last executing test programs: 15m12.307121686s ago: executing program 32 (id=629): syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x208108c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 12m9.19575989s ago: executing program 33 (id=1121): openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x200) msgsnd(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0) msgrcv(r1, &(0x7f0000000f40)={0x0, ""/255}, 0x107, 0xffffffffffffffff, 0x2000) 11m50.801800501s ago: executing program 34 (id=1160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) 11m38.266287029s ago: executing program 35 (id=1179): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 10m38.139523982s ago: executing program 36 (id=1330): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010026bd7000d6dbdf250900020073797a3100000010080041007278650014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 10m32.126986251s ago: executing program 37 (id=1341): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2210010, &(0x7f0000000080), 0xfc, 0x582, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') 9m59.603451022s ago: executing program 38 (id=1418): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x89}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610936dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84bb90577b8b405a48292eeca69f5275cb7b7027d4bf643bd69b034c0221a30"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x141) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ftruncate(r4, 0x2007ffb) sendfile(r3, r4, 0x0, 0x1000000201005) copy_file_range(r2, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x700000000000000) openat(r3, &(0x7f00000000c0)='./bus\x00', 0x367c43, 0x152) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 9m29.166843196s ago: executing program 39 (id=1467): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x4b4c, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "edf059fd78926ac7c7aa983464d8998a"}]}}}}}}}, 0x0) getsockopt(r6, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x100000, 0x0) lseek(r0, 0x1000, 0x1) 9m17.414992024s ago: executing program 40 (id=1517): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001480)="3b5250dd8df768c581177cc96346a125c5baecd7e46618851e723e8ef1628f8e5c9fff1954ad6617c17fd0658b4c494ab4b9c82de21662a0d7c3cafc01b397ad6c398c755561984e8ba92704585396a2101125bb2a4d000000611bc84796c8015747ffc90dcf9341cd76ab4a14", 0x6d, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfffffffffffffe9e, 0x805, 0x0, 0x0) 9m7.326381156s ago: executing program 41 (id=1532): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) 7m42.617850207s ago: executing program 42 (id=1647): r0 = fsopen(&(0x7f0000001140)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc020) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7m24.791162973s ago: executing program 43 (id=1654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) socket$nl_audit(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x800) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket(0x2000000000000021, 0x2, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x2) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000001c0), 0x2) 6m58.585456543s ago: executing program 44 (id=1690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000007c0)={0x0, 0x2, 0x37, 0x1}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) socket(0x21, 0x80000, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x40800) 6m49.395254857s ago: executing program 45 (id=1701): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) 6m13.230872423s ago: executing program 46 (id=1740): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 5m17.073362524s ago: executing program 47 (id=1854): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='.\x02\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@discard}, {@noblock_validity}, {@discard}]}, 0x4, 0xbc1, &(0x7f0000001080)="$eJzs3M1rXOUaAPDnnHy2yb2TXi6X27tpLpdLC/c6TSsptgi2UnHjQtCt0JBOSsj0gyRSk2Yx0X9A1LXgRlCL0oVdd6Pg1o3WrcWFUCQ2CiIaOfORxGQmH+2kJyS/H7w57zvvmXmeZ05nznlhTgPYtwazP2nE4Yi4kEQU6o+nEdFd7fVGVGr7LS7Mjf68MDeaxNLSSz8kkUTEg4W50cZrJfVtX33QGxFfPpvE395YH3dqZnZipFwuTdbHx6cvXzs+NTP7xPjlkUulS6UrJ049NXxy+NTQ6eG21frLt2dv//Tv57+r/Prhbzd/fPv9JM5Gf31udR3tMhiDy+/Jap0RMdLuYDnpqNezus6kc5MnpTucFAAALaWrruH+EYXoiJWLt0J89lWuyQEAAABtsdQRsQQAAADscYn1PwAAAOxxjd8BPFiYG220fH+R8HjdPxcRA7X6F+utNtMZleq2N7oi4uCDJFbf1prUnvbIBiPi3jenP8la7NB9yBupzEfEP5sd/6Ra/0D1Lu719acRMdSG+INrxrut/v93t67/bBvi510/APvTnXO1E9n681+6fP0TTc5/nU3OXQ8j7/Nf4/pvcd3130r9HS2u/17cYowbH7x7vdVcVv/Tt5/7uNGy+Nn2kYrahvvzEf/qbFZ/slx/0qL+C1uMUfj9eqnV3Bbr79l2YVu09F7E0Whef0Oy8f9PdHxsvFwaqv1tGmP+i+GPWsXfDcf/YIv6Nzv+17YY45Xz52+1mtu8/vT77uTlaq+7/shrI9PTkyciupMX1j9+sn5DewuNfRqvkdV/7D8bf/6b1Z+FqNTfh2wtMF/fZuPX18R85uaNTzeqP1v75Xn8Lz7k8X9zizH++/lbx1rNrV7/Zi2Lfy+prYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiP5I0uJyP02LxYi+iPh7HEzLV6em/zd29dUrF7O5iIHoSsfGy6WhiCjUxkk2PlHtr4xPrhk/GRGHIuKdwoHquDh6tXwx7+IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY1hcR/ZGkxYhII2KxkKbFYt5ZAQAAAG03kHcCAAAAwI6z/gcAAIC9z/ofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHXboyJ27SURUzhyotkx3fa4r18yAnZbmnQCQm468EwBy05l3AkButrnGd7kAe1CyyXxvy5metucCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO519PCdu0lEVM4cqLZMd32uq+kzjjzG7ICdlOadAJCbjo0mO9eMfVnAnrL2Iw7sH83X+MB+kmwy37uyT+XPMz07lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu09/tSVpMSLSaj9Ni8WIv0TEQHQlY+Pl0lBE/DUivi509WTjnryTBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoO2mZmYnRsrl0qSOTns7ffV/Yrsln93fSXZHGrVOzl9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYmpmdmKkXC5NTuWdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC3qZnZiZFyuTS5hc6t7ey8qpN3jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5OePAAAA//++vgq1") ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc) unshare(0x4020400) syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)) chdir(&(0x7f00000001c0)='./bus\x00') truncate(0x0, 0x3000000) openat(0xffffffffffffff9c, 0x0, 0x4842, 0x1cb) 4m17.701540354s ago: executing program 3 (id=2033): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}}, 0x0) 4m17.112697497s ago: executing program 3 (id=2034): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pidfd_send_signal(0xffffffffffffffff, 0x20002, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 4m16.293971587s ago: executing program 3 (id=2038): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) 4m12.621564073s ago: executing program 3 (id=2045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x401, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 4m12.526148887s ago: executing program 9 (id=2046): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x8}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) close_range(r1, r0, 0x0) 4m11.788604691s ago: executing program 9 (id=2048): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pidfd_send_signal(0xffffffffffffffff, 0x20002, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 4m11.238617065s ago: executing program 9 (id=2050): unshare(0x2040400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x28, 'drbg_pr_sha1\x00'}, 0x58) 4m10.592588106s ago: executing program 9 (id=2053): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 4m9.337956439s ago: executing program 9 (id=2056): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100), 0x0) recvmmsg$unix(r1, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@rights={{0x10}}], 0x10}}], 0x1, 0x10003, 0x0) 4m6.989880888s ago: executing program 3 (id=2058): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000880)={[{@stripe={'stripe', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 4m6.225304595s ago: executing program 9 (id=2061): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) r3 = getpgid(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYBLOB="050000000000e400000021000000080003", @ANYRESHEX=r3], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) 4m3.268742627s ago: executing program 48 (id=2061): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) r3 = getpgid(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYBLOB="050000000000e400000021000000080003", @ANYRESHEX=r3], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) 4m3.131424624s ago: executing program 3 (id=2066): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8], 0x6, 0x801, &(0x7f0000001540)="$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") r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) 4m1.20849874s ago: executing program 49 (id=2066): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8], 0x6, 0x801, &(0x7f0000001540)="$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") r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) 2m26.698012152s ago: executing program 2 (id=2330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40010) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xbc) unshare(0x2c020400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe8, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2m25.931403838s ago: executing program 2 (id=2336): getdents(0xffffffffffffffff, &(0x7f0000000380)=""/159, 0x9f) 2m25.407657499s ago: executing program 2 (id=2339): socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1fd}, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 2m24.822781391s ago: executing program 2 (id=2342): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141842, 0x9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="cc", 0x1}], 0x1, 0x7fff, 0xe, 0x13) rename(&(0x7f0000000040)='./file1\x00', 0x0) 2m23.991613554s ago: executing program 2 (id=2347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000ec0)="990242", 0x3, 0x4044001, 0x0, 0x0) 2m23.204205357s ago: executing program 2 (id=2351): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m7.778330159s ago: executing program 50 (id=2351): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m53.872870717s ago: executing program 6 (id=2421): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000ec0)="990242", 0x3, 0x4044001, 0x0, 0x0) 1m52.53082836s ago: executing program 6 (id=2424): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) read(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) pipe2(0x0, 0x4080) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000700000000000800020005000000050008"], 0x34}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 1m47.574975382s ago: executing program 6 (id=2432): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001900)=""/73, 0x49}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 1m45.762410103s ago: executing program 6 (id=2433): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f94716330", 0x7) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000ec0)="990242", 0x3, 0x4044001, 0x0, 0x0) 1m44.180886653s ago: executing program 6 (id=2439): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, &(0x7f00000001c0)=0x1001001a) 1m42.854178826s ago: executing program 6 (id=2443): io_setup(0x7, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r4 = openat$sysfs(0xffffff9c, &(0x7f0000000400)='/sys/power/wakeup_count', 0x40042, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}]) 1m27.511000452s ago: executing program 51 (id=2443): io_setup(0x7, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r4 = openat$sysfs(0xffffff9c, &(0x7f0000000400)='/sys/power/wakeup_count', 0x40042, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}]) 59.267037843s ago: executing program 7 (id=2547): setxattr$trusted_overlay_opaque(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f0000000000)) 57.754615032s ago: executing program 7 (id=2551): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001900)=""/73, 0x49}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 56.207218604s ago: executing program 7 (id=2558): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) unshare(0x68040200) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 54.798175664s ago: executing program 7 (id=2562): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4(r0, 0x0, 0x0, 0x800) 53.280388965s ago: executing program 7 (id=2567): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001900)=""/73, 0x49}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 51.586421733s ago: executing program 7 (id=2575): socket$l2tp6(0xa, 0x2, 0x73) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10, @mcast2, 0x2}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002300), 0x600) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x48899}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002c000480140001800b00010025cc74c5ddd182791ede598df4dfa4ee25a713291ab84608234506736f636b65740000ef040280140001800b000100746172676541cd00040002800900010073797a30000000000000064000000010000000031400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x20004814}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000880)={[{@bsdgroups}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@block_validity}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x77}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 36.181809939s ago: executing program 52 (id=2575): socket$l2tp6(0xa, 0x2, 0x73) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10, @mcast2, 0x2}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002300), 0x600) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x48899}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002c000480140001800b00010025cc74c5ddd182791ede598df4dfa4ee25a713291ab84608234506736f636b65740000ef040280140001800b000100746172676541cd00040002800900010073797a30000000000000064000000010000000031400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x20004814}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000880)={[{@bsdgroups}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@block_validity}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x77}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 17.555060456s ago: executing program 1 (id=2657): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 12.942959901s ago: executing program 1 (id=2666): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c28, 0x0, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./bus\x00') 12.572204272s ago: executing program 5 (id=2667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="08002600df16000068005080110001006ff4ea2d0c13a69b7a278e36d70000000800030001ac0f000400060005000900010000000800070000000000080007000da144e924000880040001000400010004000100040001000400010004000200040001000400010005000900000000000a000600080211000001000020006e800400010004000200040002000400020004000200040002000400020004000b00050008000000000009000700be71630c80000000080037000200000004000a00110007001129a04de4bd984887f722577900000008003500000000000a00340002"], 0x120}, 0x1, 0x0, 0x0, 0x20040040}, 0x4) 11.766700545s ago: executing program 4 (id=2668): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{}, {0x94}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x180}], 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x5]}, 0x8, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xc7, 0xa6, 0x7d, 0x40, 0x13b1, 0x42, 0xec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x1, 0x7e, 0xd7, 0x25, 0x92, [], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x0, 0x7}}]}}]}}]}}, 0x0) 11.716416879s ago: executing program 1 (id=2669): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) unshare(0x40600) getdents64(r2, 0x0, 0x0) readv(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x10, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0}) 11.468118842s ago: executing program 5 (id=2670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000580)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000240)="b70000", 0x3}, {&(0x7f0000000600)="e82c4adb60346417f0e338a05f8d408402ac57ec028018688493ed81b0490cfc0166cb", 0x23}], 0x3) 11.058644246s ago: executing program 1 (id=2672): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000006c0)={0x60, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10.075361163s ago: executing program 5 (id=2675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800ea11ff20010000000000000000000000000001ff0200000000000000000000000000014f194e2000ea90788108"], 0x124) 9.462406234s ago: executing program 4 (id=2676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4000000) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0x1) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x2a) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000700000000000800020005000000050008"], 0x34}}, 0x0) 8.471595917s ago: executing program 5 (id=2679): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c28, 0x0, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./bus\x00') 7.517314513s ago: executing program 