last executing test programs: 3m28.377739461s ago: executing program 0 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x100, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x4, 0xffffffff, 0xb93}, {0x7, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x9, 0x0, 0x2}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0x5, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0xe, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x7, 0xff}, {0x1, 0x71, 0x4b, 0xcf55, 0x80000000, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x7, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x10008, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0x1, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x8, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x5, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x0, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4e, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x5, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x6, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x2, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)='C\a', 0x2}], 0x2}, 0x4) 3m26.439969478s ago: executing program 0 (id=2004): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004) 3m26.217314858s ago: executing program 0 (id=2007): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x498582, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x0, 0x10000042, 0x44, 0x7fff, 0x4, 0xb9, 0xffffffffffffffff, 0x4, 0x5}, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x10120, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 3m24.614180675s ago: executing program 0 (id=2009): socket$igmp(0x2, 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=[{0x3, 0x3, 0x1, 0x1}], 0x10, 0x40}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000d40)=ANY=[], 0x210) syz_open_dev$sndpcmp(0x0, 0x0, 0x101000) r5 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m22.916601941s ago: executing program 0 (id=2011): socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m21.684197038s ago: executing program 0 (id=2012): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, r1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x1, 0xffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000058f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004b2000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xff}, 0x1c) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3m6.389790085s ago: executing program 32 (id=2012): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, r1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x1, 0xffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000058f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004b2000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xff}, 0x1c) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 12.95574934s ago: executing program 3 (id=2673): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x4) 12.818529403s ago: executing program 5 (id=2675): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.54893078s ago: executing program 5 (id=2678): socket$alg(0x26, 0x5, 0x0) r0 = semget(0x3, 0x4, 0x404) semctl$SETVAL(r0, 0x2, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c0001000000000000009bdeffafde2500"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) fsopen(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0xc040480) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r5, &(0x7f00000001c0)=""/105, 0x69, 0x1, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 12.48033558s ago: executing program 2 (id=2679): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r7) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000000)=0x639) readv(r9, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 10.847792522s ago: executing program 2 (id=2685): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r5, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) 10.720495067s ago: executing program 3 (id=2686): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639", 0xca}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.362171053s ago: executing program 2 (id=2688): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xdc}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 9.147944172s ago: executing program 3 (id=2689): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1000003}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xa7, 0x807, 0x2, 0x72b0, 0xfffffffffffffffa, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20040080) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x4) 9.130594718s ago: executing program 2 (id=2690): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000000000000000000a0000000000000004000400e81bef6879af6cb142db2bd97929fe171b10e42cae013bbbbed19c5501a09a8383beeefce17701e27b2bd6d5c5003dcb365d01f55c6e43ab50fe09f4d42a9e4d436c3e9f37f04ef2083072cdf9eb9a21926781c20300ca0c47aacf5cccc62221ae7090a3f63f16f6ee46374b6a09892b046ab25a8d6c461ab8354eeb73c70de4e79f88fe5c52"], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x210) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r4, 0x1}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d0000000409021200"], 0x0) close_range(r6, r7, 0x0) 7.529043486s ago: executing program 3 (id=2693): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 7.331147314s ago: executing program 5 (id=2695): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 7.270804796s ago: executing program 3 (id=2696): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x4) 6.040884613s ago: executing program 1 (id=2702): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000000000000000000a0000000000000004000400e81bef6879af6cb142db2bd97929fe171b10e42cae013bbbbed19c5501a09a8383beeefce17701e27b2bd6d5c5003dcb365d01f55c6e43ab50fe09f4d42a9e4d436c3e9f37f04ef2083072cdf9eb9a21926781c20300ca0c47aacf5cccc62221ae7090a3f63f16f6ee46374b6a09892b046ab25a8d6c461ab8354eeb73c70de4e79f88fe5c52"], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x210) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1000003}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xa7, 0x807, 0x2, 0x72b0, 0xfffffffffffffffa, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20040080) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x4) 4.280370683s ago: executing program 1 (id=2704): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff0}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_POLICE={0x4, 0x2, [@TCA_POLICE_RESULT={0x0, 0x5, 0xffffff42}]}, @TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x3, 0x86, 0xd412, {0x7, 0x0, 0x1ff, 0xe75, 0x3998, 0x5}, {0xf7, 0x1, 0x1a, 0x0, 0x6, 0x2}, 0x1, 0x5, 0x6}}]}, @TCA_CGROUP_EMATCHES={0xffffffffffffff7b}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.124378168s ago: executing program 3 (id=2705): socket$alg(0x26, 0x5, 0x0) r0 = semget(0x3, 0x4, 0x404) semctl$SETVAL(r0, 0x2, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c0001000000000000009bdeffafde2500"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) fsopen(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0xc040480) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r5, &(0x7f00000001c0)=""/105, 0x69, 0x1, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.792084184s ago: executing program 4 (id=2706): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3.647677577s ago: executing program 1 (id=2707): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x3, 0x1) 3.604033597s ago: executing program 5 (id=2708): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="140000000900", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local}], 0x10) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000031c0)="01ecbc5fc8bdbf731ba54cacff3c2986d5412a767a5fc7208759050be0", 0x34000}], 0x1}, 0x815) 3.484188616s ago: executing program 5 (id=2709): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d701"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r1, &(0x7f0000000500)=[{0x0, 0xfed4}, {&(0x7f0000000080)=""/13, 0xd}], 0x2, 0x6, 0x0) 3.455305321s ago: executing program 1 (id=2710): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000800)="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", 0x282}], 0x2}, 0x8000) io_uring_setup(0x1a94, &(0x7f0000000200)={0x0, 0x638c, 0x10, 0x1, 0x2ed}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 3.400442375s ago: executing program 4 (id=2711): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xdc}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 3.314511949s ago: executing program 4 (id=2712): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r4 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x800, 0x0) close_range(r4, r3, 0x2) syz_genetlink_get_family_id$devlink(0x0, r3) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x14e2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xbc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x48010) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.309546665s ago: executing program 1 (id=2713): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$video(0x0, 0x101, 0xab02) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 1.841056319s ago: executing program 4 (id=2714): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000000000000000000a0000000000000004000400e81bef6879af6cb142db2bd97929fe171b10e42cae013bbbbed19c5501a09a8383beeefce17701e27b2bd6d5c5003dcb365d01f55c6e43ab50fe09f4d42a9e4d436c3e9f37f04ef2083072cdf9eb9a21926781c20300ca0c47aacf5cccc62221ae7090a3f63f16f6ee46374b6a09892b046ab25a8d6c461ab8354eeb73c70de4e79f88fe5c52"], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d40)=ANY=[], 0x210) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x38, 0x8001, 0x0, 0x9, 0xa, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xb7f, 0x0, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000200)) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6e, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000580)=0x1) 51.599665ms ago: executing program 1 (id=2717): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x88) pwrite64(r1, &(0x7f00000005c0), 0x0, 0x4fed0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 0s ago: executing program 2 (id=2718): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff0}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_POLICE={0x4, 0x2, [@TCA_POLICE_RESULT={0x0, 0x5, 0xffffff42}]}, @TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x3, 0x86, 0xd412, {0x7, 0x0, 0x1ff, 0xe75, 0x3998, 0x5}, {0xf7, 0x1, 0x1a, 0x0, 0x6, 0x2}, 0x1, 0x5, 0x6}}]}, @TCA_CGROUP_EMATCHES={0xffffffffffffff7b}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): device number 15 using dummy_hcd [ 612.506737][T10525] usb 2-1: config 0 has no interfaces? [ 612.522208][T10525] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 612.544393][T10525] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 612.569515][T10525] usb 2-1: Manufacturer: syz [ 612.591651][T10525] usb 2-1: config 0 descriptor?? [ 613.034778][T10525] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 613.195963][ T47] usb 2-1: USB disconnect, device number 15 [ 613.209562][T10525] usb 4-1: Using ep0 maxpacket: 16 [ 613.233400][T10525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.250399][T10525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.263456][T10525] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 613.280370][T10525] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 613.291624][T10525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.313641][T10525] usb 4-1: config 0 descriptor?? [ 613.416127][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 613.429611][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1884'. [ 613.443837][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 613.454895][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1884'. [ 613.755985][T10525] usbhid 4-1:0.0: can't add hid device: -71 [ 613.784086][T10525] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 614.496095][T10525] usb 4-1: USB disconnect, device number 22 [ 616.071556][T12307] syzkaller0: entered promiscuous mode [ 616.120113][T12307] syzkaller0: entered allmulticast mode [ 618.588967][T12336] siw: device registration error -23 [ 620.251302][T12346] input: syz0 as /devices/virtual/input/input36 [ 621.096965][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 621.157901][T12351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1908'. [ 621.277644][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.289200][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 621.321218][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.335182][T12351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1908'. [ 621.483304][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.507922][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.198640][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 623.413538][ T9] usb 1-1: config 0 has no interfaces? [ 623.420908][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 623.431425][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.495931][ T9] usb 1-1: config 0 descriptor?? [ 624.313484][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.320368][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.626896][T12392] input: syz0 as /devices/virtual/input/input37 [ 627.625849][T12419] siw: device registration error -23 [ 628.985026][T10525] usb 1-1: USB disconnect, device number 22 [ 629.308739][T12426] syzkaller0: entered promiscuous mode [ 629.327084][T12426] syzkaller0: entered allmulticast mode [ 630.608161][T12445] input: syz0 as /devices/virtual/input/input38 [ 635.888545][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 636.471673][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 636.670319][ T9] usb 4-1: config 0 has no interfaces? [ 636.677027][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 636.697690][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.734886][ T9] usb 4-1: config 0 descriptor?? [ 637.913485][T12476] fuse: Unknown parameter '0x0000000000000004' [ 637.928616][T12478] fuse: Unknown parameter 'group_id00000000000000000000' [ 637.945081][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 637.945095][ T29] audit: type=1326 audit(1775575826.108:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 638.010125][ T29] audit: type=1326 audit(1775575826.148:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 638.045855][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 638.091399][ T29] audit: type=1326 audit(1775575826.148:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 638.132292][ T29] audit: type=1326 audit(1775575826.148:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 638.196681][ T29] audit: type=1326 audit(1775575826.218:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 638.258752][ T29] audit: type=1326 audit(1775575826.238:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 639.344644][ T29] audit: type=1326 audit(1775575826.248:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 639.563255][ T29] audit: type=1326 audit(1775575826.248:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 639.617344][ T29] audit: type=1326 audit(1775575826.248:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 639.737701][ T29] audit: type=1326 audit(1775575826.248:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 639.801592][ T5855] usb 4-1: USB disconnect, device number 23 [ 640.555719][T12496] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1949'. [ 640.582021][T12500] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1952'. [ 640.618871][T12501] macvlan6: entered promiscuous mode [ 640.640597][T12501] macvlan6: entered allmulticast mode [ 641.124611][T12510] input: syz0 as /devices/virtual/input/input39 [ 644.565079][T12521] fuse: Unknown parameter '0x0000000000000004' [ 644.746338][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1960'. [ 644.800355][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1960'. [ 645.106058][T12540] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1964'. [ 646.624414][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 646.832320][ T24] usb 2-1: config 0 has no interfaces? [ 646.857625][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 646.928690][T12553] input: syz0 as /devices/virtual/input/input40 [ 647.827318][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.840105][ T24] usb 2-1: config 0 descriptor?? [ 649.172644][ T10] usb 2-1: USB disconnect, device number 16 [ 649.469430][T12561] syzkaller0: entered promiscuous mode [ 649.480360][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'. [ 649.490608][T12561] syzkaller0: entered allmulticast mode [ 649.508990][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'. [ 653.139690][T12614] input: syz0 as /devices/virtual/input/input41 [ 654.764432][T10525] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 656.834130][T10525] usb 2-1: device descriptor read/all, error -71 [ 658.549951][T12590] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1977'. [ 658.925530][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 658.949305][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 658.960929][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 658.971413][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 663.633058][ T5184] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 663.797271][T12672] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2000'. [ 663.823513][T12672] syzkaller0: entered promiscuous mode [ 663.837215][T12672] syzkaller0: entered allmulticast mode [ 667.579763][T12699] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[12699] [ 667.763797][T12709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2005'. [ 668.308376][ T5845] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 668.320852][ T5845] Bluetooth: hci3: Injecting HCI hardware error event [ 668.339167][ T5845] Bluetooth: hci3: hardware error 0x00 [ 669.103126][ T5184] usb 3-1: device descriptor read/64, error -110 [ 670.274857][ T5184] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 670.394232][ T5845] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 670.464871][ T5184] usb 3-1: device descriptor read/64, error -32 [ 670.600555][ T5184] usb usb3-port1: attempt power cycle [ 670.975273][ T5184] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 671.014938][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 671.067843][ T5184] usb 3-1: device descriptor read/8, error -32 [ 671.129950][T12730] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2014'. [ 671.194766][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 671.233692][ T9] usb 1-1: config 0 has no interfaces? [ 671.275050][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 671.304986][ T5184] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 671.314778][T12657] raw-gadget.0 gadget.2: failed to queue suspend event [ 671.343140][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 671.362554][T12657] raw-gadget.0 gadget.2: failed to queue disconnect event [ 671.382726][ T9] usb 1-1: Manufacturer: syz [ 671.448311][ T9] usb 1-1: config 0 descriptor?? [ 671.536417][ T5184] usb 3-1: device not accepting address 26, error -71 [ 671.577269][ T5184] usb usb3-port1: unable to enumerate USB device [ 674.032705][T12775] fuse: Invalid rootmode [ 674.128241][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 674.128260][ T29] audit: type=1326 audit(1775575862.288:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6df9c819 code=0x7ffc0000 [ 674.207631][ T29] audit: type=1326 audit(1775575862.288:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6df9c819 code=0x7ffc0000 [ 674.335684][T12760] syzkaller0: entered promiscuous mode [ 674.341459][T12760] syzkaller0: entered allmulticast mode [ 675.340278][ T29] audit: type=1326 audit(1775575862.288:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6df9c819 code=0x7ffc0000 [ 675.369934][ T29] audit: type=1326 audit(1775575862.288:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcd6df9c819 code=0x7ffc0000 [ 675.634185][ T29] audit: type=1326 audit(1775575862.288:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6df9c819 code=0x7ffc0000 [ 675.659692][ T29] audit: type=1326 audit(1775575862.518:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 675.683889][ T29] audit: type=1326 audit(1775575862.518:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 675.769995][ T29] audit: type=1326 audit(1775575862.518:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 675.861138][ T29] audit: type=1326 audit(1775575862.528:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 675.960379][ T29] audit: type=1326 audit(1775575862.528:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 676.068562][T12789] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[12789] [ 677.675331][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 677.851295][ T9] usb 3-1: config 0 has no interfaces? [ 677.857231][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 677.874225][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.907408][ T9] usb 3-1: config 0 descriptor?? [ 680.121741][ T9] usb 3-1: USB disconnect, device number 27 [ 681.197593][T12822] ADFS-fs (loop3): error: unable to read block 3, try 0 [ 682.431827][T12805] syzkaller0: entered promiscuous mode [ 682.455292][T12805] syzkaller0: entered allmulticast mode [ 682.459417][T12825] fuse: Invalid rootmode [ 682.480977][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 682.480993][ T29] audit: type=1326 audit(1775575870.648:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4945d9c819 code=0x7ffc0000 [ 682.512878][ T29] audit: type=1326 audit(1775575870.648:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4945d9c819 code=0x7ffc0000 [ 682.537007][ T29] audit: type=1326 audit(1775575870.648:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4945d9c819 code=0x7ffc0000 [ 682.560366][ T29] audit: type=1326 audit(1775575870.648:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4945d9c819 code=0x7ffc0000 [ 682.611472][ T29] audit: type=1326 audit(1775575870.698:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4945d5d04e code=0x7ffc0000 [ 682.635231][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 682.655473][ T29] audit: type=1326 audit(1775575870.708:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4945d5d04e code=0x7ffc0000 [ 682.679736][ T29] audit: type=1326 audit(1775575870.728:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4945d5d04e code=0x7ffc0000 [ 682.768778][ T29] audit: type=1326 audit(1775575870.728:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4945d5d04e code=0x7ffc0000 [ 682.804937][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 682.854933][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 682.880388][ T29] audit: type=1326 audit(1775575870.728:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4945d5d04e code=0x7ffc0000 [ 682.885670][ T9] usb 3-1: config 0 has no interfaces? [ 682.954335][ T29] audit: type=1326 audit(1775575870.738:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.3.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4945d5d04e code=0x7ffc0000 [ 683.003927][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 683.017707][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.033557][ T9] usb 3-1: Product: syz [ 683.043309][ T9] usb 3-1: Manufacturer: syz [ 683.054161][ T9] usb 3-1: SerialNumber: syz [ 683.066888][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 683.080019][ T9] usb 3-1: config 0 descriptor?? [ 683.091559][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 683.123493][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 683.133529][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.184186][T12828] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 683.198009][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 683.541490][ T10] usb 5-1: USB disconnect, device number 30 [ 684.234386][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 685.751039][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.763188][ T9] usb 3-1: USB disconnect, device number 28 [ 685.770881][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.782436][ T24] usb 4-1: config 0 has no interfaces? [ 685.792969][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 685.808197][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.858887][ T24] usb 4-1: config 0 descriptor?? [ 686.256648][T12713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 686.274771][T12713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 686.294356][T12713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 686.329206][T12713] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 686.346225][T12713] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 688.182123][ T10] usb 4-1: USB disconnect, device number 24 [ 688.391325][ T5845] Bluetooth: hci5: command tx timeout [ 688.450762][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2042'. [ 688.461594][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 689.311860][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2042'. [ 689.325434][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 689.684661][T12870] ADFS-fs (loop3): error: unable to read block 3, try 0 [ 690.570103][T12713] Bluetooth: hci5: command tx timeout [ 691.187925][T12849] chnl_net:caif_netlink_parms(): no params data found [ 691.363398][T12849] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.371727][T12849] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.381046][T12849] bridge_slave_0: entered allmulticast mode [ 691.391497][T12849] bridge_slave_0: entered promiscuous mode [ 691.396979][ T5184] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 691.403587][T12849] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.414928][T12849] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.422610][T12849] bridge_slave_1: entered allmulticast mode [ 691.433141][T12849] bridge_slave_1: entered promiscuous mode [ 691.607646][ T5184] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 691.712509][ T5184] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 692.624363][ T5845] Bluetooth: hci5: command tx timeout [ 692.672653][ T5184] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 692.718146][ T5184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.978817][T12884] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 693.019624][T12849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.045810][T12849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.080524][ T5184] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 693.259227][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2054'. [ 693.339399][T12898] syzkaller0: entered promiscuous mode [ 693.346096][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 693.387163][ T5184] usb 2-1: USB disconnect, device number 19 [ 693.445078][T12898] syzkaller0: entered allmulticast mode [ 693.519344][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2054'. [ 693.525498][T12849] team0: Port device team_slave_0 added [ 693.539553][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 694.715144][ T5845] Bluetooth: hci5: command tx timeout [ 694.739302][ C1] sd 0:0:1:0: [sda] tag#2235 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.749931][ C1] sd 0:0:1:0: [sda] tag#2235 CDB: Read(6) 08 00 00 00 00 00 [ 694.770692][ C1] sd 0:0:1:0: [sda] tag#2236 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.781313][ C1] sd 0:0:1:0: [sda] tag#2236 CDB: Read(6) 08 00 00 00 00 00 [ 694.792020][ C1] sd 0:0:1:0: [sda] tag#2176 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.802779][ C1] sd 0:0:1:0: [sda] tag#2176 CDB: Read(6) 08 00 00 00 00 00 [ 694.826177][ C1] sd 0:0:1:0: [sda] tag#2177 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.836690][ C1] sd 0:0:1:0: [sda] tag#2177 CDB: Read(6) 08 00 00 00 00 00 [ 694.845365][ C1] sd 0:0:1:0: [sda] tag#2178 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.855881][ C1] sd 0:0:1:0: [sda] tag#2178 CDB: Read(6) 08 00 00 00 00 00 [ 694.863925][ C1] sd 0:0:1:0: [sda] tag#2179 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.874660][ C1] sd 0:0:1:0: [sda] tag#2179 CDB: Read(6) 08 00 00 00 00 00 [ 694.882515][ C1] sd 0:0:1:0: [sda] tag#2180 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.893172][ C1] sd 0:0:1:0: [sda] tag#2180 CDB: Read(6) 08 00 00 00 00 00 [ 694.900807][ C1] sd 0:0:1:0: [sda] tag#2181 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.911452][ C1] sd 0:0:1:0: [sda] tag#2181 CDB: Read(6) 08 00 00 00 00 00 [ 694.918936][ C1] sd 0:0:1:0: [sda] tag#2182 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.929587][ C1] sd 0:0:1:0: [sda] tag#2182 CDB: Read(6) 08 00 00 00 00 00 [ 694.937310][ C1] sd 0:0:1:0: [sda] tag#2183 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.947763][ C1] sd 0:0:1:0: [sda] tag#2183 CDB: Read(6) 08 00 00 00 00 00 [ 697.222188][T12849] team0: Port device team_slave_1 added [ 697.323907][T12849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.352826][T12849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.401442][T12849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.427541][ T24] usb 1-1: USB disconnect, device number 23 [ 697.519175][T12849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.533267][T12849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.577492][T12849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.727983][ T1178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.750525][ T1178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.806812][T12849] hsr_slave_0: entered promiscuous mode [ 697.816423][T12849] hsr_slave_1: entered promiscuous mode [ 697.823366][T12849] debugfs: 'hsr0' already exists in 'hsr' [ 697.840592][T12849] Cannot create hsr debugfs directory [ 697.857599][T12957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2063'. [ 697.887346][ T1178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.901176][ T1178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.019409][ T1178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.041754][ T1178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.192391][ T1178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.207685][ T1178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.241559][T12974] syzkaller0: entered promiscuous mode [ 699.251574][T12974] syzkaller0: entered allmulticast mode [ 699.564666][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 699.744523][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 699.755273][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.779255][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.813006][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 699.853630][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 699.915062][ T5855] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 699.954848][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.981998][ T9] usb 4-1: config 0 descriptor?? [ 700.117049][ T5855] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 700.147427][ T5855] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 700.197405][ T5855] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.228079][ T5855] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 700.241612][ T5855] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 700.276810][ T5855] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 700.285653][ T5855] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 700.304285][ T5855] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.321460][ T5855] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 700.363550][ T5855] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 700.385478][ T5855] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 700.394704][ T5855] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 700.423043][ T5855] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.443654][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 700.456514][ T5855] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 700.471759][ T5855] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 700.471791][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 700.507590][ T5855] usb 3-1: string descriptor 0 read error: -22 [ 700.524479][ T5855] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 700.525174][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 700.533624][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.543080][ T5855] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 700.594777][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 700.622923][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 700.646446][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 700.669933][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 700.684923][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 700.700278][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 700.712457][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 700.767633][ T9] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 700.822975][ T9] microsoft 0003:045E:07DA.0007: no inputs found [ 700.841885][ T9] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 700.975386][ T9] usb 4-1: USB disconnect, device number 25 [ 703.669746][ T47] usb 3-1: USB disconnect, device number 29 [ 706.171207][ T1178] bridge_slave_1: left allmulticast mode [ 706.195621][ T1178] bridge_slave_1: left promiscuous mode [ 706.208846][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.253696][ T1178] bridge_slave_0: left allmulticast mode [ 706.268665][ T1178] bridge_slave_0: left promiscuous mode [ 706.310083][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.320586][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2086'. [ 706.382219][ T1178] bond_slave_0: left promiscuous mode [ 706.397183][ T1178] bond_slave_1: left promiscuous mode [ 706.402857][ T1178] team_slave_0: left promiscuous mode [ 706.410504][ T1178] team_slave_1: left promiscuous mode [ 707.091053][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.117146][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.138532][ T1178] bond0 (unregistering): (slave team0): Releasing backup interface [ 707.150621][ T1178] bond0 (unregistering): Released all slaves [ 707.335508][T12849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 707.647454][ T1178] tipc: Left network mode [ 707.666040][T12849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 707.843010][T12849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 707.889280][T12849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 708.167066][ T1178] IPVS: stopping backup sync thread 8926 ... [ 708.338127][T13100] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2095'. [ 709.754802][T13106] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 710.333440][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 710.369523][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'. [ 710.387426][T10525] IPVS: starting estimator thread 0... [ 710.427199][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 710.438730][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'. [ 710.487396][ T5184] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 710.488149][T13128] IPVS: using max 30 ests per chain, 72000 per kthread [ 710.587796][ T1178] hsr_slave_0: left promiscuous mode [ 710.617498][ T1178] hsr_slave_1: left promiscuous mode [ 710.638376][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.651463][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.656614][ T5184] usb 4-1: config 0 has no interfaces? [ 710.666756][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.671347][ T5184] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 710.674645][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.705531][ T5184] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 710.732093][ T5184] usb 4-1: Manufacturer: syz [ 710.757630][ T5184] usb 4-1: config 0 descriptor?? [ 710.840229][ T1178] dummy0: left allmulticast mode [ 710.868105][ T1178] veth1_macvtap: left promiscuous mode [ 710.880805][ T1178] veth0_macvtap: left promiscuous mode [ 710.887009][ T1178] veth1_vlan: left promiscuous mode [ 710.893522][ T1178] veth0_vlan: left promiscuous mode [ 711.348076][ T5184] usb 4-1: USB disconnect, device number 26 [ 711.532413][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 711.654634][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 713.180032][T13150] syzkaller0: entered promiscuous mode [ 713.217365][T13150] syzkaller0: entered allmulticast mode [ 713.254117][T12849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.511508][T13160] loop5: detected capacity change from 0 to 7 [ 713.562797][T13160] Dev loop5: unable to read RDB block 7 [ 713.576569][T13160] loop5: AHDI p3 p4 [ 713.600674][T13160] loop5: partition table partially beyond EOD, truncated [ 713.617512][T13160] loop5: p3 start 3976331264 is beyond EOD, truncated [ 716.065101][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 716.217440][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 716.227144][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 716.237968][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.257705][ T10] usb 4-1: config 0 descriptor?? [ 717.581952][T13189] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2119'. [ 717.624992][T12849] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.697853][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.705090][ T9625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.791610][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.798878][ T9625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.974969][T13209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2122'. [ 718.038947][T13211] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 718.738687][T13212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2122'. [ 719.389199][ T47] usb 4-1: USB disconnect, device number 27 [ 720.601085][T13245] syzkaller0: entered promiscuous mode [ 720.636153][T13245] syzkaller0: entered allmulticast mode [ 721.966556][T13261] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 723.490603][T13263] fuse: Bad value for 'fd' [ 723.920467][ T5855] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 724.091853][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 724.119440][ T5855] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 724.138111][ T5855] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 724.148912][ T5855] usb 3-1: config 0 has no interface number 0 [ 724.178110][ T5855] usb 3-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 724.189160][ T5855] usb 3-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 724.212905][ T5855] usb 3-1: config 0 interface 48 has no altsetting 0 [ 724.230574][ T5855] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 724.239912][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.251161][ T5855] usb 3-1: config 0 descriptor?? [ 724.460200][T13265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.471021][T13265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.496622][ T5855] usb 3-1: string descriptor 0 read error: -71 [ 724.520829][ T5855] usb 3-1: USB disconnect, device number 30 [ 725.086481][T13252] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2131'. [ 725.181169][T12849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.204741][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 725.204759][ T29] audit: type=1326 audit(1775575913.368:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 725.354298][ T29] audit: type=1326 audit(1775575913.368:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 725.445636][ T29] audit: type=1326 audit(1775575913.418:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 725.540195][ T29] audit: type=1326 audit(1775575913.418:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 725.623643][ T29] audit: type=1326 audit(1775575913.418:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 725.742100][ T29] audit: type=1326 audit(1775575913.418:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 725.869341][ T29] audit: type=1326 audit(1775575913.428:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 725.979525][ T29] audit: type=1326 audit(1775575913.428:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 726.056620][T12849] veth0_vlan: entered promiscuous mode [ 726.092254][ T29] audit: type=1326 audit(1775575913.458:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 726.132526][T12849] veth1_vlan: entered promiscuous mode [ 726.219913][ T29] audit: type=1326 audit(1775575913.518:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13266 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 726.273825][T12849] veth0_macvtap: entered promiscuous mode [ 726.292747][T12849] veth1_macvtap: entered promiscuous mode [ 726.396372][T12849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.486142][T12849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.628060][T10317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.657347][T10317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.697820][T10317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.748267][T10317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.863720][T13306] fuse: Bad value for 'fd' [ 727.230100][ T9625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.268789][ T9625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.338708][T13314] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2146'. [ 727.359016][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.376004][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.395941][ T5855] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 727.576478][ T5855] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 727.617341][ T5855] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.652042][ T5855] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 727.688782][ T5855] usb 3-1: config 1 has no interface number 1 [ 727.708466][ T5855] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 727.738611][ T5855] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 727.773886][ T5855] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 727.785733][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.794144][ T5855] usb 3-1: Product: syz [ 727.818866][ T5855] usb 3-1: Manufacturer: syz [ 727.844012][ T5855] usb 3-1: SerialNumber: syz [ 728.050267][T13320] syzkaller0: entered promiscuous mode [ 728.087777][T13320] syzkaller0: entered allmulticast mode [ 728.107928][ T5855] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 728.123185][ T5855] usb 3-1: MIDIStreaming interface descriptor not found [ 728.280593][ T5855] usb 3-1: USB disconnect, device number 31 [ 728.437470][T13335] udevd[13335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.851048][T13345] fuse: Bad value for 'fd' [ 729.330409][T13349] netlink: 'syz.5.2157': attribute type 10 has an invalid length. [ 730.387871][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 730.387887][ T29] audit: type=1326 audit(1775575918.558:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13367 comm="syz.3.2162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4945d9c819 code=0x0 [ 730.990670][T13381] fuse: Bad value for 'fd' [ 731.432767][T13393] fuse: Bad value for 'fd' [ 731.491477][ T29] audit: type=1326 audit(1775575919.658:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 731.575358][ T29] audit: type=1326 audit(1775575919.658:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 731.647146][ T29] audit: type=1326 audit(1775575919.658:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 731.691454][ T29] audit: type=1326 audit(1775575919.658:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 731.721254][ T29] audit: type=1326 audit(1775575919.658:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 731.753056][ T29] audit: type=1326 audit(1775575919.718:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 731.788035][ T29] audit: type=1326 audit(1775575919.718:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 731.829538][ T29] audit: type=1326 audit(1775575919.718:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 731.862295][ T29] audit: type=1326 audit(1775575919.718:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13392 comm="syz.2.