last executing test programs: 17.189650022s ago: executing program 0 (id=628): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x5b23, 0x0) 15.104173395s ago: executing program 4 (id=633): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090480000003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB='@`\x00\b\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.501910076s ago: executing program 2 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 12.466376109s ago: executing program 4 (id=640): r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdr={0x0, 0x15, 0x800, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x20, 0xff, r1}, [@IFA_LOCAL={0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x700, 0x700, 0xce35, 0xa0b, {{0x31, 0x4, 0x1, 0x26, 0xc4, 0x66, 0x0, 0xff, 0x2f, 0x0, @multicast1, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xec, [@loopback, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, @loopback]}, @generic={0x44, 0x12, "0da2328f75c1623fdbaf104175492e40"}, @end, @cipso={0x86, 0x43, 0x3, [{0x2, 0xd, "e1c554988d66ccc6bf7963"}, {0x0, 0x5, "120685"}, {0x1, 0xd, "79feeb477d5979c81425d0"}, {0x0, 0x12, "348ee47a84b28505e2325da3fa447c07"}, {0x6, 0x4, '\b%'}, {0x1, 0x8, "7dc2e4214384"}]}, @ssrr={0x89, 0x1f, 0x6b, [@dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @remote, @remote, @local]}, @timestamp_prespec={0x44, 0x1c, 0x9d, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x8b7}, {@multicast2, 0xfffffffb}, {@multicast2, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f0000000840)={0xac, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x9ade}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xa42a}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) 12.321593222s ago: executing program 0 (id=642): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="1a010300000000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x0, 0x1a, 0x7, "4f8ed0534ebbe3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.3678151s ago: executing program 2 (id=643): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x80000000, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/233, 0xe9}], 0x1, &(0x7f0000000600), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000180)={@empty, 0x1}}) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0xfffffffffffffdeb, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x31, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x51, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) 11.316979685s ago: executing program 4 (id=644): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x4000}}], 0x1, 0x0) 10.907183763s ago: executing program 4 (id=646): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5511, &(0x7f0000006b80)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e5000007"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) 9.347184116s ago: executing program 1 (id=650): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) 8.54823506s ago: executing program 0 (id=651): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090480000003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 8.545326181s ago: executing program 2 (id=652): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x5b23, 0x0) 7.89928223s ago: executing program 3 (id=653): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5bacabb8d965689422588ee102d6a6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80cee51e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf44c92026b5be1ad6933ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b6", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r1}, 0x50) unlink(&(0x7f0000000100)='./file0/file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0xb) 7.614480247s ago: executing program 3 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x94}}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 5.035191855s ago: executing program 4 (id=655): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdr={0x0, 0x15, 0x800, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x20, 0xff, r6}, [@IFA_LOCAL={0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x700, 0x700, 0xce35, 0xa0b, {{0x31, 0x4, 0x1, 0x26, 0xc4, 0x66, 0x0, 0xff, 0x2f, 0x0, @multicast1, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xec, [@loopback, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, @loopback]}, @generic={0x44, 0x12, "0da2328f75c1623fdbaf104175492e40"}, @end, @cipso={0x86, 0x43, 0x3, [{0x2, 0xd, "e1c554988d66ccc6bf7963"}, {0x0, 0x5, "120685"}, {0x1, 0xd, "79feeb477d5979c81425d0"}, {0x0, 0x12, "348ee47a84b28505e2325da3fa447c07"}, {0x6, 0x4, '\b%'}, {0x1, 0x8, "7dc2e4214384"}]}, @ssrr={0x89, 0x1f, 0x6b, [@dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @remote, @remote, @local]}, @timestamp_prespec={0x44, 0x1c, 0x9d, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x8b7}, {@multicast2, 0xfffffffb}, {@multicast2, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f0000000840)={0xac, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x9ade}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xa42a}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x2182842, 0x0, 0x0, 0x0, &(0x7f0000000380)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42000, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) 4.973493721s ago: executing program 0 (id=656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x0) 4.973171441s ago: executing program 2 (id=657): sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x4004090) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'xfrm0\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x7fe5) sendmsg$inet(r2, 0x0, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, r4}) 4.968959101s ago: executing program 3 (id=658): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000000)=""/140, 0x42, 0x8c, 0x1, 0x0, 0x0, @void, @value}, 0x28) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='|', 0x1}], 0x1, 0x0) 4.747816462s ago: executing program 0 (id=659): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1a, 0x0, 0x20004d}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000900)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) syz_clone3(&(0x7f0000000b40)={0x40080000, &(0x7f0000000240), &(0x7f0000000440), &(0x7f0000000940), {0x1d}, &(0x7f0000000980)=""/211, 0xd3, &(0x7f0000000a80)=""/128, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0006, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@bsdgroups}, {@data_err_ignore}, {@usrjquota}]}, 0xf6, 0x43e, &(0x7f00000004c0)="$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") add_key(0x0, 0x0, &(0x7f00000001c0)="f480", 0x2, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000795000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) 4.646773961s ago: executing program 1 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c00"], 0x20}}, 0x0) 4.645808341s ago: executing program 2 (id=661): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000003, &(0x7f0000000040), 0x41, 0x4d1, &(0x7f0000001440)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0x2b0) mlock(&(0x7f000069f000/0x2000)=nil, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.427170461s ago: executing program 1 (id=662): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) socket(0x10, 0x803, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) unshare(0x62040200) 3.427306503s ago: executing program 3 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x2804000, &(0x7f0000000080)=ANY=[], 0x1, 0x33c, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xa00}, {0x65, 0x0, 0x5}}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x4, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 3.426806833s ago: executing program 2 (id=664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe75) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020ae46, &(0x7f0000001180)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) 2.211664016s ago: executing program 3 (id=665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) 1.40697797s ago: executing program 4 (id=666): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090480000003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.330249757s ago: executing program 3 (id=667): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setlease(r0, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) open(0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private=0xfffd}}}}) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r9 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.275939942s ago: executing program 0 (id=668): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x5b23, 0x0) 163.485545ms ago: executing program 1 (id=669): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x0) 103.618171ms ago: executing program 1 (id=670): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) utime(&(0x7f0000000200)='./file0\x00', 0x0) 0s ago: executing program 1 (id=671): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="12f8a2b2236d539f42b67e083fcd9b5de2cb490c038d25210290c4cc3afacede0f7d823ef5968c9a", 0x28}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) kernel console output (not intermixed with test programs): 112.637797][ T26] audit: type=1326 audit(1727419716.416:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4299 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672af7df39 code=0x7ffc0000 [ 112.666136][ T26] audit: type=1326 audit(1727419716.426:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4299 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f672af7c8d0 code=0x7ffc0000 [ 112.667843][ T3758] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.789333][ T4304] binder: 4303:4304 ioctl c0306201 0 returned -14 [ 112.952299][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.089678][ T4312] kernel profiling enabled (shift: 17) [ 113.242585][ T3682] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 113.324032][ T3682] usb 1-1: config 0 has no interface number 0 [ 113.663285][ T27] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 113.672202][ T27] usb 2-1: config 0 has no interface number 0 [ 113.678345][ T27] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 113.692201][ T3682] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 113.732034][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.743157][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.769707][ T3682] usb 1-1: config 0 descriptor?? [ 113.777543][ T27] usb 2-1: config 0 descriptor?? [ 114.084663][ T27] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 114.093816][ T3682] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 114.111428][ T4323] device vlan2 entered promiscuous mode [ 114.117051][ T4323] device veth0_to_hsr entered promiscuous mode [ 114.892880][ T4323] device veth0_to_hsr left promiscuous mode [ 115.335840][ T4334] kvm [4333]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x3355 [ 115.355475][ T4309] loop3: detected capacity change from 0 to 40427 [ 115.371438][ T4334] kvm [4333]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x2033 [ 115.387517][ T4309] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 115.771605][ T4352] input: syz0 as /devices/virtual/input/input8 [ 116.125769][ T3682] usb 1-1: USB disconnect, device number 4 [ 116.136466][ T27] usb 2-1: USB disconnect, device number 3 [ 116.762561][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 117.389901][ T4380] netlink: 84 bytes leftover after parsing attributes in process `syz.4.157'. [ 117.470401][ T4380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.157'. [ 118.586182][ T4397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 124.288551][ T4433] loop3: detected capacity change from 0 to 40427 [ 126.682142][ C0] sched: RT throttling activated [ 127.122448][ T3629] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.423162][ T4498] binder_alloc: 4494: binder_alloc_buf, no vma [ 127.495931][ T3629] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 127.510655][ T4500] loop4: detected capacity change from 0 to 256 [ 127.511737][ T3629] usb 2-1: config 0 has no interface number 0 [ 127.528072][ T3629] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 127.537670][ T3629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.566480][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 127.566496][ T26] audit: type=1804 audit(1727419731.456:104): pid=4500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.194" name="/newroot/41/file1/file0" dev="loop4" ino=1048600 res=1 errno=0 [ 127.624523][ T3629] usb 2-1: config 0 descriptor?? [ 127.798869][ T4493] loop2: detected capacity change from 0 to 40427 [ 127.808442][ T4493] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 127.819722][ T3629] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 127.822295][ T4493] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 127.843958][ T4493] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 127.901885][ T4493] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 127.909052][ T4493] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.973553][ T4510] syz.2.193: attempt to access beyond end of device [ 127.973553][ T4510] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 129.014468][ T3638] syz-executor: attempt to access beyond end of device [ 129.014468][ T3638] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 130.713592][ T3638] syz-executor: attempt to access beyond end of device [ 130.713592][ T3638] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 130.861533][ T3629] usb 2-1: USB disconnect, device number 4 [ 131.644793][ T4510] syz.2.193: attempt to access beyond end of device [ 131.644793][ T4510] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.892447][ T4478] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.188944][ T4550] loop4: detected capacity change from 0 to 128 [ 132.378580][ T26] audit: type=1800 audit(1727419736.176:105): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.208" name="bus" dev="loop4" ino=1048602 res=0 errno=0 [ 132.496074][ T4466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.757342][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.764162][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.807043][ T4478] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 132.816791][ T4478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.824952][ T4478] usb 4-1: Product: syz [ 132.831125][ T4478] usb 4-1: Manufacturer: syz [ 132.835832][ T4478] usb 4-1: