last executing test programs: 58.419569603s ago: executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000000080)=ANY=[@ANYBLOB='\b'], 0xc, 0x1505, &(0x7f0000000180)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x8, &(0x7f0000000100)="0400000000004000", 0x10) 57.577122871s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 27.526379676s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) write(r0, &(0x7f0000000580)="1e4578a4310efe5f6e8fd8de8c687373e27ba036fd74f519434a218b43e0e549c6b1fa3e3145a252a46b6813b6fbab87e189c2b96f56d4c15bb2f96db8d1e50e6134e5c26ac878ffe846ec3cbb76e77bb5ae62a943f8e02c4d9b1b50effe537e8f984476cc0ed2dbd2ca9b62d0f62b6ac9f7e00c69d199a5dfd2175fdfc36d8e98b73ca03306faecbc4d0b751b2f12b6b14afce50dddea7d566ed053fb7931ad7036e1860480a06153809e2e4ca825a578f38d2c5c9eba51ee07b2ec537885d276c7507208edc5a7ae74f57c2b2b000e7e1dfd06a6f268881c8001937bc787863aaadc0705d5", 0xe6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff0100008500000008000000250000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 25.204427506s ago: executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r1}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.79144146s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=ANY=[@ANYBLOB="b0000000020101010000000000000000020000040600124000040000540002"], 0xb0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) write$cgroup_int(r2, &(0x7f0000000200), 0x48400) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {0xa4}, {0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="8a031f176e63fc203aa6d134df2cda5bc736ca6ee0009be5d6e94caeb88536877a6137014a5179cb777633761a1faf9b03dad1d9ffcd7316546e35b7e029c296392e8897eb2597c2d04094395067faf348c22015cc65022e71ac0bce9be6a8e1f86e932883d1b9c60ed2b492f91f3ef4325107ec1960091f679cf2ee3c6543c8e613eec70860ba08e8330f3f3aceff5a46f84b0e103adac594c54178cece662dce4ebba454a33fed5cec89", 0xab}], 0x1) r10 = accept4(r6, 0x0, 0x0, 0x0) sendfile(r10, r0, 0x0, 0xfacf) 17.079085501s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00'}, 0x10) 14.576394038s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x5}, 0x90) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f0000000540)={0x0, "0770b436a5415a946ef09f12d55a4291f1819beffbf44957d0bfca58e18a844d"}) lseek(0xffffffffffffffff, 0xae7d, 0x0) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x1}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r7, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x9, 0x9, 0x80000000, 0x81, 0x81, 0x7ff, 0x6}, &(0x7f00000003c0)=0x9c) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) 14.282863538s ago: executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) 14.131736521s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="0001"], 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) sendto$inet6(r2, &(0x7f0000000280)="03", 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000f0ff0000b7080000000006007b8af8ff00000000bfa200000007020000f8ffffffb7030000080000000020850000000191a026676f2612bd259475e2e616090fc404b45b2613fb22356b355477fd21a9983e81e02be69319e6a4a01a054be292f6d2582f009a046806b9b9260795872c6caf88000000002148f46cf5aadeccd0d511a8bca586449a56d4cd233436ac8d108ef98371f3f1c64d73bb3a870c831dde37a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES64=r3, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0xfffffe00, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000380)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2000) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x71, &(0x7f00000002c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4c6b81fdb183acf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9d6707a57") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) 12.908562315s ago: executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @thr={&(0x7f0000000140)="22cd6ded101b7b3c5314648f501b", 0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)) 9.661387132s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") creat(&(0x7f0000000e00)='./file0\x00', 0x0) mknod$loop(0x0, 0x0, 0x1) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b70200001400ea00b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 9.605579622s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xe24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80000000, 0x1, 0x6, 0x2c, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0xd}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x12, 0x1e}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6}, 0x50) mount(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x33}, 0x0, 0x0, 0x0, 0x0}) 9.514548113s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=ANY=[@ANYBLOB="b0000000020101010000000000000000020000040600124000040000540002"], 0xb0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) write$cgroup_int(r2, &(0x7f0000000200), 0x48400) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {0xa4}, {0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="8a031f176e63fc203aa6d134df2cda5bc736ca6ee0009be5d6e94caeb88536877a6137014a5179cb777633761a1faf9b03dad1d9ffcd7316546e35b7e029c296392e8897eb2597c2d04094395067faf348c22015cc65022e71ac0bce9be6a8e1f86e932883d1b9c60ed2b492f91f3ef4325107ec1960091f679cf2ee3c6543c8e613eec70860ba08e8330f3f3aceff5a46f84b0e103adac594c54178cece662dce4ebba454a33fed5cec89", 0xab}], 0x1) r10 = accept4(r6, 0x0, 0x0, 0x0) sendfile(r10, r0, 0x0, 0xfacf) 8.149872147s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=0xffffffffffffffff, 0x12) 7.453438812s ago: executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) 6.758992186s ago: executing program 1: unshare(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x20004000) 6.407380925s ago: executing program 3: r0 = socket$inet(0x2b, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000000080)=ANY=[@ANYBLOB='\b'], 0xc, 0x1505, &(0x7f0000000180)="$eJzs3Au4jdX2MPAx5pwvm9BKcp9jjpeVXCZJEknIJUmSJMktIUmSJCS33JKQhNyT3ENyC8n9fss9SY4kSUJCwvweHefzndPp9P2/0/mc59nj9zzz2XPstcZY411jr9u7n72/azewUp3K5WsxM/xb8K9fugJACgD0AYBrASACgOKZi2e+dHk6jV3/vRsRf66Hp1ztDsTVJPNP3WT+qZvMP3WT+aduMv/UTeafusn8UzeZvxCp2ZapOa6TlXqXnP9PzeT1P3WT+aduMv/UTeafusn8UzOW+adyMv/UTeafusn8hUjN/pTzyGkvF/svOJ/9H1h/u6uudh9/sKL/p7yr95MnhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECI1ORuuMADwt/3V7ksIIYQQQgghhBB/npD2ancghBBCCCGEEEKI/zwEMBoMRJAG0kIKpIP0cA1kgIyQCa6FBFwHmeF6yAI3QFbIBtkhB+SEXJAbLBA4YIghD+SFJNwI+eAmyA8FoCAUAg+FoQjcDEXhFigGt0JxuA1KwO1QEkrBHVAa7oQycBeUhXJQHu6GClARKkFluAeqwL1QFe6DanA/VIcHoAY8CDXhIagFD0NteATqwKNQFx6DelAfGkBDaPTP8/W/zn8JOsHL0Bm66Ev3QHd4BXpAT+gFvaEPvAp94TXoB69DfxgAA+ENGARvwmB4C4bAUBgGb8NwGAEjYRSMhjEwFt6BcfAujIf3YAJMhEkwGabAVJgG78N0mAEz4QOYBR/CbJgDc2EezIePYAEshEXwMSyGT2AJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQt8ClthG2yHHbATdsFu+Az2wOewF76AffDl/zD/zD/kt0dAQIUKDRpMg2kwBVMwPabHDJgBM2EmTGACM2NmzIJZMCtmxeyYHXNiTsyNuZGQkJExD+bBJCYxH+bD/JgfC2JB9OixCBbBongLFsNiWByLYwksgSWxFJbC0lgay2AZLItlsfztcwCwAlbCSngP3oP3YlWsitWwGlbH6lgDa2BNrIm1sBbWxtpYB+tgXayL9bAeNsAG2AgbYWNsjE2wCTbDZtgcm2MLbIEtsSW2wlbYGltjG2yDbbEttsN22B47YAd8CV/Cl/Fl7IIVVDfsjt2xB/bAXtgbe+Or2Bdfw9fwdeyPA3AgvoFv4Js4GE/jEByKw3AYllEjcCSOQlZjcCyOxXE4DsfjeJyAE3EiTsYpOBWn4TScjjNwBn6As/BD/BDn4Bych/NxPi7AhbgIF+FiPINLcCkuw+W4AlfiClyNa3A1rlN/e2huxs34KX6K23Ab7sAduAt34Wf4GX6On2N/3If7cD/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOJ7Ak3gCT+EpPI1n8CyexXN4Ds/jCzm/qb2rwNr+oC4xyqg0Ko1KUSkqvUqvMqgMKpPKpBIqoTKrzCqLyqKyqqwqu8qucqqcKrfKrUiRYhWrPCqPSqqkyqfyAUBXVVAVVF55VUQVUUVVUVVMFVPF1W2qhLpdlVSlVFNfWpVWZVQzX1aVU+VVeVVBVVSVVGVVWVVRVVRVVVVVU9VUdVVd1VAPqpqqG/bCh9WlydRRA7CuGoj1VH3VQDVUb+LjqrEajE1UU9VMPamG4hBsoRr7luoZ1UqNxNbqOTUKn1dt1Rhsp15U7VUH1VG9pDqpJr6z6qImYDfVXU3GHqqn6qV6q+lYUV2aWCX1uuqvBqiB6g01D99Ug9Vbaogaqoapt9VwNUKNVKPUaDVGjVXvqHHqXTVevacmqIlqkpqspqipapp6X01XM9RM9YGapT5Us9UcNVfNU/PVR2qBWqgWqY/VYvWJWqKWqmVquVqhVqpVarVao9aqdWq92qA2qk1qs9qiPlVb1Ta1Xe1QO9UutVt9pvaoz9Ve9YXap75U+9Vf1AH1lTqovlaH1DfqsPpWHVHfqaPqe3VMdVHH1Ql1Uv2oTqmf1Gl1Rp1VP6tz6hd1Xl1QF1VQoFErrbXRkU6j0+oUnU6n19foDDqjzqSv1Ql9nc6sr9dZ9A06q86ms+scOqfOpXNrq0k7zTrWeXRendQ36nz6Jp1fF9AFdSHtdWFdRN+si+pbdDF9qy6ub9Ml9O26pC6l79Cl9Z26jL5Ll9XldHl9t66gK+pKurK+R1fR9+qq+j5dTd+vq+sHdA39oK6pH9K19MO6tn5E19GP6rr6MV1P19cNdEPdSD+uG+sndBPdVDfTT+rm+indQj+tW+pndCv9rG6tn9Nt9PO6rX5Bt9Mv6va6g+6oL+iLOujOuovuqrvp7voV3UP31L10b91Hv6r76td0P/267q8H6IH6DT1Iv6kH67f0ED1UD9Nv6+F6hB6pR+nReoweq9/R4/S7erx+T0/QE/UkPVlP0VN1r8uVZl7KN/Av89/9J/n9fr31zXqL/lRv1dv0dr1D79S79G69W+/Re/RevVfv0/v0fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qv+sf9Sn9E/6tD6jz+if9Tl9Tp+/fB+AQaOMNsZEJo1Ja1JMOpPeXGMymIwmk7nWJMx1JrO53mQxN5isJpvJbnKYnCaXyW2sIeMMm9jkMXlN0txo8pmbTH5TwBQ0hYw3hU0Rc/Pv5UeXn+H+MP93+ls+6XJ+I9PINDaNTRPTxDQzzUxz09y0MC1MS9PStDKtTGvT2rQxbUxb09a0M+1Me9PedDQdTSfTyXRGMF1NV9PdvGJ6mJ6ml+lt+phXTV/T1/Qz/Ux/098MNAPNIDPIDDaDzRAzxAwzw8xwM9yMNCPNaDPajDVjzTgzzow3480EM8FMMpPMFDPFXHphvWSmmWlmmVlmtplt5pq5Zr6ZbxaYBWaRWWQWm8VmiVlqlprlZrlZaVaa1Wa1WWvWmvVmvdloNpolZovZYraarWa72W52mp1mt9lt9pg9Zq/Za/aZfWa/2W8OmAPmoDloDplD5rA5bI6YI+aoOWqOmWPmuDluTpqT5pQ5ZU6b0+asOWvOmXPmvDlvLpqLl972RSpSkYlMlCZKE6VEKVH6KH2UIcoQZYoyRYkoEWWOMkdZohuirFG2KHuUI8oZ5YpyRzaiyEUcxVGeKG+UjG6M8kU3RfmjAlHBqFDko8JRkejmqGh0S1QsujUqHt0WlYhuj0pGpaI7otLRnVGZ6K6obFQuKh/dHVWIKkaVosrRPVGV6N6oanRfVC26P6oePRDViB6MakYPRbWih6Pa0SNRnejRqG70WFQvqh81iBpGjf7U+iGczvaE72y72LTQzXa3r9getqftZXvbPvZV29e+ZvvZ121/O8AOtG/YQfZNO9i+ZYfYoXaYfdsOtyPsSDvKjrZj7Fj7jh1n37Xj7Xt2gp1oJ9nJdoqdaqfZ9+10O8POtB/YWfZDO9vOsXPtPDvffmQX2IV2kf3YLraf2CV2qV1ml9sVdqVdZVfbNXatXWfX2w12o91kN9st9lO71W6z2+0Ou9PusrvtZ3aP/dzutV/YffZLu9/+xR6wX9mD9mt7yH5jD9tv7RH7nT1qv7fH7A/2uD1hT9of7Sn7kz1tz9iz9md7zv5iz9sL9qINl97cX3p5J0OG0lAaSqEUSk/pKQNloEyUiRKUoMyUmbJQFspKWSk7ZaeclJNyU266hIkpD+WhJCUpH+Wj/JSfClJB8uSpCBWholSUilExKk7FqQSVuPxoAbqT7qS76C4qR+XobrqbKlJFqkyVqQpVoapUlapRNapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqBE1osbUmJpQE2pGzag5NacW1IJaUktqRa2oNbWmNtSG2lJbakftqD21p47UkTpRJ+pMnakrdaXu1J16UA/qRb2oD/WhvtSX+lE/6k/9aSANpEE0iAbTYBpCQ2kYvU3DaQSNpFE0msbQWBpL42gcjafxNIEm0CSaRFNoCk2jaTSdptNMmkmzaBbNptk0l+bSfJpPC2gBLaJFtJgW0xJaQstoGa2gFbSKVtEaWkPraB1toA20iTbRFtpCW2krbafttJN20m7aTXtoD+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifpJJ2iU3SaTtNZOkvn6Bc6TxfoIgVKcelceneNy+AyukzuWvePcXaXw+V0uVxuZ11Wl+3vYnLO5XcFXEFXyHlX2BVxN/8mLulKuTtcaXenK+PucmV/E1dx97qq7j5Xzd3vKrt7/i6u7h5wNdyjrqZ7zNVy9V1t19DVcY+6uu4xV8/Vdw1cQ9fcPeVauKddS/eMa+We/U28wC10a9xat86td3vc5+6s+9kdcd+5c+4X19l1cX3cq66ve831c6+7/m7Ab+Jh7m033I1wI90oN9qN+U08yU12U9xUN82976a7Gb+J57uP3Cy3yM12c9xcN+/X+FJPi9zHbrH7xC1xS90yt9ytcCvdKrf6f/e63G10m9xmt9t95ra6bW672+F2ul2/xpeOY6/7wu1zX7rD7lt3wH3lDrqj7pD75tf40vEddd+7Y+4Hd9ydcCfdj+6U+8mddmd+Pf5Lx/6ju+AuuuCAkRVrNhxxGk7LKZyO0/M1nIEzcia+lhN8HWfm6zkL38BZORtn5xyck3NxbrZM7Jg55jycl5N8I+fjmzg/F+CCXIg9F+YifDMX5Vu4GN/Kxfk2LsG3c0kuxXdwab6Ty/BdXJbLcXm+mytwRa7ElfkersL3clW+j6vx/VydH+Aa/CDX5Ie4Fj/MtfkRrsOPcl1+jOtxfW7ADbkRP86N+Qluwk25GT/JzfkpbsFPc0t+hlvxs9yan+M2/Dy35Re4Hb/I7bkDd+SXuBO/zJ25C3flbtydX+Ee3JN7cW/uw69yX36N+/Hr3J8H8EB+gwfxmzyY3+IhPJSH8ds8nEfwSB7Fo3kMj+V3eBy/y+P5PZ7AE3kST+YpPJWn8fs8nWfwTP6AZ/GHPJvn8Fyex/P5I17AC3kRf8yL+RNewkt5GS/nFbySV/FqXsNreR2v5w28kTfxZt7Cn/JW3sbIO3gn7+Ld/Bnv4c95L3/B+/hL3s9/4QP8FR/kr/kQf8OH+Vs+wt/xUf6ej/EPfJxP8En+kU/xT3yaz/BZ/pnP8S98ni/wRQ4MMcYq1rGJozhNnDZOidPF6eNr4gxxxjhTfG2ciK+LM8fXx1niG+KscbY4e5wjzhnninPHNqbYxRzHcZ44b5yMb4zzxTfF+eMCccG4UOzjwnGR+Oa4aHxLXCy+NS4e3xaXiG+PS8al4kfvLx3fGZeJ74rLxuXi8vHdcYW4YlwprhzfE1eJ742rxvfF1eL742LxA3GN+MG4ZvxQXCt+OK4dPxLXiR+N68aPxfXi+nGDuGHcKH48bhw/ETeJm8bN4ifj5vFTcYv46bhl/EzcKn72Dy/vGneLu8evxK/EIdyn5ybnJecnP0ouSC5MLkp+nFyc/CS5JLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ORlC5bTg0SuvvfGRT+PT+hSfzqf31/gMPqPP5K/1CX+dz+yv91n8DT6rz+az+xw+p8/lc3vryTvPPvZ5fF6f9Df6fP4mn98X8AV9Ie99YV/EN/SNfCPf2D/hm/imvpl/0j/pn/JP+af90/4Z38o/61v753wb/7xv61/wL/gXfXvfwXf0L/lO/mXf2XfxXX1X39139z18D9/L9/J9fB/f1/f1/Xw/399f8AP9QD/ID/KD/WA/xA/xw/wwP9wP9yP9SD/aj/Zj/Vg/zo/z4/14PyFlgp/kJ/kpfoqf5qf56X66n+ln+ln5Z/nZfraf6+f6+X6+X+AX+EV+kV/sF/slfolf5pf5FX6FX+VX+TV+jV/n1/kNfoPf5Df5LX6L3+q3+u1+u9/pd/rdfrff4/f4vX6v3+dDCF32nw3+gD/ov/aH/Df+sP/WH/Hf+aP+e3/M/+CP+xP+pP/Rn/I/+dP+jD/rf/bn/C/+vL/gL/rgxybeSYxLvJsYn3gvMSExMTEpMTkxJTE1MS3xfmJ6YkZiZuKDxKzEh4nZiTmJuYl5ifmJjxILEgsTixIfJxYnPkksSSxNLEssT6xIrEyEkGtrHPKEvCEZbgz5wk0hfygQCoZCwYfCoUi4ORQNt4Ri4dZQPNwWSoTbQ8lQKtwRHgv1Qv3QIDQMjcLjoXF4IjQJTUOz8GRoHp4KLcLToWV4JrQKz4bW4bnQJjwf2oYXQrvwYmgfOoSO4aXQKbwcOocuoWvoFrqHV0KP0DP8EnqHPuHV0De8FvqF10P/MCAMDG+EQeHNMDi8FYaEoWFYeDsMDyPCyDAqjA5jwtjwThgX3g3jw3thQpgYJoXJYUqYGqaF98P0MCPMDB+EWeHDMDvMCXPDvDA/fBQWhIVhUfg4LA6fhCVhaVgWlgdIWRlWhdVhTVgb1oX1YUPYGDaFzWFL+DRsDdvC9rAj7Ay7wu7wWdgTPg97wxdhX/gy7A9/CQfCV+Fg+DocCt+Ew+HbcCR8F46G78Ox8EM4Hk6EkwHDqfBTOB3OhLPh53Au/BLOhwvhovzNmhBCCCHE/xX9B5d3+yffU5cX/Pq7c4CM23Ic+seaG7L+dd9T5WyeAIBnurR7+G+rQoWuXbtevu4SDVHeOQCQuJKfBq7ES6EZPAUtoSkU/af99VQdzvG/rv8bKQCQHv6x/i2/U3/ErD+oHyXnAOTPeyUnHVyJr9Qv9jv1szX+g/rpvhoL0OT/yMkAV+Ir9YvAE/AstPy7awohhBBCCCGEEH/VU93R5o8+3176fJ7TXMlJC1fiP/p8LoQQQgghhBBCiKvv+Q4dn368ZcumbWRzFTbtMv51Cv8t/fzOJs1/Rxt/3gYvn736b+nnP70pd/nR/j/JumpPSUIIIYQQQoj/kCtv+q92J0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghROr1/+OfkF3tYxRCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGutv8VAAD//zmwHF0=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x8, &(0x7f0000000100)="0400000000004000", 0x10) 6.308361276s ago: executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000340)=[{r1, 0x4064}, {r2}], 0x2, 0x0, 0x0, 0x0) 5.541874538s ago: executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400169042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 4.67905457s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x32, 0x0, 0x7, 0x1, 0x0, 0x4, 0x64}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, 0x8) socket$netlink(0x10, 0x3, 0x8) 4.423630526s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="0001"], 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) sendto$inet6(r2, &(0x7f0000000280)="03", 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000f0ff0000b7080000000006007b8af8ff00000000bfa200000007020000f8ffffffb7030000080000000020850000000191a026676f2612bd259475e2e616090fc404b45b2613fb22356b355477fd21a9983e81e02be69319e6a4a01a054be292f6d2582f009a046806b9b9260795872c6caf88000000002148f46cf5aadeccd0d511a8bca586449a56d4cd233436ac8d108ef98371f3f1c64d73bb3a870c831dde37a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES64=r3, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0xfffffe00, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000380)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2000) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x71, &(0x7f00000002c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4c6b81fdb183acf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9d6707a57") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) 