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 732.163734][T13407] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2174'. [ 732.253075][T13411] syz.4.2174 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 732.310080][T13407] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2174'. [ 732.634908][ T5184] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 732.795050][ T5184] usb 4-1: Using ep0 maxpacket: 8 [ 732.838517][ T5184] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.872890][ T5184] usb 4-1: config 0 has no interfaces? [ 732.885072][ T5184] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.898114][ T5184] usb 4-1: config 0 has no interfaces? [ 732.922745][ T5184] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.952478][ T5184] usb 4-1: config 0 has no interfaces? [ 732.968929][ T5184] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.999510][ T5184] usb 4-1: config 0 has no interfaces? [ 733.006281][ T5184] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 733.028664][ T5184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.054047][ T5184] usb 4-1: config 0 descriptor?? [ 733.711817][T13419] fuse: Bad value for 'fd' [ 734.992354][ T24] usb 4-1: USB disconnect, device number 28 [ 735.413866][T13349] team0: Device ipvlan1 failed to register rx_handler [ 736.116417][T13449] ADFS-fs (loop4): error: unable to read block 3, try 0 [ 738.681217][T13452] input: syz0 as /devices/virtual/input/input42 [ 740.660778][T13477] syzkaller0: entered promiscuous mode [ 740.682332][T13477] syzkaller0: entered allmulticast mode [ 740.843503][T13490] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2196'. [ 740.861095][ T5184] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 740.880086][T13490] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2196'. [ 740.928546][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'. [ 741.098888][ T5184] usb 4-1: config 0 has no interfaces? [ 741.116010][ T5184] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 741.143355][ T5184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.191327][ T5184] usb 4-1: config 0 descriptor?? [ 742.404930][ T5184] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 742.569544][ T5184] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 742.595590][ T5184] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 742.627961][ T5184] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 742.696293][ T5184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.773221][T13508] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 742.841240][ T5184] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 743.487343][T10782] usb 4-1: USB disconnect, device number 29 [ 745.315642][ T5184] usb 5-1: USB disconnect, device number 31 [ 746.909855][T13547] loop2: detected capacity change from 0 to 512 [ 747.023890][T13547] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.2212: ea_inode file size=25 entry size=6 [ 747.038573][T13547] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 747.055406][T13547] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2212: iget: bad extra_isize 90 (inode size 256) [ 747.072214][T13547] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 747.075597][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 747.093398][ C0] EXT4-fs (loop2): initial error at time 1775575935: ext4_xattr_inode_iget:441: inode 11 [ 747.103511][ C0] EXT4-fs (loop2): last error at time 1775575935: ext4_xattr_inode_iget:441: inode 11 [ 747.117821][T13547] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2212: error while reading EA inode 11 err=-117 [ 747.195160][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.201049][T13547] loop2: lost filesystem error report for type 5 error -117 [ 747.202601][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.211691][T13547] EXT4-fs (loop2): 1 orphan inode deleted [ 747.225444][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 747.254812][T10782] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 747.323698][T13547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.406494][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 747.427669][T10782] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 747.427830][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.462563][T10782] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 747.482139][T10782] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 747.489860][ T24] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 747.520178][T10782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.538174][ T24] usb 6-1: config 1 has no interface number 1 [ 747.558856][T13551] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 747.569380][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 747.595431][T10782] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 747.633806][ T24] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 747.651613][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 747.652720][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.662266][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.662293][ T24] usb 6-1: Product: syz [ 747.662308][ T24] usb 6-1: Manufacturer: syz [ 747.662321][ T24] usb 6-1: SerialNumber: syz [ 747.946632][ T24] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 747.961992][T10782] usb 2-1: USB disconnect, device number 20 [ 747.973217][ T24] usb 6-1: MIDIStreaming interface descriptor not found [ 748.237087][ T24] usb 6-1: USB disconnect, device number 2 [ 749.440787][T13615] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 751.758779][T13643] fuse: Unknown parameter 'use00000000000000000000' [ 751.846023][T13646] loop2: detected capacity change from 0 to 2048 [ 752.037832][T13646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.732033][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.931364][T13687] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2242'. [ 753.614628][T13696] syzkaller0: entered promiscuous mode [ 753.634463][T13696] syzkaller0: entered allmulticast mode [ 756.899532][T13738] fuse: Unknown parameter '0x0000000000000004' [ 756.958651][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 756.958669][ T29] audit: type=1326 audit(1775575945.128:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 756.967328][T13743] loop5: detected capacity change from 0 to 128 [ 757.099134][ T29] audit: type=1326 audit(1775575945.128:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 757.149620][T13744] input: syz1 as /devices/virtual/input/input43 [ 757.184123][ T29] audit: type=1326 audit(1775575945.128:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 757.254753][ T29] audit: type=1326 audit(1775575945.128:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 757.267766][T13743] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 757.293073][ T29] audit: type=1326 audit(1775575945.178:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 757.316412][ T29] audit: type=1326 audit(1775575945.178:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 757.339554][ T29] audit: type=1326 audit(1775575945.178:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 757.389050][ T29] audit: type=1326 audit(1775575945.178:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 757.415977][T13743] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 757.462394][ T29] audit: type=1326 audit(1775575945.178:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 757.500498][ T29] audit: type=1326 audit(1775575945.188:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 757.822452][T12849] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 758.928821][T13772] loop5: detected capacity change from 0 to 1024 [ 758.949162][T13772] EXT4-fs: Ignoring removed orlov option [ 758.974383][T13772] EXT4-fs: Ignoring removed nobh option [ 759.100633][T13778] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2269'. [ 759.575448][T13772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.898821][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2273'. [ 760.043531][T13792] tipc: Started in network mode [ 760.066554][T13792] tipc: Node identity 525f50234634, cluster identity 4711 [ 760.127935][T13792] tipc: Enabled bearer , priority 0 [ 760.164379][T13794] syzkaller0: entered promiscuous mode [ 760.181755][T13794] syzkaller0: entered allmulticast mode [ 760.292259][T13792] tipc: Resetting bearer [ 760.335880][T13790] tipc: Resetting bearer [ 760.405891][T13790] tipc: Disabling bearer [ 760.751670][T12849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.036097][T13815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2285'. [ 761.251387][T13823] loop2: detected capacity change from 0 to 512 [ 761.410707][T13823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 761.426761][T13829] loop5: detected capacity change from 0 to 128 [ 761.473742][T13823] ext4 filesystem being mounted at /479/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.742602][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 761.966412][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 761.966430][ T29] audit: type=1400 audit(1775575950.128:1228): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=13845 comm="syz.3.2296" [ 762.083333][T10782] IPVS: starting estimator thread 0... [ 762.200294][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2299'. [ 762.214401][T13851] IPVS: using max 35 ests per chain, 84000 per kthread [ 762.478429][T13863] ip6erspan0: entered allmulticast mode [ 762.922014][T13879] loop2: detected capacity change from 0 to 2048 [ 762.997497][T13879] Alternate GPT is invalid, using primary GPT. [ 763.026220][T13879] loop2: p2 p3 p7 [ 763.335118][T12947] udevd[12947]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 763.338715][T13337] udevd[13337]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 763.366147][T13335] udevd[13335]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 763.454376][ T5855] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 763.605848][T12947] udevd[12947]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 763.623527][T13335] udevd[13335]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 763.646160][T13337] udevd[13337]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 763.768346][ T5855] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 763.777914][ T5855] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 763.871721][T13894] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 764.762132][ T5855] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.132212][ T5855] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 765.174514][ T5855] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 765.205943][ T5855] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 765.221452][ T5855] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 765.348474][ T5855] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.379587][ T5855] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 765.536975][T13901] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2316'. [ 765.904998][ T5855] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 765.917653][ T5855] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 765.943103][ T5855] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 765.964486][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 766.074594][ T5855] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 766.087411][ T5855] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 766.134489][ T5855] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 766.231272][ T5855] usb 4-1: string descriptor 0 read error: -71 [ 766.244663][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 766.277425][ T5855] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 766.295623][ T24] usb 3-1: config index 0 descriptor too short (expected 14385, got 27) [ 766.313851][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.323743][ T24] usb 3-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 766.344975][ T24] usb 3-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 766.358304][T13906] netlink: 'syz.3.2318': attribute type 9 has an invalid length. [ 766.367612][ T24] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 766.380050][ T5855] usb 4-1: can't set config #168, error -71 [ 766.388791][ T5855] usb 4-1: USB disconnect, device number 30 [ 766.409041][ T24] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 766.438389][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.464869][ T24] usb 3-1: Product: syz [ 766.477611][ T24] usb 3-1: Manufacturer: syz [ 766.495614][ T24] usb 3-1: SerialNumber: syz [ 766.779886][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2315'. [ 766.818140][T13913] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2321'. [ 766.865327][T13914] syzkaller0: entered promiscuous mode [ 766.883113][T13914] syzkaller0: entered allmulticast mode [ 767.073658][ T24] usb 3-1: USB disconnect, device