SerialNumber: syz [ 132.852928][ T4478] usb 4-1: config 0 descriptor?? [ 132.871779][ T4466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.935624][ T4466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.110687][ T4466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.215395][ T4566] xt_hashlimit: size too large, truncated to 1048576 [ 134.271075][ T4478] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 134.279139][ T4478] usb 4-1: Firmware version (0.0) predates our first public release. [ 134.302169][ T4478] usb 4-1: Please update to version 0.2 or newer [ 135.047605][ T4478] usb 4-1: USB disconnect, device number 4 [ 135.525677][ T3653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.537858][ T3653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.547440][ T3653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.556431][ T3653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.564343][ T3653] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 135.571626][ T3653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.602435][ T3653] Bluetooth: hci0: command tx timeout [ 137.896315][ T4596] loop1: detected capacity change from 0 to 256 [ 137.925306][ T4594] device syzkaller0 entered promiscuous mode [ 137.957215][ T4596] exfat: Deprecated parameter 'namecase' [ 138.045195][ T4596] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 139.700604][ T3653] Bluetooth: hci0: command tx timeout [ 140.828601][ T3629] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.073411][ T3629] usb 2-1: Using ep0 maxpacket: 32 [ 141.110104][ T4625] loop0: detected capacity change from 0 to 4096 [ 141.117575][ T4625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.162715][ T4625] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 141.195440][ T3629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 141.206852][ T3629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 141.220630][ T3629] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 141.229538][ T4625] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #15: comm syz.0.226: corrupted inode contents [ 141.232408][ T4625] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #15: comm syz.0.226: mark_inode_dirty error [ 141.245111][ T3629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.271833][ T4625] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #15: comm syz.0.226: corrupted inode contents [ 141.286150][ T4625] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.226: mark_inode_dirty error [ 141.296120][ T3629] usb 2-1: config 0 descriptor?? [ 141.298170][ T4625] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #15: comm syz.0.226: corrupted inode contents [ 141.315587][ T4625] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.226: mark_inode_dirty error [ 141.327825][ T4614] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.348240][ T4625] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #15: comm syz.0.226: corrupted inode contents [ 141.368689][ T3629] hub 2-1:0.0: USB hub found [ 141.380765][ T4625] EXT4-fs error (device loop0): ext4_truncate:4311: inode #15: comm syz.0.226: mark_inode_dirty error [ 141.397493][ T4625] EXT4-fs error (device loop0) in ext4_setattr:5625: Corrupt filesystem [ 141.431998][ T4628] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #15: comm syz.0.226: corrupted inode contents [ 141.543937][ T3641] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 141.572452][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 141.582362][ T3629] hub 2-1:0.0: 2 ports detected [ 141.762653][ T3653] Bluetooth: hci0: command tx timeout [ 142.212272][ T3629] hub 2-1:0.0: set hub depth failed [ 142.270094][ T3629] usb 2-1: USB disconnect, device number 5 [ 143.399483][ T4580] chnl_net:caif_netlink_parms(): no params data found [ 143.542243][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.842601][ T3650] Bluetooth: hci0: command tx timeout [ 144.036029][ T4662] loop3: detected capacity change from 0 to 256 [ 144.078720][ T4662] exfat: Deprecated parameter 'namecase' [ 144.092909][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.110373][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.122373][ T22] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 144.141669][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.145335][ T4580] device bridge_slave_0 entered promiscuous mode [ 144.168208][ T4662] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 144.172065][ T22] usb 1-1: Product: syz [ 144.212219][ T22] usb 1-1: Manufacturer: syz [ 144.227120][ T22] usb 1-1: SerialNumber: syz [ 144.236036][ T4634] loop1: detected capacity change from 0 to 40427 [ 144.259168][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.269479][ T22] usb 1-1: config 0 descriptor?? [ 144.275157][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.291158][ T4580] device bridge_slave_1 entered promiscuous mode [ 144.304685][ T4634] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 144.392374][ T4634] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.450406][ T4580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.547131][ T4634] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.823122][ T22] usb 1-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 145.019495][ T4580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.058753][ T4634] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 145.082191][ T4634] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.092736][ T22] usb 1-1: failed to fetch extended address, random address set [ 146.256258][ T4580] team0: Port device team_slave_0 added [ 146.288429][ T22] usb 1-1: USB disconnect, device number 5 [ 146.543106][ T4466] device hsr_slave_0 left promiscuous mode [ 146.824897][ T4466] device hsr_slave_1 left promiscuous mode [ 147.027378][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.197466][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.223134][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.315572][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.391360][ T4466] device bridge_slave_1 left promiscuous mode [ 147.414360][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.438611][ T4691] kvm [4688]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x79c3 [ 147.455213][ T4466] device bridge_slave_0 left promiscuous mode [ 147.461582][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.488815][ T4698] loop4: detected capacity change from 0 to 512 [ 147.650719][ T4466] device veth1_macvtap left promiscuous mode [ 147.691015][ T4466] device veth0_macvtap left promiscuous mode [ 147.868820][ T4466] device veth1_vlan left promiscuous mode [ 147.952364][ T4466] device veth0_vlan left promiscuous mode [ 148.480400][ T4698] EXT4-fs (loop4): Test dummy encryption mode enabled [ 148.519071][ T4698] EXT4-fs error (device loop4): __ext4_iget:5055: inode #11: block 1: comm syz.4.238: invalid block [ 148.548186][ T4698] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.238: couldn't read orphan inode 11 (err -117) [ 148.612699][ T4698] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.804556][ T4713] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 149.813406][ T4713] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.238: Directory hole found for htree leaf block 0 [ 149.931294][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 150.012765][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 150.051019][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.092649][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.274753][ T4478] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.484340][ T4466] bond0 (unregistering): Released all slaves [ 150.545943][ T4580] team0: Port device team_slave_1 added [ 150.654376][ T4580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.693207][ T4580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.732608][ T4580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.758410][ T4580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.765906][ T4478] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 150.786525][ T4478] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.804718][ T4580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.950406][ T4478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.961659][ T4580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.046544][ T4580] device hsr_slave_0 entered promiscuous mode [ 151.051714][ T3652] EXT4-fs (loop4): unmounting filesystem. [ 151.120294][ T4580] device hsr_slave_1 entered promiscuous mode [ 151.498269][ T4580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.585459][ T4580] Cannot create hsr debugfs directory [ 152.008066][ T4478] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 152.025696][ T4478] usb 2-1: USB disconnect, device number 6 [ 152.102316][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.248171][ T4740] loop1: detected capacity change from 0 to 512 [ 152.394427][ T3629] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 152.485701][ T4740] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 152.497192][ T4740] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 152.537295][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 152.677052][ T22] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.047546][ T22] usb 1-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=dd.2d [ 153.365647][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.384957][ T22] usb 1-1: Product: syz [ 153.563823][ T22] usb 1-1: Manufacturer: syz [ 153.569082][ T22] usb 1-1: SerialNumber: syz [ 153.586653][ T22] usb 1-1: config 0 descriptor?? [ 153.599481][ T4740] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.248: Directory hole found for htree leaf block 0 [ 153.688682][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 153.722687][ T3629] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 153.768667][ T3629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.817470][ T3629] usb 5-1: Product: syz [ 153.821689][ T3629] usb 5-1: Manufacturer: syz [ 153.849593][ T3629] usb 5-1: SerialNumber: syz [ 153.871591][ T3629] usb 5-1: config 0 descriptor?? [ 153.889362][ T3684] usb 1-1: USB disconnect, device number 6 [ 154.021717][ T3874] EXT4-fs (loop1): unmounting filesystem. [ 154.038572][ T4580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.112497][ T4580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.133601][ T4580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.150479][ T4580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.912343][ T3629] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 155.152501][ T3629] usb 5-1: failed to fetch extended address, random address set [ 155.545302][ T3629] usb 5-1: USB disconnect, device number 3 [ 155.957201][ T4580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.022024][ T4580] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.045281][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.090144][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.135366][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.165490][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.227409][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.234625][ T4083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.302641][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.338348][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.347412][ T4083] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.354571][ T4083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.461321][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.063490][ T4793] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 157.072310][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.073330][ T4793] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 157.117416][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.155208][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.207239][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.233486][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.257651][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.275775][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.313698][ T4580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.352277][ T4580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.392204][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.408030][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.416890][ T3629] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.444024][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.487888][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.538022][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.049516][ T3629] usb 5-1: device descriptor read/64, error -71 [ 158.483587][ T3629] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.672309][ T3629] usb 5-1: device descriptor read/64, error -71 [ 158.688969][ T4819] binder_alloc: 4817: binder_alloc_buf, no vma [ 158.721824][ T4784] loop3: detected capacity change from 0 to 40427 [ 158.732509][ T3684] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.775065][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.789120][ T4784] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 158.792069][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.803959][ T3629] usb usb5-port1: attempt power cycle [ 158.820331][ T4784] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 158.835540][ T4580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.866102][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.872542][ T4784] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 158.885927][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.918545][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.943285][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.963512][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.973965][ T3684] usb 1-1: Using ep0 maxpacket: 8 [ 159.004003][ T4082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.022562][ T4580] device veth0_vlan entered promiscuous mode [ 159.047236][ T4580] device veth1_vlan entered promiscuous mode [ 159.093894][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.098788][ T4580] device veth0_macvtap entered promiscuous mode [ 159.126095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.134976][ T3684] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.148506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.178340][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.189414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.220008][ T3684] usb 1-1: config 0 descriptor?? [ 159.235019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.274388][ T4580] device veth1_macvtap entered promiscuous mode [ 159.286841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.296801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.318884][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.380707][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.422256][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.444253][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.462163][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.482252][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.484912][ T3684] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 159.505700][ T4580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.527702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.543350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.571933][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.583092][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.592894][ T3629] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 159.600952][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.613405][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.652179][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.681428][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.706766][ T4580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.727269][ T4580] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.736415][ T4580] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.745620][ T3629] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.754759][ T4580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.764168][ T4580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.784412][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.796280][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.440067][ T27] usb 1-1: USB disconnect, device number 7 [ 160.762385][ T27] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 160.785557][ T4083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.806442][ T4083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.814630][ T3629] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 160.857941][ T3629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.877623][ T3629] usb 5-1: Product: syz [ 160.884005][ T3629] usb 5-1: Manufacturer: syz [ 160.885122][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.893348][ T3629] usb 5-1: SerialNumber: syz [ 160.929015][ T3629] usb 5-1: config 0 descriptor?? [ 160.934919][ T3799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.958485][ T3799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.025222][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.338748][ T4876] netlink: 84 bytes leftover after parsing attributes in process `syz.2.215'. [ 161.855276][ T4876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 162.244720][ T3629] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 162.342324][ T3629] usb 5-1: failed to fetch extended address, random address set [ 162.472225][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.520338][ T3629] usb 5-1: USB disconnect, device number 7 [ 162.663901][ T27] usb 2-1: device descriptor read/64, error -71 [ 162.962786][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.127660][ T4919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 163.842728][ T27] usb 2-1: device descriptor read/64, error -71 [ 163.849077][ T26] audit: type=1326 audit(1727419767.716:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 163.879095][ T26] audit: type=1326 audit(1727419767.746:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f860d37c8d0 code=0x7ffc0000 [ 163.902976][ T26] audit: type=1326 audit(1727419767.746:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 163.962487][ T27] usb usb2-port1: attempt power cycle [ 164.027974][ T26] audit: type=1326 audit(1727419767.746:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 164.077790][ T26] audit: type=1326 audit(1727419767.776:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 164.122409][ T946] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 164.143877][ T26] audit: type=1326 audit(1727419767.776:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 164.192334][ T26] audit: type=1326 audit(1727419768.036:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 164.230022][ T4935] loop2: detected capacity change from 0 to 2048 [ 164.243464][ T26] audit: type=1326 audit(1727419768.056:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 164.282536][ T3684] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.296691][ T4935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 164.405064][ T26] audit: type=1326 audit(1727419768.296:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 164.456631][ T26] audit: type=1326 audit(1727419768.316:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 164.512760][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.513981][ T946] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 164.545438][ T3684] usb 4-1: Using ep0 maxpacket: 8 [ 164.551214][ T946] usb 5-1: config 0 has no interface number 0 [ 164.559014][ T946] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 164.572734][ T946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.662663][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.683891][ T27] usb 2-1: device descriptor read/8, error -71 [ 165.402793][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.406816][ T946] usb 5-1: config 0 descriptor?? [ 165.442560][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.490929][ T3684] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 165.532783][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.562281][ T27] usb 2-1: device descriptor read/8, error -71 [ 165.586366][ T4580] EXT4-fs (loop2): unmounting filesystem. [ 165.601383][ T3684] usb 4-1: config 0 descriptor?? [ 165.612290][ T946] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 165.634452][ T4954] netlink: 84 bytes leftover after parsing attributes in process `syz.1.290'. [ 165.693113][ T27] usb usb2-port1: unable to enumerate USB device [ 165.711877][ T4954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 165.744487][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 165.872416][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.890685][ T3684] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 165.893578][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 165.953143][ T22] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 165.963753][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.018563][ T22] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 166.232314][ T3681] usb 1-1: USB disconnect, device number 8 [ 166.292410][ T3684] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 166.482673][ T3684] usb 2-1: device descriptor read/64, error -71 [ 166.512283][ T946] usb 5-1: USB disconnect, device number 8 [ 166.720036][ T3629] usb 4-1: USB disconnect, device number 5 [ 166.728574][ T3629] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 166.764903][ T3684] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 167.112189][ T3684] usb 2-1: device descriptor read/64, error -71 [ 167.186218][ T4986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 167.361716][ T3684] usb usb2-port1: attempt power cycle [ 167.872346][ T3684] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 167.972327][ T3684] usb 2-1: device descriptor read/8, error -71 [ 168.192370][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.242309][ T3684] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 168.332799][ T3684] usb 2-1: device descriptor read/8, error -71 [ 168.372372][ T153] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.392584][ T22] usb 1-1: device descriptor read/64, error -71 [ 168.472400][ T3684] usb usb2-port1: unable to enumerate USB device [ 168.632197][ T3629] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.682415][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 168.782361][ T153] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 168.791530][ T153] usb 5-1: config 0 has no interface number 0 [ 168.797751][ T153] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 168.807353][ T153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.819643][ T153] usb 5-1: config 0 descriptor?? [ 168.856696][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 168.856712][ T26] audit: type=1326 audit(1727419772.746:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 168.885929][ T26] audit: type=1326 audit(1727419772.746:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 168.902167][ T22] usb 1-1: device descriptor read/64, error -71 [ 168.918723][ T26] audit: type=1326 audit(1727419772.746:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f860d37db3b code=0x7ffc0000 [ 168.951528][ T26] audit: type=1326 audit(1727419772.776:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f860d3b0025 code=0x7ffc0000 [ 169.032425][ T3629] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 169.044702][ T3629] usb 3-1: config 0 has no interface number 0 [ 169.050975][ T3629] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 169.061037][ T22] usb usb1-port1: attempt power cycle [ 169.102641][ T3629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.126639][ T26] audit: type=1326 audit(1727419773.016:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 169.165213][ T3629] usb 3-1: config 0 descriptor?? [ 169.171872][ T26] audit: type=1326 audit(1727419773.016:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f860d37cbca code=0x7ffc0000 [ 169.199509][ T26] audit: type=1326 audit(1727419773.046:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f860d3b0025 code=0x7ffc0000 [ 169.373652][ T26] audit: type=1326 audit(1727419773.266:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 169.396373][ T3629] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 169.431887][ T153] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 169.452332][ T26] audit: type=1326 audit(1727419773.266:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 169.475899][ T26] audit: type=1326 audit(1727419773.266:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 170.128451][ T22] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 170.313871][ T5028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 171.367970][ T3629] usb 3-1: USB disconnect, device number 4 [ 171.554879][ T153] usb 5-1: USB disconnect, device number 9 [ 171.562373][ T22] usb 1-1: device descriptor read/8, error -71 [ 175.178957][ T5067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 175.266518][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 175.266534][ T26] audit: type=1326 audit(1727419779.156:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e50d7df39 code=0x7ffc0000 [ 175.335644][ T26] audit: type=1326 audit(1727419779.156:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e50d7df39 code=0x7ffc0000 [ 175.369720][ T26] audit: type=1326 audit(1727419779.206:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e50d7c8d0 code=0x7ffc0000 [ 175.392921][ T26] audit: type=1326 audit(1727419779.206:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e50d7db3b code=0x7ffc0000 [ 175.415217][ T26] audit: type=1326 audit(1727419779.206:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e50d7db3b code=0x7ffc0000 [ 175.437471][ T26] audit: type=1326 audit(1727419779.226:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e50d7db3b code=0x7ffc0000 [ 175.555913][ T26] audit: type=1326 audit(1727419779.226:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e50d7db3b code=0x7ffc0000 [ 175.628726][ T5078] netlink: 84 bytes leftover after parsing attributes in process `syz.3.327'. [ 175.639566][ T5078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.327'. [ 175.932418][ T3629] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 176.222804][ T3629] usb 5-1: Using ep0 maxpacket: 8 [ 176.262568][ T3629] usb 5-1: no configurations [ 176.267952][ T3629] usb 5-1: can't read configurations, error -22 [ 176.432227][ T3629] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 176.577173][ T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 176.605329][ T26] audit: type=1326 audit(1727419780.496:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e50d7db3b code=0x7ffc0000 [ 176.632679][ T26] audit: type=1326 audit(1727419780.526:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e50d7db3b code=0x7ffc0000 [ 176.893689][ T26] audit: type=1326 audit(1727419780.786:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e50d7db3b code=0x7ffc0000 [ 177.033356][ T22] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 177.059131][ T22] usb 1-1: config 0 has no interface number 0 [ 177.100719][ T22] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 177.167467][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.309989][ T22] usb 1-1: config 0 descriptor?? [ 177.402381][ T3653] Bluetooth: hci5: command 0x1003 tx timeout [ 177.410444][ T3650] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 177.432216][ T3629] usb 5-1: Using ep0 maxpacket: 8 [ 177.473272][ T3629] usb 5-1: no configurations [ 177.477920][ T3629] usb 5-1: can't read configurations, error -22 [ 177.485050][ T3629] usb usb5-port1: attempt power cycle [ 177.612259][ T22] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 177.892373][ T3629] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 177.982279][ T946] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.992475][ T3629] usb 5-1: Using ep0 maxpacket: 8 [ 178.032902][ T3629] usb 5-1: no configurations [ 178.038710][ T3629] usb 5-1: can't read configurations, error -22 [ 178.182775][ T946] usb 4-1: device descriptor read/64, error -71 [ 178.202333][ T3629] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 178.303147][ T3629] usb 5-1: Using ep0 maxpacket: 8 [ 178.352514][ T3629] usb 5-1: no configurations [ 178.362033][ T3629] usb 5-1: can't read configurations, error -22 [ 178.375202][ T3629] usb usb5-port1: unable to enumerate USB device [ 178.462260][ T946] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.662216][ T946] usb 4-1: device descriptor read/64, error -71 [ 178.793832][ T946] usb usb4-port1: attempt power cycle [ 178.888324][ T5116] netlink: 84 bytes leftover after parsing attributes in