4.176744267s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) write(r0, &(0x7f0000000580)="1e4578a4310efe5f6e8fd8de8c687373e27ba036fd74f519434a218b43e0e549c6b1fa3e3145a252a46b6813b6fbab87e189c2b96f56d4c15bb2f96db8d1e50e6134e5c26ac878ffe846ec3cbb76e77bb5ae62a943f8e02c4d9b1b50effe537e8f984476cc0ed2dbd2ca9b62d0f62b6ac9f7e00c69d199a5dfd2175fdfc36d8e98b73ca03306faecbc4d0b751b2f12b6b14afce50dddea7d566ed053fb7931ad7036e1860480a06153809e2e4ca825a578f38d2c5c9eba51ee07b2ec537885d276c7507208edc5a7ae74f57c2b2b000e7e1dfd06a6f268881c8001937bc787863aaadc0705d5", 0xe6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff0100008500000008000000250000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 3.324994498s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031402d3fc120000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.212214758s ago: executing program 3: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x700000000000000) 1.946277658s ago: executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @thr={&(0x7f0000000140)="22cd6ded101b7b3c5314648f501b", 0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)) 1.798345636s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0\x00', 0x0) mknod$loop(0x0, 0x0, 0x1) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b70200001400ea00b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.41980833s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resgid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x46f, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x1c) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000002000000000000000001801000020786c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000550000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='tlb_flush\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000a14000/0x3000)=nil, 0x3000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b5d090987f70e06d038e7ff7fc6e5539b0d3c0e8b089b3f38306d090890e0879b0a0ac6e70a9b3348959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) creat(0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x204840}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) io_submit(0x0, 0x0, &(0x7f0000000140)) 578.277478ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=ANY=[@ANYBLOB="b0000000020101010000000000000000020000040600124000040000540002"], 0xb0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) write$cgroup_int(r2, &(0x7f0000000200), 0x48400) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {0xa4}, {0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="8a031f176e63fc203aa6d134df2cda5bc736ca6ee0009be5d6e94caeb88536877a6137014a5179cb777633761a1faf9b03dad1d9ffcd7316546e35b7e029c296392e8897eb2597c2d04094395067faf348c22015cc65022e71ac0bce9be6a8e1f86e932883d1b9c60ed2b492f91f3ef4325107ec1960091f679cf2ee3c6543c8e613eec70860ba08e8330f3f3aceff5a46f84b0e103adac594c54178cece662dce4ebba454a33fed5cec89", 0xab}], 0x1) r10 = accept4(r6, 0x0, 0x0, 0x0) sendfile(r10, r0, 0x0, 0xfacf) 229.290935ms ago: executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) open(0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) io_setup(0xffff, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000001f40)=[&(0x7f0000001980)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)="71f484", 0x3}]) io_getevents(r2, 0x1, 0x1, &(0x7f00000001c0)=[{}], 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000000000016) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. 2024/06/08 09:51:25 fuzzer started 2024/06/08 09:51:26 dialing manager at 10.128.0.169:30026 [ 163.616222][ T5049] cgroup: Unknown subsys name 'net' [ 163.870087][ T5049] cgroup: Unknown subsys name 'rlimit' 2024/06/08 09:52:14 starting 5 executor processes [ 210.239997][ T5053] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 213.104193][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.118352][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.129679][ T5078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.161964][ T5081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.170173][ T5081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.179040][ T5081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.187661][ T5081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.197400][ T5081] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.203241][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.206666][ T5081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.214738][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.242754][ T4434] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.252484][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.266638][ T5081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.272010][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.282471][ T5081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.285435][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.301961][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.552210][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.583313][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.592780][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.606208][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.617538][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.626834][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.819295][ T5078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.828740][ T5078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.838139][ T5078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.930626][ T5078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.952001][ T5078] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.962583][ T5078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.833249][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 215.078341][ T5075] chnl_net:caif_netlink_parms(): no params data found [ 215.219212][ T5079] chnl_net:caif_netlink_parms(): no params data found [ 215.286783][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 215.348679][ T5086] Bluetooth: hci1: command tx timeout [ 215.354514][ T5086] Bluetooth: hci0: command tx timeout [ 215.418939][ T5078] Bluetooth: hci2: command tx timeout [ 215.733047][ T5078] Bluetooth: hci3: command tx timeout [ 215.838124][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 216.052864][ T5078] Bluetooth: hci4: command tx timeout [ 216.498305][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.506290][ T5079] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.516601][ T5079] bridge_slave_0: entered allmulticast mode [ 216.526126][ T5079] bridge_slave_0: entered promiscuous mode [ 216.539991][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.547941][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.556193][ T5089] bridge_slave_0: entered allmulticast mode [ 216.565268][ T5089] bridge_slave_0: entered promiscuous mode [ 216.578836][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.586786][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.595049][ T5075] bridge_slave_0: entered allmulticast mode [ 216.604469][ T5075] bridge_slave_0: entered promiscuous mode [ 216.618141][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.629066][ T5079] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.636991][ T5079] bridge_slave_1: entered allmulticast mode [ 216.645938][ T5079] bridge_slave_1: entered promiscuous mode [ 216.656722][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.664618][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.672690][ T5076] bridge_slave_0: entered allmulticast mode [ 216.682282][ T5076] bridge_slave_0: entered promiscuous mode [ 216.695795][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.703922][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.711815][ T5075] bridge_slave_1: entered allmulticast mode [ 216.721018][ T5075] bridge_slave_1: entered promiscuous mode [ 216.738687][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.746708][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.754707][ T5089] bridge_slave_1: entered allmulticast mode [ 216.764035][ T5089] bridge_slave_1: entered promiscuous mode [ 216.863017][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.871096][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.878805][ T5076] bridge_slave_1: entered allmulticast mode [ 216.887965][ T5076] bridge_slave_1: entered promiscuous mode [ 217.099861][ T5079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.122261][ T5075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.256987][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.311389][ T5079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.321486][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.329189][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.337101][ T5093] bridge_slave_0: entered allmulticast mode [ 217.346509][ T5093] bridge_slave_0: entered promiscuous mode [ 217.367634][ T5075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.377646][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.385478][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.393425][ T5093] bridge_slave_1: entered allmulticast mode [ 217.402573][ T5093] bridge_slave_1: entered promiscuous mode [ 217.412326][ T5078] Bluetooth: hci0: command tx timeout [ 217.417857][ T5086] Bluetooth: hci1: command tx timeout [ 217.428922][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.447408][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.491145][ T5078] Bluetooth: hci2: command tx timeout [ 217.590032][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.772314][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.788154][ T5089] team0: Port device team_slave_0 added [ 217.806456][ T5079] team0: Port device team_slave_0 added [ 217.814941][ T5078] Bluetooth: hci3: command tx timeout [ 217.819947][ T5089] team0: Port device team_slave_1 added [ 217.834391][ T5075] team0: Port device team_slave_0 added [ 217.891074][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.907352][ T5075] team0: Port device team_slave_1 added [ 217.983728][ T5079] team0: Port device team_slave_1 added [ 218.034320][ T5076] team0: Port device team_slave_0 added [ 218.132988][ T5078] Bluetooth: hci4: command tx timeout [ 218.178187][ T5076] team0: Port device team_slave_1 added [ 218.188374][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.195723][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.222645][ T5079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.279227][ T5093] team0: Port device team_slave_0 added [ 218.289108][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.296372][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.322853][ T5075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.339364][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.347396][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.373815][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.424302][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.432133][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.458432][ T5079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.477429][ T5093] team0: Port device team_slave_1 added [ 218.487730][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.495833][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.522486][ T5075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.536875][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.544172][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.570591][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.732966][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.740127][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.768021][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.868995][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.876529][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.903004][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.917084][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.924421][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.952015][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.001455][ T5075] hsr_slave_0: entered promiscuous mode [ 219.010462][ T5075] hsr_slave_1: entered promiscuous mode [ 219.062671][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.069850][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.096546][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.123719][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.130390][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.302239][ T5089] hsr_slave_0: entered promiscuous mode [ 219.311689][ T5089] hsr_slave_1: entered promiscuous mode [ 219.319712][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.327721][ T5089] Cannot create hsr debugfs directory [ 219.347415][ T5079] hsr_slave_0: entered promiscuous mode [ 219.357031][ T5079] hsr_slave_1: entered promiscuous mode [ 219.366088][ T5079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.374076][ T5079] Cannot create hsr debugfs directory [ 219.491869][ T5078] Bluetooth: hci1: command tx timeout [ 219.494408][ T5086] Bluetooth: hci0: command tx timeout [ 219.571115][ T5086] Bluetooth: hci2: command tx timeout [ 219.586646][ T5076] hsr_slave_0: entered promiscuous mode [ 219.596765][ T5076] hsr_slave_1: entered promiscuous mode [ 219.605296][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.613260][ T5076] Cannot create hsr debugfs directory [ 219.758118][ T5093] hsr_slave_0: entered promiscuous mode [ 219.768852][ T5093] hsr_slave_1: entered promiscuous mode [ 219.778420][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.786336][ T5093] Cannot create hsr debugfs directory [ 219.892833][ T5086] Bluetooth: hci3: command tx timeout [ 220.212934][ T5086] Bluetooth: hci4: command tx timeout [ 220.898012][ T5075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.968598][ T5075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.035151][ T5075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.090080][ T5075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.129752][ T5089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.188919][ T5089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.283292][ T5089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.328797][ T5079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.352870][ T5079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.376193][ T5089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.418042][ T5079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.510778][ T5079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.578048][ T5086] Bluetooth: hci1: command tx timeout [ 221.583834][ T5086] Bluetooth: hci0: command tx timeout [ 221.651511][ T5078] Bluetooth: hci2: command tx timeout [ 221.754304][ T5093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.809227][ T5093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.876300][ T5093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.909097][ T5093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.972166][ T5078] Bluetooth: hci3: command tx timeout [ 222.045263][ T5076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.103625][ T5076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.144746][ T5076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.170659][ T5076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.293370][ T5078] Bluetooth: hci4: command tx timeout [ 222.479224][ T5075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.766321][ T5075] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.928122][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.935995][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.070945][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.078622][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.159177][ T5079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.181329][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.426793][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.502762][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.517059][ T5079] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.585751][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.593814][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.633125][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.665181][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.673019][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.733058][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.741027][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.894848][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.927027][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.964729][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.972572][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.052854][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.060542][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.313372][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.321233][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.336896][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.344731][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.374007][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.381788][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.644096][ T5079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.648036][ T5075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.304609][ T5075] veth0_vlan: entered promiscuous mode [ 226.455633][ T5075] veth1_vlan: entered promiscuous mode [ 226.656364][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.846183][ T5079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.897650][ T5075] veth0_macvtap: entered promiscuous mode [ 226.997819][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.010203][ T5075] veth1_macvtap: entered promiscuous mode [ 227.037536][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.370571][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.414208][ T5089] veth0_vlan: entered promiscuous mode [ 227.485995][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.588054][ T5089] veth1_vlan: entered promiscuous mode [ 227.658138][ T5075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.667436][ T5075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.678999][ T5075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.688363][ T5075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.823707][ T5076] veth0_vlan: entered promiscuous mode [ 227.848442][ T5093] veth0_vlan: entered promiscuous mode [ 227.977367][ T5076] veth1_vlan: entered promiscuous mode [ 228.053972][ T5093] veth1_vlan: entered promiscuous mode [ 228.193702][ T5089] veth0_macvtap: entered promiscuous mode [ 228.329369][ T5089] veth1_macvtap: entered promiscuous mode [ 228.512921][ T5076] veth0_macvtap: entered promiscuous mode [ 228.563560][ T5093] veth0_macvtap: entered promiscuous mode [ 228.606726][ T5076] veth1_macvtap: entered promiscuous mode [ 228.636859][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.647751][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.663961][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.722959][ T5093] veth1_macvtap: entered promiscuous mode [ 228.846000][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.859140][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.875197][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.967436][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.980785][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.991333][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.002262][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.018714][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.071367][ T5089] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.082867][ T5089] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.095856][ T5089] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.108488][ T5089] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.145340][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.157444][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.167738][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.178605][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.188944][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.199780][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.215468][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.303307][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.314793][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.325032][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.337382][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.354198][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.373398][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.387796][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.398945][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.412158][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.425338][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.441870][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.460437][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.565689][ T5093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.576167][ T5093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.585725][ T5093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.595257][ T5093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.625586][ T5076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.636877][ T5076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.647740][ T5076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.659573][ T5076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.153898][ T5079] veth0_vlan: entered promiscuous mode [ 230.332880][ T5079] veth1_vlan: entered promiscuous mode [ 230.763939][ T5079] veth0_macvtap: entered promiscuous mode [ 230.869284][ T5079] veth1_macvtap: entered promiscuous mode [ 231.162666][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.174309][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.185137][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.196150][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.206291][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.217195][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.227469][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.238668][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.255997][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.486409][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.499114][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.510381][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.521363][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.531510][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.542399][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.552721][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.563866][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.584201][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.826503][ T5079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.836000][ T5079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.845243][ T5079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.854575][ T5079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.845864][ T5139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.854641][ T5139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.052156][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.061196][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.283199][ T4059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.291441][ T4059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.630965][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.639138][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.674096][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.682459][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.865225][ T3221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.873938][ T3221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.895322][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.904102][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.171306][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.179641][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.136700][ T5264] loop0: detected capacity change from 0 to 512 [ 238.358174][ T5264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.373591][ T5264] ext4 filesystem being mounted at /root/syzkaller-testdir3728949640/syzkaller.oybqJr/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.015838][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.024568][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.261652][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.269814][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.379896][ T5278] loop3: detected capacity change from 0 to 1024 [ 239.413156][ T5076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.508147][ T5278] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 239.704408][ T5278] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 239.795968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 239.816222][ T5278] EXT4-fs (loop3): orphan cleanup on readonly fs [ 239.877250][ T5278] EXT4-fs error (device loop3): ext4_free_blocks:6576: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 239.997785][ T5278] EXT4-fs (loop3): 1 orphan inode deleted [ 240.006313][ T5278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.183106][ T5283] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 240.453008][ T5278] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 240.610547][ T29] audit: type=1326 audit(1717840364.693:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5284 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7469579 code=0x0 [ 240.709944][ T5288] 9pnet_fd: Insufficient options for proto=fd [ 240.866186][ T5288] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 240.899951][ T5089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.445982][ T5304] loop4: detected capacity change from 0 to 512 [ 242.512867][ T5304] ======================================================= [ 242.512867][ T5304] WARNING: The mand mount option has been deprecated and [ 242.512867][ T5304] and is ignored by this kernel. Remove the mand [ 242.512867][ T5304] option from the mount to silence this warning. [ 242.512867][ T5304] ======================================================= [ 242.605854][ T5304] EXT4-fs (loop4): blocks per group (8192) and clusters per group (2304) inconsistent [ 243.478585][ T5312] loop1: detected capacity change from 0 to 128 [ 243.762280][ T5314] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 244.776531][ T5318] loop4: detected capacity change from 0 to 2048 [ 244.820362][ T5318] udf: Bad value for 'lastblock' [ 246.629978][ T5330] loop3: detected capacity change from 0 to 512 [ 246.984844][ T29] audit: type=1800 audit(1717840370.893:3): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 247.035077][ T5330] ext4: Bad value for 'min_batch_time' [ 247.836039][ T29] audit: type=1107 audit(1717840371.953:4): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¡Üë‘Z €6Ð$5¿G%w [ 247.836039][ T29] [ 247.836039][ T29] ¬Éø•² [ 247.836039][ T29] d÷ÜÕÈüµav»ë’;A¸O§¶†¾1?Ôp¬¤ú_Z‘Ê¿ Mùú/¥RìÞ´dæõx.P†âM•Æ^ÆÑz°™×üÏ]^²)A€ô†@?\“Še>hóu‰þ_I;¹¹l̲ ÁÇ€þq¾¶‘sûÿµz]ހ0gd³]c’êžJ[³c¨˜ÊÔád&@ôÎRÀ¢“‰žÏ VhƲ,.ò×üàgQ'w¢³éo©jX‰"þN¶ OUõÞ••å­’Uqað½öŠßè+|‘€í÷ìT¯¨Ëñ½6—¹Nb“ˆ;Nð)£Œ´ùà\;ˆ Q«-4PGÞßïh*¨¬Â…Ѧ. I§{Ö×¹f:%yèb•ËÐE‚Ö÷ÒRá¼\G÷ߊ köC:F$cë'ê•Í•+a#–óg¯øó7†þþ8¾o'?÷íã¯\ÊMäê×~ㆢã¨2~¬h·Ñôšôä?ò 2ƒ|$A3²©Šï§£z®a¦ƒ¤SÒQ9ŸL´çNòªœ¤iÄ.rªu4ÁÓ·àT8€Røè¨a°Áfèä71Ùy¶è©¶lÝè¤æ[¨À îíÃËD´„4‡Ù~r†HSBN÷¡·‚ ©(VYÈzàÿ 6/c¦<7ÌkðO+H‚~ðѬ¦¡,qŽþ†l§MÈhOqÜ}…`!‡ˆöÿ^ÔÑ?æŠnÈ玾m‡'ÌãX'ÄY-!¥íŽËø_®ä1¦nk]¤»¹Ur>Ø1'ý!xðˆêêõö0ÔºÓОúú1#ñôš—¨½¸Œ3FÞOÙ=}‚NqA“îåD§|7á 6¬àgl÷‰ðœA(w€3>*Ï!