number 32 [ 767.277859][T13924] loop4: detected capacity change from 0 to 1024 [ 767.447427][T13924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.639554][T13936] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2327'. [ 768.877512][T13941] loop3: detected capacity change from 0 to 256 [ 768.950781][T13941] FAT-fs (loop3): Directory bread(block 64) failed [ 768.987661][T13941] FAT-fs (loop3): Directory bread(block 65) failed [ 768.992931][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.003922][T13941] FAT-fs (loop3): Directory bread(block 66) failed [ 769.003978][T13941] FAT-fs (loop3): Directory bread(block 67) failed [ 769.004055][T13941] FAT-fs (loop3): Directory bread(block 68) failed [ 769.004084][T13941] FAT-fs (loop3): Directory bread(block 69) failed [ 769.004159][T13941] FAT-fs (loop3): Directory bread(block 70) failed [ 769.004181][T13941] FAT-fs (loop3): Directory bread(block 71) failed [ 769.004824][T13941] FAT-fs (loop3): Directory bread(block 72) failed [ 769.065339][T10782] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 769.073750][T13941] FAT-fs (loop3): Directory bread(block 73) failed [ 769.271580][T10782] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 769.293581][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 769.353538][T10782] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 769.399423][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 769.433475][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 769.447703][T10782] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 769.463171][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 769.506856][T10782] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 769.579224][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 769.695948][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 769.760692][T10782] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 769.787369][T13941] syz.3.2330: attempt to access beyond end of device [ 769.787369][T13941] loop3: rw=2051, sector=1864, nr_sectors = 31936 limit=256 [ 769.790772][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 769.904312][T10782] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 769.959330][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 770.057367][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 770.112830][T10782] usb 6-1: string descriptor 0 read error: -22 [ 770.130336][T10782] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 770.163694][T13964] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2337'. [ 770.198939][T10782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.273412][T10782] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 770.547323][T13973] netlink: 'syz.1.2339': attribute type 10 has an invalid length. [ 770.643419][T13973] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 771.049440][T13979] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2340'. [ 771.891438][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 772.278678][T13995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2348'. [ 772.597348][T10782] usb 6-1: USB disconnect, device number 3 [ 773.575508][ T35] wlan1: Trigger new scan to find an IBSS to join [ 774.479405][T14021] loop1: detected capacity change from 0 to 512 [ 774.604129][T14021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2358: iget: bad extra_isize 90 (inode size 256) [ 774.649077][T14021] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 774.654252][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 774.670012][ C1] EXT4-fs (loop1): initial error at time 1775575962: ext4_xattr_inode_iget:441: inode 11 [ 774.680032][ C1] EXT4-fs (loop1): last error at time 1775575962: ext4_xattr_inode_iget:441: inode 11 [ 774.714822][T14021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2358: error while reading EA inode 11 err=-117 [ 774.742288][T14021] loop1: lost filesystem error report for type 5 error -117 [ 774.745756][T14021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2358: iget: bad extra_isize 90 (inode size 256) [ 774.800440][T14021] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 774.804173][T14021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2358: error while reading EA inode 11 err=-117 [ 774.856108][T14021] loop1: lost filesystem error report for type 5 error -117 [ 774.868797][T14021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.2358: iget: bad extra_isize 90 (inode size 256) [ 774.894886][T14021] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 774.895426][T14021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2358: error while reading EA inode 18 err=-117 [ 774.959349][T14021] loop1: lost filesystem error report for type 5 error -117 [ 774.959897][T14021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.2358: iget: bad extra_isize 90 (inode size 256) [ 775.010811][T14021] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 775.011286][T14021] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2358: error while reading EA inode 18 err=-117 [ 775.049057][T14021] loop1: lost filesystem error report for type 5 error -117 [ 775.050044][T14021] EXT4-fs (loop1): 1 orphan inode deleted [ 775.082146][T14021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.224721][T10782] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 775.258365][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.393893][T14039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2362'. [ 775.394828][T10782] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 775.434971][T14039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2362'. [ 775.441480][T10782] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 775.512017][T10782] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 775.562559][T10782] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 775.592324][T10782] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 775.752422][T10782] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 775.769226][T10782] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 776.739460][T10782] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 776.751289][T10782] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 776.762570][T10782] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 776.780406][T10782] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 776.798603][ T1178] wlan1: Trigger new scan to find an IBSS to join [ 777.050518][T10782] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 777.064503][T10782] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 777.083016][T10782] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 777.108380][T10782] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 777.168283][T10782] usb 4-1: string descriptor 0 read error: -22 [ 777.192150][T10782] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 777.257126][T10782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.309656][T10782] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 777.867861][T14057] syzkaller0: entered promiscuous mode [ 777.886892][T14057] syzkaller0: entered allmulticast mode [ 778.025848][ T12] wlan1: Creating new IBSS network, BSSID ca:eb:e0:54:1d:0b [ 778.456517][T14067] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2372'. [ 778.657372][ T24] usb 4-1: USB disconnect, device number 31 [ 779.788971][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 779.985638][ T10] usb 2-1: no configurations [ 779.998741][ T10] usb 2-1: can't read configurations, error -22 [ 780.159780][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 780.360725][ T10] usb 2-1: no configurations [ 780.378155][ T10] usb 2-1: can't read configurations, error -22 [ 780.401330][ T10] usb usb2-port1: attempt power cycle [ 780.775081][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 780.806708][ T10] usb 2-1: no configurations [ 780.811518][ T10] usb 2-1: can't read configurations, error -22 [ 780.852413][T14107] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[14107] [ 780.965614][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 781.007719][ T10] usb 2-1: no configurations [ 781.017269][ T10] usb 2-1: can't read configurations, error -22 [ 781.037775][ T10] usb usb2-port1: unable to enumerate USB device [ 781.265015][T10782] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 781.437257][T10782] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 781.468509][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 781.481688][T10782] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.495974][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 781.518898][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 781.532923][T10782] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 781.549995][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 781.562737][T10782] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.592828][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 781.607082][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 781.636598][T10782] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 781.647842][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 781.661322][T10782] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.674935][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 781.687496][T10782] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 781.743859][T10782] usb 6-1: string descriptor 0 read error: -22 [ 781.759747][T10782] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 781.796928][T10782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.864038][T10782] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 781.981000][T14122] bridge_slave_0: left allmulticast mode [ 781.988603][T14122] bridge_slave_0: left promiscuous mode [ 781.997224][T14122] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.032587][T14122] bridge_slave_1: left allmulticast mode [ 782.044954][T14122] bridge_slave_1: left promiscuous mode [ 782.054845][T14122] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.071695][T14122] bond0: (slave bond_slave_0): Releasing backup interface [ 782.131062][T14122] bond0: (slave bond_slave_1): Releasing backup interface [ 782.194073][T14122] team0: Failed to send options change via netlink (err -105) [ 782.216801][T14122] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 782.245424][T14122] team0: Port device team_slave_0 removed [ 782.279863][T14122] team0: Failed to send options change via netlink (err -105) [ 782.301585][T14122] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 782.326329][T14122] team0: Port device team_slave_1 removed [ 782.347705][T14122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.366428][T14122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.388944][T14122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.407233][T14122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.431893][T14122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 782.526358][T14123] team0: Failed to send options change via netlink (err -105) [ 782.592921][T14123] team0: Mode changed to "activebackup" [ 783.277836][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 783.649672][T14149] syzkaller0: entered promiscuous mode [ 783.674999][T14149] syzkaller0: entered allmulticast mode [ 784.050058][ T24] usb 6-1: USB disconnect, device number 4 [ 784.406430][T14163] loop2: detected capacity change from 0 to 512 [ 784.443403][T14163] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 784.484953][T14163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 784.600941][T14163] EXT4-fs (loop2): 1 truncate cleaned up [ 784.718449][T14163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.754417][ T47] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 784.902240][T14175] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[14175] [ 784.972093][ T47] usb 6-1: no configurations [ 784.986932][ T47] usb 6-1: can't read configurations, error -22 [ 785.052266][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.164399][ T47] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 785.361903][ T47] usb 6-1: no configurations [ 785.373708][ T47] usb 6-1: can't read configurations, error -22 [ 785.393135][ T47] usb usb6-port1: attempt power cycle [ 785.754594][ T47] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 785.866201][ T47] usb 6-1: no configurations [ 785.879748][ T47] usb 6-1: can't read configurations, error -22 [ 785.965484][T14196] ADFS-fs (loop3): error: unable to read block 3, try 0 [ 786.624687][ T47] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 787.165875][ T29] audit: type=1326 audit(1775575975.328:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 787.198939][ T47] usb 6-1: no configurations [ 787.204312][ T47] usb 6-1: can't read configurations, error -22 [ 787.211673][ T29] audit: type=1326 audit(1775575975.358:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 787.243070][ T47] usb usb6-port1: unable to enumerate USB device [ 787.257858][ T29] audit: type=1326 audit(1775575975.358:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 787.285077][ T29] audit: type=1326 audit(1775575975.358:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 787.316787][ T29] audit: type=1326 audit(1775575975.358:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 787.342991][ T29] audit: type=1326 audit(1775575975.358:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 787.379029][ T29] audit: type=1326 audit(1775575975.358:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 787.418246][ T29] audit: type=1326 audit(1775575975.358:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 787.548611][ T29] audit: type=1326 audit(1775575975.358:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 787.646754][ T29] audit: type=1326 audit(1775575975.368:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14192 comm="syz.2.