: item fetching failed at offset 6/7 [ 141.165038][ T3932] steelseries_srws1 0003:1038:1410.0001: parse failed [ 141.172076][ T3932] steelseries_srws1: probe of 0003:1038:1410.0001 failed with error -22 [ 141.176293][ T5270] fuse: Invalid rootmode [ 141.200555][ T5269] random: crng reseeded on system resumption [ 141.531268][ T5273] debugfs: Directory 'netdev:nicvf0' with parent 'phy8' already present! [ 141.549217][ T4180] usbhid 1-1:0.0: can't add hid device: -71 [ 141.555321][ T4180] usbhid: probe of 1-1:0.0 failed with error -71 [ 141.572655][ T4180] usb 1-1: USB disconnect, device number 6 [ 141.679261][ T27] audit: type=1326 audit(1719144272.506:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d3f27d0a9 code=0x0 [ 141.996356][ T5283] loop2: detected capacity change from 0 to 2048 [ 142.004282][ T5283] EXT4-fs: Ignoring removed orlov option [ 142.042389][ T5283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.093851][ T5283] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.142297][ T4180] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.155306][ T5283] EXT4-fs (loop2): Remounting filesystem read-only [ 142.238040][ T4743] EXT4-fs (loop2): unmounting filesystem. [ 142.347086][ T5300] loop2: detected capacity change from 0 to 2048 [ 142.412672][ T5300] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.418916][ T3932] usb 4-1: USB disconnect, device number 6 [ 142.421344][ T4180] usb 1-1: Using ep0 maxpacket: 8 [ 142.543203][ T4180] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.558215][ T4180] usb 1-1: config 0 has no interfaces? [ 142.578237][ T5307] syz-executor.2[5307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.580730][ T5307] syz-executor.2[5307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.669453][ T4180] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.706855][ T4180] usb 1-1: config 0 has no interfaces? [ 142.799419][ T4180] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.820162][ T4180] usb 1-1: config 0 has no interfaces? [ 143.102428][ T4743] EXT4-fs (loop2): unmounting filesystem. [ 143.123774][ T4180] usb 1-1: string descriptor 0 read error: -22 [ 143.145138][ T4180] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 143.173437][ T4180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.205120][ T4180] usb 1-1: config 0 descriptor?? [ 143.252427][ T5321] random: crng reseeded on system resumption [ 144.929122][ T4180] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.287930][ T27] audit: type=1326 audit(1719144276.116:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d28c7d0a9 code=0x0 [ 145.339566][ T4180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.354178][ T4180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.365054][ T4180] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 145.391533][ T4180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.430219][ T4180] usb 3-1: config 0 descriptor?? [ 145.438141][ T5343] loop1: detected capacity change from 0 to 2048 [ 145.473986][ T5343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.487554][ T3927] usb 1-1: USB disconnect, device number 7 [ 145.686507][ T5353] syz-executor.1[5353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.687786][ T5353] syz-executor.1[5353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.731065][ T5351] syz-executor.1[5351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.743403][ T5351] syz-executor.1[5351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.903980][ T5357] loop0: detected capacity change from 0 to 256 [ 146.765969][ T5373] random: crng reseeded on system resumption [ 146.938365][ T3570] EXT4-fs (loop1): unmounting filesystem. [ 147.222114][ T5393] loop0: detected capacity change from 0 to 64 [ 147.428035][ T27] audit: type=1326 audit(1719144278.256:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d28c7d0a9 code=0x0 [ 147.646474][ T3932] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.889512][ T4180] usbhid 3-1:0.0: can't add hid device: -71 [ 147.898524][ T4180] usbhid: probe of 3-1:0.0 failed with error -71 [ 148.040988][ T4180] usb 3-1: USB disconnect, device number 3 [ 148.218624][ T5403] debugfs: Directory 'netdev:nicvf0' with parent 'phy17' already present! [ 148.419324][ T3932] usb 5-1: Using ep0 maxpacket: 8 [ 148.540419][ T3932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.555829][ T5422] random: crng reseeded on system resumption [ 148.561095][ T3932] usb 5-1: config 0 has no interfaces? [ 148.575928][ T5415] loop2: detected capacity change from 0 to 2048 [ 148.659466][ T3932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.679970][ T5415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.689329][ T3932] usb 5-1: config 0 has no interfaces? [ 148.789372][ T3932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.817461][ T5433] syz-executor.2[5433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.817565][ T5433] syz-executor.2[5433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.832693][ T5435] loop0: detected capacity change from 0 to 64 [ 148.844914][ T3932] usb 5-1: config 0 has no interfaces? [ 149.849404][ T3932] usb 5-1: string descriptor 0 read error: -22 [ 149.856338][ T3932] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 149.879170][ T3932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.899823][ T3932] usb 5-1: config 0 descriptor?? [ 149.926958][ T4743] EXT4-fs (loop2): unmounting filesystem. [ 151.567858][ T5470] loop1: detected capacity change from 0 to 64 [ 152.593420][ T4180] usb 5-1: USB disconnect, device number 3 [ 152.745323][ T5497] debugfs: Directory 'netdev:nicvf0' with parent 'phy17' already present! [ 153.576767][ T5501] loop2: detected capacity change from 0 to 32768 [ 153.627224][ T5501] Dev loop2 SGI disklabel: csum bad, label corrupted [ 153.694841][ T3003] Dev loop2 SGI disklabel: csum bad, label corrupted [ 153.969306][ T3927] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.209389][ T3927] usb 2-1: Using ep0 maxpacket: 8 [ 154.329272][ T3927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.342215][ T3927] usb 2-1: config 0 has no interfaces? [ 154.419383][ T3927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.439131][ T3927] usb 2-1: config 0 has no interfaces? [ 154.539300][ T3927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.559551][ T3927] usb 2-1: config 0 has no interfaces? [ 154.804565][ T3927] usb 2-1: string descriptor 0 read error: -22 [ 154.819351][ T3927] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 154.828431][ T3927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.856582][ T3927] usb 2-1: config 0 descriptor?? [ 155.831360][ T27] audit: type=1804 audit(1719144286.126:122): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2017484659/syzkaller.xc2hof/64/bus" dev="sda1" ino=1965 res=1 errno=0 [ 155.879821][ T4180] usb 2-1: USB disconnect, device number 5 [ 156.079427][ T27] audit: type=1804 audit(1719144286.126:123): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2017484659/syzkaller.xc2hof/64/bus" dev="sda1" ino=1965 res=1 errno=0 [ 156.104065][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.880949][ T5594] loop3: detected capacity change from 0 to 8192 [ 157.910753][ T5594] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.336754][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.375262][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.387814][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.558864][ T27] audit: type=1804 audit(1719144286.126:124): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2017484659/syzkaller.xc2hof/64/bus" dev="sda1" ino=1965 res=1 errno=0 [ 158.624224][ T5598] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.709321][ T5598] device gretap0 entered promiscuous mode [ 158.717813][ T5599] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.727188][ T5599] 0ªX¹¦D: renamed from gretap0 [ 158.738312][ T5599] device 60ªX¹¦D left promiscuous mode [ 158.746525][ T5599] A link change request failed with some changes committed already. Interface 60ªX¹¦D may have been left with an inconsistent configuration, please check. [ 158.962371][ T5613] input: syz0 as /devices/virtual/input/input5 [ 159.130937][ T5621] trusted_key: encrypted_key: keylen parameter is missing [ 159.177454][ T5621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.291706][ T27] audit: type=1326 audit(1719144290.126:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d28c7d0a9 code=0x0 [ 159.316979][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.464540][ T5631] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 159.700065][ T27] audit: type=1804 audit(1719144290.506:126): pid=5637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3477167728/syzkaller.j8WHW7/39/bus" dev="sda1" ino=1964 res=1 errno=0 [ 160.366864][ T27] audit: type=1804 audit(1719144290.516:127): pid=5637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3477167728/syzkaller.j8WHW7/39/bus" dev="sda1" ino=1964 res=1 errno=0 [ 160.490981][ T3927] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 160.512225][ T27] audit: type=1804 audit(1719144290.526:128): pid=5637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3477167728/syzkaller.j8WHW7/39/bus" dev="sda1" ino=1964 res=1 errno=0 [ 160.539787][ T5642] loop3: detected capacity change from 0 to 64 [ 161.561433][ T5654] loop2: detected