–¯ªgªÎ¦gBöÄ#ä¨ Áü´N)Ç- [ 247.836039][ T29] Þ´ÚtI:¿Åš²"wBØśɥÕxlb•íÍs[à s}Q€Eµãÿà·sÜŸqµIGh­z‚CÑ Ja0J ¿Òµ~¾Çõ©ÒÖ–´Í³·êúÑÚ·[jƒÒ¤|>‡·õ÷Ifl“QTjТ½ÀÓÌ:|{«gq"|kóëžÀÓ‚[°Z |¤àEë¯ÿ§JIzɈ«T›0m#‚R¬¢„®ì™™òrˆ§IϪ䙘´<‹@×P× [ 247.911112][ T780] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 248.484217][ T780] usb 3-1: device descriptor read/64, error -71 [ 248.663354][ T5078] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.682253][ T5078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.693580][ T5078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.718845][ T5078] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.736947][ T5078] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 248.746500][ T5078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.814007][ T780] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 249.130902][ C0] sched: RT throttling activated [ 249.288225][ T780] usb 3-1: device descriptor read/64, error -71 [ 249.475165][ T780] usb usb3-port1: attempt power cycle [ 249.647100][ T5348] loop0: detected capacity change from 0 to 512 [ 249.809333][ T5348] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 249.901509][ T5348] EXT4-fs (loop0): invalid journal inode [ 249.910621][ T5348] EXT4-fs (loop0): can't get journal size [ 250.123986][ T5348] EXT4-fs (loop0): 1 truncate cleaned up [ 250.130208][ T5348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.711815][ T5076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.783381][ T5360] loop2: detected capacity change from 0 to 128 [ 250.860580][ T5078] Bluetooth: hci5: command tx timeout [ 251.154271][ T3471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.261969][ T5343] chnl_net:caif_netlink_parms(): no params data found [ 251.861940][ T3471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.019297][ T5365] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.107468][ T3471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.465978][ T3471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.593525][ T29] audit: type=1804 audit(1717840376.723:5): pid=5370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3377135029/syzkaller.KKoHMY/5/bus/file0" dev="sda1" ino=1965 res=1 errno=0 [ 252.836531][ T3471] bridge_slave_1: left allmulticast mode [ 252.844761][ T3471] bridge_slave_1: left promiscuous mode [ 252.851882][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.928976][ T3471] bridge_slave_0: left allmulticast mode [ 252.935486][ T3471] bridge_slave_0: left promiscuous mode [ 252.942265][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.952146][ T29] audit: type=1326 audit(1717840376.993:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5366 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d3579 code=0x0 [ 252.952675][ T5078] Bluetooth: hci5: command tx timeout [ 253.566674][ T3471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.621564][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.738412][ T3471] bond0 (unregistering): Released all slaves [ 254.510232][ T5387] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 254.569480][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.577700][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.587552][ T5343] bridge_slave_0: entered allmulticast mode [ 254.599295][ T5343] bridge_slave_0: entered promiscuous mode [ 254.792095][ T3471] hsr_slave_0: left promiscuous mode [ 254.842542][ T3471] hsr_slave_1: left promiscuous mode [ 254.876036][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.884454][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.948185][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.957691][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.015959][ T5078] Bluetooth: hci5: command tx timeout [ 255.032333][ T3471] veth1_macvtap: left promiscuous mode [ 255.038205][ T3471] veth0_macvtap: left promiscuous mode [ 255.044272][ T3471] veth1_vlan: left promiscuous mode [ 255.049854][ T3471] veth0_vlan: left promiscuous mode [ 255.365655][ T5396] loop0: detected capacity change from 0 to 128 [ 256.116652][ T3471] team0 (unregistering): Port device team_slave_1 removed [ 256.153705][ T3471] team0 (unregistering): Port device team_slave_0 removed [ 256.546460][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.554529][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.565487][ T5343] bridge_slave_1: entered allmulticast mode [ 256.578201][ T5343] bridge_slave_1: entered promiscuous mode [ 256.862589][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.947018][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.096623][ T5078] Bluetooth: hci5: command tx timeout [ 257.172588][ T5343] team0: Port device team_slave_0 added [ 257.190219][ T5343] team0: Port device team_slave_1 added [ 257.378904][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.387556][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.414841][ T5343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.441964][ T29] audit: type=1804 audit(1717840381.463:7): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1745261265/syzkaller.1tezlE/14/bus/file0" dev="sda1" ino=1941 res=1 errno=0 [ 257.455254][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.475520][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.510729][ T5343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.660711][ T29] audit: type=1326 audit(1717840381.733:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746f579 code=0x0 [ 257.993890][ T5343] hsr_slave_0: entered promiscuous mode [ 258.028179][ T5343] hsr_slave_1: entered promiscuous mode [ 259.307921][ T5430] loop2: detected capacity change from 0 to 128 [ 259.341620][ T5430] FAT-fs (loop2): Unrecognized mount option "ÿÿ" or missing value [ 259.630753][ T5430] loop2: detected capacity change from 0 to 512 [ 259.712180][ T5430] /dev/loop2: Can't open blockdev [ 259.731448][ T5426] loop3: detected capacity change from 0 to 4096 [ 259.778469][ T5343] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 259.794317][ T5426] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 259.844022][ T5343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 259.937355][ T5343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.079250][ T5343] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.081698][ T5426] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 260.094938][ T5426] ntfs3: loop3: Failed to load $Extend (-22). [ 260.103083][ T5426] ntfs3: loop3: Failed to initialize $Extend. [ 261.319481][ T5444] loop3: detected capacity change from 0 to 128 [ 261.411551][ T5438] pim6reg1: entered promiscuous mode [ 261.417347][ T5438] pim6reg1: entered allmulticast mode [ 261.791800][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.039892][ T5343] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.118687][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.126572][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.220767][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.228592][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.536133][ T5343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.032764][ T29] audit: type=1804 audit(1717840388.113:9): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3377135029/syzkaller.KKoHMY/13/bus/file0" dev="sda1" ino=1968 res=1 errno=0 [ 264.182040][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.286172][ T29] audit: type=1326 audit(1717840388.373:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d3579 code=0x0 [ 264.388141][ T29] audit: type=1804 audit(1717840388.493:11): pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1745261265/syzkaller.1tezlE/19/file0" dev="sda1" ino=1965 res=1 errno=0 [ 264.600077][ T5343] veth0_vlan: entered promiscuous mode [ 264.720361][ T5343] veth1_vlan: entered promiscuous mode [ 264.995269][ T5343] veth0_macvtap: entered promiscuous mode [ 265.061387][ T5343] veth1_macvtap: entered promiscuous mode [ 265.298512][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.310390][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.320560][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.333308][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.343849][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.354765][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.365451][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.376739][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.392866][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.472674][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.483625][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.494025][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.505969][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.517189][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.528283][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.539169][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.552022][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.567490][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.628197][ T5343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.637614][ T5343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.647745][ T5343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.656946][ T5343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.966084][ T29] audit: type=1804 audit(1717840390.033:12): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2710007745/syzkaller.QtPiRH/10/file0" dev="sda1" ino=1950 res=1 errno=0 [ 266.201800][ T29] audit: type=1804 audit(1717840390.303:13): pid=5482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3728949640/syzkaller.oybqJr/16/file0" dev="sda1" ino=1960 res=1 errno=0 [ 267.532172][ T5491] loop4: detected capacity change from 0 to 2048 [ 267.619076][ T5491] loop4: p1 < > p4 [ 267.668033][ T5491] loop4: p4 size 8388608 extends beyond EOD, truncated [ 268.556401][ T29] audit: type=1804 audit(1717840392.653:14): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2710007745/syzkaller.QtPiRH/12/file0" dev="sda1" ino=1955 res=1 errno=0 [ 268.886646][ T29] audit: type=1804 audit(1717840392.983:15): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3377135029/syzkaller.KKoHMY/18/bus/file0" dev="sda1" ino=1967 res=1 errno=0 [ 269.160693][ T29] audit: type=1326 audit(1717840393.233:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d3579 code=0x0 [ 270.130364][ T5523] loop0: detected capacity change from 0 to 16 [ 270.740248][ T29] audit: type=1804 audit(1717840394.813:17): pid=5532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3377135029/syzkaller.KKoHMY/19/file0" dev="sda1" ino=1956 res=1 errno=0 [ 271.043160][ T3221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.051598][ T3221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.196784][ T3221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.205169][ T3221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.568450][ T5537] fuse: Unknown parameter '0xffffffffffffffff' [ 272.030124][ T5523] loop0: detected capacity change from 0 to 16384 [ 272.157090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 272.544048][ T5547] bond_slave_0: entered promiscuous mode [ 272.550300][ T5547] bond_slave_1: entered promiscuous mode [ 272.581466][ T5547] bond_slave_0: left promiscuous mode [ 272.587461][ T5547] bond_slave_1: left promiscuous mode [ 272.693501][ T5547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.784082][ T5547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.842551][ T5139] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 272.868630][ T5547] bond0 (unregistering): Released all slaves [ 273.115328][ T5139] usb 4-1: Using ep0 maxpacket: 16 [ 273.425001][ T5139] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 273.434598][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.443438][ T5139] usb 4-1: Product: syz [ 273.448113][ T5139] usb 4-1: Manufacturer: syz [ 273.453099][ T5139] usb 4-1: SerialNumber: syz [ 273.553380][ T5139] usb 4-1: config 0 descriptor?? [ 273.730939][ C1] hrtimer: interrupt took 203260 ns [ 273.941313][ T29] audit: type=1804 audit(1717840398.033:18): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1745261265/syzkaller.1tezlE/25/bus/file0" dev="sda1" ino=1973 res=1 errno=0 [ 274.191491][ T29] audit: type=1326 audit(1717840398.243:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746f579 code=0x0 [ 274.352337][ T5139] usb 4-1: MIDIStreaming interface descriptor not found [ 274.553719][ T5139] usb 4-1: USB disconnect, device number 2 [ 274.718407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 274.781906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 275.416982][ T29] audit: type=1804 audit(1717840399.483:20): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2283308075/syzkaller.YmNuBD/3/file0" dev="sda1" ino=1963 res=1 errno=0 [ 275.445820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 276.514559][ T5160] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 276.640101][ T5587] IPVS: Error joining to the multicast group [ 276.710670][ T29] audit: type=1804 audit(1717840400.783:21): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3728949640/syzkaller.oybqJr/25/bus/file0" dev="sda1" ino=1967 res=1 errno=0 [ 276.789042][ T5160] usb 5-1: Using ep0 maxpacket: 16 [ 276.901532][ T29] audit: type=1326 audit(1717840400.973:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x0 [ 277.083194][ T5160] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 277.092891][ T5160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.101321][ T5160] usb 5-1: Product: syz [ 277.105832][ T5160] usb 5-1: Manufacturer: syz [ 277.110665][ T5160] usb 5-1: SerialNumber: syz [ 277.152130][ T5160] usb 5-1: config 0 descriptor?? [ 277.337628][ T5595] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 277.466623][ T5595] syz-executor.2[5595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.467553][ T5595] syz-executor.2[5595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.992800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 278.811738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 279.249052][ T5607] loop0: detected capacity change from 0 to 1024 [ 279.452671][ T5160] usb 5-1: MIDIStreaming interface descriptor not found [ 279.617872][ T5160] usb 5-1: USB disconnect, device number 2 [ 280.081333][ T5607] EXT4-fs: Ignoring removed orlov option [ 280.123370][ T5607] EXT4-fs (loop0): Test dummy encryption mode enabled [ 280.204802][ T5607] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 280.292764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 280.335803][ T5607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.545386][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.554190][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.571246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 280.628915][ T29] audit: type=1804 audit(1717840404.723:23): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2710007745/syzkaller.QtPiRH/18/file0" dev="sda1" ino=1965 res=1 errno=0 [ 280.858784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 281.262814][ T5607] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 281.827744][ T5076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.372117][ T5160] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 283.001816][ T5160] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 283.013441][ T5160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.102002][ T5160] usb 5-1: config 0 descriptor?? [ 283.457562][ T29] audit: type=1804 audit(1717840407.543:24): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3377135029/syzkaller.KKoHMY/28/bus/file0" dev="sda1" ino=1970 res=1 errno=0 [ 283.582251][ T29] audit: type=1326 audit(1717840407.703:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d3579 code=0x0 [ 283.641811][ T5160] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 283.649049][ T5160] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 283.674572][ T5160] usb 5-1: USB disconnect, device number 3 [ 285.084962][ T5160] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 285.294901][ T5646] loop3: detected capacity change from 0 to 4096 [ 285.318708][ T5646] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 285.361296][ T5160] usb 5-1: Using ep0 maxpacket: 16 [ 285.410698][ T5646] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 285.479973][ T5646] ntfs3: loop3: ino=1a, Correct links count -> 1. [ 285.641872][ T5160] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 285.655943][ T5160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.665212][ T5160] usb 5-1: Product: syz [ 285.671707][ T5160] usb 5-1: Manufacturer: syz [ 285.676545][ T5160] usb 5-1: SerialNumber: syz [ 285.763236][ T5160] usb 5-1: config 0 descriptor?? [ 287.812319][ T5160] usb 5-1: MIDIStreaming interface descriptor not found [ 288.046780][ T5160] usb 5-1: USB disconnect, device number 4 [ 290.457558][ T29] audit: type=1804 audit(1717840414.463:26): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3377135029/syzkaller.KKoHMY/31/bus/file0" dev="sda1" ino=1967 res=1 errno=0 [ 290.664861][ T29] audit: type=1326 audit(1717840414.683:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d3579 code=0x0 [ 290.845524][ T5674] syz-executor.0[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.846144][ T5674] syz-executor.0[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.821247][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 293.281694][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 293.473715][ T5686] pim6reg1: entered promiscuous mode [ 293.479268][ T5686] pim6reg1: entered allmulticast mode [ 293.732679][ T25] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 293.742691][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.751122][ T25] usb 5-1: Product: syz [ 293.755619][ T25] usb 5-1: Manufacturer: syz [ 293.763019][ T25] usb 5-1: SerialNumber: syz [ 293.883843][ T25] usb 5-1: config 0 descriptor?? [ 294.722456][ T5693] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 294.730984][ T5693] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 294.739479][ T5693] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 295.673439][ T25] usb 5-1: MIDIStreaming interface descriptor not found [ 295.880424][ T5703] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 296.046887][ T25] usb 5-1: USB disconnect, device number 5 [ 296.169547][ T29] audit: type=1804 audit(1717840420.243:28): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3728949640/syzkaller.oybqJr/41/bus/file0" dev="sda1" ino=1966 res=1 errno=0 [ 296.591513][ T29] audit: type=1326 audit(1717840420.613:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x0 [ 297.614808][ T5718] loop4: detected capacity change from 0 to 256 [ 297.641309][ T5718] exfat: Unknown parameter '' [ 298.142588][ T5722] loop0: detected capacity change from 0 to 8 [ 298.223610][ T5722] cramfs: bad data blocksize 4294966936 [ 298.229416][ T5722] cramfs: bad data blocksize 524460 [ 298.235568][ T5722] cramfs: bad data blocksize 4294966936 [ 298.280213][ T29] audit: type=1800 audit(1717840422.373:30): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 298.711459][ T780] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 298.951543][ T780] usb 5-1: Using ep0 maxpacket: 16 [ 299.262145][ T780] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 299.271847][ T780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.280166][ T780] usb 5-1: Product: syz [ 299.284757][ T780] usb 5-1: Manufacturer: syz [ 299.292251][ T780] usb 5-1: SerialNumber: syz [ 299.315796][ T5137] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 299.320725][ T780] usb 5-1: config 0 descriptor?? [ 299.722302][ T5137] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 299.734017][ T5137] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 299.744991][ T5137] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.754826][ T5137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.888212][ T5728] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 301.213534][ T5731] loop0: detected capacity change from 0 to 65 [ 301.250150][ T5731] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 301.333204][ T5731] BFS-fs: bfs_fill_super(): Last block not available on loop0: 511 [ 301.539112][ T780] usb 5-1: MIDIStreaming interface descriptor not found [ 301.639459][ T5731] loop0: detected capacity change from 0 to 512 [ 301.737154][ T780] usb 5-1: USB disconnect, device number 6 [ 301.927726][ T5731] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2250: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 301.956259][ T5137] usb 1-1: USB disconnect, device number 2 [ 302.022716][ T5731] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 302.131597][ T5731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.219282][ T5742] Zero length message leads to an empty skb [ 304.030744][ T29] audit: type=1326 audit(1717840428.153:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d3579 code=0x0 [ 304.248471][ T5761] loop1: detected capacity change from 0 to 256 [ 304.270185][ T5761] exfat: Unknown parameter '' [ 304.849527][ T5076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.572813][ T780] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 305.853997][ T780] usb 5-1: Using ep0 maxpacket: 16 [ 306.184585][ T780] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 306.194367][ T780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.202962][ T780] usb 5-1: Product: syz [ 306.207445][ T780] usb 5-1: Manufacturer: syz [ 306.214026][ T780] usb 5-1: SerialNumber: syz [ 306.278401][ T780] usb 5-1: config 0 descriptor?? [ 306.592130][ T5778] loop0: detected capacity change from 0 to 4096 [ 306.659252][ T5778] NILFS (loop0): invalid segment: Checksum error in segment payload [ 306.671506][ T5778] NILFS (loop0): trying rollback from an earlier position [ 306.769739][ T5778] NILFS (loop0): recovery complete [ 306.785959][ T5786] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.634501][ T780] usb 5-1: MIDIStreaming interface descriptor not found [ 308.904726][ T780] usb 5-1: USB disconnect, device number 7 [ 309.049441][ T5805] loop0: detected capacity change from 0 to 256 [ 309.134382][ T5805] exfat: Unknown parameter '' [ 309.891114][ T5818] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 310.572156][ T29] audit: type=1804 audit(1717840434.613:32): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2710007745/syzkaller.QtPiRH/34/bus/file0" dev="sda1" ino=1972 res=1 errno=0 [ 310.896037][ T29] audit: type=1326 audit(1717840434.983:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7469579 code=0x0 [ 312.251504][ T5839] loop0: detected capacity change from 0 to 4096 [ 312.324576][ T5839] NILFS (loop0): invalid segment: Checksum error in segment payload [ 312.333018][ T5839] NILFS (loop0): trying rollback from an earlier position [ 312.365852][ T780] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 312.414106][ T5839] NILFS (loop0): recovery complete [ 312.429486][ T5848] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.631370][ T780] usb 2-1: Using ep0 maxpacket: 16 [ 312.773771][ T5850] nbd3: detected capacity change from 0 to 6 [ 312.796385][ T5852] block nbd3: shutting down sockets [ 312.932836][ T780] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 312.942429][ T780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.950797][ T780] usb 2-1: Product: syz [ 312.955403][ T780] usb 2-1: Manufacturer: syz [ 312.960219][ T780] usb 2-1: SerialNumber: syz [ 313.069945][ T780] usb 2-1: config 0 descriptor?? [ 313.425540][ T5857] loop3: detected capacity change from 0 to 256 [ 313.458614][ T5857] exfat: Unknown parameter '' [ 314.042889][ T3092] bond0: (slave bond_slave_0): interface is now down [ 314.049863][ T3092] bond0: (slave bond_slave_1): interface is now down [ 314.058653][ T3092] bond0: now running without any active interface! [ 314.928915][ T5871] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 315.292926][ T780] usb 2-1: MIDIStreaming interface descriptor not found [ 315.336466][ T29] audit: type=1804 audit(1717840439.403:34): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3377135029/syzkaller.KKoHMY/45/bus/file0" dev="sda1" ino=1961 res=1 errno=0 [ 315.411583][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.421663][ T5875] nlmon0: Master is either lo or non-ether device [ 315.459673][ T780] usb 2-1: USB disconnect, device number 2 [ 315.618831][ T29] audit: type=1326 audit(1717840439.703:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d3579 code=0x0 [ 316.201206][ T780] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 316.355056][ T5887] loop0: detected capacity change from 0 to 4096 [ 316.425600][ T5887] NILFS (loop0): invalid segment: Checksum error in segment payload [ 316.434145][ T5887] NILFS (loop0): trying rollback from an earlier position [ 316.487715][ T5887] NILFS (loop0): recovery complete [ 316.501516][ T5890] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.662235][ T780] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 316.673987][ T780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.687398][ T780] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.699439][ T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.763933][ T780] usb 2-1: config 0 descriptor?? [ 316.788955][ T5880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.811270][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 316.857920][ T780] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 317.147497][ T5894] loop4: detected capacity change from 0 to 256 [ 317.194999][ T5894] exfat: Unknown parameter '' [ 317.213796][ T43] usb 3-1: config 0 has no interfaces? [ 317.219621][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.229234][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.267683][ T43] usb 3-1: config 0 descriptor?? [ 317.600283][ T5160] usb 3-1: USB disconnect, device number 5 [ 317.813599][ T5899] loop0: detected capacity change from 0 to 4096 [ 317.898395][ T5899] NILFS (loop0): invalid segment: Checksum error in segment payload [ 317.907058][ T5899] NILFS (loop0): trying rollback from an earlier position [ 317.989257][ T5899] NILFS (loop0): recovery complete [ 317.999586][ T5904] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.052211][ T5899] overlayfs: upper fs does not support tmpfile. [ 318.064349][ T5899] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 318.072040][ T5899] overlayfs: failed to set xattr on upper [ 318.077934][ T5899] overlayfs: ...falling back to redirect_dir=nofollow. [ 318.085068][ T5899] overlayfs: ...falling back to index=off. [ 318.091305][ T5899] overlayfs: ...falling back to uuid=null. [ 318.894072][ T5137] usb 2-1: USB disconnect, device number 3 [ 318.921369][ T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 319.075932][ T3144] bond0: (slave bond_slave_0): interface is now down [ 319.083907][ T3144] bond0: (slave bond_slave_1): interface is now down [ 319.092878][ T3144] bond0: now running without any active interface! [ 319.231627][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 319.561836][ T43] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 319.573655][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.582715][ T43] usb 3-1: Product: syz [ 319.587073][ T43] usb 3-1: Manufacturer: syz [ 319.591935][ T43] usb 3-1: SerialNumber: syz [ 319.681252][ T43] usb 3-1: config 0 descriptor?? [ 320.195644][ T5920] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 320.259100][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.355682][ T780] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 320.448523][ T29] audit: type=1804 audit(1717840444.503:36): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2710007745/syzkaller.QtPiRH/44/bus/file0" dev="sda1" ino=1972 res=1 errno=0 [ 320.475607][ T29] audit: type=1800 audit(1717840444.553:37): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 320.631353][ T780] usb 1-1: Using ep0 maxpacket: 8 [ 320.702974][ T29] audit: type=1326 audit(1717840444.773:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7469579 code=0x0 [ 320.776626][ T780] usb 1-1: config 252 has an invalid interface number: 75 but max is 0 [ 320.785397][ T780] usb 1-1: config 252 has no interface number 0 [ 320.982833][ T780] usb 1-1: New USB device found, idVendor=08e3, idProduct=0100, bcdDevice=7b.f1 [ 320.992488][ T780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.003430][ T780] usb 1-1: Product: syz [ 321.007923][ T780] usb 1-1: Manufacturer: syz [ 321.013516][ T780] usb 1-1: SerialNumber: syz [ 321.383172][ T780] cxacru 1-1:252.75: usbatm_usb_probe: bind failed: -19! [ 321.402357][ T29] audit: type=1800 audit(1717840445.463:39): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 321.441613][ T780] usb 1-1: USB disconnect, device number 3 [ 321.513583][ T5928] loop1: detected capacity change from 0 to 4096 [ 321.610397][ T5928] NILFS (loop1): invalid segment: Checksum error in segment payload [ 321.621606][ T5928] NILFS (loop1): trying rollback from an earlier position [ 321.667361][ T5928] NILFS (loop1): recovery complete [ 321.703454][ T5931] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.794068][ T43] usb 3-1: MIDIStreaming interface descriptor not found [ 321.991974][ T43] usb 3-1: USB disconnect, device number 6 [ 322.139802][ T5935] loop2: detected capacity change from 0 to 256 [ 322.177165][ T5935] exfat: Unknown parameter '' [ 324.441842][ T5958] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 324.725470][ T29] audit: type=1804 audit(1717840448.783:40): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2710007745/syzkaller.QtPiRH/49/bus/file0" dev="sda1" ino=1964 res=1 errno=0 [ 324.941923][ T29] audit: type=1326 audit(1717840449.033:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7469579 code=0x0 [ 325.131159][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 325.411177][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 325.731818][ T25] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 325.741296][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.749572][ T25] usb 3-1: Product: syz [ 325.754055][ T25] usb 3-1: Manufacturer: syz [ 325.758880][ T25] usb 3-1: SerialNumber: syz [ 325.814277][ T25] usb 3-1: config 0 descriptor?? [ 326.668705][ T5967] netlink: 14569 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.768594][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.727684][ T5973] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 327.932412][ T25] usb 3-1: MIDIStreaming interface descriptor not found [ 328.091907][ T25] usb 3-1: USB disconnect, device number 7 [ 328.459787][ T5978] loop2: detected capacity change from 0 to 256 [ 328.522124][ T5978] exfat: Unknown parameter '' [ 329.769545][ T5993] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.190432][ T29] audit: type=1804 audit(1717840454.243:42): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1745261265/syzkaller.1tezlE/46/bus/file0" dev="sda1" ino=1970 res=1 errno=0 [ 330.216908][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.469755][ T29] audit: type=1326 audit(1717840454.553:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746f579 code=0x0 [ 331.157856][ T6007] pim6reg1: entered promiscuous mode [ 331.163948][ T6007] pim6reg1: entered