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 788.133320][T14218] input: syz1 as /devices/virtual/input/input44 [ 788.364367][ T5855] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 788.606418][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 788.637872][T14222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2422'. [ 788.751224][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.786603][T14222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2422'. [ 788.799035][ T5855] usb 4-1: config 0 has no interfaces? [ 788.839153][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.870285][ T5855] usb 4-1: config 0 has no interfaces? [ 788.916841][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.947514][ T5855] usb 4-1: config 0 has no interfaces? [ 789.027197][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.177163][ T5855] usb 4-1: config 0 has no interfaces? [ 789.197291][ T5855] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 789.251482][T14232] ADFS-fs (loop4): error: unable to read block 3, try 0 [ 789.376567][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.253150][ T5855] usb 4-1: config 0 descriptor?? [ 790.306658][T14231] syzkaller0: entered promiscuous mode [ 790.312526][T14231] syzkaller0: entered allmulticast mode [ 790.633106][T14235] netlink: 'syz.4.2426': attribute type 10 has an invalid length. [ 791.017300][T14235] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 791.062744][T14235] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 791.452027][ T5855] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 792.820504][ T5855] usb 3-1: no configurations [ 792.838825][ T5855] usb 3-1: can't read configurations, error -22 [ 792.976211][T14253] fuse: Bad value for 'fd' [ 792.994903][ T5855] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 793.072310][T14255] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[14255] [ 793.152961][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 793.152975][ T29] audit: type=1326 audit(1775575981.318:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d819c819 code=0x7ffc0000 [ 793.213878][T10525] usb 4-1: USB disconnect, device number 32 [ 793.222949][ T5855] usb 3-1: no configurations [ 793.233489][ T5855] usb 3-1: can't read configurations, error -22 [ 793.249810][ T5855] usb usb3-port1: attempt power cycle [ 793.278540][ T29] audit: type=1326 audit(1775575981.318:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc1d819c819 code=0x7ffc0000 [ 793.320158][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2435'. [ 793.362396][ T29] audit: type=1326 audit(1775575981.318:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d819c819 code=0x7ffc0000 [ 793.450404][ T29] audit: type=1326 audit(1775575981.348:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc1d819c819 code=0x7ffc0000 [ 793.507774][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2435'. [ 793.526206][ T29] audit: type=1326 audit(1775575981.358:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d819c819 code=0x7ffc0000 [ 793.677720][ T5855] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 793.762179][T14269] ADFS-fs (loop5): error: unable to read block 3, try 0 [ 794.403961][ T5855] usb 3-1: no configurations [ 794.409063][ T5855] usb 3-1: can't read configurations, error -22 [ 794.416848][ T29] audit: type=1326 audit(1775575981.358:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc1d819c819 code=0x7ffc0000 [ 794.440135][ T29] audit: type=1326 audit(1775575981.358:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d819c819 code=0x7ffc0000 [ 794.564319][ T5855] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 794.942828][ T1120] wlan1: Trigger new scan to find an IBSS to join [ 795.019164][ T5855] usb 3-1: device descriptor read/8, error -71 [ 795.034269][ T29] audit: type=1326 audit(1775575981.358:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1d815d04e code=0x7ffc0000 [ 795.094871][ T29] audit: type=1326 audit(1775575981.358:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d819c819 code=0x7ffc0000 [ 795.118474][ T29] audit: type=1326 audit(1775575981.358:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1d819c819 code=0x7ffc0000 [ 795.159764][T14271] syzkaller0: entered promiscuous mode [ 795.167459][T14271] syzkaller0: entered allmulticast mode [ 795.188153][ T5855] usb usb3-port1: unable to enumerate USB device [ 795.547309][T14279] tipc: Started in network mode [ 795.559412][T14279] tipc: Node identity 32a11b830702, cluster identity 4711 [ 795.585069][T14279] tipc: Enabled bearer , priority 0 [ 795.633511][T14276] tipc: Resetting bearer [ 795.662049][T14281] syzkaller0: entered promiscuous mode [ 795.709964][T14281] syzkaller0: entered allmulticast mode [ 795.771124][T14273] tipc: Resetting bearer [ 795.821288][T14273] tipc: Disabling bearer [ 795.978258][T14286] input: syz1 as /devices/virtual/input/input45 [ 796.374733][T10782] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 796.404418][ T5855] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 796.552503][T10782] usb 5-1: Using ep0 maxpacket: 32 [ 796.579298][T10782] usb 5-1: config 0 has no interfaces? [ 796.597593][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 796.610890][T10782] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 796.614309][ T5855] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 796.741462][ T5855] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.754113][ T5855] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 796.764593][ T5855] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.779416][ T5855] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 796.782369][T10782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.788594][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.874952][T14308] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 797.757832][T10782] usb 5-1: Product: syz [ 797.762124][T10782] usb 5-1: Manufacturer: syz [ 797.767252][T10782] usb 5-1: SerialNumber: syz [ 797.773886][T10782] usb 5-1: config 0 descriptor?? [ 798.094778][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 798.248369][T14310] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2448'. [ 798.264796][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 798.289242][ T5855] usb 6-1: GET_CAPABILITIES returned 0 [ 798.298944][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.339799][ T10] usb 2-1: config 0 has no interfaces? [ 798.362313][ T5855] usbtmc 6-1:16.0: can't read capabilities [ 798.373028][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.435613][ T10] usb 2-1: config 0 has no interfaces? [ 798.441768][T14313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2449'. [ 798.465874][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.502025][ T5855] usb 6-1: USB disconnect, device number 9 [ 798.526095][ T10] usb 2-1: config 0 has no interfaces? [ 798.565185][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.601315][T14313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2449'. [ 798.617177][ T10] usb 2-1: config 0 has no interfaces? [ 798.627808][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 798.660604][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.736503][ T10] usb 2-1: config 0 descriptor?? [ 798.832153][T14317] loop5: detected capacity change from 0 to 7 [ 798.851939][T14317] Dev loop5: unable to read RDB block 7 [ 798.863579][T14317] loop5: AHDI p3 p4 [ 798.878727][T14317] loop5: partition table partially beyond EOD, truncated [ 798.895551][T14317] loop5: p3 start 3976331264 is beyond EOD, truncated [ 799.216691][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 799.216709][ T29] audit: type=1326 audit(1775575987.388:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 799.341848][ T29] audit: type=1326 audit(1775575987.448:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 799.460264][T14330] loop3: detected capacity change from 0 to 1024 [ 799.535624][ T29] audit: type=1326 audit(1775575987.448:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 799.559220][T14330] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 799.570346][T14330] EXT4-fs (loop3): mount failed [ 799.623900][ T29] audit: type=1326 audit(1775575987.458:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 799.735315][ T29] audit: type=1326 audit(1775575987.458:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 799.826058][ T202] wlan1: Trigger new scan to find an IBSS to join [ 799.842771][ T29] audit: type=1326 audit(1775575987.468:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 799.960431][ T29] audit: type=1326 audit(1775575987.488:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 800.049820][ T29] audit: type=1326 audit(1775575987.498:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 800.054585][ T126] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 800.234849][ T29] audit: type=1326 audit(1775575987.508:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 800.358046][T14341] ADFS-fs (loop3): error: unable to read block 3, try 0 [ 801.809925][ T29] audit: type=1326 audit(1775575987.508:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14320 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 801.930743][ T126] usb 6-1: config 0 has no interfaces? [ 801.956668][ T126] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 801.994097][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.072326][ T126] usb 6-1: config 0 descriptor?? [ 802.276637][ T202] wlan1: Creating new IBSS network, BSSID 16:c2:dc:b3:b8:40 [ 802.362415][T10782] usb 2-1: USB disconnect, device number 25 [ 802.603554][ T126] usb 5-1: USB disconnect, device number 32 [ 803.373550][T14372] ADFS-fs (loop4): error: unable to read block 3, try 0 [ 805.314674][ T126] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 805.544901][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 805.602479][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.627084][ T126] usb 5-1: config 0 has no interfaces? [ 805.653665][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.698040][ T126] usb 5-1: config 0 has no interfaces? [ 805.710905][ T10] usb 6-1: USB disconnect, device number 10 [ 805.764083][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.816066][ T126] usb 5-1: config 0 has no interfaces? [ 805.896085][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.937259][ T126] usb 5-1: config 0 has no interfaces? [ 805.961360][ T126] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 806.085682][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.121359][ T126] usb 5-1: config 0 descriptor?? [ 807.124397][ T5855] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 807.609058][T14400] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2477'. [ 807.675272][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 807.677809][T14406] netlink: 'syz.5.2478': attribute type 10 has an invalid length. [ 807.719039][ T5855] usb 4-1: config 0 has no interfaces? [ 807.759160][ T5855] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 807.822429][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.843661][ T5855] usb 4-1: Product: syz [ 807.868242][ T5855] usb 4-1: Manufacturer: syz [ 807.889046][ T5855] usb 4-1: SerialNumber: syz [ 807.893049][T14406] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 807.943544][ T5855] usb 4-1: config 0 descriptor?? [ 808.036452][ T202] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 808.268912][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 808.268925][ T29] audit: type=1326 audit(1775575996.438:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 808.378758][ T29] audit: type=1326 audit(1775575996.438:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 808.562804][ T29] audit: type=1326 audit(1775575996.438:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 808.586609][ T29] audit: type=1326 audit(1775575996.438:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 809.062735][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.070229][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.092660][ T29] audit: type=1326 audit(1775575996.438:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2429f9c819 code=0x7ffc0000 [ 809.120707][ T29] audit: type=1326 audit(1775575996.488:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 809.146698][ T29] audit: type=1326 audit(1775575996.488:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 809.170876][ T29] audit: type=1326 audit(1775575996.498:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 809.329999][ T29] audit: type=1326 audit(1775575996.498:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 809.399688][ T29] audit: type=1326 audit(1775575996.498:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14412 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2429f5d04e code=0x7ffc0000 [ 810.108756][ T126] usb 5-1: USB disconnect, device number 33 [ 811.185020][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 811.870396][T14440] syzkaller0: entered promiscuous mode [ 811.896338][T14440] syzkaller0: entered allmulticast mode [ 812.331536][T14447] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2491'. [ 812.519023][ T10] usb 4-1: USB disconnect, device number 33 [ 812.524298][ T5855] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 812.704820][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 812.721399][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.751833][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.767013][ T5855] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 812.776842][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.798365][ T5855] usb 5-1: config 0 descriptor?? [ 814.151717][ T5855] kye 0003:0458:5016.0008: control desc unexpectedly large [ 814.507313][ T5855] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0008/input/input46 [ 814.614972][T10782] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 814.621167][T14474] syzkaller0: entered promiscuous mode [ 814.650032][T14474] syzkaller0: entered allmulticast mode [ 814.756415][ T5855] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0008/input/input47 [ 814.790317][T10782] usb 4-1: Using ep0 maxpacket: 8 [ 814.820535][T10782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.850512][T10782] usb 4-1: config 0 has no interfaces? [ 814.882738][T10782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.906391][T10782] usb 4-1: config 0 has no interfaces? [ 814.931746][T10782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.944097][T10782] usb 4-1: config 0 has no interfaces? [ 814.977312][T10782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.982590][ T5855] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 814.992823][T10782] usb 4-1: config 0 has no interfaces? [ 