capacity change from 0 to 8192 [ 165.172161][ T5654] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.508163][ T5654] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.556025][ T3927] usb 2-1: Using ep0 maxpacket: 8 [ 165.816367][ T5654] device gretap0 entered promiscuous mode [ 165.826910][ T5658] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.836749][ T5658] 0ªX¹¦D: renamed from gretap0 [ 165.856667][ T5658] device 60ªX¹¦D left promiscuous mode [ 165.864488][ T5658] A link change request failed with some changes committed already. Interface 60ªX¹¦D may have been left with an inconsistent configuration, please check. [ 165.959418][ T3927] usb 2-1: device descriptor read/all, error -71 [ 166.659370][ T3937] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.959351][ T3937] usb 5-1: Using ep0 maxpacket: 8 [ 167.158735][ T5687] loop1: detected capacity change from 0 to 64 [ 167.217391][ T3937] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 167.226192][ T3937] usb 5-1: config 179 has no interface number 0 [ 167.233028][ T3937] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 167.244487][ T3937] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 170.101664][ T27] audit: type=1804 audit(1719144300.446:129): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2017484659/syzkaller.xc2hof/71/bus" dev="sda1" ino=1964 res=1 errno=0 [ 170.427083][ T5697] loop4: detected capacity change from 0 to 256 [ 170.608468][ T3937] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.619756][ T3937] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 170.631682][ T3937] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 170.645134][ T3937] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 170.653670][ T5697] exfat: Unknown parameter ' ³' [ 170.654461][ T3937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.740738][ T3579] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.751084][ T5662] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 170.847536][ T27] audit: type=1804 audit(1719144300.926:130): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2017484659/syzkaller.xc2hof/71/bus" dev="sda1" ino=1964 res=1 errno=0 [ 170.919333][ T27] audit: type=1804 audit(1719144300.926:131): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2017484659/syzkaller.xc2hof/71/bus" dev="sda1" ino=1964 res=1 errno=0 [ 170.933312][ T3642] usb 5-1: USB disconnect, device number 4 [ 170.944411][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 170.944545][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 171.169372][ T3837] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 171.239216][ T3927] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 171.329231][ T4180] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 171.429144][ T3837] usb 4-1: Using ep0 maxpacket: 8 [ 171.479156][ T3927] usb 3-1: Using ep0 maxpacket: 8 [ 171.559313][ T3837] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 171.567829][ T3837] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 171.578489][ T4180] usb 1-1: Using ep0 maxpacket: 16 [ 171.583761][ T3837] usb 4-1: config 135 has no interface number 0 [ 171.590170][ T3837] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.599434][ T3927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.613691][ T3927] usb 3-1: config 0 has no interfaces? [ 171.699340][ T3927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.709592][ T3927] usb 3-1: config 0 has no interfaces? [ 171.719426][ T4180] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 171.789475][ T3927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.789502][ T3837] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 171.799913][ T3927] usb 3-1: config 0 has no interfaces? [ 171.817626][ T3837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.825988][ T3837] usb 4-1: Product: syz [ 171.833227][ T3837] usb 4-1: Manufacturer: syz [ 171.837847][ T3837] usb 4-1: SerialNumber: syz [ 171.881332][ T3837] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 171.891090][ T3837] usb 4-1: No valid video chain found. [ 171.911259][ T4180] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 171.922850][ T4180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.934253][ T4180] usb 1-1: Product: syz [ 171.938432][ T4180] usb 1-1: Manufacturer: syz [ 171.945301][ T4180] usb 1-1: SerialNumber: syz [ 171.958410][ T4180] usb 1-1: config 0 descriptor?? [ 172.003673][ T4180] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 172.014977][ T4180] usb 1-1: Detected FT232R [ 172.050338][ T3927] usb 3-1: string descriptor 0 read error: -22 [ 172.056979][ T3927] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 