allmulticast mode [ 331.183142][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 331.471391][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 331.811770][ T25] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 331.821339][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.829630][ T25] usb 4-1: Product: syz [ 331.834155][ T25] usb 4-1: Manufacturer: syz [ 331.838992][ T25] usb 4-1: SerialNumber: syz [ 331.933037][ T25] usb 4-1: config 0 descriptor?? [ 332.066036][ T6014] loop2: detected capacity change from 0 to 256 [ 332.111821][ T6014] exfat: Unknown parameter '' [ 334.083268][ T25] usb 4-1: MIDIStreaming interface descriptor not found [ 334.256163][ T25] usb 4-1: USB disconnect, device number 3 [ 334.389653][ T6035] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.712530][ T29] audit: type=1804 audit(1717840458.793:44): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3377135029/syzkaller.KKoHMY/53/bus/file0" dev="sda1" ino=1947 res=1 errno=0 [ 334.928196][ T29] audit: type=1326 audit(1717840459.043:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6033 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d3579 code=0x0 [ 335.431593][ T6047] loop1: detected capacity change from 0 to 256 [ 335.534235][ T6047] exfat: Unknown parameter '' [ 336.391740][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 336.517609][ T6070] process 'syz-executor.2' launched './file0' with NULL argv: empty string added [ 336.711145][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 337.021870][ T25] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 337.031341][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.039600][ T25] usb 5-1: Product: syz [ 337.044248][ T25] usb 5-1: Manufacturer: syz [ 337.049124][ T25] usb 5-1: SerialNumber: syz [ 337.079647][ T25] usb 5-1: config 0 descriptor?? [ 337.182718][ T6079] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.201334][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 337.224051][ T780] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 337.428938][ T29] audit: type=1804 audit(1717840461.543:46): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2283308075/syzkaller.YmNuBD/25/bus/file0" dev="overlay" ino=1969 res=1 errno=0 [ 337.491652][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 337.596216][ T29] audit: type=1326 audit(1717840461.703:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x0 [ 337.661880][ T780] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 337.670268][ T780] usb 1-1: config 0 has no interface number 0 [ 337.676673][ T780] usb 1-1: too many endpoints for config 0 interface 84 altsetting 3: 60, using maximum allowed: 30 [ 337.688103][ T780] usb 1-1: config 0 interface 84 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 60 [ 337.704504][ T780] usb 1-1: config 0 interface 84 has no altsetting 0 [ 337.712108][ T780] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 337.721322][ T5160] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 337.729109][ T780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.754576][ T780] usb 1-1: config 0 descriptor?? [ 337.921970][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 337.931450][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.939720][ T43] usb 4-1: Product: syz [ 337.944274][ T43] usb 4-1: Manufacturer: syz [ 337.949193][ T43] usb 4-1: SerialNumber: syz [ 337.958586][ T43] usb 4-1: config 0 descriptor?? [ 337.962269][ T5160] usb 3-1: Using ep0 maxpacket: 8 [ 338.081974][ T780] usb 1-1: string descriptor 0 read error: -71 [ 338.082750][ T5160] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.090609][ T780] cp210x 1-1:0.84: cp210x converter detected [ 338.101427][ T5160] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 338.101594][ T5160] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 338.101797][ T5160] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 338.101950][ T5160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.166995][ T780] cp210x 1-1:0.84: failed to get vendor val 0x370b size 1: -71 [ 338.177405][ T780] cp210x 1-1:0.84: querying part number failed [ 338.191018][ T780] usb 1-1: cp210x converter now attached to ttyUSB0 [ 338.196765][ T5160] hub 3-1:1.0: bad descriptor, ignoring hub [ 338.206475][ T780] usb 1-1: USB disconnect, device number 4 [ 338.215875][ T5160] hub 3-1:1.0: probe with driver hub failed with error -5 [ 338.224811][ T5160] cdc_wdm 3-1:1.0: skipping garbage [ 338.230293][ T5160] cdc_wdm 3-1:1.0: skipping garbage [ 338.236650][ T5160] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 338.262269][ T780] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 338.271708][ T780] cp210x 1-1:0.84: device disconnected [ 338.297106][ T43] msi2500 4-1:0.0: Registered as swradio16 [ 338.307167][ T43] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 338.594978][ T43] usb 3-1: USB disconnect, device number 8 [ 338.791877][ T43] usb 4-1: USB disconnect, device number 4 [ 338.931989][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 338.938276][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 338.944912][ T4434] Bluetooth: hci3: command 0x0406 tx timeout [ 338.946369][ T5082] Bluetooth: hci4: command 0x0406 tx timeout [ 339.077674][ T6095] loop0: detected capacity change from 0 to 256 [ 339.090017][ T6095] exfat: Unknown parameter '' [ 339.283201][ T25] usb 5-1: MIDIStreaming interface descriptor not found [ 339.407029][ T25] usb 5-1: USB disconnect, device number 8 [ 339.721653][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.121271][ T780] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 340.402928][ T780] usb 4-1: Using ep0 maxpacket: 32 [ 340.446217][ T6110] can: request_module (can-proto-0) failed. [ 340.562039][ T780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.572899][ T780] usb 4-1: config 0 has no interfaces? [ 340.578687][ T780] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 340.588202][ T780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.705997][ T780] usb 4-1: config 0 descriptor?? [ 341.263644][ T5137] usb 4-1: USB disconnect, device number 5 [ 341.338383][ T6129] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.592152][ T29] audit: type=1804 audit(1717840465.713:48): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3728949640/syzkaller.oybqJr/70/bus/file0" dev="sda1" ino=1972 res=1 errno=0 [ 341.929802][ T29] audit: type=1326 audit(1717840466.003:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x0 [ 342.006956][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.013708][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.108482][ T6141] loop2: detected capacity change from 0 to 256 [ 342.122543][ T6141] exfat: Unknown parameter '' [ 342.241216][ T780] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 342.514146][ T780] usb 2-1: Using ep0 maxpacket: 16 [ 342.815232][ T780] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 342.824640][ T780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.833073][ T780] usb 2-1: Product: syz [ 342.837536][ T780] usb 2-1: Manufacturer: syz [ 342.842536][ T780] usb 2-1: SerialNumber: syz [ 342.903599][ T780] usb 2-1: config 0 descriptor?? [ 343.244564][ T6153] bridge0: port 3(vlan2) entered blocking state [ 343.251864][ T6153] bridge0: port 3(vlan2) entered disabled state [ 343.258995][ T6153] vlan2: entered allmulticast mode [ 343.299174][ T6153] vlan2: left allmulticast mode [ 343.334218][ T29] audit: type=1804 audit(1717840467.393:50): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3377135029/syzkaller.KKoHMY/58/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 344.441204][ T6167] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 344.452798][ T6167] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.332180][ T780] usb 2-1: MIDIStreaming interface descriptor not found [ 345.668069][ T780] usb 2-1: USB disconnect, device number 4 [ 346.435634][ T6177] loop0: detected capacity change from 0 to 256 [ 346.532382][ T6180] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 346.557533][ T6177] exfat: Unknown parameter '' [ 346.815847][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.831949][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.841285][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.871486][ T6185] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 346.880743][ T6185] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 346.897809][ T6185] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 346.919253][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.938385][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 346.952699][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.019961][ T6186] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 347.156474][ T6185] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 347.226899][ T29] audit: type=1804 audit(1717840471.333:51): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2283308075/syzkaller.YmNuBD/29/bus/file0" dev="sda1" ino=1945 res=1 errno=0 [ 347.294124][ T6185] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 347.523601][ T29] audit: type=1326 audit(1717840471.593:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x0 [ 348.631967][ T6182] chnl_net:caif_netlink_parms(): no params data found [ 348.848385][ T3471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.011770][ T3471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.026229][ T5081] Bluetooth: hci0: command tx timeout [ 349.122502][ T3471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.137036][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 349.301942][ T3471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.431220][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 349.632400][ T3471] bridge_slave_1: left allmulticast mode [ 349.638300][ T3471] bridge_slave_1: left promiscuous mode [ 349.646881][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.712035][ T3471] bridge_slave_0: left allmulticast mode [ 349.717929][ T3471] bridge_slave_0: left promiscuous mode [ 349.725062][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.012533][ T43] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 350.022050][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.030304][ T43] usb 1-1: Product: syz [ 350.036187][ T43] usb 1-1: Manufacturer: syz [ 350.042259][ T43] usb 1-1: SerialNumber: syz [ 350.255853][ T43] usb 1-1: config 0 descriptor?? [ 350.422592][ T3471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.485670][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.530322][ T3471] bond0 (unregistering): Released all slaves [ 351.084288][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.095393][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.107293][ T6182] bridge_slave_0: entered allmulticast mode [ 351.116713][ T6182] bridge_slave_0: entered promiscuous mode [ 351.122445][ T5081] Bluetooth: hci0: command tx timeout [ 351.184643][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.192640][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.200456][ T6182] bridge_slave_1: entered allmulticast mode [ 351.213205][ T6182] bridge_slave_1: entered promiscuous mode [ 351.343456][ T3471] hsr_slave_0: left promiscuous mode [ 351.372816][ T3471] hsr_slave_1: left promiscuous mode [ 351.414068][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.422259][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.444690][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.452707][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.516378][ T3471] veth1_macvtap: left promiscuous mode [ 351.522407][ T3471] veth0_macvtap: left promiscuous mode [ 351.528310][ T3471] veth1_vlan: left promiscuous mode [ 351.534363][ T3471] veth0_vlan: left promiscuous mode [ 352.123826][ T43] usb 1-1: MIDIStreaming interface descriptor not found [ 352.296730][ T43] usb 1-1: USB disconnect, device number 5 [ 352.666597][ T3471] team0 (unregistering): Port device team_slave_1 removed [ 352.835846][ T3471] team0 (unregistering): Port device team_slave_0 removed [ 353.192645][ T5081] Bluetooth: hci0: command tx timeout [ 353.573382][ T6224] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 353.689258][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.798733][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.003498][ T6182] team0: Port device team_slave_0 added [ 354.115747][ T6182] team0: Port device team_slave_1 added [ 354.135938][ T29] audit: type=1804 audit(1717840478.193:53): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3728949640/syzkaller.oybqJr/78/bus/file0" dev="sda1" ino=1955 res=1 errno=0 [ 354.333966][ T29] audit: type=1326 audit(1717840478.443:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x0 [ 354.459256][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.466696][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.495705][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.577792][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.587823][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.614917][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.763435][ T6231] ptrace attach of "/root/syz-executor.1 exec"[5343] was attempted by "/root/syz-executor.1 exec"[6231] [ 354.986806][ T6182] hsr_slave_0: entered promiscuous mode [ 355.032141][ T6182] hsr_slave_1: entered promiscuous mode [ 355.112769][ T6182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.120568][ T6182] Cannot create hsr debugfs directory [ 355.263515][ T5081] Bluetooth: hci0: command tx timeout [ 356.136795][ T780] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 356.421783][ T780] usb 2-1: Using ep0 maxpacket: 16 [ 356.724796][ T780] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 356.734342][ T780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.744807][ T780] usb 2-1: Product: syz [ 356.749206][ T780] usb 2-1: Manufacturer: syz [ 356.754742][ T780] usb 2-1: SerialNumber: syz [ 356.806261][ T780] usb 2-1: config 0 descriptor?? [ 356.883295][ C1] net_ratelimit: 44 callbacks suppressed [ 356.883371][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 356.956642][ T6182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.062736][ T6182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.150019][ T6182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.228678][ T6182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.278446][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.442538][ T6182] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.512961][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.520969][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.575798][ T6265] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 