process `syz.1.340'. [ 178.900775][ T5116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.340'. [ 178.952207][ T22] usb 1-1: device descriptor read/64, error -71 [ 179.252337][ T22] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 179.622493][ T22] usb 1-1: device firmware changed [ 179.640492][ T22] usb 1-1: USB disconnect, device number 13 [ 179.758100][ T3684] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 179.765962][ T946] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.812392][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 179.862337][ T946] usb 4-1: device descriptor read/8, error -71 [ 179.992213][ T3711] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 180.132375][ T946] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 180.222385][ T22] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 180.224867][ T946] usb 4-1: device descriptor read/8, error -71 [ 180.243313][ T22] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 180.256234][ T22] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 180.266809][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.292519][ T3684] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 180.302567][ T5108] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 180.309902][ T3684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.318644][ T3684] usb 5-1: Product: syz [ 180.323062][ T3684] usb 5-1: Manufacturer: syz [ 180.329545][ T3684] usb 5-1: SerialNumber: syz [ 180.340056][ T3684] usb 5-1: config 0 descriptor?? [ 180.352484][ T3711] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 180.360677][ T3711] usb 3-1: config 0 has no interface number 0 [ 180.367502][ T946] usb usb4-port1: unable to enumerate USB device [ 180.374718][ T3711] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 180.385179][ T3711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.400545][ T3711] usb 3-1: config 0 descriptor?? [ 180.592225][ T3711] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 180.765451][ T22] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 180.778851][ T22] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input10 [ 180.800861][ T22] usb 1-1: USB disconnect, device number 14 [ 180.806898][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 180.862466][ T3684] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 180.913150][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 180.913166][ T26] audit: type=1326 audit(1727419784.806:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672af7df39 code=0x7ffc0000 [ 180.961643][ T5134] loop3: detected capacity change from 0 to 128 [ 181.052415][ T26] audit: type=1326 audit(1727419784.806:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f672af7df39 code=0x7ffc0000 [ 181.080891][ T26] audit: type=1326 audit(1727419784.806:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672af7df39 code=0x7ffc0000 [ 181.110717][ T26] audit: type=1326 audit(1727419784.806:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672af7df39 code=0x7ffc0000 [ 181.172321][ T3684] usb 5-1: failed to fetch extended address, random address set [ 181.218995][ T26] audit: type=1326 audit(1727419784.806:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f672af7df39 code=0x7ffc0000 [ 181.979297][ T5141] input: syz0 as /devices/virtual/input/input11 [ 181.996349][ T3711] usb 3-1: USB disconnect, device number 5 [ 182.097515][ T3684] usb 5-1: USB disconnect, device number 14 [ 182.157645][ T26] audit: type=1326 audit(1727419784.806:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672af7df39 code=0x7ffc0000 [ 182.321532][ T5148] loop1: detected capacity change from 0 to 512 [ 182.629557][ T5148] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 183.743862][ T5148] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 183.832529][ T3711] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 183.949799][ T5148] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.351: Failed to acquire dquot type 0 [ 184.007996][ T5148] EXT4-fs (loop1): Remounting filesystem read-only [ 184.060956][ T5148] EXT4-fs (loop1): 1 orphan inode deleted [ 184.083799][ T5148] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.122533][ T5148] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038 (0x7fffffff) [ 184.172295][ T3711] usb 3-1: Using ep0 maxpacket: 8 [ 184.212451][ T3711] usb 3-1: no configurations [ 184.243576][ T3711] usb 3-1: can't read configurations, error -22 [ 184.307287][ T5170] loop3: detected capacity change from 0 to 256 [ 184.317063][ T5170] exfat: Deprecated parameter 'namecase' [ 184.331267][ T5170] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 184.422358][ T3711] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.607703][ T5173] syz.1.351[5173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.608243][ T5173] syz.1.351[5173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.902225][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 185.439210][ T3874] EXT4-fs (loop1): unmounting filesystem. [ 185.482266][ T27] usb 1-1: device descriptor read/64, error -71 [ 185.548749][ T5178] loop4: detected capacity change from 0 to 512 [ 185.568878][ T5178] ext4: Unknown parameter 'appraise_type' [ 185.623577][ T4357] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.626349][ T5181] loop2: detected capacity change from 0 to 512 [ 185.738575][ T5181] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.211862][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 186.580758][ T27] usb 1-1: device descriptor read/64, error -71 [ 186.664816][ T5181] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.359: iget: bad extra_isize 7 (inode size 256) [ 186.718487][ T5181] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.359: couldn't read orphan inode 15 (err -117) [ 186.762471][ T27] usb usb1-port1: attempt power cycle [ 186.781850][ T5181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 187.202372][ T153] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 187.392195][ T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 187.659324][ T4580] EXT4-fs (loop2): unmounting filesystem. [ 187.665742][ T27] usb 1-1: device not accepting address 17, error -71 [ 187.702277][ T153] usb 4-1: Using ep0 maxpacket: 16 [ 187.983304][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.195856][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.345901][ T153] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.363974][ T153] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 188.379686][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.435408][ T153] usb 4-1: config 0 descriptor?? [ 188.526339][ T3681] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.905008][ T5223] loop4: detected capacity change from 0 to 512 [ 189.069759][ T153] koneplus 0003:1E7D:2E22.0001: item fetching failed at offset 0/2 [ 189.192462][ T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 189.281965][ T5223] EXT4-fs (loop4): 1 orphan inode deleted [ 189.287955][ T5223] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.314348][ T5223] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038 (0x7fffffff) [ 189.453808][ T153] koneplus 0003:1E7D:2E22.0001: parse failed [ 189.562045][ T153] koneplus: probe of 0003:1E7D:2E22.0001 failed with error -22 [ 189.572854][ T153] usb 4-1: USB disconnect, device number 10 [ 189.587286][ T3959] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 189.597465][ T3711] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.617088][ T3959] EXT4-fs error (device loop4): ext4_release_dquot:6823: comm kworker/u4:9: Failed to release dquot type 1 [ 189.617840][ T3652] EXT4-fs (loop4): unmounting filesystem. [ 189.682693][ T3681] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 189.703095][ T3681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.711293][ T3681] usb 2-1: Product: syz [ 189.711315][ T3681] usb 2-1: Manufacturer: syz [ 189.711333][ T3681] usb 2-1: SerialNumber: syz [ 189.720775][ T3681] usb 2-1: config 0 descriptor?? [ 189.738498][ T5228] loop4: detected capacity change from 0 to 1024 [ 189.746057][ T5228] EXT4-fs: Ignoring removed orlov option [ 189.751747][ T5228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.760012][ T5228] EXT4-fs (loop4): Test dummy encryption mode enabled [ 189.778028][ T5228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.814047][ T27] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 189.823703][ T27] usb 1-1: config 0 has no interface number 0 [ 189.829840][ T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 189.832460][ T3711] usb 3-1: Using ep0 maxpacket: 8 [ 189.856400][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.870042][ T27] usb 1-1: config 0 descriptor?? [ 189.882502][ T3711] usb 3-1: no configurations [ 189.887366][ T3711] usb 3-1: can't read configurations, error -22 [ 189.936206][ T5228] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 189.984960][ T3652] EXT4-fs (loop4): unmounting filesystem. [ 190.038006][ T5236] loop4: detected capacity change from 0 to 128 [ 190.044429][ T3711] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.233871][ T27] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 190.252623][ T3681] usb 2-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 190.282274][ T3711] usb 3-1: Using ep0 maxpacket: 8 [ 191.229649][ T26] audit: type=1800 audit(1727419794.896:200): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.374" name="bus" dev="loop4" ino=1048608 res=0 errno=0 [ 191.275811][ T3647] Bluetooth: hci4: command 0x0406 tx timeout [ 191.275920][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 191.289924][ T3643] Bluetooth: hci2: command 0x0406 tx timeout [ 191.551085][ T3711] usb 3-1: no configurations [ 191.556094][ T3711] usb 3-1: can't read configurations, error -22 [ 191.563236][ T3711] usb usb3-port1: attempt power cycle [ 191.592719][ T3681] usb 2-1: failed to fetch extended address, random address set [ 191.842320][ T3684] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 191.864809][ T3681] usb 2-1: USB disconnect, device number 15 [ 192.034130][ T3684] usb 4-1: device descriptor read/64, error -71 [ 192.388499][ T27] usb 1-1: USB disconnect, device number 19 [ 193.025382][ T3684] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 193.172470][ T153] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 193.438828][ T153] usb 5-1: Using ep0 maxpacket: 8 [ 193.582472][ T153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.593777][ T153] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.597067][ T3684] usb 4-1: device descriptor read/64, error -71 [ 193.603512][ T153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.633452][ T153] usb 5-1: config 0 descriptor?? [ 193.725387][ T3684] usb usb4-port1: attempt power cycle [ 193.759370][ T3681] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 194.017742][ T3681] usb 2-1: Using ep0 maxpacket: 8 [ 194.084106][ T153] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 194.133602][ T3684] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 194.515345][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.532223][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.902257][ T3681] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.914839][ T3681] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.979885][ T26] audit: type=1326 audit(1727419798.866:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e50d7df39 code=0x7ffc0000 [ 195.013336][ T26] audit: type=1326 audit(1727419798.896:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e50d7df39 code=0x7ffc0000 [ 195.041614][ T26] audit: type=1326 audit(1727419798.896:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e50d7df39 code=0x7ffc0000 [ 195.105179][ T3681] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 195.114585][ T3681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.123744][ T3681] usb 2-1: Product: syz [ 195.128158][ T3681] usb 2-1: Manufacturer: syz [ 195.133306][ T3681] usb 2-1: SerialNumber: syz [ 195.160781][ T3684] usb 4-1: device not accepting address 13, error -71 [ 195.168837][ T3681] usb 2-1: config 0 descriptor?? [ 195.188470][ T3711] usb 5-1: USB disconnect, device number 15 [ 195.206570][ T3711] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 196.768289][ T27] usb 2-1: USB disconnect, device number 16 [ 197.670293][ T5319] xt_bpf: check failed: parse error [ 197.827617][ T3711] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 198.950522][ T26] audit: type=1326 audit(1727419802.836:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca097df39 code=0x7ffc0000 [ 199.042782][ T26] audit: type=1326 audit(1727419802.866:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca097df39 code=0x7ffc0000 [ 199.068623][ T26] audit: type=1326 audit(1727419802.876:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca097df39 code=0x7ffc0000 [ 199.101111][ T5332] syz.1.404 (5332) used greatest stack depth: 17912 bytes left [ 199.109188][ T26] audit: type=1326 audit(1727419802.876:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5328 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca097df39 code=0x7ffc0000 [ 199.163769][ T153] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 199.183015][ T3711] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 199.192919][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.201022][ T3711] usb 1-1: Product: syz [ 199.205674][ T3711] usb 1-1: Manufacturer: syz [ 199.210292][ T3711] usb 1-1: SerialNumber: syz [ 199.217714][ T3711] usb 1-1: config 0 descriptor?? [ 199.342291][ T3685] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 199.372276][ T153] usb 3-1: device descriptor read/64, error -71 [ 199.432259][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 199.592529][ T3685] usb 5-1: Using ep0 maxpacket: 8 [ 199.652410][ T153] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 199.692298][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 199.742430][ T3711] usb 1-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 199.762564][ T3685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.774396][ T3685] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.784295][ T3685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.795396][ T3685] usb 5-1: config 0 descriptor?? [ 199.842817][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.860671][ T22] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.869986][ T153] usb 3-1: device descriptor read/64, error -71 [ 200.002428][ T3711] usb 1-1: failed to fetch extended address, random address set [ 200.002738][ T153] usb usb3-port1: attempt power cycle [ 200.075663][ T22] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 200.087170][ T3685] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 200.098378][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.109147][ T22] usb 2-1: Product: syz [ 200.117182][ T22] usb 2-1: Manufacturer: syz [ 200.121806][ T22] usb 2-1: SerialNumber: syz [ 200.129571][ T22] usb 2-1: config 0 descriptor?? [ 200.263988][ T3711] usb 1-1: USB disconnect, device number 20 [ 200.472483][ T153] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 200.565319][ T153] usb 3-1: device descriptor read/8, error -71 [ 201.130738][ T153] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 201.377967][ T3685] usb 5-1: USB disconnect, device number 16 [ 201.390074][ T3685] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 201.494933][ T153] usb 3-1: device descriptor read/8, error -71 [ 201.669087][ T153] usb usb3-port1: unable to enumerate USB device [ 202.128924][ T5365] syz.2.414[5365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.129030][ T5365] syz.2.414[5365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.249324][ T7] usb 2-1: USB disconnect, device number 17 [ 203.275162][ T26] audit: type=1326 audit(1727419807.166:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca097df39 code=0x7ffc0000 [ 203.358486][ T26] audit: type=1326 audit(1727419807.166:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d97df39 code=0x7ffc0000 [ 203.472345][ T26] audit: type=1326 audit(1727419807.166:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f334d97df39 code=0x7ffc0000 [ 203.582568][ T26] audit: type=1326 audit(1727419807.166:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d97df39 code=0x7ffc0000 [ 203.638545][ T26] audit: type=1326 audit(1727419807.166:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d97df39 code=0x7ffc0000 [ 203.674236][ T26] audit: type=1326 audit(1727419807.166:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f334d97df39 code=0x7ffc0000 [ 203.697761][ T26] audit: type=1326 audit(1727419807.166:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d97df39 code=0x7ffc0000 [ 203.699049][ T5388] loop1: detected capacity change from 0 to 256 [ 203.722688][ T26] audit: type=1326 audit(1727419807.166:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d97df39 code=0x7ffc0000 [ 203.750512][ T5388] exfat: Bad value for 'uid' [ 203.774012][ T26] audit: type=1326 audit(1727419807.166:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f334d97df39 code=0x7ffc0000 [ 203.804367][ T26] audit: type=1326 audit(1727419807.166:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334d97df39 code=0x7ffc0000 [ 203.886320][ T5388] loop1: detected capacity change from 0 to 512 [ 203.952350][ T3684] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 203.977140][ T3931] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.990339][ T5396] loop4: detected capacity change from 0 to 256 [ 204.021815][ T5396] exfat: Deprecated parameter 'namecase' [ 204.060018][ T5396] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 204.212398][ T3684] usb 1-1: Using ep0 maxpacket: 8 [ 204.332303][ T3684] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 204.340651][ T3684] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 204.370688][ T3684] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.415412][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.233960][ T5434] loop3: detected capacity change from 0 to 16 [ 206.294264][ T5434] erofs: (device loop3): mounted with root inode @ nid 36. [ 206.394915][ T5438] loop4: detected capacity change from 0 to 256 [ 207.294756][ T5443] loop3: detected capacity change from 0 to 256 [ 207.401630][ T27] usb 1-1: USB disconnect, device number 21 [ 207.416339][ T5443] exfat: Deprecated parameter 'namecase' [ 207.498547][ T5443] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 208.796412][ T5476] input: syz1 as /devices/virtual/input/input13 [ 209.534400][ T5479] device vlan2 entered promiscuous mode [ 209.540000][ T5479] device veth0_to_hsr entered promiscuous mode [ 209.580944][ T5479] device veth0_to_hsr left promiscuous mode [ 211.042242][ T3683] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 211.242398][ T27] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 211.250323][ T5501] loop4: detected capacity change from 0 to 256 [ 211.273232][ T5501] exfat: Deprecated parameter 'namecase' [ 211.315654][ T5501] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 211.359647][ T5503] loop3: detected capacity change from 0 to 512 [ 211.548471][ T5503] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 211.569166][ T5503] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.457: invalid indirect mapped block 2683928664 (level 1) [ 211.592284][ T3683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.597104][ T5503] EXT4-fs (loop3): 1 truncate cleaned up [ 211.602646][ T3647] Bluetooth: hci1: command 0x0406 tx timeout [ 211.613080][ T5503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 211.622199][ T3683] usb 3-1: config 1 interface 0 has no altsetting 0 [ 211.768995][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 212.022232][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 212.212987][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 212.221209][ T27] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 212.332442][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.342269][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.561467][ T3683] usb 3-1: string descriptor 0 read error: -22 [ 212.569006][ T3683] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.579025][ T3683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 212.728163][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.822442][ T3683] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 212.833364][ T3683] usb 3-1: USB disconnect, device number 15 [ 212.971998][ T5525] loop0: detected capacity change from 0 to 256 [ 213.639180][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 213.755198][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 213.872558][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.928999][ T7] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.968001][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.029258][ T7] usb 5-1: config 0 descriptor?? [ 214.151759][ T5539] loop0: detected capacity change from 0 to 512 [ 214.176947][ T5539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 214.213292][ T5539] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038 (0x7fffffff) [ 214.228299][ T3684] usb 2-1: USB disconnect, device number 18 [ 214.295005][ T7] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 214.323763][ T5539] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.468: Directory hole found for htree leaf block 0 [ 214.627990][ T5546] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.468: Directory hole found for htree leaf block 0 [ 214.935279][ T5547] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.468: Directory hole found for htree leaf block 0 [ 215.409241][ T946] usb 5-1: USB disconnect, device number 17 [ 215.422844][ T946] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 215.439947][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 215.592230][ T3684] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 215.962625][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.991551][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.048190][ T3684] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 216.095318][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.153245][ T3684] usb 2-1: config 0 descriptor?? [ 216.498511][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 216.507470][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 216.516384][ T5571] netlink: 1 bytes leftover after parsing attributes in process `syz.4.476'. [ 217.363062][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 217.412957][ T3684] hid (null): unknown global tag 0xe [ 217.607709][ T3684] logitech-hidpp-device 0003:046D:C086.0002: unknown global tag 0xe [ 217.625870][ T3684] logitech-hidpp-device 0003:046D:C086.0002: item 0 1 1 14 parsing failed [ 217.635181][ T3684] logitech-hidpp-device 0003:046D:C086.0002: hidpp_probe:parse failed [ 217.643878][ T3684] logitech-hidpp-device: probe of 0003:046D:C086.0002 failed with error -22 [ 217.655010][ T3684] usb 2-1: USB disconnect, device number 19 [ 217.660644][ T5579] loop3: detected capacity change from 0 to 2048 [ 217.784475][ T5581] loop2: detected capacity change from 0 to 1024 [ 218.080115][ T5581] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 218.089484][ T5581] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038 (0x7fffffff) [ 218.160544][ T5579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 218.381444][ T4580] EXT4-fs (loop2): unmounting filesystem. [ 219.380240][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 219.391378][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 219.502253][ T3681] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 219.541925][ T5600] netlink: 84 bytes leftover after parsing attributes in process `syz.3.485'. [ 219.584117][ T5600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.485'. [ 219.772337][ T3681] usb 1-1: Using ep0 maxpacket: 8 [ 219.881345][ T5613] loop3: detected capacity change from 0 to 512 [ 219.892334][ T3681] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 219.916926][ T3681] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 219.933012][ T3681] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.942736][ T3681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.962226][ T27] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 220.070297][ T5613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 220.079590][ T5613] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038 (0x7fffffff) [ 220.098126][ T5613] syz.3.490[5613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.098320][ T5613] syz.3.490[5613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.121795][ T5613] syz.3.490[5613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.136783][ T5613] syz.3.490[5613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.176397][ T5613] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.490: Directory hole found for htree leaf block 0 [ 220.290843][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 220.632569][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 220.763616][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.787216][ T27] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.816150][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.829356][ T27] usb 5-1: config 0 descriptor?? [ 220.956107][ T5631] loop3: detected capacity change from 0 to 512 [ 220.970249][ T5631] EXT4-fs (loop3): Test dummy encryption mode enabled [ 220.985441][ T5631] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 1: comm syz.3.496: invalid block [ 220.997197][ T5631] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.496: couldn't read orphan inode 11 (err -117) [ 221.009974][ T5631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 221.213217][ T27] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 221.728444][ T5637] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.496: Directory hole found for htree leaf block 0 [ 222.042758][ T3684] usb 1-1: USB disconnect, device number 22 [ 222.308850][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 222.347956][ T5627] loop2: detected capacity change from 0 to 40427 [ 222.366751][ T5627] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 222.374750][ T5627] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 222.391280][ T5627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 222.456489][ T5627] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 222.464364][ T5627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 222.607760][ T5652] netlink: 84 bytes leftover after parsing attributes in process `syz.1.500'. [ 222.623707][ T3681] usb 5-1: USB disconnect, device number 18 [ 222.654568][ T3681] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 222.664946][ T5655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.500'. [ 225.022817][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 225.153983][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 225.388029][ T3685] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 225.470005][ T5688] loop0: detected capacity change from 0 to 256 [ 226.662182][ T3685] usb 3-1: Using ep0 maxpacket: 8 [ 226.792454][ T3685] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 226.800686][ T3685] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 227.367044][ T3685] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.372788][ T5694] loop4: detected capacity change from 0 to 2048 [ 227.386698][ T3685] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.397629][ T3685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.455304][ T3685] usbtmc 3-1:16.0: bulk endpoints not found [ 227.491732][ T5701] netlink: 84 bytes leftover after parsing attributes in process `syz.0.516'. [ 227.504911][ T5701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.516'. [ 227.530295][ T5694] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.640168][ T5694] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 227.682545][ T153] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 227.688833][ T3652] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 227.748227][ T3652] EXT4-fs (loop4): unmounting filesystem. [ 227.952452][ T153] usb 2-1: Using ep0 maxpacket: 8 [ 228.092442][ T153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.108880][ T153] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.121534][ T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.171121][ T153] usb 2-1: config 0 descriptor?? [ 228.457781][ T153] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 228.555550][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 229.078001][ T153] usb 3-1: USB disconnect, device number 16 [ 229.275678][ T27] usb 2-1: USB disconnect, device number 20 [ 229.398008][ T27] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 229.773945][ T5740] loop2: detected capacity change from 0 to 256 [ 229.843526][ T5740] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 229.886445][ T5740] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 229.956810][ T5731] loop3: detected capacity change from 0 to 40427 [ 229.964157][ T3711] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 229.982580][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 229.982595][ T26] audit: type=1800 audit(1727419833.856:227): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.529" name="file2" dev="loop2" ino=1048609 res=0 errno=0 [ 230.178481][ T5731] F2FS-fs (loop3): Found nat_bits in checkpoint [ 230.207991][ T5749] netlink: 84 bytes leftover after parsing attributes in process `syz.2.531'. [ 230.212422][ T3711] usb 1-1: Using ep0 maxpacket: 8 [ 230.219990][ T5749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 230.341377][ T5751] loop4: detected capacity change from 0 to 128 [ 230.355911][ T3711] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 230.376776][ T3711] usb 1-1: config 0 has no interface number 0 [ 230.389764][ T5731] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 230.448996][ T5751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 230.523254][ T5751] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038 (0x7fffffff) [ 230.542537][ T3711] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 230.551811][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.595792][ T3711] usb 1-1: Product: syz [ 230.600028][ T3711] usb 1-1: Manufacturer: syz [ 230.619328][ T3644] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0 [ 230.631037][ T3711] usb 1-1: SerialNumber: syz [ 230.644373][ T3644] CPU: 1 PID: 3644 Comm: syz-executor Not tainted 6.1.111-syzkaller #0 [ 230.652682][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.662765][ T3644] Call Trace: [ 230.666061][ T3644] [ 230.669015][ T3644] dump_stack_lvl+0x1e3/0x2cb [ 230.673757][ T3644] ? nf_tcp_handle_invalid+0x642/0x642 [ 230.679255][ T3644] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 230.685103][ T3644] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 230.690503][ T3644] f2fs_map_blocks+0x15fd/0x3ab0 [ 230.695483][ T3644] ? f2fs_do_map_lock+0x70/0x70 [ 230.700440][ T3644] ? page_index+0xff/0x4b0 [ 230.704870][ T3644] f2fs_mpage_readpages+0xbd5/0x2b90 [ 230.710179][ T3644] ? mark_lock+0x9a/0x340 [ 230.714538][ T3644] ? dquot_release_reservation_block+0x90/0x90 [ 230.720723][ T3644] ? folio_add_lru+0x34d/0xd70 [ 230.725524][ T3644] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 230.731700][ T3644] ? f2fs_readahead+0x18a/0x3a0 [ 230.736568][ T3644] ? blk_start_plug+0x95/0x110 [ 230.741344][ T3644] read_pages+0x17f/0x830 [ 230.745704][ T3644] ? folio_add_lru+0x34d/0xd70 [ 230.750476][ T3644] ? folio_add_lru+0x34d/0xd70 [ 230.755251][ T3644] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 230.760904][ T3644] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 230.766387][ T3644] ? page_cache_ra_order+0xb2a/0xd80 [ 230.771690][ T3644] page_cache_ra_unbounded+0x68b/0x7b0 [ 230.777237][ T3644] f2fs_readdir+0x5ae/0xc30 [ 230.781819][ T3644] ? __might_sleep+0xb0/0xb0 [ 230.786444][ T3644] ? f2fs_fill_dentries+0xd60/0xd60 [ 230.791669][ T3644] ? iterate_dir+0x10a/0x560 [ 230.796273][ T3644] ? __fdget_pos+0x2ba/0x360 [ 230.800892][ T3644] ? common_file_perm+0x17d/0x1d0 [ 230.805943][ T3644] ? fsnotify_perm+0x439/0x590 [ 230.810722][ T3644] iterate_dir+0x224/0x560 [ 230.815152][ T3644] ? f2fs_fill_dentries+0xd60/0xd60 [ 230.820376][ T3644] __se_sys_getdents64+0x209/0x4f0 [ 230.825593][ T3644] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 230.831764][ T3644] ? __x64_sys_getdents64+0x80/0x80 [ 230.837064][ T3644] ? filldir+0x6f0/0x6f0 [ 230.841318][ T3644] ? syscall_enter_from_user_mode+0x2e/0x230 [ 230.847304][ T3644] ? lockdep_hardirqs_on+0x94/0x130 [ 230.852614][ T3644] ? syscall_enter_from_user_mode+0x2e/0x230 [ 230.858624][ T3644] do_syscall_64+0x3b/0xb0 [ 230.863063][ T3644] ? clear_bhb_loop+0x45/0xa0 [ 230.867760][ T3644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.873668][ T3644] RIP: 0033:0x7fcca09b00d3 [ 230.878100][ T3644] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 230.898141][ T3644] RSP: 002b:00007fff50cec978 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 230.906561][ T3644] RAX: ffffffffffffffda RBX: 000055555e6f7600 RCX: 00007fcca09b00d3 [ 230.914538][ T3644] RDX: 0000000000008000 RSI: 000055555e6f7600 RDI: 0000000000000005 [ 230.922524][ T3644] RBP: 000055555e6f75d4 R08: 0000000000000000 R09: 0000000000000000 [ 230.930512][ T3644] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 230.938496][ T3644] R13: 0000000000000010 R14: 000055555e6f75d0 R15: 00007fff50ceec20 [ 230.946501][ T3644] [ 230.957786][ T3711] usb 1-1: config 0 descriptor?? [ 230.973780][ T3644] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0 [ 230.986922][ T3644] CPU: 0 PID: 3644 Comm: syz-executor Not tainted 6.1.111-syzkaller #0 [ 230.995204][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.005285][ T3644] Call Trace: [ 231.008589][ T3644] [ 231.011541][ T3644] dump_stack_lvl+0x1e3/0x2cb [ 231.016265][ T3644] ? nf_tcp_handle_invalid+0x642/0x642 [ 231.021763][ T3644] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 231.027622][ T3644] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 231.033043][ T3644] f2fs_get_read_data_page+0x4ec/0x8c0 [ 231.038543][ T3644] ? f2fs_get_block+0x1b0/0x1b0 [ 231.043434][ T3644] ? PageHeadHuge+0x8e/0x1c0 [ 231.048061][ T3644] f2fs_find_data_page+0x99/0x380 [ 231.053114][ T3644] f2fs_readdir+0x5c3/0xc30 [ 231.057666][ T3644] ? __might_sleep+0xb0/0xb0 [ 231.062314][ T3644] ? f2fs_fill_dentries+0xd60/0xd60 [ 231.067754][ T3644] ? iterate_dir+0x10a/0x560 [ 231.072386][ T3644] ? __fdget_pos+0x2ba/0x360 [ 231.077014][ T3644] ? common_file_perm+0x17d/0x1d0 [ 231.082081][ T3644] ? fsnotify_perm+0x439/0x590 [ 231.086890][ T3644] iterate_dir+0x224/0x560 [ 231.091339][ T3644] ? f2fs_fill_dentries+0xd60/0xd60 [ 231.096584][ T3644] __se_sys_getdents64+0x209/0x4f0 [ 231.101734][ T3644] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 231.107752][ T3644] ? __x64_sys_getdents64+0x80/0x80 [ 231.112974][ T3644] ? filldir+0x6f0/0x6f0 [ 231.117252][ T3644] ? syscall_enter_from_user_mode+0x2e/0x230 [ 231.123271][ T3644] ? lockdep_hardirqs_on+0x94/0x130 [ 231.128504][ T3644] ? syscall_enter_from_user_mode+0x2e/0x230 [ 231.134520][ T3644] do_syscall_64+0x3b/0xb0 [ 231.139057][ T3644] ? clear_bhb_loop+0x45/0xa0 [ 231.143776][ T3644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.149705][ T3644] RIP: 0033:0x7fcca09b00d3 [ 231.154160][ T3644] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 231.173793][ T3644] RSP: 002b:00007fff50cec978 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 231.182242][ T3644] RAX: ffffffffffffffda RBX: 000055555e6f7600 RCX: 00007fcca09b00d3 [ 231.190252][ T3644] RDX: 0000000000008000 RSI: 000055555e6f7600 RDI: 0000000000000005 [ 231.198345][ T3644] RBP: 000055555e6f75d4 R08: 0000000000000000 R09: 0000000000000000 [ 231.206431][ T3644] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 231.214435][ T3644] R13: 0000000000000010 R14: 000055555e6f75d0 R15: 00007fff50ceec20 [ 231.222457][ T3644] [ 231.944844][ T5774] netlink: 52 bytes leftover after parsing attributes in process `syz.1.537'. [ 232.087953][ T1215] kworker/u4:5: attempt to access beyond end of device [ 232.087953][ T1215] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 232.499737][ T153] usb 1-1: USB disconnect, device number 23 [ 233.016290][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.862338][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.077380][ T5788] loop1: detected capacity change from 0 to 256 [ 234.116463][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.162354][ T5788] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 234.703139][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.219794][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.232035][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.248514][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.259113][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.262270][ T153] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 236.274769][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 236.282894][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.872606][ T153] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 236.881794][ T153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.914587][ T153] usb 3-1: Product: syz [ 236.948160][ T153] usb 3-1: Manufacturer: syz [ 236.977797][ T153] usb 3-1: SerialNumber: syz [ 236.998950][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 237.017873][ T153] usb 3-1: config 0 descriptor?? [ 237.055560][ T56] device hsr_slave_0 left promiscuous mode [ 237.082705][ T56] device hsr_slave_1 left promiscuous mode [ 237.117671][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.138187][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.177939][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.198742][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.228925][ T56] device bridge_slave_1 left promiscuous mode [ 237.243840][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.271198][ T56] device bridge_slave_0 left promiscuous mode [ 237.290313][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.379478][ T5833] loop0: detected capacity change from 0 to 256 [ 237.379564][ T56] device veth1_macvtap left promiscuous mode [ 237.406556][ T56] device veth0_macvtap left promiscuous mode [ 237.407081][ T5833] exfat: Deprecated parameter 'namecase' [ 237.427092][ T56] device veth1_vlan left promiscuous mode [ 237.447905][ T56] device veth0_vlan left promiscuous mode [ 237.480858][ T5833] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 237.542432][ T153] usb 3-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 237.566466][ T26] audit: type=1326 audit(1727419841.456:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672af7df39 code=0x7ffc0000 [ 237.598638][ T26] audit: type=1326 audit(1727419841.486:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f672af7df39 code=0x7ffc0000 [ 237.663821][ T26] audit: type=1326 audit(1727419841.516:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672af7df39 code=0x7ffc0000 [ 237.802477][ T153] usb 3-1: failed to fetch extended address, random address set [ 237.833450][ T3652] EXT4-fs (loop4): unmounting filesystem. [ 238.309193][ T56] team0 (unregistering): Port device team_slave_1 removed [ 238.333088][ T48] Bluetooth: hci3: command tx timeout [ 238.364624][ T56] team0 (unregistering): Port device team_slave_0 removed [ 238.438488][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.453822][ T5847] binder_alloc: 5846: binder_alloc_buf, no vma [ 238.499602][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.597377][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 238.607367][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 238.769351][ T5856] loop1: detected capacity change from 0 to 4096 [ 238.811944][ T5856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 239.102487][ T3690] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 239.553027][ T3690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.626625][ T3690] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.642799][ T3690] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 239.658743][ T3690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.681857][ T3690] usb 1-1: config 0 descriptor?? [ 239.803409][ T3874] EXT4-fs (loop1): unmounting filesystem. [ 239.970452][ T5865] loop1: detected capacity change from 0 to 256 [ 240.039530][ T5865] exfat: Deprecated parameter 'namecase' [ 240.050826][ T5853] loop0: detected capacity change from 0 to 128 [ 240.087775][ T5865] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 240.183966][ T5868] loop2: detected capacity change from 0 to 256 [ 240.414041][ T48] Bluetooth: hci3: command tx timeout [ 240.757524][ T5870] loop1: detected capacity change from 0 to 512 [ 241.449471][ T56] bond0 (unregistering): Released all slaves [ 241.992702][ T3711] usb 1-1: USB disconnect, device number 24 [ 242.041778][ T153] usb 3-1: USB disconnect, device number 17 [ 242.228074][ T5889] binder: BINDER_SET_CONTEXT_MGR already set [ 242.244042][ T5889] binder: 5886:5889 ioctl 4018620d 20004a80 returned -16 [ 242.273798][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.281109][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.306695][ T5817] device bridge_slave_0 entered promiscuous mode [ 242.315823][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.334728][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.343582][ T5817] device bridge_slave_1 entered promiscuous mode [ 242.357202][ T5891] binder: 5886:5891 ioctl c0306201 0 returned -14 [ 242.482681][ T48] Bluetooth: hci3: command tx timeout [ 242.507534][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.532008][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'. [ 242.542518][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'. [ 242.565083][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.707936][ T5817] team0: Port device team_slave_0 added [ 242.718744][ T5817] team0: Port device team_slave_1 added [ 242.807362][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.821805][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.866696][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.891099][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.901872][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.936470][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.068588][ T5817] device hsr_slave_0 entered promiscuous mode [ 243.098005][ T5817] device hsr_slave_1 entered promiscuous mode [ 243.617971][ T26] audit: type=1804 audit(1727419847.486:231): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.571" name="/newroot/113/file0/file1" dev="overlay" ino=634 res=1 errno=0 [ 244.262235][ T3711] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 244.370847][ T5916] loop2: detected capacity change from 0 to 256 [ 244.387155][ T5916] exfat: Deprecated parameter 'namecase' [ 244.422052][ T5916] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 244.522285][ T3711] usb 1-1: Using ep0 maxpacket: 8 [ 244.572315][ T48] Bluetooth: hci3: command tx timeout [ 244.647294][ T3711] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 244.679393][ T3711] usb 1-1: config 0 has no interface number 0 [ 244.856245][ T3711] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 244.891136][ T3711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.916911][ T3711] usb 1-1: Product: syz [ 244.921339][ T3711] usb 1-1: Manufacturer: syz [ 244.933099][ T5928] binder: 5923:5928 ioctl c0306201 0 returned -14 [ 244.940118][ T3711] usb 1-1: SerialNumber: syz [ 244.970284][ T3711] usb 1-1: config 0 descriptor?? [ 245.032164][ T3685] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 245.157508][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.168806][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.191127][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.211018][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.367794][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.421744][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.432577][ T3685] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.450892][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.454570][ T3685] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 245.475052][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.486680][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.497246][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.505480][ T3685] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.521663][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.522269][ T3685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.528894][ T3714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.567738][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.588561][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.608703][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.611246][ T3685] usb 3-1: invalid MIDI out EP 0 [ 245.634188][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.641399][ T3714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.672670][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.710271][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.741509][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.767577][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.797760][ T3685] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 245.808851][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.817628][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 245.835097][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.855718][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.863929][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 245.882923][ T3685] usb 3-1: USB disconnect, device number 18 [ 245.894436][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.915347][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.948010][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.981848][ T5817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.992058][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.013148][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.296871][ T3690] usb 1-1: USB disconnect, device number 25 [ 246.417395][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.434590][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.468544][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.534879][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.551403][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.604244][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.621585][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.632365][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.640683][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.794249][ T5817] device veth0_vlan entered promiscuous mode [ 246.814376][ T5817] device veth1_vlan entered promiscuous mode [ 247.903335][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.912033][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.958213][ T5986] loop4: detected capacity change from 0 to 256 [ 247.995980][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.024655][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.053010][ T5817] device veth0_macvtap entered promiscuous mode [ 248.097314][ T5817] device veth1_macvtap entered promiscuous mode [ 248.106263][ T5986] exfat: Deprecated parameter 'namecase' [ 248.150335][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.166848][ T5986] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 248.204259][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.234033][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.349943][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.380791][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.398018][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.410595][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.427823][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.461052][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.517005][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.528163][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.672632][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.724712][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.793006][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.833298][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.860778][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.880016][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.889130][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.899291][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.909215][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.923111][ T6000] device vlan2 entered promiscuous mode [ 248.928707][ T6000] device veth0_to_hsr entered promiscuous mode [ 248.955366][ T6000] device veth0_to_hsr left promiscuous mode [ 249.605387][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.615206][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.624827][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.633687][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.680975][ T6005] device syzkaller0 entered promiscuous mode [ 250.032172][ T3690] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 250.302218][ T3690] usb 2-1: Using ep0 maxpacket: 8 [ 250.434548][ T3690] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 250.448732][ T3690] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 250.459824][ T3690] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.474781][ T3690] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.489097][ T3690] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.506720][ T3690] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 250.516199][ T3690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.584318][ T3690] usbtmc 2-1:16.0: bulk endpoints not found [ 250.854487][ T6017] overlayfs: failed to get inode (-116) [ 250.878122][ T6017] overlayfs: failed to get inode (-116) [ 250.928030][ T3690] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 251.704024][ T3690] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 251.730476][ T3690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.404711][ T3690] usb 5-1: Product: syz [ 252.408953][ T3690] usb 5-1: Manufacturer: syz [ 252.414340][ T3690] usb 5-1: SerialNumber: syz [ 252.429673][ T3690] usb 5-1: config 0 descriptor?? [ 252.962586][ T3690] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 252.989713][ T3683] usb 2-1: USB disconnect, device number 21 [ 253.199590][ T4555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.222412][ T3690] usb 5-1: failed to fetch extended address, random address set [ 253.239909][ T4555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.289293][ T3959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.313688][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.335645][ T3959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.370099][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.602229][ T3690] usb 5-1: USB disconnect, device number 19 [ 254.489916][ T6048] netlink: 84 bytes leftover after parsing attributes in process `syz.3.544'. [ 254.556440][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.544'. [ 254.596617][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.603'. [ 255.193334][ T3690] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 255.788453][ T27] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 255.792963][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882954][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.022148][ T3690] usb 5-1: Using ep0 maxpacket: 8 [ 256.097498][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 256.157258][ T3690] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 256.186697][ T6043] loop1: detected capacity change from 0 to 40427 [ 256.199340][ T3690] usb 5-1: config 0 has no interface number 0 [ 256.202240][ T6043] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 256.257125][ T6043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 256.731237][ T6043] F2FS-fs (loop1): invalid crc value [ 256.874134][ T6043] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 256.989575][ T27] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 256.998568][ T27] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 257.008856][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.018728][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.028555][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 257.045276][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 257.055850][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.112476][ T3690] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 257.121578][ T3690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.136082][ T27] usbtmc 4-1:16.0: bulk endpoints not found [ 257.166262][ T6080] loop2: detected capacity change from 0 to 256 [ 257.166725][ T3690] usb 5-1: Product: syz [ 257.180772][ T3690] usb 5-1: Manufacturer: syz [ 257.187105][ T3690] usb 5-1: SerialNumber: syz [ 257.198336][ T3690] usb 5-1: config 0 descriptor?? [ 257.400574][ T3690] radio-usb-si4713 5-1:0.128: Si4713 development board discovered: (10C4:8244) [ 258.649916][ T3647] Bluetooth: hci0: command 0x0406 tx timeout [ 258.860819][ T6085] xt_CT: No such helper "syz1" [ 259.100248][ T3683] usb 4-1: USB disconnect, device number 15 [ 259.295222][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.617'. [ 259.472311][ T946] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 259.618925][ T6109] loop3: detected capacity change from 0 to 256 [ 259.649387][ T6109] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 259.669302][ T6109] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 259.702122][ T26] audit: type=1800 audit(1727419863.576:232): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.622" name="file2" dev="loop3" ino=1048613 res=0 errno=0 [ 259.714853][ T6109] exFAT-fs (loop3): hint_cluster is invalid (17) [ 259.736174][ T6109] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 259.759156][ T6109] exFAT-fs (loop3): Filesystem has been set read-only [ 259.798897][ T26] audit: type=1326 audit(1727419863.686:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 259.840355][ T6112] loop4: detected capacity change from 0 to 512 [ 259.847696][ T26] audit: type=1326 audit(1727419863.716:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 259.872000][ T26] audit: type=1326 audit(1727419863.716:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 259.888938][ T6112] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 259.895039][ T26] audit: type=1326 audit(1727419863.716:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 259.934753][ T26] audit: type=1326 audit(1727419863.726:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 259.962439][ T3690] radio-usb-si4713: probe of 5-1:0.128 failed with error -71 [ 259.963945][ T6112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 259.970196][ T3690] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 259.978801][ T6112] System zones: [ 259.985666][ T26] audit: type=1326 audit(1727419863.726:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f860d37df39 code=0x7ffc0000 [ 260.012531][ T6112] 1-12 [ 260.044496][ T6112] EXT4-fs (loop4): 1 truncate cleaned up [ 260.051349][ T6112] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 260.062508][ T946] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 260.072379][ T946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.080520][ T946] usb 2-1: Product: syz [ 260.088405][ T946] usb 2-1: Manufacturer: syz [ 260.089604][ T6112] syz.4.623 (pid 6112) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 260.093346][ T946] usb 2-1: SerialNumber: syz [ 260.115533][ T946] usb 2-1: config 0 descriptor?? [ 260.167625][ T26] audit: type=1326 audit(1727419863.726:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f860d37df73 code=0x7ffc0000 [ 260.191934][ T3690] usb 5-1: USB disconnect, device number 20 [ 260.241997][ T26] audit: type=1326 audit(1727419863.726:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f860d37ca1f code=0x7ffc0000 [ 260.272346][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 260.284507][ T26] audit: type=1326 audit(1727419863.726:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f860d37dfc7 code=0x7ffc0000 [ 260.291214][ T3652] EXT4-fs (loop4): unmounting filesystem. [ 260.783238][ T946] usb 2-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 261.043732][ T946] usb 2-1: failed to fetch extended address, random address set [ 261.424750][ T946] usb 2-1: USB disconnect, device number 22 [ 261.502174][ T7] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 261.644561][ T6136] loop4: detected capacity change from 0 to 256 [ 262.327597][ T4357] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.337385][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'. [ 262.512177][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 262.636447][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 262.659234][ T7] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 262.698561][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.714491][ T3629] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 262.738872][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.765185][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.797390][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 262.827698][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.932448][ T3690] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 263.112382][ T3683] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 263.212665][ T3690] usb 5-1: Using ep0 maxpacket: 8 [ 263.376199][ T3690] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 