172.066453][ T3927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.280338][ T3837] usb 4-1: USB disconnect, device number 7 [ 172.319861][ T4180] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 172.881076][ T3927] usb 3-1: config 0 descriptor?? [ 172.925484][ T4180] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 172.938378][ T4180] usb 1-1: USB disconnect, device number 8 [ 172.969034][ T4180] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 172.969276][ T3578] Bluetooth: hci5: command 0x1003 tx timeout [ 172.975347][ T3574] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 173.002266][ T4180] ftdi_sio 1-1:0.0: device disconnected [ 174.729766][ T27] audit: type=1804 audit(1719144305.556:132): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3649026420/syzkaller.S791fm/61/bus" dev="sda1" ino=1964 res=1 errno=0 [ 175.448319][ T27] audit: type=1804 audit(1719144305.556:133): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3649026420/syzkaller.S791fm/61/bus" dev="sda1" ino=1964 res=1 errno=0 [ 175.462477][ T5736] loop4: detected capacity change from 0 to 64 [ 175.472857][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.549797][ T27] audit: type=1804 audit(1719144305.556:134): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3649026420/syzkaller.S791fm/61/bus" dev="sda1" ino=1964 res=1 errno=0 [ 175.606442][ T5741] loop0: detected capacity change from 0 to 256 [ 175.637392][ T5741] FAT-fs (loop0): Unrecognized mount option "gid=0xffffffffffffffffæÿ Ÿ˜8¾m01777777777777777777777ÿÿÿÿ00000000000000000000547" or missing value [ 175.840168][ T5742] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 176.383024][ T3939] usb 3-1: USB disconnect, device number 4 [ 179.844111][ T27] audit: type=1804 audit(1719144309.846:135): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3649026420/syzkaller.S791fm/65/bus" dev="sda1" ino=1964 res=1 errno=0 [ 179.870362][ T3939] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.919160][ T4178] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 179.926354][ T27] audit: type=1804 audit(1719144309.856:136): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3649026420/syzkaller.S791fm/65/bus" dev="sda1" ino=1964 res=1 errno=0 [ 180.004247][ T27] audit: type=1804 audit(1719144309.856:137): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3649026420/syzkaller.S791fm/65/bus" dev="sda1" ino=1964 res=1 errno=0 [ 180.109276][ T3939] usb 4-1: Using ep0 maxpacket: 32 [ 180.299140][ T3938] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 180.309239][ T4178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.320174][ T4178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.330275][ T4178] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.343622][ T4178] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 180.358916][ T4178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.380103][ T4178] usb 1-1: config 0 descriptor?? [ 180.389407][ T3939] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 180.405891][ T3939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.414487][ T3939] usb 4-1: Product: syz [ 180.418661][ T3939] usb 4-1: Manufacturer: syz [ 180.429550][ T3939] usb 4-1: SerialNumber: syz [ 180.446610][ T3939] usb 4-1: config 0 descriptor?? [ 180.490289][ T3939] hub 4-1:0.0: bad descriptor, ignoring hub [ 180.496355][ T3939] hub: probe of 4-1:0.0 failed with error -5 [ 180.549678][ T3938] usb 5-1: Using ep0 maxpacket: 8 [ 180.669309][ T3938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.685228][ T3938] usb 5-1: config 0 has no interfaces? [ 180.789242][ T3938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.805069][ T3938] usb 5-1: config 0 has no interfaces? [ 180.871324][ T4178] betop 0003:11C2:2208.0002: item fetching failed at offset 4/5 [ 180.879735][ T4178] betop 0003:11C2:2208.0002: parse failed [ 180.885505][ T4178] betop: probe of 0003:11C2:2208.0002 failed with error -22 [ 180.889842][ T3938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.893469][ T3574] Bluetooth: hci3: command 0x0406 tx timeout [ 180.903430][ T3576] Bluetooth: hci1: command 0x0406 tx timeout [ 180.925760][ T3938] usb 5-1: config 0 has no interfaces? [ 181.009425][ T3939] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 181.072210][ T26] usb 1-1: USB disconnect, device number 9 [ 181.169204][ T3938] usb 5-1: string descriptor 0 read error: -22 [ 181.175669][ T3938] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 181.191976][ T3938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.217908][ T3938] usb 5-1: config 0 descriptor?? [ 182.349562][ T3837] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 182.465167][ T26] usb 