358.613429][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.621263][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.082184][ T780] usb 2-1: MIDIStreaming interface descriptor not found [ 359.214676][ T29] audit: type=1804 audit(1717840483.283:55): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3728949640/syzkaller.oybqJr/83/bus/file0" dev="overlay" ino=1944 res=1 errno=0 [ 359.273889][ T780] usb 2-1: USB disconnect, device number 5 [ 359.368586][ T6274] ptrace attach of "/root/syz-executor.4 exec"[5079] was attempted by "/root/syz-executor.4 exec"[6274] [ 359.503471][ T29] audit: type=1326 audit(1717840483.583:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7469579 code=0x0 [ 359.637320][ T29] audit: type=1326 audit(1717840483.703:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x0 [ 360.609201][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.653492][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 360.728514][ T6290] TCP: Unexpected MD5 Hash found for [fc01::].0->[fe80::aa].16385 [] [ 361.131468][ T6182] veth0_vlan: entered promiscuous mode [ 361.245097][ T6182] veth1_vlan: entered promiscuous mode [ 361.595434][ T6182] veth0_macvtap: entered promiscuous mode [ 361.672766][ T6182] veth1_macvtap: entered promiscuous mode [ 361.837062][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.848046][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.867244][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.878786][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.888967][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.899892][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.910123][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.921867][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.937375][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.039952][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.051331][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.064288][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.075681][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.085923][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.096755][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.106943][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.117726][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.133065][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.257575][ T6306] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 362.276167][ T5160] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 362.303320][ T6182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.312597][ T6182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.321805][ T6182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.331011][ T6182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.592276][ T5160] usb 2-1: Using ep0 maxpacket: 16 [ 362.602128][ T29] audit: type=1804 audit(1717840486.683:58): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2710007745/syzkaller.QtPiRH/85/bus/file0" dev="sda1" ino=1967 res=1 errno=0 [ 362.892334][ T5160] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 362.902030][ T5160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.910280][ T5160] usb 2-1: Product: syz [ 362.914869][ T5160] usb 2-1: Manufacturer: syz [ 362.919781][ T5160] usb 2-1: SerialNumber: syz [ 362.961757][ T29] audit: type=1326 audit(1717840487.013:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7469579 code=0x0 [ 362.967598][ T5160] usb 2-1: config 0 descriptor?? [ 364.456138][ T6324] loop4: detected capacity change from 0 to 256 [ 364.497341][ T6324] exfat: Unknown parameter '' [ 365.033292][ T5160] usb 2-1: MIDIStreaming interface descriptor not found [ 365.196792][ T5160] usb 2-1: USB disconnect, device number 6 [ 365.386670][ T6334] loop1: detected capacity change from 0 to 512 [ 365.548733][ T6334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.562118][ T6334] ext4 filesystem being mounted at /root/syzkaller-testdir2283308075/syzkaller.YmNuBD/38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.613000][ T6334] Quota error (device loop1): do_check_range: Getting block 4128768 out of range 0-5 [ 365.710654][ T5343] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.009981][ T6345] loop4: detected capacity change from 0 to 164 [ 368.814177][ T6361] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.826795][ T6361] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.963207][ T6361] overlayfs: failed to resolve './file1': -2 [ 369.068372][ T29] audit: type=1804 audit(1717840493.173:60): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2283308075/syzkaller.YmNuBD/42/bus/file0" dev="sda1" ino=1959 res=1 errno=0 [ 369.307547][ T4059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.316559][ T4059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.321797][ T6366] loop2: detected capacity change from 0 to 256 [ 369.371950][ T6366] exfat: Unknown parameter '' [ 369.455272][ T29] audit: type=1326 audit(1717840493.553:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x0 [ 369.457516][ T4059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.486922][ T4059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.195668][ T6373] veth0_vlan: entered allmulticast mode [ 370.401030][ T6373] veth0_vlan: left promiscuous mode [ 370.409508][ T6373] veth0_vlan: entered promiscuous mode [ 370.608313][ T6372] loop0: detected capacity change from 0 to 4096 [ 370.743051][ T6381] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 371.255007][ T29] audit: type=1800 audit(1717840495.333:62): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 373.406896][ T6396] loop0: detected capacity change from 0 to 256 [ 373.463920][ T6396] exfat: Unknown parameter '' [ 374.780793][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 374.897348][ T6403] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 374.907458][ T6403] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.102687][ T6405] overlayfs: failed to resolve './file1': -2 [ 375.304696][ T29] audit: type=1804 audit(1717840499.323:63): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1745261265/syzkaller.1tezlE/77/bus/file0" dev="sda1" ino=1957 res=1 errno=0 [ 375.490785][ T29] audit: type=1326 audit(1717840499.583:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746f579 code=0x0 [ 375.793643][ T6413] loop1: detected capacity change from 0 to 256 [ 375.828429][ T6413] FAT-fs (loop1): Unrecognized mount option "ÿ0xffffffffffffffff" or missing value [ 376.116408][ T6415] loop1: detected capacity change from 0 to 512 [ 376.155769][ T6415] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 376.166004][ T6415] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: journalled. [ 376.694382][ T6414] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 378.110000][ T6425] netlink: 2088 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.155631][ T6422] loop1: detected capacity change from 0 to 4096 [ 378.365719][ T6428] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.036516][ T29] audit: type=1800 audit(1717840503.113:65): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 380.041912][ T6435] loop2: detected capacity change from 0 to 256 [ 380.141637][ T6435] exfat: Unknown parameter '' [ 380.843658][ T5081] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 382.520664][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.115086][ T6449] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 383.124968][ T6449] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 383.260507][ T6449] overlayfs: failed to resolve './file1': -2 [ 383.408550][ T29] audit: type=1804 audit(1717840507.513:66): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2371378293/syzkaller.DCHVKh/4/bus/file0" dev="sda1" ino=1964 res=1 errno=0 [ 383.613814][ T29] audit: type=1326 audit(1717840507.683:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x0 [ 386.043374][ T6453] loop2: detected capacity change from 0 to 32768 [ 386.198817][ T6458] loop4: detected capacity change from 0 to 4096 [ 386.435790][ T6468] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.853967][ T29] audit: type=1800 audit(1717840510.923:68): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 387.380394][ T6471] loop1: detected capacity change from 0 to 256 [ 387.488237][ T6471] exfat: Unknown parameter '' [ 387.903396][ T6474] loop3: detected capacity change from 0 to 8 [ 388.027519][ T6474] Page size > filesystem block size (0). This is currently not supported! [ 393.606508][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 394.711794][ T6490] overlayfs: failed to resolve './file0': -2 [ 395.074064][ T6493] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.083951][ T6493] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.189969][ T6491] overlayfs: failed to resolve './file0': -2 [ 395.399991][ T29] audit: type=1804 audit(1717840519.523:69): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1745261265/syzkaller.1tezlE/85/bus/file0" dev="sda1" ino=1958 res=1 errno=0 [ 395.626628][ T29] audit: type=1326 audit(1717840519.673:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746f579 code=0x0 [ 402.899842][ T29] audit: type=1804 audit(1717840526.983:71): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1745261265/syzkaller.1tezlE/87/file0" dev="sda1" ino=1965 res=1 errno=0 [ 403.485885][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.492817][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.325103][ T6509] loop4: detected capacity change from 0 to 4096 [ 404.345723][ T6511] loop2: detected capacity change from 0 to 256 [ 404.514842][ T6511] exfat: Unknown parameter '' [ 404.766114][ T6513] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.676402][ T29] audit: type=1800 audit(1717840529.793:72): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 406.498400][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.519403][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.533379][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.556464][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.592734][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 406.610171][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.461319][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 408.721694][ T50] Bluetooth: hci3: command tx timeout [ 408.802235][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 408.889870][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 409.001476][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.012834][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.252914][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 409.262473][ T8] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 409.274139][ T8] usb 5-1: Product: syz [ 409.278456][ T8] usb 5-1: Manufacturer: syz [ 409.465111][ T8] hub 5-1:4.0: USB hub found [ 409.724519][ T8] hub 5-1:4.0: 2 ports detected [ 410.305721][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.313586][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.321807][ T6516] bridge_slave_0: entered allmulticast mode [ 410.330002][ T6516] bridge_slave_0: entered promiscuous mode [ 410.470103][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.477768][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.485525][ T6516] bridge_slave_1: entered allmulticast mode [ 410.493674][ T6516] bridge_slave_1: entered promiscuous mode [ 410.771203][ T50] Bluetooth: hci3: command tx timeout [ 410.787768][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.890419][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.222046][ T6516] team0: Port device team_slave_0 added [ 411.309790][ T6516] team0: Port device team_slave_1 added [ 411.561556][ T8] hub 5-1:4.0: set hub depth failed [ 411.570788][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.579376][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.605895][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.629493][ T8] usb 5-1: USB disconnect, device number 9 [ 411.682712][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.689877][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.716939][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.000250][ T6516] hsr_slave_0: entered promiscuous mode [ 412.040071][ T6516] hsr_slave_1: entered promiscuous mode [ 412.068484][ T6516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.076461][ T6516] Cannot create hsr debugfs directory [ 412.410165][ T4059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.566868][ T6532] overlayfs: failed to resolve './file0': -2 [ 412.586150][ T4059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.722992][ T4059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.765447][ T6536] loop2: detected capacity change from 0 to 128 [ 412.844573][ T6537] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.858483][ T6537] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.861737][ T50] Bluetooth: hci3: command tx timeout [ 412.935365][ T6536] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.946617][ T4059] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.960683][ T6536] ext4 filesystem being mounted at /root/syzkaller-testdir1745261265/syzkaller.1tezlE/90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 413.047266][ T6535] overlayfs: failed to resolve './file0': -2 [ 413.169539][ T29] audit: type=1804 audit(1717840537.293:73): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2710007745/syzkaller.QtPiRH/106/bus/file0" dev="sda1" ino=1935 res=1 errno=0 [ 413.333389][ T4059] bridge_slave_1: left allmulticast mode [ 413.339541][ T4059] bridge_slave_1: left promiscuous mode [ 413.346297][ T4059] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.406654][ T4059] bridge_slave_0: left allmulticast mode [ 413.415122][ T4059] bridge_slave_0: left promiscuous mode [ 413.422153][ T4059] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.424531][ T29] audit: type=1326 audit(1717840537.503:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7469579 code=0x0 [ 413.736848][ T5093] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 414.124319][ T4059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.221978][ T4059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.275974][ T4059] bond0 (unregistering): Released all slaves [ 414.961797][ T50] Bluetooth: hci3: command tx timeout [ 415.049854][ T4059] hsr_slave_0: left promiscuous mode [ 415.078998][ T4059] hsr_slave_1: left promiscuous mode [ 415.117074][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.124982][ T4059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.139861][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.148196][ T4059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.233481][ T4059] veth1_macvtap: left promiscuous mode [ 415.239439][ T4059] veth0_macvtap: left promiscuous mode [ 415.245694][ T4059] veth1_vlan: left promiscuous mode [ 415.251832][ T4059] veth0_vlan: left promiscuous mode [ 416.269260][ T4059] team0 (unregistering): Port device team_slave_1 removed [ 416.371381][ T4059] team0 (unregistering): Port device team_slave_0 removed [ 416.623017][ T6562] loop2: detected capacity change from 0 to 256 [ 416.699159][ T6562] exfat: Unknown parameter '' [ 416.714045][ T6516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.861807][ T6516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.961763][ T6516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.044028][ T6516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.053791][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.241119][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.340020][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.347879][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.530703][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.538499][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.872605][ T5129] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 419.262829][ T5129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.274275][ T5129] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 419.283824][ T5129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.329480][ T5129] usb 3-1: config 0 descriptor?? [ 420.046595][ T5129] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 420.179767][ T5129] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 420.362877][ T5129] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 420.512249][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.783971][ T5129] usb 3-1: USB disconnect, device number 9 [ 421.159890][ T6516] veth0_vlan: entered promiscuous mode [ 421.262068][ T6516] veth1_vlan: entered promiscuous mode [ 421.406518][ T6582] overlayfs: failed to resolve './file0': -2 [ 421.635073][ T6516] veth0_macvtap: entered promiscuous mode [ 421.727027][ T6516] veth1_macvtap: entered promiscuous mode [ 421.849080][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.861897][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.875949][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.887725][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.898267][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.909170][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.919351][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.930149][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.945430][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.019243][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.030239][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.040410][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.051403][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.061609][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.076260][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.087393][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.098220][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.113570][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.174035][ T6516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.184954][ T6516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.194167][ T6516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.203405][ T6516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.208332][ T6592] loop2: detected capacity change from 0 to 128 [ 423.370810][ T6592] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 423.422471][ T6592] ext4 filesystem being mounted at /root/syzkaller-testdir1745261265/syzkaller.1tezlE/94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 423.524008][ T6595] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.533845][ T6595] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.681087][ T6595] overlayfs: failed to resolve './file0': -2 [ 423.902018][ T29] audit: type=1804 audit(1717840547.993:75): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2371378293/syzkaller.DCHVKh/11/bus/file0" dev="sda1" ino=1935 res=1 errno=0 [ 424.076185][ T29] audit: type=1326 audit(1717840548.163:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x0 [ 424.086732][ T5093] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.555748][ T6616] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 426.298938][ T6623] loop3: detected capacity change from 0 to 256 [ 426.379583][ T6623] exfat: Unknown parameter '' [ 426.755937][ T3419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.764399][ T3419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.935472][ T3419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.944837][ T3419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.451392][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 428.831203][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.842816][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 428.852426][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.901519][ T10] usb 3-1: config 0 descriptor?? [ 429.222211][ T6637] overlayfs: failed to resolve './file1': -2 [ 429.561537][ T10] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 429.616301][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input6 [ 429.788210][ T10] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 430.267028][ T10] usb 3-1: USB disconnect, device number 10 [ 430.912760][ T6645] loop3: detected capacity change from 0 to 128 [ 431.029638][ T6645] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.070798][ T6645] ext4 filesystem being mounted at /root/syzkaller-testdir2371378293/syzkaller.DCHVKh/15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 431.155792][ T6648] loop1: detected capacity change from 0 to 512 [ 431.228404][ T6648] EXT4-fs: Ignoring removed nobh option [ 431.306475][ T6648] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 431.361464][ T6648] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 2 len 1 [ 431.393416][ T6648] EXT4-fs (loop1): Remounting filesystem read-only [ 431.426960][ T6648] EXT4-fs (loop1): 1 truncate cleaned up [ 431.433726][ T6648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.547926][ T6648] ===================================================== [ 431.555435][ T6648] BUG: KMSAN: uninit-value in strnchr+0x90/0xd0 [ 431.561953][ T6648] strnchr+0x90/0xd0 [ 431.566066][ T6648] bpf_bprintf_prepare+0x1c2/0x23c0 [ 431.571466][ T6648] bpf_trace_printk+0xec/0x3e0 [ 431.576412][ T6648] ___bpf_prog_run+0x13fe/0xe0f0 [ 431.581519][ T6648] __bpf_prog_run32+0xb2/0xe0 [ 431.586356][ T6648] bpf_trace_run2+0x116/0x300 [ 431.591193][ T6648] __bpf_trace_tlb_flush+0x2c/0x40 [ 431.596497][ T6648] switch_mm_irqs_off+0x9d2/0x1010 [ 431.601773][ T6648] __text_poke+0xb4e/0xfb0 [ 431.606382][ T6648] text_poke_bp_batch+0x17f/0x960 [ 431.611610][ T6648] text_poke_finish+0x7d/0xd0 [ 431.616483][ T6648] arch_jump_label_transform_apply+0x23/0x40 [ 431.622623][ T6648] __jump_label_update+0x6af/0x6d0 [ 431.627924][ T6648] jump_label_update+0x6a0/0x7a0 [ 431.633037][ T6648] static_key_enable_cpuslocked+0x229/0x260 [ 431.639130][ T6648] static_key_enable+0x23/0x30 [ 431.644067][ T6648] tracepoint_add_func+0x1084/0x1280 [ 431.649573][ T6648] tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 431.656583][ T6648] bpf_probe_register+0x201/0x250 [ 431.661783][ T6648] bpf_raw_tp_link_attach+0x627/0x8a0 [ 431.667349][ T6648] bpf_raw_tracepoint_open+0x485/0x8a0 [ 431.672983][ T6648] __sys_bpf+0x5a6/0xd90 [ 431.677389][ T6648] __ia32_sys_bpf+0xa0/0xe0 [ 431.682050][ T6648] ia32_sys_call+0xf7e/0x40a0 [ 431.686924][ T6648] __do_fast_syscall_32+0xb4/0x120 [ 431.692335][ T6648] do_fast_syscall_32+0x38/0x80 [ 431.697378][ T6648] do_SYSENTER_32+0x1f/0x30 [ 431.702070][ T6648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.708696][ T6648] [ 431.711106][ T6648] Local variable stack created at: [ 431.716298][ T6648] __bpf_prog_run32+0x43/0xe0 [ 431.721246][ T6648] bpf_trace_run2+0x116/0x300 [ 431.726101][ T6648] [ 431.728618][ T6648] CPU: 0 PID: 6648 Comm: syz-executor.1 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 431.738761][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 431.748951][ T6648] ===================================================== [ 431.756073][ T6648] Disabling lock debugging due to kernel taint [ 431.762327][ T6648] Kernel panic - not syncing: kmsan.panic set ... [ 431.768941][ T6648] CPU: 0 PID: 6648 Comm: syz-executor.1 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 431.780846][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 431.791046][ T6648] Call Trace: [ 431.794433][ T6648] [ 431.797492][ T6648] dump_stack_lvl+0x216/0x2d0 [ 431.802523][ T6648] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 431.808521][ T6648] dump_stack+0x1e/0x30 [ 431.812860][ T6648] panic+0x4e2/0xcd0 [ 431.817024][ T6648] ? kmsan_get_metadata+0xf1/0x1d0 [ 431.822325][ T6648] kmsan_report+0x2d5/0x2e0 [ 431.827002][ T6648] ? __msan_warning+0x95/0x120 [ 431.831928][ T6648] ? strnchr+0x90/0xd0 [ 431.836372][ T6648] ? bpf_bprintf_prepare+0x1c2/0x23c0 [ 431.841964][ T6648] ? bpf_trace_printk+0xec/0x3e0 [ 431.847099][ T6648] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 431.852390][ T6648] ? __bpf_prog_run32+0xb2/0xe0 [ 431.857415][ T6648] ? bpf_trace_run2+0x116/0x300 [ 431.862439][ T6648] ? __bpf_trace_tlb_flush+0x2c/0x40 [ 431.867912][ T6648] ? switch_mm_irqs_off+0x9d2/0x1010 [ 431.873370][ T6648] ? __text_poke+0xb4e/0xfb0 [ 431.878142][ T6648] ? text_poke_bp_batch+0x17f/0x960 [ 431.883534][ T6648] ? text_poke_finish+0x7d/0xd0 [ 431.888594][ T6648] ? arch_jump_label_transform_apply+0x23/0x40 [ 431.894934][ T6648] ? __jump_label_update+0x6af/0x6d0 [ 431.900428][ T6648] ? jump_label_update+0x6a0/0x7a0 [ 431.905814][ T6648] ? static_key_enable_cpuslocked+0x229/0x260 [ 431.912181][ T6648] ? static_key_enable+0x23/0x30 [ 431.917331][ T6648] ? tracepoint_add_func+0x1084/0x1280 [ 431.923018][ T6648] ? tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 431.930188][ T6648] ? bpf_probe_register+0x201/0x250 [ 431.935827][ T6648] ? bpf_raw_tp_link_attach+0x627/0x8a0 [ 431.941582][ T6648] ? bpf_raw_tracepoint_open+0x485/0x8a0 [ 431.947518][ T6648] ? __sys_bpf+0x5a6/0xd90 [ 431.952099][ T6648] ? __ia32_sys_bpf+0xa0/0xe0 [ 431.956936][ T6648] ? ia32_sys_call+0xf7e/0x40a0 [ 431.961993][ T6648] ? __do_fast_syscall_32+0xb4/0x120 [ 431.967493][ T6648] ? do_fast_syscall_32+0x38/0x80 [ 431.972711][ T6648] ? do_SYSENTER_32+0x1f/0x30 [ 431.977574][ T6648] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.984295][ T6648] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 431.990762][ T6648] ? kmsan_get_metadata+0x146/0x1d0 [ 431.996127][ T6648] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 432.002127][ T6648] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 432.008290][ T6648] ? kmsan_get_metadata+0x146/0x1d0 [ 432.013685][ T6648] ? kmsan_get_metadata+0x146/0x1d0 [ 432.019237][ T6648] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 432.025227][ T6648] __msan_warning+0x95/0x120 [ 432.029987][ T6648] strnchr+0x90/0xd0 [ 432.034075][ T6648] bpf_bprintf_prepare+0x1c2/0x23c0 [ 432.039532][ T6648] ? kmsan_get_metadata+0x146/0x1d0 [ 432.044892][ T6648] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 432.051368][ T6648] ? __msan_memcpy+0x108/0x1c0 [ 432.056420][ T6648] bpf_trace_printk+0xec/0x3e0 [ 432.061394][ T6648] ? __bpf_prog_run32+0x5c/0xe0 [ 432.066419][ T6648] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 432.072402][ T6648] ___bpf_prog_run+0x13fe/0xe0f0 [ 432.077539][ T6648] ? kmsan_get_metadata+0x146/0x1d0 [ 432.082924][ T6648] __bpf_prog_run32+0xb2/0xe0 [ 432.087773][ T6648] ? kmsan_get_metadata+0x110/0x1d0 [ 432.093166][ T6648] ? __pfx___bpf_prog_run32+0x10/0x10 [ 432.098861][ T6648] bpf_trace_run2+0x116/0x300 [ 432.103708][ T6648] ? kmsan_get_metadata+0x146/0x1d0 [ 432.109090][ T6648] __bpf_trace_tlb_flush+0x2c/0x40 [ 432.114491][ T6648] switch_mm_irqs_off+0x9d2/0x1010 [ 432.119886][ T6648] __text_poke+0xb4e/0xfb0 [ 432.124511][ T6648] ? __pfx_text_poke_memcpy+0x10/0x10 [ 432.130087][ T6648] ? switch_mm_irqs_off+0x920/0x1010 [ 432.135559][ T6648] ? switch_mm_irqs_off+0x920/0x1010 [ 432.141189][ T6648] text_poke_bp_batch+0x17f/0x960 [ 432.146415][ T6648] ? kmsan_get_metadata+0x146/0x1d0 [ 432.151781][ T6648] ? kmsan_get_metadata+0x146/0x1d0 [ 432.157157][ T6648] ? kmsan_get_shadow_origin_ptr+0x16/0xb0 [ 432.163143][ T6648] text_poke_finish+0x7d/0xd0 [ 432.168026][ T6648] arch_jump_label_transform_apply+0x23/0x40 [ 432.174177][ T6648] __jump_label_update+0x6af/0x6d0 [ 432.179516][ T6648] jump_label_update+0x6a0/0x7a0 [ 432.184651][ T6648] ? kmsan_report+0x2a0/0x2e0 [ 432.189486][ T6648] static_key_enable_cpuslocked+0x229/0x260 [ 432.196110][ T6648] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 432.202109][ T6648] static_key_enable+0x23/0x30 [ 432.207066][ T6648] ? __SCT__tp_func_exit_mmap+0x8/0x8 [ 432.212753][ T6648] tracepoint_add_func+0x1084/0x1280 [ 432.218255][ T6648] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 432.224734][ T6648] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 432.230733][ T6648] tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 432.237900][ T6648] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 432.243905][ T6648] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 432.249907][ T6648] bpf_probe_register+0x201/0x250 [ 432.255310][ T6648] bpf_raw_tp_link_attach+0x627/0x8a0 [ 432.260900][ T6648] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 432.267276][ T6648] ? kmsan_get_metadata+0x146/0x1d0 [ 432.272657][ T6648] bpf_raw_tracepoint_open+0x485/0x8a0 [ 432.278322][ T6648] __sys_bpf+0x5a6/0xd90 [ 432.282763][ T6648] __ia32_sys_bpf+0xa0/0xe0 [ 432.287431][ T6648] ia32_sys_call+0xf7e/0x40a0 [ 432.292923][ T6648] __do_fast_syscall_32+0xb4/0x120 [ 432.298233][ T6648] ? irqentry_exit+0x16/0x60 [ 432.303157][ T6648] do_fast_syscall_32+0x38/0x80 [ 432.308213][ T6648] do_SYSENTER_32+0x1f/0x30 [ 432.312931][ T6648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.319494][ T6648] RIP: 0023:0xf7439579 [ 432.323706][ T6648] Code: Unable to access opcode bytes at 0xf743954f. [ 432.330480][ T6648] RSP: 002b:00000000f5ec25ac EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 432.339180][ T6648] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000020000080 [ 432.347312][ T6648] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.355508][ T6648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.363608][ T6648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 432.371700][ T6648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.379824][ T6648] [ 432.383274][ T6648] Kernel Offset: disabled [ 432.387657][ T6648] Rebooting in 86400 seconds..