0 (id=2680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="08002600df16000068005080110001006ff4ea2d0c13a69b7a278e36d70000000800030001ac0f000400060005000900010000000800070000000000080007000da144e924000880040001000400010004000100040001000400010004000200040001000400010005000900000000000a000600080211000001000020006e800400010004000200040002000400020004000200040002000400020004000b00050008000000000009000700be71630c80000000080037000200000004000a00110007001129a04de4bd984887f722577900000008003500000000000a00340002"], 0x120}, 0x1, 0x0, 0x0, 0x20040040}, 0x4) 6.608960949s ago: executing program 5 (id=2681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.events\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="9803", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 5.996833737s ago: executing program 1 (id=2683): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.902136526s ago: executing program 0 (id=2684): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 5.569982573s ago: executing program 8 (id=2685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000580)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000600)="e82c4adb60346417f0e338a05f8d408402ac57ec028018688493ed81b0490cfc0166cb", 0x23}], 0x2) 5.440418942s ago: executing program 5 (id=2686): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af7, 0x80, 0x1, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.351109061s ago: executing program 0 (id=2687): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{}, {0x94}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x180}], 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x5]}, 0x8, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xc7, 0xa6, 0x7d, 0x40, 0x13b1, 0x42, 0xec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x1, 0x7e, 0xd7, 0x25, 0x92, [], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x0, 0x7}}]}}]}}]}}, 0x0) 4.632781253s ago: executing program 4 (id=2688): syz_open_dev$sndpcmc(0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r3, &(0x7f0000006300)={0x2020}, 0x402) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) 4.121689667s ago: executing program 8 (id=2689): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x40008004) 3.625867004s ago: executing program 8 (id=2690): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001900)=""/73, 0x49}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 2.753045351s ago: executing program 0 (id=2691): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c28, 0x0, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./bus\x00') 2.550408808s ago: executing program 4 (id=2692): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x100, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x58, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x62f, 0x2b6a, 0x48, 0x0, 0x0) 2.456915997s ago: executing program 1 (id=2693): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000006c0)={0x60, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x20, 0xc, 0x3, "6946f0"}, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x81, 0x1, "d8"}, 0x0, 0x0, 0x0, 0x0}) 1.932449662s ago: executing program 8 (id=2694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="08002600df16000068005080110001006ff4ea2d0c13a69b7a278e36d70000000800030001ac0f000400060005000900010000000800070000000000080007000da144e924000880040001000400010004000100040001000400010004000200040001000400010005000900000000000a000600080211000001000020006e800400010004000200040002000400020004000200040002000400020004000b00050008000000000009000700be71630c80000000080037000200000004000a00110007001129a04de4bd984887f722577900000008003500000000000a00340002"], 0x120}, 0x1, 0x0, 0x0, 0x20040040}, 0x4) 1.890816195s ago: executing program 0 (id=2695): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) unshare(0x40600) getdents64(r2, 0x0, 0x0) readv(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x10, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0}) 1.30566418s ago: executing program 4 (id=2696): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.events\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="9803", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 960.927332ms ago: executing program 8 (id=2697): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 764.628176ms ago: executing program 0 (id=2698): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0xa402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x2, 0x2, 0x1, 0x3, 0x5}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac14"], 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r4, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x5) 169.879465ms ago: executing program 8 (id=2699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000580)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000600)="e82c4adb60346417f0e338a05f8d408402ac57ec028018688493ed81b0490cfc0166cb", 0x23}], 0x2) 0s ago: executing program 4 (id=2700): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): /w without journal. Quota mode: writeback. [ 983.999400][ T9950] usb 10-1: USB disconnect, device number 6 [ 984.512695][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.585856][T13347] loop1: detected capacity change from 0 to 64 [ 985.212335][T13352] loop4: detected capacity change from 0 to 1024 [ 985.271973][T13352] EXT4-fs: Ignoring removed mblk_io_submit option [ 985.320190][T13352] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 985.476070][T13352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.557315][T13360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1997'. [ 985.811189][T13363] loop3: detected capacity change from 0 to 64 [ 985.853299][T13363] BFS-fs: bfs_iget(): Bad inode number loop3:00000002 [ 985.909733][T10619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.177568][ T9950] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 986.357493][ T9950] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.368058][ T9950] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 986.492046][ T9950] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 986.501556][ T9950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 986.509972][ T9950] usb 4-1: SerialNumber: syz [ 986.814587][T10219] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 986.874960][ T9950] usb 4-1: 0:2 : does not exist [ 986.880055][ T9950] usb 4-1: unit 5 not found! [ 986.990761][ T9950] usb 4-1: USB disconnect, device number 40 [ 987.034451][T10219] usb 8-1: Using ep0 maxpacket: 32 [ 987.115869][T10219] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 987.125009][T10219] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 987.136391][T10219] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 987.147429][T10219] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 987.156773][T10219] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 987.170166][T10219] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 987.183682][T10219] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.223510][T10219] usb 8-1: config 0 descriptor?? [ 987.261082][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.866798][T13384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.876788][T13384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.050281][T13386] loop3: detected capacity change from 0 to 512 [ 988.126981][T13386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 988.197478][T13386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 988.206289][T13386] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 988.315488][T13386] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1 [ 988.326004][T13386] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 988.336352][T13386] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2005: Failed to acquire dquot type 1 [ 988.454819][T13386] EXT4-fs (loop3): Remounting filesystem read-only [ 988.461717][T13386] EXT4-fs (loop3): 1 truncate cleaned up [ 988.471727][T13386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.786386][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.776133][ T9950] usb 8-1: USB disconnect, device number 9 [ 990.545218][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2012'. [ 990.680750][T13412] loop7: detected capacity change from 0 to 1024 [ 990.829995][T13412] EXT4-fs: Ignoring removed mblk_io_submit option [ 990.947478][T13412] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 991.064389][T13412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.269372][T13421] loop4: detected capacity change from 0 to 1024 [ 991.318017][T13421] EXT4-fs: Ignoring removed mblk_io_submit option [ 991.392884][T13421] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 991.496913][T13421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.590844][T11873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.936417][T10619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.328632][T13434] loop9: detected capacity change from 0 to 512 [ 992.384717][T13434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 992.415850][T13431] loop3: detected capacity change from 0 to 4096 [ 992.475496][T13434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 992.484487][T13434] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 992.590343][T13443] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 992.645204][T13434] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 1 [ 992.655909][T13434] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 992.669373][T13434] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2017: Failed to acquire dquot type 1 [ 992.750134][T13434] EXT4-fs (loop9): Remounting filesystem read-only [ 992.757484][T13434] EXT4-fs (loop9): 1 truncate cleaned up [ 992.838837][T13434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 993.276689][T12134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.036804][T10219] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 994.226993][T10219] usb 10-1: Using ep0 maxpacket: 32 [ 994.256478][T10219] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 994.265438][T10219] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 994.274542][T10219] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 994.285088][T10219] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 994.294590][T10219] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 994.310290][T10219] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 994.320391][T10219] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.512741][T10219] usb 10-1: config 0 descriptor?? [ 994.872766][T13467] loop4: detected capacity change from 0 to 1024 [ 994.919763][T13467] EXT4-fs: Ignoring removed mblk_io_submit option [ 994.971334][T13467] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 995.066706][T13467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.113261][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.125958][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.383658][T10619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.982760][T10219] usb 10-1: USB disconnect, device number 7 [ 997.400763][T13489] loop9: detected capacity change from 0 to 64 [ 999.244943][T13508] netlink: 392 bytes leftover after parsing attributes in process `syz.1.2035'. [ 999.298538][T13509] loop7: detected capacity change from 0 to 64 [ 999.369310][T13509] BFS-fs: bfs_iget(): Bad inode number loop7:00000002 [ 999.754833][ T9950] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 999.987745][ T9950] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.998328][ T9950] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.058421][ T9950] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1000.068033][ T9950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1000.076420][ T9950] usb 8-1: SerialNumber: syz [ 1000.387759][ T9950] usb 8-1: 0:2 : does not exist [ 1000.392871][ T9950] usb 8-1: unit 5 not found! [ 1000.575825][ T9950] usb 8-1: USB disconnect, device number 10 [ 1000.692121][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1000.742771][T13523] syzkaller0: entered promiscuous mode [ 1000.748774][T13523] syzkaller0: entered allmulticast mode [ 1001.774671][T10224] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1001.979553][T10224] usb 2-1: Using ep0 maxpacket: 32 [ 1002.012513][T10224] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1002.021512][T10224] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1002.030644][T10224] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1002.041174][T10224] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1002.050453][T10224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1002.060382][T10224] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1002.070484][T10224] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1002.083803][T10224] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1002.096647][T10224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.139276][T10224] usb 2-1: config 0 descriptor?? [ 1002.211142][T13534] loop7: detected capacity change from 0 to 64 [ 1002.729960][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.740283][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.702317][T10224] usb 2-1: USB disconnect, device number 23 [ 1004.993767][T13564] loop7: detected capacity change from 0 to 64 [ 1005.091754][T13564] BFS-fs: bfs_iget(): Bad inode number loop7:00000002 [ 1005.415656][ T798] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1005.629757][ T798] usb 8-1: device descriptor read/64, error -71 [ 1005.667368][T13572] loop9: detected capacity change from 0 to 512 [ 1005.680567][T13574] loop1: detected capacity change from 0 to 64 [ 1005.787624][T13572] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1005.871744][T13572] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2053: bg 0: block 104: invalid block bitmap [ 1005.894368][ T798] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1005.903307][T13572] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1005.958128][T13572] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2053: invalid indirect mapped block 1 (level 1) [ 1006.058740][T13572] EXT4-fs (loop9): 1 truncate cleaned up [ 1006.064672][ T798] usb 8-1: device descriptor read/64, error -71 [ 1006.073273][T13572] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.184475][ T798] usb usb8-port1: attempt power cycle [ 1006.507987][T12134] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 1006.555731][T12134] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 1006.572508][ T798] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1006.575995][T12134] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 1006.626001][T12134] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 1006.645291][ T798] usb 8-1: device descriptor read/8, error -71 [ 1006.668343][T12134] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 1006.720542][T12134] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 1006.778599][T12134] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 1006.815814][T12134] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 1006.866007][T12134] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 1006.894517][ T798] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1006.906528][T12134] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 1006.937372][ T798] usb 8-1: device descriptor read/8, error -71 [ 1007.003274][T13588] lo speed is unknown, defaulting to 1000 [ 1007.009464][T13588] lo speed is unknown, defaulting to 1000 [ 1007.017037][T13588] lo speed is unknown, defaulting to 1000 [ 1007.034556][T13588] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1007.071711][T13588] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1007.180506][T13588] lo speed is unknown, defaulting to 1000 [ 1007.191175][T13588] lo speed is unknown, defaulting to 1000 [ 1007.199661][T13588] lo speed is unknown, defaulting to 1000 [ 1007.211648][T13588] lo speed is unknown, defaulting to 1000 [ 1007.220326][T13588] lo speed is unknown, defaulting to 1000 [ 1007.907557][ T798] usb usb8-port1: unable to enumerate USB device [ 1009.273160][T13596] loop7: detected capacity change from 0 to 164 [ 1009.341190][T13596] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1009.361704][T13594] loop3: detected capacity change from 0 to 1024 [ 1009.415842][T13594] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 1009.510070][T12134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.526134][ T8221] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.609792][T13594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.789940][T13600] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1009.809748][ T8221] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.945918][T10214] Bluetooth: hci1: command 0x0406 tx timeout [ 1010.029129][ T8221] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.206570][ T8221] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.384506][ T798] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1010.593397][ T798] usb 8-1: Using ep0 maxpacket: 32 [ 1010.622450][ T798] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1010.631639][ T798] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1010.640670][ T798] usb 8-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1010.651197][ T798] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1010.660588][ T798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1010.670713][ T798] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1010.681066][ T798] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1010.696290][ T798] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1010.706249][ T798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.787874][ T8221] bridge_slave_1: left allmulticast mode [ 1010.797319][ T8221] bridge_slave_1: left promiscuous mode [ 1010.803941][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.875166][ T8221] bridge_slave_0: left allmulticast mode [ 1010.881069][ T8221] bridge_slave_0: left promiscuous mode [ 1010.888032][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.950253][ T798] usb 8-1: config 0 descriptor?? [ 1011.388525][ T8221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.425776][ T8221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.450237][ T8221] bond0 (unregistering): Released all slaves [ 1011.583166][T13614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.593147][T13614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.723636][T12363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.833345][ T8221] hsr_slave_0: left promiscuous mode [ 1011.865225][ T8221] hsr_slave_1: left promiscuous mode [ 1011.872934][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.880772][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.966719][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.974437][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.039612][ T8221] veth1_macvtap: left promiscuous mode [ 1012.047557][ T8221] veth0_macvtap: left promiscuous mode [ 1012.053411][ T8221] veth1_vlan: left promiscuous mode [ 1012.059232][ T8221] veth0_vlan: left promiscuous mode [ 1012.689138][ T8221] team0 (unregistering): Port device team_slave_1 removed [ 1012.730107][ T8221] team0 (unregistering): Port device team_slave_0 removed [ 1013.006427][T13623] loop1: detected capacity change from 0 to 64 [ 1013.292035][T10224] usb 8-1: USB disconnect, device number 15 [ 1013.971251][ T8221] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.987874][T10214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1014.005732][T10214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1014.015250][T10214] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1014.033659][T10214] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1014.052054][T10214] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1014.081019][ T8221] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.186555][T13628] lo speed is unknown, defaulting to 1000 [ 1014.274900][ T8221] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.413658][ T8221] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.956593][ T8221] bridge_slave_1: left allmulticast mode [ 1014.962547][ T8221] bridge_slave_1: left promiscuous mode [ 1014.969345][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.977953][T13642] loop4: detected capacity change from 0 to 64 [ 1015.030998][T13642] BFS-fs: bfs_iget(): Bad inode number loop4:00000002 [ 1015.079755][ T8221] bridge_slave_0: left allmulticast mode [ 1015.085908][ T8221] bridge_slave_0: left promiscuous mode [ 1015.095089][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.405077][ T798] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1015.568832][ T798] usb 5-1: device descriptor read/64, error -71 [ 1015.597423][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1015.609713][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1015.612423][ T8221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.631465][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1015.642896][ T8221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.661359][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1015.666893][ T8221] bond0 (unregistering): Released all slaves [ 1015.708754][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1015.824933][ T798] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1015.934769][T13646] lo speed is unknown, defaulting to 1000 [ 1015.984651][ T798] usb 5-1: device descriptor read/64, error -71 [ 1016.109096][T10214] Bluetooth: hci1: command tx timeout [ 1016.118762][ T798] usb usb5-port1: attempt power cycle [ 1016.406671][ T8221] hsr_slave_0: left promiscuous mode [ 1016.416113][ T8221] hsr_slave_1: left promiscuous mode [ 1016.430461][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.438298][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.486696][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.494532][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.514383][ T798] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1016.558170][ T8221] veth1_macvtap: left promiscuous mode [ 1016.564225][ T8221] veth0_macvtap: left promiscuous mode [ 1016.570458][ T8221] veth1_vlan: left promiscuous mode [ 1016.577761][ T8221] veth0_vlan: left promiscuous mode [ 1016.598784][ T798] usb 5-1: device descriptor read/8, error -71 [ 1017.031715][ T798] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1017.087967][ T798] usb 5-1: device descriptor read/8, error -71 [ 1017.188231][ T8221] team0 (unregistering): Port device team_slave_1 removed [ 1017.207357][ T798] usb usb5-port1: unable to enumerate USB device [ 1017.277381][ T8221] team0 (unregistering): Port device team_slave_0 removed [ 1017.642464][T13628] chnl_net:caif_netlink_parms(): no params data found [ 1017.676144][ T9950] lo speed is unknown, defaulting to 1000 [ 1017.682064][ T9950] syz0: Port: 1 Link DOWN [ 1017.817908][T10214] Bluetooth: hci2: command tx timeout [ 1018.185786][T10214] Bluetooth: hci1: command tx timeout [ 1018.765821][T13646] chnl_net:caif_netlink_parms(): no params data found [ 1019.278790][T13628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.286427][T13628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.296460][T13628] bridge_slave_0: entered allmulticast mode [ 1019.305985][T13628] bridge_slave_0: entered promiscuous mode [ 1019.356462][T13628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.364265][T13628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.371856][T13628] bridge_slave_1: entered allmulticast mode [ 1019.381112][T13628] bridge_slave_1: entered promiscuous mode [ 1019.632004][T13628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.746016][T13628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.867022][T10214] Bluetooth: hci2: command tx timeout [ 1019.976503][T13700] fuse: Invalid rootmode [ 1020.157847][T13628] team0: Port device team_slave_0 added [ 1020.217484][T13628] team0: Port device team_slave_1 added [ 1020.264974][T10214] Bluetooth: hci1: command tx timeout [ 1020.499553][T13709] loop4: detected capacity change from 0 to 1024 [ 1020.501956][T13628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.513306][T13628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.536632][T13709] EXT4-fs: Ignoring removed mblk_io_submit option [ 1020.544370][T13628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.624983][T13628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.632115][T13628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.658642][T13628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.741675][T13709] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1020.831996][T13646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.840381][T13646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.848270][T13646] bridge_slave_0: entered allmulticast mode [ 1020.857795][T13646] bridge_slave_0: entered promiscuous mode [ 1020.916556][T13709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.113090][T13646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.120949][T13646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.134542][T13646] bridge_slave_1: entered allmulticast mode [ 1021.143901][T13646] bridge_slave_1: entered promiscuous mode [ 1021.282042][T13628] hsr_slave_0: entered promiscuous mode [ 1021.292023][T13628] hsr_slave_1: entered promiscuous mode [ 1021.385560][T10619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.661933][T13646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.817446][T13646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.963121][T10214] Bluetooth: hci2: command tx timeout [ 1022.076781][T13646] team0: Port device team_slave_0 added [ 1022.134954][T13646] team0: Port device team_slave_1 added [ 1022.356216][T10214] Bluetooth: hci1: command tx timeout [ 1022.432238][T13725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2084'. [ 1022.478618][T13727] loop1: detected capacity change from 0 to 64 [ 1022.545199][T13727] BFS-fs: bfs_iget(): Bad inode number loop1:00000002 [ 1022.568583][T13646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.575777][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.602043][T13646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.781106][T13646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.789446][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.815923][T13646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.894651][ T9950] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1023.053103][ T9950] usb 2-1: device descriptor read/64, error -71 [ 1023.275295][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.283346][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.324468][ T9950] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1023.475280][ T9950] usb 2-1: device descriptor read/64, error -71 [ 1023.513939][T13646] hsr_slave_0: entered promiscuous mode [ 1023.525979][T13646] hsr_slave_1: entered promiscuous mode [ 1023.536000][T13646] debugfs: 'hsr0' already exists in 'hsr' [ 1023.541881][T13646] Cannot create hsr debugfs directory [ 1023.592248][ T9950] usb usb2-port1: attempt power cycle [ 1023.978305][ T9950] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1024.024678][T10214] Bluetooth: hci2: command tx timeout [ 1024.036152][ T9950] usb 2-1: device descriptor read/8, error -71 [ 1024.049474][T13628] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1024.150888][T13628] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1024.273068][T13628] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1024.285049][ T9950] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1024.317797][ T9950] usb 2-1: device descriptor read/8, error -71 [ 1024.371336][T13628] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1024.467914][ T9950] usb usb2-port1: unable to enumerate USB device [ 1025.443123][T13646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1025.531716][T13628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.564789][T13646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1025.638844][T13646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1025.737548][T13628] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.756160][T13646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1025.857911][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.865434][ T4559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.993086][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.000685][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.152434][T13760] fuse: Invalid rootmode [ 1026.253490][T13628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1026.823404][T13767] loop7: detected capacity change from 0 to 1024 [ 1026.849004][T13767] EXT4-fs: Ignoring removed mblk_io_submit option [ 1026.939785][T13767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1027.096962][T13646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.108793][T13767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.180223][T13646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.246960][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.254469][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.425502][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.432953][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.614623][T11873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.777669][T13772] loop1: detected capacity change from 0 to 4096 [ 1027.871664][T13772] ntfs3(loop1): ino=1, mi_enum_attr [ 1027.877275][T13772] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1028.012002][T13772] ntfs3(loop1): mft corrupted [ 1028.017596][T13772] ntfs3(loop1): Failed to load $MFT. [ 1028.077795][T13628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.605777][T10224] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1029.720964][T13806] loop4: detected capacity change from 0 to 64 [ 1029.805976][T13806] BFS-fs: bfs_iget(): Bad inode number loop4:00000002 [ 1029.807357][T10224] usb 2-1: Using ep0 maxpacket: 16 [ 1029.891406][T10224] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1029.901022][T10224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.909393][T10224] usb 2-1: Product: syz [ 1029.913734][T10224] usb 2-1: Manufacturer: syz [ 1029.917120][T13646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.918558][T10224] usb 2-1: SerialNumber: syz [ 1030.090846][T10224] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1030.097728][T10224] r8152-cfgselector 2-1: config 0 descriptor?? [ 1030.206424][ T9628] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1030.323113][T13646] veth0_vlan: entered promiscuous mode [ 1030.406540][T10224] r8152-cfgselector 2-1: Unknown version 0x4400 [ 1030.413461][T10224] r8152-cfgselector 2-1: bad CDC descriptors [ 1030.455273][ T9628] usb 5-1: device descriptor read/64, error -71 [ 1030.471601][T13646] veth1_vlan: entered promiscuous mode [ 1030.672233][ T798] r8152-cfgselector 2-1: USB disconnect, device number 28 [ 1030.735973][ T9628] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1030.925813][T13646] veth0_macvtap: entered promiscuous mode [ 1031.012181][ T9628] usb 5-1: device descriptor read/64, error -71 [ 1031.049427][T13646] veth1_macvtap: entered promiscuous mode [ 1031.156628][T13628] veth0_vlan: entered promiscuous mode [ 1031.178961][ T9628] usb usb5-port1: attempt power cycle [ 1031.311372][T13817] loop7: detected capacity change from 0 to 2048 [ 1031.341562][T13628] veth1_vlan: entered promiscuous mode [ 1031.388550][T13646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.435342][T13817] EXT4-fs: Ignoring removed bh option [ 1031.535839][ T9628] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1031.646436][ T9628] usb 5-1: device descriptor read/8, error -71 [ 1031.796160][T13646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.888604][T13628] veth0_macvtap: entered promiscuous mode [ 1031.952845][ T9628] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1031.963817][T13628] veth1_macvtap: entered promiscuous mode [ 1031.978154][T13817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.026048][ T9543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.057200][ T9628] usb 5-1: device descriptor read/8, error -71 [ 1032.068163][ T9543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.143065][ T9543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.217626][ T9628] usb usb5-port1: unable to enumerate USB device [ 1032.222147][ T9543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.271497][T13628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.376396][T13628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.461293][T13830] fuse: Invalid rootmode [ 1032.487486][ T9489] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.514010][ T9489] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.565702][ T9489] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.593603][ T9489] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.954699][ T61] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1033.026137][ T61] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 1033.039787][ T61] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1033.039787][ T61] [ 1033.051280][ T61] EXT4-fs (loop7): Total free blocks count 0 [ 1033.057596][ T61] EXT4-fs (loop7): Free/Dirty block details [ 1033.063635][ T61] EXT4-fs (loop7): free_blocks=2415919104 [ 1033.070101][ T61] EXT4-fs (loop7): dirty_blocks=64 [ 1033.076010][ T61] EXT4-fs (loop7): Block reservation details [ 1033.082137][ T61] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 1033.286582][ T4315] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 18 with max blocks 8 with error 28 [ 1033.305210][ T30] audit: type=1326 audit(1764907734.791:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13840 comm="syz.4.2102" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 1033.424800][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2102'. [ 1033.993685][T13853] loop7: detected capacity change from 0 to 1024 [ 1034.055568][T13853] EXT4-fs: Ignoring removed mblk_io_submit option [ 1034.094730][T13853] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1034.245720][T13853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.718460][T13868] loop4: detected capacity change from 0 to 256 [ 1034.774977][T11873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.858724][T13868] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1035.338046][T13876] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2105'. [ 1036.111819][T13891] fuse: Bad value for 'rootmode' [ 1036.769228][T13899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2109'. [ 1037.052682][T13904] loop7: detected capacity change from 0 to 64 [ 1037.143733][T13904] BFS-fs: bfs_iget(): Bad inode number loop7:00000002 [ 1037.516797][ T9950] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1037.676230][ T9950] usb 8-1: device descriptor read/64, error -71 [ 1037.975293][ T9950] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1038.088911][ T9543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.097177][ T9543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.153720][ T9950] usb 8-1: device descriptor read/64, error -71 [ 1038.223997][ T9543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.234791][ T9543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.266672][ T9950] usb usb8-port1: attempt power cycle [ 1038.655247][ T9950] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1038.716361][ T9950] usb 8-1: device descriptor read/8, error -71 [ 1038.994372][ T9950] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1039.062927][ T9950] usb 8-1: device descriptor read/8, error -71 [ 1039.190800][ T9950] usb usb8-port1: unable to enumerate USB device [ 1039.354303][ T9543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.363803][ T9543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.678899][ T9539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.690512][ T9539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.905693][ T30] audit: type=1326 audit(1764907741.421:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13927 comm="syz.2.2112" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x0 [ 1040.061835][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'. [ 1040.994433][ T9950] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1041.248979][ T9950] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1041.299377][ T9950] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1041.311647][ T9950] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1041.323611][ T9950] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1041.460924][ T9950] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1041.471735][ T9950] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1041.483124][ T9950] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1041.590638][ T9950] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1041.600061][ T9950] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1041.614610][ T9950] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1041.720087][ T9950] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1041.729516][ T9950] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1041.740679][ T9950] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1041.841041][T13946] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1041.888429][ T9950] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1041.897948][ T9950] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1041.909407][ T9950] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1042.030924][ T9950] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1042.040468][ T9950] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1042.051831][ T9950] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1042.143185][ T9950] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1042.153682][ T9950] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1042.165101][ T9950] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1042.286174][ T9950] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1042.295837][ T9950] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1042.307252][ T9950] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1042.433145][T13952] fuse: Bad value for 'rootmode' [ 1042.453553][ T9950] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1042.463119][ T9950] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1042.473959][ T9950] usb 8-1: Product: syz [ 1042.478339][ T9950] usb 8-1: Manufacturer: syz [ 1042.483021][ T9950] usb 8-1: SerialNumber: syz [ 1042.661988][ T9950] usb 8-1: config 0 descriptor?? [ 1042.769503][ T9950] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1043.085321][ T799] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1043.306177][ T799] usb 7-1: Using ep0 maxpacket: 16 [ 1043.368990][ T799] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.381879][ T799] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 1043.393755][ T799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1043.405142][ T799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1043.415159][ T799] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1043.425443][ T799] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1043.695244][ T799] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1043.704869][ T799] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1043.713073][ T799] usb 7-1: Manufacturer: syz [ 1043.721146][T13959] loop1: detected capacity change from 0 to 128 [ 1043.879948][ T799] usb 7-1: config 0 descriptor?? [ 1044.850813][ T9950] usb 8-1: USB disconnect, device number 20 [ 1044.899802][ T9950] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1045.015526][ T799] usb 7-1: USB disconnect, device number 3 [ 1045.342692][T13968] loop7: detected capacity change from 0 to 64 [ 1045.439279][T13968] BFS-fs: bfs_iget(): Bad inode number loop7:00000002 [ 1045.826091][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2123'. [ 1045.923752][ T798] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1046.049601][T13972] block nbd0: not configured, cannot reconfigure [ 1046.108393][ T798] usb 8-1: device descriptor read/64, error -71 [ 1046.355721][ T798] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1046.557599][ T798] usb 8-1: device descriptor read/64, error -71 [ 1046.673325][ T798] usb usb8-port1: attempt power cycle [ 1047.007244][ T30] audit: type=1326 audit(1764907748.511:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13981 comm="syz.6.2125" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x0 [ 1047.094518][ T798] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1047.123492][ T798] usb 8-1: device descriptor read/8, error -71 [ 1047.385640][ T798] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1047.446520][ T798] usb 8-1: device descriptor read/8, error -71 [ 1047.575692][ T798] usb usb8-port1: unable to enumerate USB device [ 1049.306133][T14002] fuse: Bad value for 'rootmode' [ 1049.959193][T14010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.404669][ T798] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1050.634470][ T798] usb 3-1: Using ep0 maxpacket: 16 [ 1050.669290][ T798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.680028][ T798] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 1050.691857][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1050.703031][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1050.715213][ T798] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1050.729440][ T798] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1050.766512][T14018] fuse: Bad value for 'fd' [ 1050.965053][ T798] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1050.974557][ T798] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1050.982753][ T798] usb 3-1: Manufacturer: syz [ 1051.004656][ T799] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1051.060336][ T798] usb 3-1: config 0 descriptor?? [ 1051.278432][ T799] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1051.287820][ T799] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.296338][ T799] usb 8-1: Product: syz [ 1051.300736][ T799] usb 8-1: Manufacturer: syz [ 1051.300839][ T799] usb 8-1: SerialNumber: syz [ 1051.345044][T10224] usb 3-1: USB disconnect, device number 16 [ 1051.445180][ T799] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1051.622108][T10219] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1052.005832][T10224] usb 8-1: USB disconnect, device number 25 [ 1052.592590][ T30] audit: type=1326 audit(1764907754.101:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.2.2137" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x0 [ 1052.680041][T14037] loop6: detected capacity change from 0 to 64 [ 1052.787648][T10219] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1052.795355][T10219] ath9k_htc: Failed to initialize the device [ 1052.876929][T10224] usb 8-1: ath9k_htc: USB layer deinitialized [ 1053.275489][T14041] loop7: detected capacity change from 0 to 64 [ 1053.323255][T14041] BFS-fs: bfs_iget(): Bad inode number loop7:00000002 [ 1053.664578][ T798] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1053.910533][ T798] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.921174][ T798] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1053.975330][ T798] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1053.984960][ T798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1053.993146][ T798] usb 8-1: SerialNumber: syz [ 1054.051700][T14051] fuse: Unknown parameter 'use00000000000000000000' [ 1054.327708][ T798] usb 8-1: skipping empty audio interface (v1) [ 1054.492410][ T798] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1054.580999][ T798] usb 8-1: USB disconnect, device number 26 [ 1054.857927][T14060] fuse: Bad value for 'fd' [ 1055.002459][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1055.681382][T14073] loop4: detected capacity change from 0 to 64 [ 1055.969501][ T30] audit: type=1326 audit(1764907757.481:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.6.2152" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x0 [ 1056.604587][T14088] fuse: Unknown parameter 'use00000000000000000000' [ 1057.099435][T14096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.108747][T14096] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1057.200981][T14094] loop1: detected capacity change from 0 to 1024 [ 1057.315876][T14094] EXT4-fs: Ignoring removed mblk_io_submit option [ 1057.367810][T14094] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1057.504664][T14094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.669329][T14107] fuse: Bad value for 'fd' [ 1057.909434][T12933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.530411][T14115] loop6: detected capacity change from 0 to 64 [ 1058.932963][T14122] loop1: detected capacity change from 0 to 64 [ 1059.916239][T14130] fuse: Unknown parameter 'use00000000000000000000' [ 1060.015611][T14133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.025470][T14133] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1060.034775][ T30] audit: type=1326 audit(1764907761.531:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.7.2170" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 1061.519336][T14150] loop7: detected capacity change from 0 to 1024 [ 1061.558233][T14150] EXT4-fs: Ignoring removed mblk_io_submit option [ 1061.620864][T14150] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1061.687288][T14155] loop6: detected capacity change from 0 to 64 [ 1061.798404][T14150] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.061424][T11873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.940716][T14170] fuse: Unknown parameter 'user_i00000000000000000000' [ 1063.764606][ T30] audit: type=1326 audit(1764907765.271:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14180 comm="syz.1.2188" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x0 [ 1064.308811][T14196] loop4: detected capacity change from 0 to 1024 [ 1064.354476][T14196] EXT4-fs: Ignoring removed mblk_io_submit option [ 1064.395178][T14196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1064.523105][T14196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.929573][T14203] loop7: detected capacity change from 0 to 64 [ 1065.099746][T10619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.854353][T12867] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1065.997216][T12867] usb 5-1: device descriptor read/64, error -71 [ 1066.011189][T14219] fuse: Unknown parameter 'user_i00000000000000000000' [ 1066.254803][T12867] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1066.265270][T14193] Bluetooth: hci0: command 0x0406 tx timeout [ 1066.424794][T12867] usb 5-1: device descriptor read/64, error -71 [ 1066.539428][T12867] usb usb5-port1: attempt power cycle [ 1066.578226][T14228] loop2: detected capacity change from 0 to 64 [ 1066.679929][T14228] BFS-fs: bfs_iget(): Bad inode number loop2:00000002 [ 1066.914884][T12867] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1066.974431][T12867] usb 5-1: device descriptor read/8, error -71 [ 1067.034765][ T9628] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1067.200842][ T30] audit: type=1326 audit(1764907768.711:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.7.2205" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 1067.226450][T12867] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1067.271916][ T9628] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.282622][ T9628] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1067.298154][T12867] usb 5-1: device descriptor read/8, error -71 [ 1067.309341][ T9628] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1067.321236][ T9628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1067.330500][ T9628] usb 3-1: SerialNumber: syz [ 1067.379363][T14237] syzkaller0: entered promiscuous mode [ 1067.385416][T14237] syzkaller0: entered allmulticast mode [ 1067.422892][T12867] usb usb5-port1: unable to enumerate USB device [ 1067.566122][ T9628] usb 3-1: skipping empty audio interface (v1) [ 1067.703997][ T9628] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1067.785413][ T9628] usb 3-1: USB disconnect, device number 17 [ 1067.863614][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.016957][T14245] loop1: detected capacity change from 0 to 1024 [ 1068.096916][T14245] EXT4-fs: Ignoring removed mblk_io_submit option [ 1068.148215][T14245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1068.227298][T14245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.650042][T12933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.727914][T14256] loop2: detected capacity change from 0 to 64 [ 1069.455514][ T798] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1069.648561][T14269] fuse: Unknown parameter 'user_i00000000000000000000' [ 1069.684471][ T798] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1069.695967][ T798] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1069.702820][ T798] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1069.712468][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.845312][ T798] usb 2-1: config 0 descriptor?? [ 1069.855209][T14260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1070.361475][ T798] konepure 0003:1E7D:2DBE.0007: item fetching failed at offset 1/2 [ 1070.408297][ T798] konepure 0003:1E7D:2DBE.0007: parse failed [ 1070.415023][ T798] konepure 0003:1E7D:2DBE.0007: probe with driver konepure failed with error -22 [ 1070.560048][ T798] usb 2-1: USB disconnect, device number 29 [ 1070.951153][T14280] loop6: detected capacity change from 0 to 64 [ 1071.679511][ T30] audit: type=1326 audit(1764907773.171:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.6.2217" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x0 [ 1071.702666][T14292] loop1: detected capacity change from 0 to 64 [ 1071.751934][T14292] BFS-fs: bfs_iget(): Bad inode number loop1:00000002 [ 1072.091400][ T798] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1072.276609][ T798] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.287143][ T798] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1072.369717][ T798] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1072.379704][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1072.388155][ T798] usb 2-1: SerialNumber: syz [ 1072.449933][T14300] loop7: detected capacity change from 0 to 1024 [ 1072.502760][T14300] EXT4-fs: Ignoring removed mblk_io_submit option [ 1072.567169][ T9628] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1072.570007][T14300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1072.668237][ T798] usb 2-1: 0:2 : does not exist [ 1072.696359][ T798] usb 2-1: USB disconnect, device number 30 [ 1072.747108][T14300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.815607][ T9628] usb 3-1: device descriptor read/64, error -71 [ 1072.933481][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.103266][ T9628] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1073.212541][T14307] syzkaller0: entered promiscuous mode [ 1073.218575][T14307] syzkaller0: entered allmulticast mode [ 1073.264523][ T9628] usb 3-1: device descriptor read/64, error -71 [ 1073.337160][T11873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.404516][ T9628] usb usb3-port1: attempt power cycle [ 1073.883101][ T9628] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1073.946604][ T9628] usb 3-1: device descriptor read/8, error -71 [ 1073.995065][T14314] loop7: detected capacity change from 0 to 64 [ 1074.187244][ T9628] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1074.264312][ T9628] usb 3-1: device descriptor read/8, error -71 [ 1074.383925][ T9628] usb usb3-port1: unable to enumerate USB device [ 1074.674430][T14318] fuse: Unknown parameter 'user_id00000000000000000000' [ 1075.289516][T14328] loop6: detected capacity change from 0 to 64 [ 1075.435092][T14331] loop1: detected capacity change from 0 to 128 [ 1075.473681][T14331] vfat: Unknown parameter '01777777777777777777777' [ 1075.681821][T14331] overlayfs: missing 'workdir' [ 1076.468937][ T30] audit: type=1326 audit(1764907777.981:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.1.2231" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x0 [ 1076.983984][T14349] loop4: detected capacity change from 0 to 1024 [ 1077.005125][T14349] EXT4-fs: Ignoring removed mblk_io_submit option [ 1077.023962][T14349] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1077.064643][T14349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.214433][T10619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.703327][T14357] loop4: detected capacity change from 0 to 64 [ 1077.768153][T14357] BFS-fs: bfs_iget(): Bad inode number loop4:00000002 [ 1078.050675][ T798] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1078.189190][T14363] loop6: detected capacity change from 0 to 64 [ 1078.252271][ T798] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.263089][ T798] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1078.342160][ T798] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1078.352418][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1078.360937][ T798] usb 5-1: SerialNumber: syz [ 1078.498397][T14366] fuse: Unknown parameter 'user_id00000000000000000000' [ 1078.687315][ T798] usb 5-1: 0:2 : does not exist [ 1078.870241][ T798] usb 5-1: USB disconnect, device number 67 [ 1079.324682][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1079.652888][T14382] loop7: detected capacity change from 0 to 128 [ 1079.727045][T14382] vfat: Unknown parameter '01777777777777777777777' [ 1079.970199][T14382] overlayfs: missing 'workdir' [ 1080.171340][T14387] loop4: detected capacity change from 0 to 1024 [ 1080.277985][T14387] EXT4-fs: Ignoring removed mblk_io_submit option [ 1080.302340][T14387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1080.462936][T14387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.494602][ T9628] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1080.563294][ T30] audit: type=1326 audit(1764907782.061:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.1.2245" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x0 [ 1080.704774][ T9628] usb 7-1: Using ep0 maxpacket: 8 [ 1080.743087][ T9628] usb 7-1: config 0 has no interfaces? [ 1080.780347][ T9628] usb 7-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=30.8b [ 1080.789848][ T9628] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.798173][ T9628] usb 7-1: Product: syz [ 1080.802513][ T9628] usb 7-1: Manufacturer: syz [ 1080.807584][ T9628] usb 7-1: SerialNumber: syz [ 1080.858663][ T9628] usb 7-1: config 0 descriptor?? [ 1080.916267][T10619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.081438][ T9628] usb 7-1: USB disconnect, device number 4 [ 1081.332672][T14406] loop7: detected capacity change from 0 to 64 [ 1082.576519][ T5892] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1082.762348][ T5892] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1082.822006][ T5892] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1082.831475][ T5892] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1082.842897][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1082.948546][T14426] loop6: detected capacity change from 0 to 64 [ 1082.957371][ T5892] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1082.969074][ T5892] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1082.986868][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.038088][T14426] BFS-fs: bfs_iget(): Bad inode number loop6:00000002 [ 1083.040482][ T5892] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.054718][ T5892] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1083.067849][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.170676][ T5892] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.181182][ T5892] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1083.196577][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.261809][ T5892] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.271313][ T5892] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1083.282654][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.366054][ T5892] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.375604][ T5892] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1083.388500][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.394407][ T9628] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1083.436070][ T5892] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.445826][ T5892] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1083.457230][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.468490][ T5892] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.477851][ T5892] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1083.489227][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.509554][ T5892] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1083.519170][ T5892] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1083.527929][ T5892] usb 8-1: Product: syz [ 1083.532270][ T5892] usb 8-1: Manufacturer: syz [ 1083.537346][ T5892] usb 8-1: SerialNumber: syz [ 1083.557115][ T5892] usb 8-1: config 0 descriptor?? [ 1083.603996][ T5892] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1083.654391][ T9628] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.665073][ T9628] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.733836][ T9628] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1083.743531][ T9628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1083.751877][ T9628] usb 7-1: SerialNumber: syz [ 1084.096768][ T9628] usb 7-1: 0:2 : does not exist [ 1084.214757][ T9628] usb 7-1: USB disconnect, device number 5 [ 1084.380865][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1084.708855][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.715792][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1085.352970][T14436] loop6: detected capacity change from 0 to 64 [ 1085.408879][T14436] bfs: Unknown parameter '00000000000000000000' [ 1085.558544][ T9628] usb 8-1: USB disconnect, device number 27 [ 1085.606453][ T9628] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1086.159953][T14436] loop6: detected capacity change from 0 to 4096 [ 1086.214277][T14436] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1086.539168][T14436] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1086.593120][T14436] ntfs3(loop6): ino=19, mi_enum_attr [ 1086.750586][T14436] ntfs3(loop6): failed to convert "c46c" to iso8859-7 [ 1086.794770][T14436] ntfs3(loop6): ino=20, mi_enum_attr [ 1087.235914][ T30] audit: type=1326 audit(1764907788.731:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14456 comm="syz.1.2260" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x0 [ 1087.833682][T14469] loop6: detected capacity change from 0 to 64 [ 1088.123408][ T9950] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1088.303529][ T9950] usb 5-1: device descriptor read/64, error -71 [ 1088.597340][ T9950] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1088.785052][ T9950] usb 5-1: device descriptor read/64, error -71 [ 1088.872595][T14477] loop7: detected capacity change from 0 to 64 [ 1088.909449][ T9950] usb usb5-port1: attempt power cycle [ 1088.965037][T14477] BFS-fs: bfs_iget(): Bad inode number loop7:00000002 [ 1089.306433][ T9628] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1089.338120][ T9950] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1089.388224][ T9950] usb 5-1: device descriptor read/8, error -71 [ 1089.482362][ T9628] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1089.493229][ T9628] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1089.525121][ T9628] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1089.536916][ T9628] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1089.546003][ T9628] usb 8-1: SerialNumber: syz [ 1089.650410][ T9950] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1089.703891][ T9950] usb 5-1: device descriptor read/8, error -71 [ 1089.827883][ T9628] usb 8-1: 0:2 : does not exist [ 1089.829040][ T9950] usb usb5-port1: unable to enumerate USB device [ 1089.926197][ T9628] usb 8-1: USB disconnect, device number 28 [ 1090.052968][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1090.687113][T14491] block device autoloading is deprecated and will be removed. [ 1093.134443][ T30] audit: type=1326 audit(1764907794.611:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2274" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x0 [ 1094.090969][T14525] loop1: detected capacity change from 0 to 64 [ 1094.858243][ T9950] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1095.077216][ T9950] usb 7-1: Using ep0 maxpacket: 16 [ 1095.145061][ T9950] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1095.154729][ T9950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.162913][ T9950] usb 7-1: Product: syz [ 1095.170248][ T9950] usb 7-1: Manufacturer: syz [ 1095.175856][ T9950] usb 7-1: SerialNumber: syz [ 1095.247406][ T9950] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1095.254397][ T9950] r8152-cfgselector 7-1: config 0 descriptor?? [ 1095.524754][ T9950] r8152-cfgselector 7-1: Unknown version 0x18e0 [ 1095.531752][ T9950] r8152-cfgselector 7-1: bad CDC descriptors [ 1095.733041][ T9628] r8152-cfgselector 7-1: USB disconnect, device number 6 [ 1097.778710][T14559] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2286'. [ 1098.162430][T14563] loop7: detected capacity change from 0 to 64 [ 1098.328887][ T30] audit: type=1326 audit(1764907799.831:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14564 comm="syz.2.2288" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x0 [ 1098.496455][T14569] loop1: detected capacity change from 0 to 64 [ 1099.802675][ T9628] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1100.006623][ T9628] usb 8-1: Using ep0 maxpacket: 16 [ 1100.097884][ T9628] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1100.107731][ T9628] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.116099][ T9628] usb 8-1: Product: syz [ 1100.120424][ T9628] usb 8-1: Manufacturer: syz [ 1100.125649][ T9628] usb 8-1: SerialNumber: syz [ 1100.258314][ T9628] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1100.265060][ T9628] r8152-cfgselector 8-1: config 0 descriptor?? [ 1100.511465][ T9628] r8152-cfgselector 8-1: Unknown version 0x4400 [ 1100.518760][ T9628] r8152-cfgselector 8-1: bad CDC descriptors [ 1100.826793][ T9950] r8152-cfgselector 8-1: USB disconnect, device number 29 [ 1101.192475][T14602] loop6: detected capacity change from 0 to 64 [ 1102.018510][T14607] loop7: detected capacity change from 0 to 64 [ 1103.444491][ T30] audit: type=1326 audit(1764907804.941:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14624 comm="syz.4.2306" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 1104.751366][T14647] loop6: detected capacity change from 0 to 64 [ 1105.051482][ T5892] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1105.312953][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 1105.394004][ T5892] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1105.409929][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.419596][ T5892] usb 3-1: Product: syz [ 1105.423994][ T5892] usb 3-1: Manufacturer: syz [ 1105.428982][ T5892] usb 3-1: SerialNumber: syz [ 1105.480873][T14654] loop6: detected capacity change from 0 to 64 [ 1105.568169][ T5892] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1105.574959][ T5892] r8152-cfgselector 3-1: config 0 descriptor?? [ 1105.854963][ T5892] r8152-cfgselector 3-1: Unknown version 0x18e0 [ 1105.861848][ T5892] r8152-cfgselector 3-1: bad CDC descriptors [ 1106.058633][ T9628] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 1106.692503][ T9628] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1106.961453][ T9628] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1106.971058][ T9628] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.979415][ T9628] usb 8-1: Product: syz [ 1106.983755][ T9628] usb 8-1: Manufacturer: syz [ 1106.988727][ T9628] usb 8-1: SerialNumber: syz [ 1107.081511][ T30] audit: type=1326 audit(1764907808.581:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.1.2321" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x0 [ 1107.608963][ T9628] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1107.626169][ T9628] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1108.604948][T14695] loop1: detected capacity change from 0 to 64 [ 1108.674966][ T9628] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1108.691451][ T9628] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1108.702792][ T9628] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1108.811010][ T9628] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1108.979726][ T9628] usb 8-1: USB disconnect, device number 30 [ 1110.514537][ T30] audit: type=1326 audit(1764907812.011:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14719 comm="syz.1.2337" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x0 [ 1111.403609][T14735] loop2: detected capacity change from 0 to 64 [ 1112.179543][ T9628] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1112.418662][ T9628] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1112.428365][ T9628] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.437043][ T9628] usb 7-1: Product: syz [ 1112.441401][ T9628] usb 7-1: Manufacturer: syz [ 1112.446366][ T9628] usb 7-1: SerialNumber: syz [ 1113.030844][ T9628] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1113.043549][ T9628] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1113.867358][T14755] loop7: detected capacity change from 0 to 4096 [ 1113.997333][T14755] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1114.226291][ T9628] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1114.238692][ T9628] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1114.249305][ T9628] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1114.583742][ T9628] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1114.679709][T14755] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1114.708548][T14755] ntfs3(loop7): ino=19, mi_enum_attr [ 1114.812488][ T9628] usb 7-1: USB disconnect, device number 7 [ 1115.804033][ T30] audit: type=1326 audit(1764907817.311:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.7.2356" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 1116.335450][T14782] loop6: detected capacity change from 0 to 64 [ 1117.758582][T14797] netlink: 860 bytes leftover after parsing attributes in process `syz.7.2361'. [ 1118.784545][ T5892] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1119.045729][ T5892] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1119.055657][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.063797][ T5892] usb 8-1: Product: syz [ 1119.069051][ T5892] usb 8-1: Manufacturer: syz [ 1119.073812][ T5892] usb 8-1: SerialNumber: syz [ 1119.613332][ T5892] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1119.625671][ T5892] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1120.469080][ T5892] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1120.481511][ T5892] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1120.491526][ T5892] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1120.596475][ T5892] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1120.682952][ T5892] usb 8-1: USB disconnect, device number 31 [ 1121.755141][ T30] audit: type=1326 audit(1764907823.261:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14833 comm="syz.7.2371" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 1121.890498][T14840] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1123.002724][ T30] audit: type=1326 audit(1764907824.481:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14846 comm="syz.1.2373" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x0 [ 1123.241784][T14848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.250705][T14848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.463598][T14848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.483381][T14848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.030678][T14852] loop7: detected capacity change from 0 to 4096 [ 1124.090628][T14852] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1124.267347][T14852] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1124.293651][T14852] ntfs3(loop7): ino=19, mi_enum_attr [ 1124.749727][ T61] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.844752][ T9950] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1124.901547][ T61] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.980174][ T4110] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.018570][ T4110] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.058473][ T9950] usb 5-1: Using ep0 maxpacket: 16 [ 1125.121583][ T9950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.132421][ T9950] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 1125.144344][ T9950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1125.154938][ T9950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1125.266907][ T9950] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1125.283017][ T9950] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1125.292027][ T9950] usb 5-1: Manufacturer: syz [ 1125.347450][ T9950] usb 5-1: config 0 descriptor?? [ 1125.504037][T14867] loop1: detected capacity change from 0 to 64 [ 1125.514696][T14867] bfs: Unknown parameter '00000000000000000000' [ 1125.580675][ T9950] usb 5-1: USB disconnect, device number 72 [ 1125.856338][T14867] loop1: detected capacity change from 0 to 4096 [ 1125.884834][T14867] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1126.021893][T14867] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1126.050852][T14867] ntfs3(loop1): ino=19, mi_enum_attr [ 1126.069066][T14867] ntfs3(loop1): failed to convert "c46c" to iso8859-7 [ 1126.078716][T14867] ntfs3(loop1): ino=20, mi_enum_attr [ 1126.154374][ T9950] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1126.421327][ T9950] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1126.430792][ T9950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.439104][ T9950] usb 7-1: Product: syz [ 1126.443355][ T9950] usb 7-1: Manufacturer: syz [ 1126.448180][ T9950] usb 7-1: SerialNumber: syz [ 1127.132326][ T9950] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1127.144893][ T9950] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1127.537955][ T30] audit: type=1326 audit(1764907829.041:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14884 comm="syz.1.2386" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x0 [ 1128.010483][ T9950] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1128.023097][ T9950] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1128.033028][ T9950] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1128.156685][ T9950] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1128.290334][ T9950] usb 7-1: USB disconnect, device number 8 [ 1129.776601][T14193] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1129.792145][T14193] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1129.807253][T14193] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1129.829856][T14193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1129.840441][T14193] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1129.914873][T10304] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1130.216060][T10304] usb 8-1: Using ep0 maxpacket: 16 [ 1130.236180][T10304] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.246631][T10304] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 1130.258384][T10304] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1130.268311][T10304] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1130.364551][T10304] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1130.374856][T10304] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1130.383063][T10304] usb 8-1: Manufacturer: syz [ 1130.479445][T10304] usb 8-1: config 0 descriptor?? [ 1130.562947][T14910] loop4: detected capacity change from 0 to 64 [ 1130.612291][T14910] bfs: Unknown parameter '00000000000000000000' [ 1130.716401][T10304] usb 8-1: USB disconnect, device number 32 [ 1131.589607][T14899] chnl_net:caif_netlink_parms(): no params data found [ 1131.667362][T14910] loop4: detected capacity change from 0 to 4096 [ 1131.758158][T14910] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1131.944497][T10214] Bluetooth: hci4: command tx timeout [ 1132.055074][ T30] audit: type=1326 audit(1764907833.561:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.7.2400" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 1132.507331][T14910] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1132.632757][T14910] ntfs3(loop4): ino=19, mi_enum_attr [ 1132.707510][T14910] ntfs3(loop4): failed to convert "c46c" to iso8859-7 [ 1132.757010][T14935] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2401'. [ 1132.820575][T14910] ntfs3(loop4): ino=20, mi_enum_attr [ 1133.329927][T14899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.337436][T14899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.345285][T14899] bridge_slave_0: entered allmulticast mode [ 1133.354698][T14899] bridge_slave_0: entered promiscuous mode [ 1133.372575][T14899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.380752][T14899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.388758][T14899] bridge_slave_1: entered allmulticast mode [ 1133.541663][T14899] bridge_slave_1: entered promiscuous mode [ 1133.888050][T14899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.994967][T14899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.024410][T10214] Bluetooth: hci4: command tx timeout [ 1134.642460][T14899] team0: Port device team_slave_0 added [ 1134.730697][T14899] team0: Port device team_slave_1 added [ 1135.097301][T14899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.106719][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.133652][T14899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.347435][T14899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.355377][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.381898][T14899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.105366][T14958] Bluetooth: hci4: command tx timeout [ 1136.138296][T14899] hsr_slave_0: entered promiscuous mode [ 1136.146978][T14899] hsr_slave_1: entered promiscuous mode [ 1136.154669][T14899] debugfs: 'hsr0' already exists in 'hsr' [ 1136.160479][T14899] Cannot create hsr debugfs directory [ 1136.349161][T14960] loop7: detected capacity change from 0 to 64 [ 1136.432120][T14960] BFS-fs: bfs_iget(): Bad inode number loop7:00000002 [ 1137.004917][ T9950] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1137.144854][ T30] audit: type=1326 audit(1764907838.631:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.4.2412" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 1137.201444][ T9950] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.213034][ T9950] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1137.291740][ T9950] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1137.301277][ T9950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1137.309559][ T9950] usb 8-1: SerialNumber: syz [ 1137.590039][ T9950] usb 8-1: 0:2 : does not exist [ 1137.595303][ T9950] usb 8-1: unit 5 not found! [ 1137.653456][ T9950] usb 8-1: USB disconnect, device number 33 [ 1137.790587][T14970] loop6: detected capacity change from 0 to 64 [ 1137.849627][T14970] bfs: Unknown parameter '00000000000000000000' [ 1138.034422][T14193] Bluetooth: hci2: command 0x0406 tx timeout [ 1138.036335][T10214] Bluetooth: hci1: command 0x0406 tx timeout [ 1138.184381][T10214] Bluetooth: hci4: command tx timeout [ 1138.500547][T14899] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1138.617394][T14899] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1138.696967][T14899] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1138.714410][T10304] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1138.819294][T14899] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1139.019968][T10304] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1139.029422][T10304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.037782][T10304] usb 2-1: Product: syz [ 1139.042026][T10304] usb 2-1: Manufacturer: syz [ 1139.046793][T10304] usb 2-1: SerialNumber: syz [ 1139.538563][T14970] loop6: detected capacity change from 0 to 4096 [ 1139.785523][T14970] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1139.873103][T10304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1139.888535][T10304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1139.996584][T14980] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1140.582443][T14970] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1140.724730][T10304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1140.739913][T10304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1140.750635][T10304] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1140.760719][T14970] ntfs3(loop6): ino=19, mi_enum_attr [ 1140.993460][T10304] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1141.123888][T10304] usb 2-1: USB disconnect, device number 31 [ 1141.659546][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.487037][T14899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.832883][T14899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.447440][T14899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1143.458164][T14899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1143.536335][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.543853][ T9543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.559298][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.566862][ T9543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.308211][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2426'. [ 1146.137624][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.144378][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.201391][T14899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.569465][T15041] loop1: detected capacity change from 0 to 64 [ 1147.711135][T15041] bfs: Unknown parameter '00000000000000000000' [ 1148.407054][T14899] veth0_vlan: entered promiscuous mode [ 1148.466174][T14899] veth1_vlan: entered promiscuous mode [ 1148.711890][T14899] veth0_macvtap: entered promiscuous mode [ 1148.798761][T14899] veth1_macvtap: entered promiscuous mode [ 1148.968014][T14899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1149.074479][T14899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1149.126523][T15044] loop1: detected capacity change from 0 to 4096 [ 1149.249207][ T8221] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.311280][ T4315] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.370253][ T4315] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.379862][T15044] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1149.457915][ T4315] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.480982][T15052] fuse: Bad value for 'fd' [ 1150.111374][T15044] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1150.315488][T15044] ntfs3(loop1): ino=19, mi_enum_attr [ 1152.872911][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2442'. [ 1154.333210][T15112] fuse: Bad value for 'fd' [ 1157.696469][ T8221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.706641][ T8221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.826766][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.837099][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.066989][T15149] loop1: detected capacity change from 0 to 64 [ 1158.957076][ T5892] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1159.227611][ T5892] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1159.239365][ T5892] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1159.246828][ T5892] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1159.256349][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.363866][ T5892] usb 9-1: config 0 descriptor?? [ 1159.387346][T15151] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1159.984392][ T5892] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 1159.996470][ T5892] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 1160.100557][ T5892] konepure 0003:1E7D:2DBE.0008: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.8-1/input0 [ 1160.228744][ T5892] usb 9-1: USB disconnect, device number 3 [ 1160.674042][T15164] fido_id[15164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1161.078155][T15174] fuse: Bad value for 'fd' [ 1163.549373][T15192] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1163.584607][ T4559] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1163.660628][ T4559] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1163.716297][ T4559] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1163.766326][ T4559] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.573275][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.750032][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.942922][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.144862][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.549291][ T61] bridge_slave_1: left allmulticast mode [ 1168.555411][ T61] bridge_slave_1: left promiscuous mode [ 1168.561937][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.576855][ T61] bridge_slave_0: left allmulticast mode [ 1168.582695][ T61] bridge_slave_0: left promiscuous mode [ 1168.596174][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.597014][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.723415][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.826926][ T61] bond0 (unregistering): Released all slaves [ 1169.895649][T14193] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1169.923597][T14193] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1169.932301][T14193] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1169.948679][T14193] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1169.964896][T14193] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1171.224578][ T61] hsr_slave_0: left promiscuous mode [ 1171.275586][ T61] hsr_slave_1: left promiscuous mode [ 1171.283447][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.291317][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.426799][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.435089][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.568636][T15244] loop4: detected capacity change from 0 to 256 [ 1171.589095][ T61] veth1_macvtap: left promiscuous mode [ 1171.595267][ T61] veth0_macvtap: left promiscuous mode [ 1171.601235][ T61] veth1_vlan: left promiscuous mode [ 1171.606954][ T61] veth0_vlan: left promiscuous mode [ 1171.700925][T15244] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 256) [ 1172.056411][T14193] Bluetooth: hci2: command tx timeout [ 1172.384548][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1172.415288][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1173.458350][T15229] chnl_net:caif_netlink_parms(): no params data found [ 1174.025897][ T61] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.113983][T14193] Bluetooth: hci2: command tx timeout [ 1174.176815][ T61] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.404636][ T61] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.569668][ T61] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.026540][ T61] bridge_slave_1: left allmulticast mode [ 1175.032571][ T61] bridge_slave_1: left promiscuous mode [ 1175.043397][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.148503][ T61] bridge_slave_0: left allmulticast mode [ 1175.156729][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.466609][T15287] loop7: detected capacity change from 0 to 512 [ 1175.619013][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'. [ 1175.651217][T15287] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1175.666996][T15287] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 1175.678756][T15287] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2487: Corrupt directory, running e2fsck is recommended [ 1175.711073][T15290] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2488'. [ 1175.720623][T15290] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2488'. [ 1176.086130][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.188810][T14193] Bluetooth: hci2: command tx timeout [ 1176.199818][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.290278][ T61] bond0 (unregistering): Released all slaves [ 1176.481208][T15287] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1176.491061][T15287] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.2487: corrupted in-inode xattr: invalid ea_ino [ 1176.578736][T15287] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2487: couldn't read orphan inode 15 (err -117) [ 1176.646504][T15287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.769194][T15229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.776916][T15229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.790912][T15229] bridge_slave_0: entered allmulticast mode [ 1176.800833][T15229] bridge_slave_0: entered promiscuous mode [ 1176.816089][T15287] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1176.834833][T15287] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 1176.847172][T15287] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2487: Corrupt directory, running e2fsck is recommended [ 1176.904852][T15287] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.2487: path /184/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1177.035612][T15229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.043113][T15229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.051108][T15229] bridge_slave_1: entered allmulticast mode [ 1177.060575][T15229] bridge_slave_1: entered promiscuous mode [ 1177.145494][T15292] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1177.249461][T15310] loop8: detected capacity change from 0 to 64 [ 1177.476392][T11873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.680806][T15229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.913149][ T61] hsr_slave_0: left promiscuous mode [ 1177.945100][ T61] hsr_slave_1: left promiscuous mode [ 1177.952831][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.962037][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.166953][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.175497][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.237240][ T61] veth1_macvtap: left promiscuous mode [ 1178.242974][ T61] veth0_macvtap: left promiscuous mode [ 1178.249770][ T61] veth1_vlan: left promiscuous mode [ 1178.257057][ T61] veth0_vlan: left promiscuous mode [ 1178.265078][T14193] Bluetooth: hci2: command tx timeout [ 1179.508656][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1179.610882][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1179.920088][T15229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.433948][T15229] team0: Port device team_slave_0 added [ 1180.515490][T15229] team0: Port device team_slave_1 added [ 1180.921359][T15229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.929653][T15229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.956219][T15229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.043474][T15229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.050937][T15229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.077516][T15229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.697922][T15229] hsr_slave_0: entered promiscuous mode [ 1181.700157][T15351] loop7: detected capacity change from 0 to 64 [ 1181.709337][T15229] hsr_slave_1: entered promiscuous mode [ 1183.899614][T15229] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1183.930241][T15229] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1183.975658][T15229] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1184.025701][T15229] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1185.149643][T15229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.316933][T15229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.385430][ T4110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.392886][ T4110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.492342][ T4110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.499895][ T4110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.822554][T15400] loop7: detected capacity change from 0 to 64 [ 1187.364684][T12867] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1187.542740][T15229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.591939][T12867] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1187.723303][T12867] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1187.732741][T12867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1187.741696][T12867] usb 9-1: Product: syz [ 1187.746116][T12867] usb 9-1: Manufacturer: syz [ 1187.750880][T12867] usb 9-1: SerialNumber: syz [ 1188.017893][T12867] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1188.635636][ T5892] usb 9-1: USB disconnect, device number 4 [ 1188.670458][ T5892] usblp0: removed [ 1189.545899][T15456] loop4: detected capacity change from 0 to 64 [ 1190.071328][T15229] veth0_vlan: entered promiscuous mode [ 1190.233852][T15229] veth1_vlan: entered promiscuous mode [ 1190.656183][T15229] veth0_macvtap: entered promiscuous mode [ 1190.735981][T15229] veth1_macvtap: entered promiscuous mode [ 1190.935920][T15229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.052233][T15229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.075947][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2536'. [ 1191.552943][ T9520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.698016][ T9520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.820370][ T9520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.967300][ T9520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.227652][T15515] loop8: detected capacity change from 0 to 64 [ 1199.592900][T15575] loop1: detected capacity change from 0 to 64 [ 1199.766860][ T4559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.774964][ T4559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.022457][ T8221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.034422][ T8221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.949546][T15594] loop8: detected capacity change from 0 to 1024 [ 1201.196628][T15594] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1201.210091][T15594] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1201.437762][T15594] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.2561: lblock 0 mapped to illegal pblock 0 (length 6) [ 1201.483175][T15594] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 1201.496268][T15594] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1201.496268][T15594] [ 1201.565670][T15603] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 8: comm syz.8.2561: lblock 8 mapped to illegal pblock 8 (length 8) [ 1201.590934][ T30] audit: type=1326 audit(1764907903.081:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.7.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1201.613425][ T30] audit: type=1326 audit(1764907903.081:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.7.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1201.644964][T15603] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1201.657992][T15603] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1201.657992][T15603] [ 1201.699565][T15599] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1201.778817][ T30] audit: type=1326 audit(1764907903.191:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.7.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1201.801847][ T30] audit: type=1326 audit(1764907903.191:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.7.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1201.824481][ T30] audit: type=1326 audit(1764907903.191:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.7.2562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1201.981476][ T9950] hid-generic 0005:0006:5508.0009: item fetching failed at offset 0/1 [ 1202.017058][ T9950] hid-generic 0005:0006:5508.0009: probe with driver hid-generic failed with error -22 [ 1202.086488][T14899] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1202.587413][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2565'. [ 1203.479907][T15630] loop1: detected capacity change from 0 to 64 [ 1204.551257][T15640] 9pnet_fd: Insufficient options for proto=fd [ 1204.897259][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2575'. [ 1204.907411][T15650] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2575'. [ 1205.188661][T15650] loop7: detected capacity change from 0 to 512 [ 1205.212137][T15650] journal_path: Non-blockdev passed as './file0' [ 1205.219421][T15650] EXT4-fs: error: could not find journal device path [ 1206.598733][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2580'. [ 1207.587635][T15672] loop4: detected capacity change from 0 to 64 [ 1207.607683][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.614610][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1211.263033][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2594'. [ 1211.411199][ T798] kernel read not supported for file /95/status (pid: 798 comm: kworker/0:2) [ 1211.718573][T15712] loop8: detected capacity change from 0 to 64 [ 1214.807058][ T798] kernel read not supported for file /26/status (pid: 798 comm: kworker/0:2) [ 1215.350124][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 1220.164252][ T798] kernel read not supported for file /111/status (pid: 798 comm: kworker/0:2) [ 1221.145256][T15795] loop4: detected capacity change from 0 to 64 [ 1221.289605][T10214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1221.299071][T10214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1221.312640][T10214] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1221.337998][T10214] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1221.348987][T10214] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1222.205326][T15797] chnl_net:caif_netlink_parms(): no params data found [ 1223.206903][ T11] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1223.384427][T14193] Bluetooth: hci1: command tx timeout [ 1223.424922][ T11] usb 9-1: Using ep0 maxpacket: 16 [ 1223.488901][ T11] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1223.501129][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1223.606497][ T11] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1223.616038][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.624452][ T11] usb 9-1: Product: syz [ 1223.628695][ T11] usb 9-1: Manufacturer: syz [ 1223.633407][ T11] usb 9-1: SerialNumber: syz [ 1223.766594][ T11] usb 9-1: config 0 descriptor?? [ 1223.828359][ T11] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1223.837971][ T11] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1224.433130][ T11] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1224.458479][ T11] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1224.495086][ T798] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1224.761774][ T798] usb 5-1: Using ep0 maxpacket: 16 [ 1224.828515][ T798] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1224.837945][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.846313][ T798] usb 5-1: Product: syz [ 1224.850680][ T798] usb 5-1: Manufacturer: syz [ 1224.855595][ T798] usb 5-1: SerialNumber: syz [ 1224.878827][T15797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.886415][T15797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.894310][T15797] bridge_slave_0: entered allmulticast mode [ 1224.903503][T15797] bridge_slave_0: entered promiscuous mode [ 1224.961260][ T798] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1224.967998][ T798] r8152-cfgselector 5-1: config 0 descriptor?? [ 1225.000368][T15797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.008188][T15797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.020780][T15797] bridge_slave_1: entered allmulticast mode [ 1225.030387][T15797] bridge_slave_1: entered promiscuous mode [ 1225.345605][ T798] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1225.352529][ T798] r8152-cfgselector 5-1: bad CDC descriptors [ 1225.472910][ T798] r8152-cfgselector 5-1: USB disconnect, device number 73 [ 1225.474402][T14193] Bluetooth: hci1: command tx timeout [ 1225.508105][T15797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.639834][ T11] em28xx 9-1:0.0: AC97 vendor ID = 0x00fc4669 [ 1225.712990][T15797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.009611][T15797] team0: Port device team_slave_0 added [ 1226.026847][ T11] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1226.058003][ T11] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1226.069048][ T11] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1226.128584][T15797] team0: Port device team_slave_1 added [ 1226.156009][ T11] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1226.174037][ T11] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1226.224851][ T11] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1226.259070][ T11] usb 9-1: USB disconnect, device number 5 [ 1226.429198][T15797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.437244][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.467802][T15797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.493999][T15797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.501666][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.530716][T15797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.570999][T15840] loop4: detected capacity change from 0 to 64 [ 1227.122166][T15797] hsr_slave_0: entered promiscuous mode [ 1227.130955][T15797] hsr_slave_1: entered promiscuous mode [ 1227.138776][T15797] debugfs: 'hsr0' already exists in 'hsr' [ 1227.145211][T15797] Cannot create hsr debugfs directory [ 1227.310809][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2630'. [ 1227.554399][T14193] Bluetooth: hci1: command tx timeout [ 1228.872449][T15797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1229.075310][T15797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1229.195865][T15797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1229.300004][T15797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1229.643034][T14193] Bluetooth: hci1: command tx timeout [ 1230.008859][T15877] loop8: detected capacity change from 0 to 64 [ 1230.435867][ T798] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1230.656255][ T798] usb 6-1: Using ep0 maxpacket: 16 [ 1230.715699][ T798] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1230.728245][ T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1230.866817][ T798] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1230.876252][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.884617][ T798] usb 6-1: Product: syz [ 1230.888924][ T798] usb 6-1: Manufacturer: syz [ 1230.893606][ T798] usb 6-1: SerialNumber: syz [ 1231.037547][ T798] usb 6-1: config 0 descriptor?? [ 1231.073537][ T798] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1231.083043][ T798] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1231.200169][T15797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.361462][T15797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.440697][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.448160][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.547910][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.555370][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.681592][ T798] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1231.721216][ T798] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1232.786997][ T798] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1232.846213][ T798] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1232.876638][ T798] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1232.908368][ T798] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1232.937591][ T798] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1232.987090][ T798] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1233.046439][ T798] usb 6-1: USB disconnect, device number 14 [ 1233.414043][T15797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.858386][T15797] veth0_vlan: entered promiscuous mode [ 1233.978797][T15797] veth1_vlan: entered promiscuous mode [ 1234.376810][T15797] veth0_macvtap: entered promiscuous mode [ 1234.469951][T15797] veth1_macvtap: entered promiscuous mode [ 1234.584974][ T798] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1234.621091][T15797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.698480][T15797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.795961][ T4110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.864038][ T798] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1234.873731][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.882289][ T798] usb 5-1: Product: syz [ 1234.886800][ T798] usb 5-1: Manufacturer: syz [ 1234.891582][ T798] usb 5-1: SerialNumber: syz [ 1235.010023][ T4110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.097635][ T4110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.206908][ T4110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.520734][ T798] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1235.534399][ T798] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1235.545687][ T798] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1235.680398][ T798] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1237.267957][T15928] loop1: detected capacity change from 0 to 64 [ 1237.548322][ T798] usb 5-1: USB disconnect, device number 74 [ 1237.568861][T15930] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2654'. [ 1238.268366][ T798] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1238.478865][ T798] usb 6-1: Using ep0 maxpacket: 16 [ 1238.560720][ T798] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1238.572843][ T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1238.655547][ T798] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1238.665119][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.673572][ T798] usb 6-1: Product: syz [ 1238.678149][ T798] usb 6-1: Manufacturer: syz [ 1238.682852][ T798] usb 6-1: SerialNumber: syz [ 1238.780015][ T798] usb 6-1: config 0 descriptor?? [ 1238.869668][ T798] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1238.879802][ T798] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1239.468382][ T798] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1239.492876][T15948] loop1: detected capacity change from 0 to 512 [ 1239.524924][ T798] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1239.598380][T15948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1239.883144][T15948] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2657: iget: bad i_size value: 38620345925642 [ 1239.996540][T15948] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2657: couldn't read orphan inode 15 (err -117) [ 1240.170909][T15948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.592061][ T798] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1240.617771][ T798] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1240.659047][ T798] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1240.703799][ T798] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1240.763705][ T798] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1240.827122][ T798] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1240.877627][ T798] usb 6-1: USB disconnect, device number 15 [ 1242.201887][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.210416][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.324418][ T798] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1242.375775][ T3759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.383722][ T3759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.579739][ T798] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1242.590417][ T798] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.599165][ T798] usb 9-1: Product: syz [ 1242.603578][ T798] usb 9-1: Manufacturer: syz [ 1242.608592][ T798] usb 9-1: SerialNumber: syz [ 1242.911537][T12933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.060970][ T798] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1243.073397][ T798] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1243.084249][ T798] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1243.200374][ T798] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1244.845434][ T798] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1245.071422][ T798] usb 5-1: config 54 has an invalid interface number: 154 but max is 0 [ 1245.083902][ T798] usb 5-1: config 54 has no interface number 0 [ 1245.147428][ T798] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1245.158004][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.166481][ T798] usb 5-1: Product: syz [ 1245.170820][ T798] usb 5-1: Manufacturer: syz [ 1245.175668][ T798] usb 5-1: SerialNumber: syz [ 1245.467183][ T11] usb 9-1: USB disconnect, device number 6 [ 1245.639804][ T798] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1245.640594][ T3759] usb 5-1: Failed to submit usb control message: -71 [ 1245.657464][ T3759] usb 5-1: unable to send the bmi data to the device: -71 [ 1245.665398][ T3759] usb 5-1: unable to get target info from device [ 1245.671921][ T3759] usb 5-1: could not get target info (-71) [ 1245.673606][ T798] usb 5-1: USB disconnect, device number 75 [ 1245.678073][ T3759] usb 5-1: could not probe fw (-71) [ 1245.701296][ T9628] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1245.994431][ T9628] usb 2-1: Using ep0 maxpacket: 16 [ 1246.135983][ T9628] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1246.147871][ T9628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1246.574994][ T9628] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1246.589127][ T9628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.598401][ T9628] usb 2-1: Product: syz [ 1246.602748][ T9628] usb 2-1: Manufacturer: syz [ 1246.607667][ T9628] usb 2-1: SerialNumber: syz [ 1246.953916][ T9628] usb 2-1: config 0 descriptor?? [ 1246.984601][ T9628] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1246.994178][ T9628] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1247.649983][ T9628] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1247.684824][ T9628] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1248.815450][ T9628] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1248.824858][ T9628] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1248.954677][ T9628] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1249.038125][ T9628] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1249.096613][ T9628] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1249.196996][ T9628] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1249.461273][ T9628] usb 2-1: USB disconnect, device number 32 [ 1250.447780][ T798] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1250.907995][ T798] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1250.920883][ T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.930373][ T798] usb 2-1: Product: syz [ 1250.934760][ T798] usb 2-1: Manufacturer: syz [ 1250.939449][ T798] usb 2-1: SerialNumber: syz [ 1251.357793][ T798] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1251.370715][ T798] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1251.381435][ T798] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1251.487626][ T798] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1251.885395][ T798] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1252.106405][ T798] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 1252.115123][ T798] usb 1-1: config 54 has no interface number 0 [ 1252.160929][ T798] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1252.170475][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.179030][ T798] usb 1-1: Product: syz [ 1252.183369][ T798] usb 1-1: Manufacturer: syz [ 1252.188458][ T798] usb 1-1: SerialNumber: syz [ 1252.498252][ T798] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1252.525870][T15837] usb 1-1: Failed to submit usb control message: -71 [ 1252.532933][T15837] usb 1-1: unable to send the bmi data to the device: -71 [ 1252.540903][T15837] usb 1-1: unable to get target info from device [ 1252.547452][T15837] usb 1-1: could not get target info (-71) [ 1252.553452][T15837] usb 1-1: could not probe fw (-71) [ 1252.553558][ T798] usb 1-1: USB disconnect, device number 32 [ 1253.342449][ T798] usb 2-1: USB disconnect, device number 33 [ 1254.187789][ T9628] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1254.404510][ T9628] usb 2-1: Using ep0 maxpacket: 16 [ 1254.451137][ T9628] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1254.463117][ T9628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1254.596040][ T9628] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1254.606366][ T9628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.614830][ T9628] usb 2-1: Product: syz [ 1254.619169][ T9628] usb 2-1: Manufacturer: syz [ 1254.623927][ T9628] usb 2-1: SerialNumber: syz [ 1254.767425][ T9628] usb 2-1: config 0 descriptor?? [ 1254.792617][ T9628] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1254.802260][ T9628] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1255.430606][ T9628] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1255.504511][ T9628] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1255.713958][T10214] Bluetooth: hci4: command 0x0406 tx timeout [ 1255.894568][T16104] ===================================================== [ 1255.902010][T16104] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9ac/0xa30 [ 1255.909804][T16104] ieee802154_hdr_push+0x9ac/0xa30 [ 1255.915228][T16104] ieee802154_header_create+0x854/0xb90 [ 1255.920951][T16104] dgram_sendmsg+0xb40/0x16d0 [ 1255.926150][T16104] ieee802154_sock_sendmsg+0x92/0xd0 [ 1255.931564][T16104] __sock_sendmsg+0x333/0x3d0 [ 1255.941395][T16104] ____sys_sendmsg+0x7f5/0xcf0 [ 1255.946487][T16104] ___sys_sendmsg+0x271/0x3b0 [ 1255.951332][T16104] __sys_sendmsg+0x1aa/0x300 [ 1255.956245][T16104] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1255.961953][T16104] ia32_sys_call+0x35f2/0x4340 [ 1255.966957][T16104] __do_fast_syscall_32+0x155/0x310 [ 1255.972358][T16104] do_fast_syscall_32+0x38/0x80 [ 1255.977579][T16104] do_SYSENTER_32+0x1f/0x30 [ 1255.982217][T16104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1255.988977][T16104] [ 1255.991372][T16104] Uninit was stored to memory at: [ 1255.997037][T16104] ieee802154_hdr_push+0x9a5/0xa30 [ 1256.002296][T16104] ieee802154_header_create+0x854/0xb90 [ 1256.008156][T16104] dgram_sendmsg+0xb40/0x16d0 [ 1256.013045][T16104] ieee802154_sock_sendmsg+0x92/0xd0 [ 1256.018632][T16104] __sock_sendmsg+0x333/0x3d0 [ 1256.023441][T16104] ____sys_sendmsg+0x7f5/0xcf0 [ 1256.028575][T16104] ___sys_sendmsg+0x271/0x3b0 [ 1256.033455][T16104] __sys_sendmsg+0x1aa/0x300 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1256.043717][T16104] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1256.049653][T16104] ia32_sys_call+0x35f2/0x4340 [ 1256.054770][T16104] __do_fast_syscall_32+0x155/0x310 [ 1256.064307][T16104] do_fast_syscall_32+0x38/0x80 [ 1256.069313][T16104] do_SYSENTER_32+0x1f/0x30 [ 1256.074026][T16104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1256.080724][T16104] [ 1256.083111][T16104] Local variable hdr created at: [ 1256.088251][T16104] ieee802154_header_create+0x4e/0xb90 [ 1256.093929][T16104] dgram_sendmsg+0xb40/0x16d0 [ 1256.098849][T16104] [ 1256.101223][T16104] CPU: 0 UID: 0 PID: 16104 Comm: syz.0.2698 Tainted: G W L syzkaller #0 PREEMPT(none) [ 1256.112478][T16104] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1256.118084][T16104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1256.128438][T16104] ===================================================== [ 1256.135579][T16104] Disabling lock debugging due to kernel taint [ 1256.144823][T16104] Kernel panic - not syncing: kmsan.panic set ... [ 1256.151440][T16104] CPU: 0 UID: 0 PID: 16104 Comm: syz.0.2698 Tainted: G B W L syzkaller #0 PREEMPT(none) [ 1256.162553][T16104] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1256.169030][T16104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1256.179167][T16104] Call Trace: [ 1256.182518][T16104] [ 1256.185727][T16104] __dump_stack+0x26/0x30 [ 1256.190244][T16104] dump_stack_lvl+0x53/0x270 [ 1256.195000][T16104] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1256.200998][T16104] dump_stack+0x1e/0x25 [ 1256.205307][T16104] vpanic+0x435/0xd30 [ 1256.209466][T16104] panic+0x15d/0x160 [ 1256.213581][T16104] kmsan_report+0x31c/0x320 [ 1256.218230][T16104] ? stack_depot_save+0x12/0x20 [ 1256.223207][T16104] ? __msan_warning+0x1b/0x30 [ 1256.228106][T16104] ? ieee802154_hdr_push+0x9ac/0xa30 [ 1256.233567][T16104] ? ieee802154_header_create+0x854/0xb90 [ 1256.239468][T16104] ? dgram_sendmsg+0xb40/0x16d0 [ 1256.244439][T16104] ? ieee802154_sock_sendmsg+0x92/0xd0 [ 1256.250062][T16104] ? __sock_sendmsg+0x333/0x3d0 [ 1256.255058][T16104] ? ____sys_sendmsg+0x7f5/0xcf0 [ 1256.260150][T16104] ? ___sys_sendmsg+0x271/0x3b0 [ 1256.265320][T16104] ? __sys_sendmsg+0x1aa/0x300 [ 1256.270234][T16104] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1256.276209][T16104] ? ia32_sys_call+0x35f2/0x4340 [ 1256.281281][T16104] ? __do_fast_syscall_32+0x155/0x310 [ 1256.286773][T16104] ? do_fast_syscall_32+0x38/0x80 [ 1256.291898][T16104] ? do_SYSENTER_32+0x1f/0x30 [ 1256.296696][T16104] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1256.303374][T16104] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1256.310150][T16104] ? kmsan_get_metadata+0xfb/0x160 [ 1256.315417][T16104] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1256.321892][T16104] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1256.328098][T16104] ? kmsan_get_metadata+0xfb/0x160 [ 1256.333381][T16104] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1256.339781][T16104] ? kmsan_get_metadata+0xfb/0x160 [ 1256.345095][T16104] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1256.351601][T16104] ? kmsan_get_metadata+0xfb/0x160 [ 1256.356891][T16104] __msan_warning+0x1b/0x30 [ 1256.361636][T16104] ieee802154_hdr_push+0x9ac/0xa30 [ 1256.367003][T16104] ? nfcmrvl_usb_nci_send+0x62/0xb30 [ 1256.372482][T16104] ? __msan_memcpy+0x108/0x1c0 [ 1256.377422][T16104] ieee802154_header_create+0x854/0xb90 [ 1256.383253][T16104] ? kmsan_get_metadata+0xfb/0x160 [ 1256.388534][T16104] ? __pfx_ieee802154_header_create+0x10/0x10 [ 1256.394773][T16104] dgram_sendmsg+0xb40/0x16d0 [ 1256.399705][T16104] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1256.404933][T16104] ieee802154_sock_sendmsg+0x92/0xd0 [ 1256.410355][T16104] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1256.416506][T16104] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1256.422649][T16104] __sock_sendmsg+0x333/0x3d0 [ 1256.427461][T16104] ____sys_sendmsg+0x7f5/0xcf0 [ 1256.432453][T16104] ___sys_sendmsg+0x271/0x3b0 [ 1256.437325][T16104] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1256.443313][T16104] ? __rcu_read_unlock+0x6d/0xd0 [ 1256.448489][T16104] ? __fget_files+0x3b4/0x4a0 [ 1256.453434][T16104] ? __fget_files+0x3b9/0x4a0 [ 1256.458309][T16104] ? kmsan_get_metadata+0xfb/0x160 [ 1256.463575][T16104] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1256.469560][T16104] __sys_sendmsg+0x1aa/0x300 [ 1256.474408][T16104] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1256.480147][T16104] ia32_sys_call+0x35f2/0x4340 [ 1256.485018][T16104] __do_fast_syscall_32+0x155/0x310 [ 1256.490377][T16104] do_fast_syscall_32+0x38/0x80 [ 1256.495386][T16104] do_SYSENTER_32+0x1f/0x30 [ 1256.500030][T16104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1256.506513][T16104] RIP: 0023:0xf7fb2539 [ 1256.510778][T16104] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1256.530511][T16104] RSP: 002b:00000000f548555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1256.539076][T16104] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000080000040 [ 1256.547158][T16104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1256.555246][T16104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1256.563322][T16104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1256.571386][T16104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1256.579484][T16104] [ 1256.583062][T16104] Kernel Offset: disabled [ 1256.587456][T16104] Rebooting in 86400 seconds..