4-1: USB disconnect, device number 8 [ 182.516387][ T5782] loop3: detected capacity change from 0 to 64 [ 182.620278][ T3837] usb 1-1: Using ep0 maxpacket: 16 [ 182.759368][ T3837] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 183.575114][ T26] usb 5-1: USB disconnect, device number 5 [ 183.753496][ T3837] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 183.778974][ T3837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.808654][ T3837] usb 1-1: Product: syz [ 183.816760][ T3837] usb 1-1: Manufacturer: syz [ 183.830519][ T3837] usb 1-1: SerialNumber: syz [ 183.858017][ T3837] usb 1-1: config 0 descriptor?? [ 183.925695][ T3837] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 183.964523][ T3837] usb 1-1: Detected FT232R [ 184.139294][ T3837] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 184.219147][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.407722][ T3837] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 184.469167][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 184.594688][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.615989][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.626238][ T3837] usb 1-1: USB disconnect, device number 10 [ 184.636385][ T26] usb 5-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 184.655711][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.656966][ T3837] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 184.692496][ T3837] ftdi_sio 1-1:0.0: device disconnected [ 184.694786][ T26] usb 5-1: config 0 descriptor?? [ 185.207713][ T5793] loop3: detected capacity change from 0 to 131072 [ 185.214118][ T26] wacom 0003:056A:0003.0003: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 185.236199][ T5793] F2FS-fs (loop3): Unrecognized mount option "inline_da" or missing value [ 185.287661][ T26] wacom 0003:056A:0003.0003: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.4-1/input0 [ 185.317401][ T26] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0003.0003/input/input6 [ 185.350976][ T27] audit: type=1326 audit(1719144316.186:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f700f87d0a9 code=0x0 [ 185.373216][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.469315][ T26] usb 5-1: USB disconnect, device number 6 [ 186.259285][ T4180] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.579600][ T4180] usb 5-1: Using ep0 maxpacket: 16 [ 186.730126][ T4180] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 186.960391][ T4180] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 186.992080][ T4180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.057134][ T4180] usb 5-1: Product: syz [ 187.159359][ T4180] usb 5-1: Manufacturer: syz [ 187.163999][ T4180] usb 5-1: SerialNumber: syz [ 187.181777][ T4180] usb 5-1: config 0 descriptor?? [ 187.240631][ T4180] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 187.269767][ T4180] usb 5-1: Detected FT232R [ 187.464522][ T4180] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 188.490399][ T27] audit: type=1804 audit(1719144318.466:139): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/140/bus" dev="sda1" ino=1965 res=1 errno=0 [ 188.539462][ T4180] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 188.562534][ T4180] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 188.590414][ T4180] usb 5-1: USB disconnect, device number 7 [ 188.596376][ T27] audit: type=1804 audit(1719144318.476:140): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/140/bus" dev="sda1" ino=1965 res=1 errno=0 [ 188.631804][ T4180] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 188.655445][ T27] audit: type=1804 audit(1719144318.476:141): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir691655337/syzkaller.su6d0h/140/bus" dev="sda1" ino=1965 res=1 errno=0 [ 188.662148][ T4180] ftdi_sio 5-1:0.0: device disconnected [ 189.566806][ T5818] loop4: detected capacity change from 0 to 64 [ 190.677976][ T5822] loop4: detected capacity change from 0 to 512 [ 190.693816][ T5822] EXT4-fs: Ignoring removed i_version option [ 190.729359][ T5822] EXT4-fs error (device loop4): __ext4_iget:5044: inode #11: block 1: comm syz-executor.4: invalid block [ 190.746569][ T5822] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 190.764449][ T5822] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.881016][ T4525] EXT4-fs (loop4): unmounting filesystem. [ 192.219150][ T3938] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 192.459134][ T3938] usb 5-1: Using ep0 maxpacket: 8 [ 192.579424][ T3938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.589575][ T3938] usb 5-1: config 0 has no interfaces? [ 192.669418][ T3938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.679593][ T3938] usb 5-1: config 0 has no interfaces? [ 192.759209][ T3938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.774873][ T3938] usb 5-1: config 0 has no interfaces? [ 193.019336][ T3938] usb 5-1: string descriptor 0 read error: -22 [ 193.025624][ T3938] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 193.040633][ T3938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.073918][ T3938] usb 5-1: config 0 descriptor?? [ 194.209836][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.216286][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.399294][ T3837] usb 5-1: USB disconnect, device number 8 [ 196.650558][ T3837] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 196.899246][ T3837] usb 5-1: Using ep0 maxpacket: 16 [ 197.019245][ T3837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 197.179245][ T3837] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 197.188315][ T3837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.196970][ T3837] usb 5-1: Product: syz [ 197.201508][ T3837] usb 5-1: Manufacturer: syz [ 197.206114][ T3837] usb 5-1: SerialNumber: syz [ 197.212883][ T3837] usb 5-1: config 0 descriptor?? [ 197.250441][ T3837] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 197.258628][ T3837] usb 5-1: Detected FT232R [ 197.459255][ T3837] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 197.721858][ T3837] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 197.935356][ T3837] usb 5-1: USB disconnect, device number 9 [ 197.944897][ T3837] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 197.961051][ T3837] ftdi_sio 5-1:0.0: device disconnected [ 198.571996][ T27] audit: type=1326 audit(1719144329.406:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5837 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99fa87d0a9 code=0x0 [ 206.425326][ T3576] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.437898][ T3576] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.447971][ T3576] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.456912][ T3576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.464803][ T3576] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 206.472607][ T3576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.121584][ T3576] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.131152][ T3576] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.139887][ T3576] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.157678][ T3576] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.165859][ T3576] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.173186][ T3576] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.569228][ T3576] Bluetooth: hci5: command tx timeout [ 209.209252][ T3576] Bluetooth: hci6: command tx timeout [ 210.649370][ T3576] Bluetooth: hci5: command tx timeout [ 211.299903][ T3576] Bluetooth: hci6: command tx timeout [ 212.729148][ T3576] Bluetooth: hci5: command tx timeout [ 213.369316][ T3576] Bluetooth: hci6: command tx timeout [ 213.848204][ T3574] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.866566][ T3574] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.875387][ T3574] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.884039][ T3574] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.891558][ T3574] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.898964][ T3574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.809201][ T3574] Bluetooth: hci5: command tx timeout [ 215.449154][ T3574] Bluetooth: hci6: command tx timeout [ 215.929273][ T3574] Bluetooth: hci7: command tx timeout [ 218.009330][ T3574] Bluetooth: hci7: command tx timeout [ 218.774767][ T3576] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 218.784303][ T3576] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 218.793101][ T3576] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 218.801284][ T3576] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 218.808855][ T3576] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 218.826678][ T3576] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 220.089430][ T3576] Bluetooth: hci7: command tx timeout [ 220.889244][ T3576] Bluetooth: hci8: command tx timeout [ 222.169220][ T3576] Bluetooth: hci7: command tx timeout [ 222.969299][ T3574] Bluetooth: hci8: command tx timeout [ 225.049190][ T3574] Bluetooth: hci8: command tx timeout [ 226.969195][ T3574] Bluetooth: hci0: command 0x0406 tx timeout [ 227.129169][ T3574] Bluetooth: hci8: command tx timeout [ 229.711706][ T3576] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 229.722372][ T3576] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 229.730684][ T3576] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 