815.012530][T10782] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 815.059499][T10782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.179920][T10782] usb 4-1: config 0 descriptor?? [ 815.289687][ T5855] usb 5-1: USB disconnect, device number 34 [ 815.324777][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 815.504766][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 815.550901][ T9] usb 6-1: config 0 has no interfaces? [ 815.571814][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 815.616896][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.650145][ T9] usb 6-1: Product: syz [ 815.671814][ T9] usb 6-1: Manufacturer: syz [ 815.692403][ T9] usb 6-1: SerialNumber: syz [ 815.724730][ T9] usb 6-1: config 0 descriptor?? [ 816.599696][T14508] netlink: 'syz.1.2512': attribute type 10 has an invalid length. [ 817.009334][T14515] syzkaller0: entered promiscuous mode [ 817.024303][T14515] syzkaller0: entered allmulticast mode [ 817.160715][ T5184] usb 4-1: USB disconnect, device number 34 [ 819.159888][T14538] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2523'. [ 819.461942][T14544] syzkaller0: entered promiscuous mode [ 819.478209][T14544] syzkaller0: entered allmulticast mode [ 821.338518][T12713] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 822.490120][ T5855] usb 6-1: USB disconnect, device number 11 [ 822.735527][T14571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2532'. [ 822.825179][T14571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2532'. [ 823.021526][T14577] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2534'. [ 823.295216][T14585] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2537'. [ 825.348340][T12713] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 825.361618][T12713] Bluetooth: hci1: Injecting HCI hardware error event [ 825.377887][T12713] Bluetooth: hci1: hardware error 0x00 [ 825.423319][T14597] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 828.545160][T12713] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 828.715085][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 828.883228][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 828.904507][ T5855] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 828.931487][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 828.958876][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 828.984990][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.032053][T14616] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 829.065238][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 829.176264][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 829.202853][ T5855] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 829.332471][ T5855] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 829.350616][ T5855] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 829.375286][ T5855] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.828901][ T5855] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 830.876335][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.877085][ T9] usb 5-1: USB disconnect, device number 35 [ 831.182254][ T5855] usb 2-1: GET_CAPABILITIES returned 0 [ 831.203855][ T5855] usbtmc 2-1:16.0: can't read capabilities [ 831.439250][ T5855] usb 2-1: USB disconnect, device number 26 [ 831.506624][T14631] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 832.629166][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 832.773858][T14634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2554'. [ 832.835515][T14634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2554'. [ 832.938189][T14636] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2555'. [ 833.072940][T14636] syzkaller0: entered promiscuous mode [ 833.083670][T14636] syzkaller0: entered allmulticast mode [ 836.368714][T14662] loop5: detected capacity change from 0 to 7 [ 836.422111][T14662] Dev loop5: unable to read RDB block 7 [ 836.468481][T14662] loop5: AHDI p3 p4 [ 836.497330][T14662] loop5: partition table partially beyond EOD, truncated [ 836.506926][T14662] loop5: p3 start 3976331264 is beyond EOD, truncated [ 836.630463][T14672] ADFS-fs (loop3): error: unable to read block 3, try 0 [ 837.935520][T14674] loop5: detected capacity change from 0 to 4096 [ 837.967487][T14674] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 837.986456][T14679] netlink: 'syz.4.2569': attribute type 10 has an invalid length. [ 837.991437][T14674] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 838.185023][ T5184] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 838.365845][ T5184] usb 4-1: Using ep0 maxpacket: 8 [ 838.383771][ T5184] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 838.411226][ T5184] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 838.450143][ T5184] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 838.503015][ T5184] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.542512][ T5184] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 838.620041][ T5184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.691109][T14697] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2577'. [ 838.794964][T14697] syzkaller0: entered promiscuous mode [ 838.821054][T14697] syzkaller0: entered allmulticast mode [ 838.892609][ T5184] usb 4-1: GET_CAPABILITIES returned 0 [ 838.922069][ T5184] usbtmc 4-1:16.0: can't read capabilities [ 839.068698][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 839.068710][ T29] audit: type=1326 audit(1775576027.238:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6df9c819 code=0x7ffc0000 [ 839.147719][ T5184] usb 4-1: USB disconnect, device number 35 [ 839.211194][ T29] audit: type=1326 audit(1775576027.238:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6df9c819 code=0x7ffc0000 [ 839.391120][ T29] audit: type=1326 audit(1775576027.238:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6df9c819 code=0x7ffc0000 [ 839.419541][ T29] audit: type=1326 audit(1775576027.238:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcd6df9c819 code=0x7ffc0000 [ 839.536750][T14711] ADFS-fs (loop4): error: unable to read block 3, try 0 [ 840.418550][ T29] audit: type=1326 audit(1775576027.328:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 840.441479][ T29] audit: type=1326 audit(1775576027.328:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 840.464142][ T29] audit: type=1326 audit(1775576027.328:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 840.790947][ T29] audit: type=1326 audit(1775576027.328:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 840.814784][ T29] audit: type=1326 audit(1775576027.338:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 840.967222][ T29] audit: type=1326 audit(1775576027.338:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14700 comm="syz.1.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd6df5d04e code=0x7ffc0000 [ 841.236874][T14719] netlink: 'syz.1.2583': attribute type 10 has an invalid length. [ 843.051238][T14740] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2590'. [ 843.842907][T14763] netlink: 'syz.4.2598': attribute type 10 has an invalid length. [ 845.591940][T14771] tipc: Enabled bearer , priority 0 [ 845.635866][T14771] syzkaller0: entered promiscuous mode [ 845.664806][T14771] syzkaller0: entered allmulticast mode [ 845.738094][T14771] tipc: Resetting bearer [ 845.766427][T14770] tipc: Resetting bearer [ 845.868259][T14770] tipc: Disabling bearer [ 845.951208][T14776] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2603'. [ 845.993699][T14776] syzkaller0: entered promiscuous mode [ 846.011828][T14776] syzkaller0: entered allmulticast mode [ 846.420589][T14793] netlink: 'syz.1.2609': attribute type 10 has an invalid length. [ 848.228460][T14814] loop5: detected capacity change from 0 to 7 [ 848.271202][T14814] Dev loop5: unable to read RDB block 7 [ 848.317761][T14814] loop5: unable to read partition table [ 848.341931][T14814] loop5: partition table beyond EOD, truncated [ 848.376577][T14814] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 848.584291][T10525] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 848.733716][T14820] loop3: detected capacity change from 0 to 512 [ 848.813132][T10525] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 848.853428][T14820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 848.860746][T10525] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 848.915644][T10525] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 848.958196][T10525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.988988][T14820] EXT4-fs (loop3): 1 truncate cleaned up [ 849.006481][T14818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 849.035163][T10525] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 849.063856][T14820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.386726][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.522340][T14837] netlink: 'syz.2.2622': attribute type 10 has an invalid length. [ 849.737545][T14837] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 851.475208][ T47] usb 2-1: USB disconnect, device number 27 [ 851.825135][ T9625] wlan1: Trigger new scan to find an IBSS to join [ 851.994334][T10525] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 852.194284][T10525] usb 6-1: Using ep0 maxpacket: 8 [ 852.247464][T10525] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.296904][T10525] usb 6-1: config 0 has no interfaces? [ 852.345892][T10525] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.384558][T10525] usb 6-1: config 0 has no interfaces? [ 852.424037][T10525] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.484805][T10525] usb 6-1: config 0 has no interfaces? [ 852.495215][T14871] Illegal XDP return value 4294967294 on prog (id 63) dev syz_tun, expect packet loss! [ 852.546906][T10525] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.583706][T10525] usb 6-1: config 0 has no interfaces? [ 852.605522][T10525] usb 6-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 852.634409][T10525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.660667][T10525] usb 6-1: config 0 descriptor?? [ 853.444357][ T47] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 854.634700][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 854.669146][ T47] usb 4-1: config index 0 descriptor too short (expected 14385, got 27) [ 854.716302][ T47] usb 4-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 854.750364][ T47] usb 4-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 854.796485][ T49] wlan1: Trigger new scan to find an IBSS to join [ 854.805582][ T47] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 854.864291][T10525] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 854.874541][ T47] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 854.894723][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.903521][ T47] usb 4-1: Product: syz [ 854.908446][ T47] usb 4-1: Manufacturer: syz [ 854.914840][ T47] usb 4-1: SerialNumber: syz [ 855.076508][T10525] usb 3-1: config 0 has no interfaces? [ 855.098228][T10525] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 855.146027][T10525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.213666][T10525] usb 3-1: config 0 descriptor?? [ 855.264148][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2636'. [ 855.474537][ T126] usb 3-1: USB disconnect, device number 37 [ 855.629226][ T47] usb 4-1: USB disconnect, device number 36 [ 855.640987][ T9] usb 6-1: USB disconnect, device number 12 [ 856.678859][T14938] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2654'. [ 856.955325][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 857.155733][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 857.208375][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.232713][ T9] usb 2-1: config 0 has no interfaces? [ 857.279836][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.311353][ T9] usb 2-1: config 0 has no interfaces? [ 857.332981][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.369247][ T9] usb 2-1: config 0 has no interfaces? [ 857.397932][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.427660][ T9] usb 2-1: config 0 has no interfaces? [ 857.443849][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 857.471383][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.514599][ T9] usb 2-1: config 0 descriptor?? [ 857.750390][T14962] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2664'. [ 857.779508][T14962] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2664'. [ 857.835000][ T58] wlan1: Trigger new scan to find an IBSS to join [ 858.094929][ T126] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 858.278682][ T126] usb 5-1: config 0 has no interfaces? [ 858.308959][ T126] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 858.356521][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.426252][ T126] usb 5-1: config 0 descriptor?? [ 858.471502][T14971] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2668'. [ 858.518575][T14971] syzkaller0: entered promiscuous mode [ 858.524936][T14971] syzkaller0: entered allmulticast mode [ 858.543933][T14971] tc action pedit offset must be on 32 bit boundaries [ 858.715228][ T126] usb 5-1: USB disconnect, device number 36 [ 858.796686][ T9625] wlan1: Creating new IBSS network, BSSID 0a:f6:e8:94:32:7b [ 858.845273][T14977] loop5: detected capacity change from 0 to 512 [ 858.900916][T14977] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 858.982568][T14977] EXT4-fs (loop5): 1 truncate cleaned up [ 859.040935][T14977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.206632][T12849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.355619][ T9] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 859.376895][T14989] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2675'. [ 859.386960][T14989] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2675'. [ 859.520223][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 859.551082][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 859.572361][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 859.588805][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 859.600082][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 859.613312][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 859.626549][T14997] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2679'. [ 