229.740013][ T3576] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 229.747534][ T3576] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 229.756890][ T3576] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 231.849292][ T3574] Bluetooth: hci9: command tx timeout [ 233.929300][ T3574] Bluetooth: hci9: command tx timeout [ 236.009161][ T3574] Bluetooth: hci9: command tx timeout [ 237.209165][ T3574] Bluetooth: hci4: command 0x0406 tx timeout [ 238.089225][ T3574] Bluetooth: hci9: command tx timeout [ 255.611435][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.617774][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.513671][ T3576] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 271.523363][ T3576] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 271.532387][ T3576] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 271.540316][ T3576] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 271.547856][ T3576] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 271.555671][ T3576] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 272.108125][ T3576] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 272.117664][ T3576] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 272.127199][ T3576] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 272.135138][ T3576] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 272.143257][ T3576] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 272.150772][ T3576] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 273.609225][ T3576] Bluetooth: hci10: command tx timeout [ 274.259205][ T3576] Bluetooth: hci11: command tx timeout [ 275.689151][ T3576] Bluetooth: hci10: command tx timeout [ 276.329147][ T3576] Bluetooth: hci11: command tx timeout [ 277.769182][ T3576] Bluetooth: hci10: command tx timeout [ 278.409208][ T3576] Bluetooth: hci11: command tx timeout [ 278.849634][ T3574] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 278.859754][ T3574] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 278.867789][ T3574] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 278.876019][ T3574] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 278.884671][ T3574] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 278.893591][ T3574] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 279.849653][ T3574] Bluetooth: hci10: command tx timeout [ 280.489205][ T3574] Bluetooth: hci11: command tx timeout [ 280.969296][ T3574] Bluetooth: hci12: command tx timeout [ 283.049187][ T3574] Bluetooth: hci12: command tx timeout [ 283.840726][ T3576] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 283.855904][ T3576] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 283.864917][ T3576] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 283.873266][ T3576] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 283.881190][ T3576] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 283.888682][ T3576] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 285.129275][ T3574] Bluetooth: hci12: command tx timeout [ 285.929288][ T3574] Bluetooth: hci13: command tx timeout [ 287.209277][ T3574] Bluetooth: hci12: command tx timeout [ 288.009334][ T3574] Bluetooth: hci13: command tx timeout [ 290.089219][ T3574] Bluetooth: hci13: command tx timeout [ 292.169204][ T3574] Bluetooth: hci13: command tx timeout [ 294.750470][ T3571] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 294.764957][ T3571] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 294.773049][ T3571] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 294.785234][ T3571] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 294.795383][ T3571] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 294.802914][ T3571] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 296.889299][ T3571] Bluetooth: hci14: command tx timeout [ 298.969172][ T3571] Bluetooth: hci14: command tx timeout [ 301.049674][ T3571] Bluetooth: hci14: command tx timeout [ 303.129259][ T3571] Bluetooth: hci14: command tx timeout [ 317.056102][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.062540][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.369234][ T3576] Bluetooth: hci5: command 0x0406 tx timeout [ 329.370406][ T3574] Bluetooth: hci6: command 0x0406 tx timeout [ 336.722045][ T3578] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 336.741660][ T3578] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 336.756594][ T3571] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 336.765417][ T3571] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 336.773336][ T3571] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 336.780874][ T3571] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 