859.639879][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 859.648888][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 859.677747][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 859.716160][ T9] usb 4-1: string descriptor 0 read error: -22 [ 859.722531][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 859.737214][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.801685][T14997] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 859.816183][ T9] adutux 4-1:168.0: interrupt endpoints not found [ 859.933273][ T5855] usb 2-1: USB disconnect, device number 28 [ 860.238486][ T5855] usb 4-1: USB disconnect, device number 37 [ 862.825914][T15030] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2687'. [ 863.218395][T15038] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 865.054956][ T47] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 865.064318][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 865.255689][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 865.280596][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 865.291080][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 865.332344][ T47] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 865.379306][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 865.406303][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 865.433464][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.459520][ T47] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 865.491150][ T9] usb 3-1: config 0 has no interfaces? [ 865.502077][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 865.509981][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 865.538489][ T47] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 865.568888][ T47] usb 4-1: string descriptor 0 read error: -22 [ 865.578787][ T47] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 865.619264][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.637827][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.707080][ T9] usb 3-1: config 0 has no interfaces? [ 865.726468][ T47] adutux 4-1:168.0: interrupt endpoints not found [ 865.788253][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.825392][T15079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2701'. [ 865.838217][ T9] usb 3-1: config 0 has no interfaces? [ 865.868888][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.903625][ T9] usb 3-1: config 0 has no interfaces? [ 865.951227][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 865.998274][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.054336][ T126] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 866.078984][ T9] usb 3-1: config 0 descriptor?? [ 866.229536][ T126] usb 6-1: Using ep0 maxpacket: 32 [ 866.323139][ T47] usb 4-1: USB disconnect, device number 38 [ 866.335057][ T126] usb 6-1: config 0 has no interfaces? [ 866.405506][T15092] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 867.743625][ T126] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 867.796412][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.819775][T15093] syzkaller0: entered promiscuous mode [ 867.839860][T15093] syzkaller0: entered allmulticast mode [ 867.850461][ T126] usb 6-1: Product: syz [ 867.864519][ T126] usb 6-1: Manufacturer: syz [ 867.906332][ T126] usb 6-1: SerialNumber: syz [ 867.980731][ T126] usb 6-1: config 0 descriptor?? [ 868.034385][ T126] usb 6-1: can't set config #0, error -71 [ 868.077000][ T126] usb 6-1: USB disconnect, device number 13 [ 868.964364][ T126] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 870.134799][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.158612][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.255133][ T126] usb 6-1: no configurations [ 870.359441][ T126] usb 6-1: can't read configurations, error -22 [ 870.485752][T15132] ADFS-fs (loop4): error: unable to read block 3, try 0 [ 871.623354][ T126] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 871.986735][ T5184] usb 3-1: USB disconnect, device number 38 [ 872.014865][T10525] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 872.087420][T15140] loop1: detected capacity change from 0 to 128 [ 872.186272][T10525] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 872.221902][T10525] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 872.223613][T15140] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 872.245367][T10525] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 872.258889][T10525] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 872.266796][T10525] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 872.278447][T10525] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 872.291309][T10525] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 872.299413][T10525] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 872.320516][T15140] ext4 filesystem being mounted at /552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 872.356927][T10525] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 872.412448][T10525] usb 5-1: string descriptor 0 read error: -22 [ 872.422761][T10525] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 872.451173][T10525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.526172][T10525] adutux 5-1:168.0: interrupt endpoints not found [ 872.534449][ T126] usb 6-1: device descriptor read/64, error -71 [ 872.581466][T15140] [ 872.583873][T15140] ====================================================== [ 872.590870][T15140] WARNING: possible circular locking dependency detected [ 872.597901][T15140] syzkaller #0 Tainted: G L [ 872.603854][T15140] ------------------------------------------------------ [ 872.610886][T15140] syz.1.2717/15140 is trying to acquire lock: [ 872.616939][T15140] ffff88802037e600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0 [ 872.626002][T15140] [ 872.626002][T15140] but task is already holding lock: [ 872.633437][T15140] ffff888032dd4c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130 [ 872.643661][T15140] [ 872.643661][T15140] which lock already depends on the new lock. [ 872.643661][T15140] [ 872.654246][T15140] [ 872.654246][T15140] the existing dependency chain (in reverse order) is: [ 872.663357][T15140] [ 872.663357][T15140] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 872.671897][T15140] percpu_down_read_internal+0x48/0x1c0 [ 872.678006][T15140] ext4_writepages+0x205/0x3b0 [ 872.683322][T15140] do_writepages+0x32e/0x550 [ 872.688460][T15140] __writeback_single_inode+0x133/0x10e0 [ 872.694719][T15140] writeback_single_inode+0x4ac/0xdc0 [ 872.700627][T15140] write_inode_now+0x1c2/0x290 [ 872.706127][T15140] iput+0x8c1/0xe80 [ 872.710646][T15140] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 872.716554][T15140] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 872.722983][T15140] __ext4_expand_extra_isize+0x30d/0x400 [ 872.729331][T15140] __ext4_mark_inode_dirty+0x45c/0x710 [ 872.735421][T15140] ext4_evict_inode+0x986/0x10e0 [ 872.740905][T15140] evict+0x61e/0xb10 [ 872.745415][T15140] ext4_orphan_cleanup+0xc38/0x1470 [ 872.752125][T15140] ext4_fill_super+0x5a19/0x6330 [ 872.757618][T15140] get_tree_bdev_flags+0x431/0x4f0 [ 872.763275][T15140] vfs_get_tree+0x92/0x2a0 [ 872.768242][T15140] do_new_mount+0x341/0xd30 [ 872.773295][T15140] __se_sys_mount+0x31d/0x420 [ 872.778507][T15140] do_syscall_64+0x15f/0xf80 [ 872.783644][T15140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.790089][T15140] [ 872.790089][T15140] -> #0 (sb_internal){.+.+}-{0:0}: [ 872.797436][T15140] __lock_acquire+0x15a5/0x2cf0 [ 872.802838][T15140] lock_acquire+0x106/0x350 [ 872.807891][T15140] percpu_down_read_internal+0x48/0x1c0 [ 872.813981][T15140] ext4_evict_inode+0x426/0x10e0 [ 872.819550][T15140] evict+0x61e/0xb10 [ 872.824100][T15140] ext4_ext_migrate+0xe11/0x1130 [ 872.829625][T15140] ext4_ioctl+0x234c/0x4b30 [ 872.835513][T15140] __se_sys_ioctl+0xfc/0x170 [ 872.840914][T15140] do_syscall_64+0x15f/0xf80 [ 872.846157][T15140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.853029][T15140] [ 872.853029][T15140] other info that might help us debug this: [ 872.853029][T15140] [ 872.863788][T15140] Possible unsafe locking scenario: [ 872.863788][T15140] [ 872.871591][T15140] CPU0 CPU1 [ 872.877078][T15140] ---- ---- [ 872.882453][T15140] lock(&sbi->s_writepages_rwsem); [ 872.887766][T15140] lock(sb_internal); [ 872.894375][T15140] lock(&sbi->s_writepages_rwsem); [ 872.902107][T15140] rlock(sb_internal); [ 872.906270][T15140] [ 872.906270][T15140] *** DEADLOCK *** [ 872.906270][T15140] [ 872.914515][T15140] 3 locks held by syz.1.2717/15140: [ 872.920005][T15140] #0: ffff88802037e410 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x60/0x200 [ 872.930309][T15140] #1: ffff88807e4d8d78 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: ext4_ioctl+0x2344/0x4b30 [ 872.941225][T15140] #2: ffff888032dd4c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130 [ 872.951975][T15140] [ 872.951975][T15140] stack backtrace: [ 872.958102][T15140] CPU: 0 UID: 0 PID: 15140 Comm: syz.1.2717 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.958130][T15140] Tainted: [L]=SOFTLOCKUP [ 872.958136][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 872.958153][T15140] Call Trace: [ 872.958165][T15140] [ 872.958173][T15140] dump_stack_lvl+0xe8/0x150 [ 872.958201][T15140] print_circular_bug+0x2e1/0x300 [ 872.958220][T15140] check_noncircular+0x12e/0x150 [ 872.958238][T15140] __lock_acquire+0x15a5/0x2cf0 [ 872.958264][T15140] ? kernel_text_address+0xa5/0xe0 [ 872.958284][T15140] ? __kernel_text_address+0xd/0x30 [ 872.958303][T15140] ? unwind_get_return_address+0x4d/0x90 [ 872.958320][T15140] ? __asan_memset+0x22/0x50 [ 872.958344][T15140] ? ext4_evict_inode+0x426/0x10e0 [ 872.958367][T15140] lock_acquire+0x106/0x350 [ 872.958387][T15140] ? ext4_evict_inode+0x426/0x10e0 [ 872.958415][T15140] percpu_down_read_internal+0x48/0x1c0 [ 872.958435][T15140] ? ext4_evict_inode+0x426/0x10e0 [ 872.958457][T15140] ext4_evict_inode+0x426/0x10e0 [ 872.958482][T15140] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 872.958499][T15140] ? do_raw_spin_lock+0x12b/0x2f0 [ 872.958517][T15140] ? __pfx_ext4_evict_inode+0x10/0x10 [ 872.958542][T15140] ? do_raw_spin_unlock+0xf5/0x210 [ 872.958560][T15140] ? __pfx_ext4_evict_inode+0x10/0x10 [ 872.958583][T15140] evict+0x61e/0xb10 [ 872.958602][T15140] ? __pfx_evict+0x10/0x10 [ 872.958617][T15140] ? _raw_spin_unlock+0x28/0x50 [ 872.958636][T15140] ? iput+0xb25/0xe80 [ 872.958659][T15140] ext4_ext_migrate+0xe11/0x1130 [ 872.958685][T15140] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 872.958705][T15140] ? __pfx_down_write+0x10/0x10 [ 872.958728][T15140] ? sb_start_write+0x114/0x1c0 [ 872.958742][T15140] ? mnt_want_write_file+0x164/0x200 [ 872.958758][T15140] ext4_ioctl+0x234c/0x4b30 [ 872.958782][T15140] ? __pfx_ext4_ioctl+0x10/0x10 [ 872.958803][T15140] ? is_bpf_text_address+0x292/0x2b0 [ 872.958825][T15140] ? is_bpf_text_address+0x26/0x2b0 [ 872.958846][T15140] ? kernel_text_address+0xa5/0xe0 [ 872.958878][T15140] ? __kernel_text_address+0xd/0x30 [ 872.958897][T15140] ? unwind_get_return_address+0x4d/0x90 [ 872.958912][T15140] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 872.958932][T15140] ? arch_stack_walk+0xfb/0x150 [ 872.958952][T15140] ? stack_trace_save+0xa9/0x100 [ 872.958970][T15140] ? __pfx_stack_trace_save+0x10/0x10 [ 872.958988][T15140] ? kasan_save_free_info+0x46/0x50 [ 872.959008][T15140] ? stack_depot_save_flags+0x33/0x810 [ 872.959028][T15140] ? kasan_save_track+0x4f/0x80 [ 872.959051][T15140] ? kasan_save_track+0x3e/0x80 [ 872.959077][T15140] ? kasan_save_free_info+0x46/0x50 [ 872.959096][T15140] ? __kasan_slab_free+0x5c/0x80 [ 872.959109][T15140] ? kfree+0x1c5/0x640 [ 872.959129][T15140] ? tomoyo_path_number_perm+0x501/0x630 [ 872.959152][T15140] ? security_file_ioctl+0xc3/0x2a0 [ 872.959174][T15140] ? __se_sys_ioctl+0x47/0x170 [ 872.959189][T15140] ? do_syscall_64+0x15f/0xf80 [ 872.959209][T15140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.959231][T15140] ? file_ioctl+0x273/0x860 [ 872.959248][T15140] ? __pfx_file_ioctl+0x10/0x10 [ 872.959267][T15140] ? kasan_quarantine_put+0xbb/0x1f0 [ 872.959293][T15140] ? tomoyo_path_number_perm+0x219/0x630 [ 872.959317][T15140] ? tomoyo_path_number_perm+0x219/0x630 [ 872.959342][T15140] ? do_vfs_ioctl+0x1166/0x1530 [ 872.959358][T15140] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 872.959375][T15140] ? vfs_write+0x9bc/0xb90 [ 872.959390][T15140] ? do_futex+0x333/0x420 [ 872.959411][T15140] ? __fget_files+0x2a/0x420 [ 872.959432][T15140] ? __fget_files+0x2a/0x420 [ 872.959451][T15140] ? __fget_files+0x3a0/0x420 [ 872.959471][T15140] ? __fget_files+0x2a/0x420 [ 872.959491][T15140] ? bpf_lsm_file_ioctl+0x9/0x20 [ 872.959508][T15140] ? __pfx_ext4_ioctl+0x10/0x10 [ 872.959529][T15140] __se_sys_ioctl+0xfc/0x170 [ 872.959544][T15140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.959560][T15140] do_syscall_64+0x15f/0xf80 [ 872.959580][T15140] ? trace_irq_disable+0x3b/0x140 [ 872.959599][T15140] ? clear_bhb_loop+0x40/0x90 [ 872.959617][T15140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.959633][T15140] RIP: 0033:0x7fcd6df9c819 [ 872.959655][T15140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.959669][T15140] RSP: 002b:00007fcd6eda7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.959686][T15140] RAX: ffffffffffffffda RBX: 00007fcd6e215fa0 RCX: 00007fcd6df9c819 [ 872.959698][T15140] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 872.959708][T15140] RBP: 00007fcd6e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 872.959718][T15140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.959728][T15140] R13: 00007fcd6e216038 R14: 00007fcd6e215fa0 R15: 00007ffdf3229f18 [ 872.959746][T15140] [ 873.446709][ T126] usb usb6-port1: attempt power cycle [ 873.547740][ T5841] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 873.613726][ T5855] usb 5-1: USB disconnect, device number 37 [ 873.804325][ T126] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 873.828506][ T126] usb 6-1: config 0 has no interfaces? [ 873.834366][ T126] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 873.843407][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.852573][ T126] usb 6-1: config 0 descriptor?? [ 875.093987][ T126] usb 6-1: USB disconnect, device number 16