337.114950][ T3574] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 337.126048][ T3574] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 337.134482][ T3574] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 337.142503][ T3574] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 337.150434][ T3574] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 337.157793][ T3574] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 338.819188][ T3571] Bluetooth: hci15: command tx timeout [ 338.819271][ T28] INFO: task kworker/1:11:3932 blocked for more than 143 seconds. [ 338.839163][ T28] Not tainted 6.1.94-syzkaller #0 [ 338.844745][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.855083][ T28] task:kworker/1:11 state:D stack:21208 pid:3932 ppid:2 flags:0x00004000 2024/06/23 12:07:49 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 338.865879][ T28] Workqueue: ipv6_addrconf addrconf_verify_work [ 338.909116][ T28] Call Trace: [ 338.912428][ T28] [ 338.915368][ T28] __schedule+0x142d/0x4550 [ 338.929136][ T28] ? __sched_text_start+0x8/0x8 [ 338.934045][ T28] ? print_irqtrace_events+0x210/0x210 [ 338.949124][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 338.954355][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 338.970373][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 338.979139][ T28] schedule+0xbf/0x180 [ 338.983235][ T28] schedule_preempt_disabled+0xf/0x20 [ 338.988618][ T28] __mutex_lock+0x6b9/0xd80 [ 339.019865][ T28] ? __mutex_lock+0x53c/0xd80 [ 339.024588][ T28] ? addrconf_verify_work+0x15/0x30 [ 339.039119][ T28] ? mutex_lock_nested+0x10/0x10 [ 339.044090][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 339.059086][ T28] ? print_irqtrace_events+0x210/0x210 [ 339.064580][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 339.080198][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 339.085440][ T28] ? process_one_work+0x7a9/0x11d0 [ 339.109111][ T28] addrconf_verify_work+0x15/0x30 [ 339.114179][ T28] process_one_work+0x8a9/0x11d0 [ 339.119522][ T28] ? worker_detach_from_pool+0x260/0x260 [ 339.125181][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 339.131813][ T28] ? kthread_data+0x4e/0xc0 [ 339.136350][ T28] ? wq_worker_running+0x97/0x190 [ 339.141707][ T28] worker_thread+0xa47/0x1200 [ 339.146418][ T28] ? __sched_text_start+0x8/0x8 [ 339.151635][ T28] kthread+0x28d/0x320 [ 339.155717][ T28] ? worker_clr_flags+0x190/0x190 [ 339.169101][ T28] ? kthread_blkcg+0xd0/0xd0 [ 339.174021][ T28] ret_from_fork+0x1f/0x30 [ 339.178466][ T28] [ 339.190379][ T28] INFO: task kworker/1:16:3939 blocked for more than 143 seconds. [ 339.198196][ T28] Not tainted 6.1.94-syzkaller #0 [ 339.209173][ T3574] Bluetooth: hci16: command tx timeout [ 339.229082][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.237768][ T28] task:kworker/1:16 state:D stack:23896 pid:3939 ppid:2 flags:0x00004000 [ 339.247966][ T28] Workqueue: events_power_efficient reg_check_chans_work [ 339.255274][ T28] Call Trace: [ 339.258561][ T28] [ 339.261803][ T28] __schedule+0x142d/0x4550 [ 339.266347][ T28] ? print_irqtrace_events+0x210/0x210 [ 339.272117][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 339.277629][ T28] ? __sched_text_start+0x8/0x8 [ 339.282828][ T28] ? mark_lock+0x9a/0x340 [ 339.287185][ T28] schedule+0xbf/0x180 [ 339.291628][ T28] schedule_preempt_disabled+0xf/0x20 [ 339.297009][ T28] __mutex_lock+0x6b9/0xd80 [ 339.303290][ T28] ? __mutex_lock+0x53c/0xd80 [ 339.308006][ T28] ? reg_check_chans_work+0x8d/0xdb0 [ 339.314384][ T28] ? mutex_lock_nested+0x10/0x10 [ 339.319700][ T28] ? process_one_work+0x7a9/0x11d0 [ 339.324848][ T28] reg_check_chans_work+0x8d/0xdb0 [ 339.330313][ T28] ? read_lock_is_recursive+0x10/0x10 [ 339.335715][ T28] ? reg_process_ht_flags+0xba0/0xba0 [ 339.341473][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 339.347430][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 339.353628][ T28] ? process_one_work+0x7a9/0x11d0 [ 339.358764][ T28] process_one_work+0x8a9/0x11d0 [ 339.364074][ T28] ? worker_detach_from_pool+0x260/0x260 [ 339.370045][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 339.375621][ T28] ? kthread_data+0x4e/0xc0 [ 339.380958][ T28] ? wq_worker_running+0x97/0x190 [ 339.386023][ T28] worker_thread+0xa47/0x1200 [ 339.391092][ T28] ? __sched_text_start+0x8/0x8 [ 339.395988][ T28] kthread+0x28d/0x320 [ 339.400401][ T28] ? worker_clr_flags+0x190/0x190 [ 339.405450][ T28] ? kthread_blkcg+0xd0/0xd0 [ 339.411659][ T28] ret_from_fork+0x1f/0x30 [ 339.416113][ T28] [ 339.419528][ T28] INFO: task syz-executor.1:5755 blocked for more than 143 seconds. [ 339.427515][ T28] Not tainted 6.1.94-syzkaller #0 [