263.389564][ T3690] usb 5-1: config 0 has no interface number 0 [ 263.552763][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.572400][ T3690] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 263.585920][ T3690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.590631][ T6153] loop1: detected capacity change from 0 to 512 [ 263.601584][ T7] usbtmc 1-1:16.0: bulk endpoints not found [ 263.607562][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.607611][ T3683] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.607639][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.643051][ T3690] usb 5-1: Product: syz [ 263.647580][ T3690] usb 5-1: Manufacturer: syz [ 263.652788][ T3690] usb 5-1: SerialNumber: syz [ 263.658080][ T6153] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.636: Failed to acquire dquot type 0 [ 263.671032][ T3690] usb 5-1: config 0 descriptor?? [ 263.677623][ T3683] usb 4-1: config 0 descriptor?? [ 263.686653][ T6153] EXT4-fs (loop1): Remounting filesystem read-only [ 263.693529][ T6153] EXT4-fs (loop1): 1 orphan inode deleted [ 263.699313][ T6153] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 263.708764][ T6153] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038 (0x7fffffff) [ 263.724617][ T3690] radio-usb-si4713 5-1:0.128: Si4713 development board discovered: (10C4:8244) [ 263.782419][ T3629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.798899][ T3629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.821083][ T3629] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.830552][ T3629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.859528][ T3629] usb 3-1: config 0 descriptor?? [ 264.023160][ T6158] syz.1.636[6158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.023675][ T6158] syz.1.636[6158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.652399][ T3629] usb 3-1: string descriptor 0 read error: -71 [ 264.652452][ T3683] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 264.692232][ T3629] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 264.701121][ T3629] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 264.707875][ T3683] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 264.719610][ T3629] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 264.722001][ T3683] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 264.734684][ T3629] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 264.751348][ T3683] usb 4-1: USB disconnect, device number 16 [ 264.756305][ T3629] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 264.795621][ T3629] usb 3-1: USB disconnect, device number 19 [ 264.903596][ T3874] EXT4-fs (loop1): unmounting filesystem. [ 264.973345][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 265.092350][ T3690] radio-usb-si4713: probe of 5-1:0.128 failed with error -71 [ 265.104463][ T3690] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 265.113590][ T3690] usb 5-1: USB disconnect, device number 21 [ 265.297114][ T3629] usb 1-1: USB disconnect, device number 26 [ 265.438786][ T6170] loop3: detected capacity change from 0 to 256 [ 265.727231][ T6170] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 267.126593][ T3629] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 267.446787][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 267.530257][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 268.460474][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 269.178012][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.186901][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.195573][ T3629] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 269.209502][ T3629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.218110][ T3629] usb 1-1: Product: syz [ 269.225308][ T3629] usb 1-1: config 0 descriptor?? [ 269.243013][ T3629] usb 1-1: can't set config #0, error -71 [ 269.258001][ T3629] usb 1-1: USB disconnect, device number 27 [ 269.489009][ T6186] loop4: detected capacity change from 0 to 40427 [ 269.522345][ T3681] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 269.535037][ T6186] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 269.549146][ T6186] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 269.603538][ T6186] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 269.622175][ T3629] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 269.699634][ T6186] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 269.729074][ T6186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 269.772332][ T3681] usb 3-1: Using ep0 maxpacket: 8 [ 269.872396][ T3629] usb 1-1: Using ep0 maxpacket: 8 [ 269.893142][ T3681] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 269.912849][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 269.912867][ T26] audit: type=1326 audit(1727419873.796:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3877df39 code=0x7ffc0000 [ 269.943061][ T3681] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.986867][ T3681] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.998060][ T3629] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 270.026138][ T3629] usb 1-1: config 0 has no interface number 0 [ 270.073159][ T3681] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 270.649369][ T3681] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.667280][ T3681] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.678030][ T3681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.022698][ T3629] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 272.270932][ T26] audit: type=1326 audit(1727419873.846:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d3877df39 code=0x7ffc0000 [ 272.363189][ T3629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.377224][ T3629] usb 1-1: Product: syz [ 272.385089][ T3629] usb 1-1: Manufacturer: syz [ 272.393375][ T3629] usb 1-1: SerialNumber: syz [ 272.411860][ T3629] usb 1-1: config 0 descriptor?? [ 272.422409][ T3681] usb 3-1: can't set config #16, error -71 [ 272.446791][ T3681] usb 3-1: USB disconnect, device number 20 [ 272.476824][ T26] audit: type=1326 audit(1727419873.846:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3877df39 code=0x7ffc0000 [ 272.532176][ T26] audit: type=1326 audit(1727419873.846:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3877df39 code=0x7ffc0000 [ 272.580833][ T3629] usb 1-1: can't set config #0, error -71 [ 272.601114][ T3629] usb 1-1: USB disconnect, device number 28 [ 272.631202][ T26] audit: type=1326 audit(1727419873.846:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0d3877df39 code=0x7ffc0000 [ 272.705231][ T26] audit: type=1326 audit(1727419873.846:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3877df39 code=0x7ffc0000 [ 272.730109][ T26] audit: type=1326 audit(1727419873.846:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3877df39 code=0x7ffc0000 [ 272.808785][ T26] audit: type=1326 audit(1727419873.856:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0d3877df39 code=0x7ffc0000 [ 272.858274][ T26] audit: type=1326 audit(1727419873.856:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3877df39 code=0x7ffc0000 [ 272.888802][ T26] audit: type=1326 audit(1727419873.856:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3877df39 code=0x7ffc0000 [ 273.085142][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 273.108812][ T6231] loop2: detected capacity change from 0 to 512 [ 273.141585][ T6231] EXT4-fs (loop2): orphan cleanup on readonly fs [ 273.161916][ T6231] EXT4-fs error (device loop2): ext4_find_extent:936: inode #4: comm syz.2.661: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 273.195665][ T6231] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 273.222665][ T6231] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 273.229749][ T6231] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 273.244023][ T6233] loop0: detected capacity change from 0 to 515 [ 273.326803][ T6233] EXT4-fs: Ignoring removed bh option [ 273.351203][ T6233] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 274.250791][ T4580] EXT4-fs (loop2): unmounting filesystem. [ 274.281048][ T6246] loop3: detected capacity change from 0 to 128 [ 274.304171][ T6246] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 275.516157][ T6233] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 277.247529][ T27] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 277.512611][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 277.596475][ T7] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 277.662367][ T27] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 277.679204][ T27] usb 5-1: config 0 has no interface number 0 [ 277.762020][ T6274] [ 277.764411][ T6274] ============================================ [ 277.770594][ T6274] WARNING: possible recursive locking detected [ 277.776769][ T6274] 6.1.111-syzkaller #0 Not tainted [ 277.781894][ T6274] -------------------------------------------- [ 277.788054][ T6274] syz.1.671/6274 is trying to acquire lock: [ 277.794046][ T6274] ffff888020730458 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x1c0/0x5e0 [ 277.803152][ T6274] [ 277.803152][ T6274] but task is already holding lock: [ 277.810526][ T6274] ffff88807d18b8d8 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x1c0/0x5e0 [ 277.819753][ T6274] [ 277.819753][ T6274] other info that might help us debug this: [ 277.827837][ T6274] Possible unsafe locking scenario: [ 277.827837][ T6274] [ 277.835302][ T6274] CPU0 [ 277.838597][ T6274] ---- [ 277.841891][ T6274] lock(_xmit_ETHER#2); [ 277.846175][ T6274] lock(_xmit_ETHER#2); [ 277.850455][ T6274] [ 277.850455][ T6274] *** DEADLOCK *** [ 277.850455][ T6274] [ 277.853768][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 277.858593][ T6274] May be due to missing lock nesting notation [ 277.858593][ T6274] [ 277.858602][ T6274] 13 locks held by syz.1.671/6274: [ 277.858616][ T6274] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: rawv6_send_hdrinc+0xa8b/0x1850 [ 277.886913][ T6274] #1: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x698/0x15f0 [ 277.896861][ T6274] #2: ffffffff8d32b060 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d6/0x3cf0 [ 277.906815][ T6274] #3: ffff88805a97c258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x131b/0x3cf0 [ 277.919291][ T6274] #4: ffff88807d18b8d8 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x1c0/0x5e0 [ 277.928791][ T6274] #5: ffff88802deb87f0 (k-slock-AF_INET6){+.-.}-{2:2}, at: icmp6_send+0xc10/0x2160 [ 277.938202][ T6274] #6: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: icmp6_send+0xb70/0x2160 [ 277.947348][ T6274] #7: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: ip6_send_skb+0x110/0x3b0 [ 277.956580][ T6274] #8: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x698/0x15f0 [ 277.966424][ T6274] #9: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: ndisc_send_skb+0x5a8/0x14e0 [ 277.975909][ T6274] #10: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x698/0x15f0 [ 277.982399][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 277.985830][ T6274] #11: ffffffff8d32b060 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d6/0x3cf0 [ 277.985908][ T6274] #12: ffff88802ae18258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x131b/0x3cf0 [ 277.985965][ T6274] [ 277.985965][ T6274] stack backtrace: [ 277.985972][ T6274] CPU: 1 PID: 6274 Comm: syz.1.671 Not tainted 6.1.111-syzkaller #0 [ 277.985993][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.986005][ T6274] Call Trace: [ 277.986012][ T6274] [ 277.986021][ T6274] dump_stack_lvl+0x1e3/0x2cb [ 277.986057][ T6274] ? nf_tcp_handle_invalid+0x642/0x642 [ 277.986101][ T6274] ? panic+0x764/0x764 [ 277.986128][ T6274] validate_chain+0x4711/0x5950 [ 277.986156][ T6274] ? mark_lock+0x9a/0x340 [ 277.986188][ T6274] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 277.986221][ T6274] ? reacquire_held_locks+0x660/0x660 [ 277.986242][ T6274] ? do_raw_spin_unlock+0x137/0x8a0 [ 277.986265][ T6274] ? lockdep_hardirqs_on+0x94/0x130 [ 277.986290][ T6274] ? reacquire_held_locks+0x660/0x660 [ 277.986309][ T6274] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 277.986338][ T6274] ? stack_trace_save+0x113/0x1c0 [ 277.986368][ T6274] ? stack_trace_snprint+0xe0/0xe0 [ 277.995494][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.004464][ T6274] ? reacquire_held_locks+0x660/0x660 [ 278.004493][ T6274] ? __stack_depot_save+0x3f5/0x470 [ 278.004519][ T6274] ? mark_lock+0x9a/0x340 [ 278.004551][ T6274] __lock_acquire+0x125b/0x1f80 [ 278.004590][ T6274] lock_acquire+0x1f8/0x5a0 [ 278.004618][ T6274] ? sch_direct_xmit+0x1c0/0x5e0 [ 278.004647][ T6274] ? read_lock_is_recursive+0x10/0x10 [ 278.004681][ T6274] ? validate_xmit_skb_list+0x130/0x130 [ 278.004715][ T6274] _raw_spin_lock+0x2a/0x40 [ 278.004740][ T6274] ? sch_direct_xmit+0x1c0/0x5e0 [ 278.004777][ T6274] sch_direct_xmit+0x1c0/0x5e0 [ 278.004808][ T6274] ? mrp_pdu_append_vecattr_event+0x1630/0x1630 [ 278.004835][ T6274] ? ieee80211_stop+0x480/0x480 [ 278.004874][ T6274] __dev_queue_xmit+0x1ace/0x3cf0 [ 278.021907][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.023284][ T6274] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 278.023317][ T6274] ? netdev_core_pick_tx+0x320/0x320 [ 278.023341][ T6274] ? neigh_event_send+0x120/0x120 [ 278.031907][ T7] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 278.041348][ T6274] ? neigh_resolve_output+0x2de/0x730 [ 278.041381][ T6274] ? _local_bh_enable+0xa0/0xa0 [ 278.041413][ T6274] ? eth_header+0x118/0x1e0 [ 278.045355][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.047634][ T6274] ? memcpy+0x3c/0x60 [ 278.047663][ T6274] ? eth_header+0x118/0x1e0 [ 278.052790][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.057761][ T6274] ? llc_sysctl_exit+0x60/0x60 [ 278.057786][ T6274] ? neigh_resolve_output+0x610/0x730 [ 278.057820][ T6274] ip6_finish_output2+0xee6/0x15f0 [ 278.062041][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.066709][ T6274] ? __lock_acquire+0x1f80/0x1f80 [ 278.117093][ T7] usbtmc 1-1:16.0: bulk endpoints not found [ 278.123836][ T6274] ? ip6_finish_output2+0x698/0x15f0 [ 278.123881][ T6274] ? nf_hook+0x450/0x450 [ 278.123913][ T6274] ? ip6_mtu+0x7d/0x3e0 [ 278.322775][ T6274] ip6_finish_output+0x6a0/0xa80 [ 278.327808][ T6274] ndisc_send_skb+0xbab/0x14e0 [ 278.332626][ T6274] ? ndisc_send_skb+0x5a8/0x14e0 [ 278.337623][ T6274] ? ndisc_mc_map+0x7d0/0x7d0 [ 278.342302][ T6274] ? skb_dst+0xd0/0xd0 [ 278.346384][ T6274] ? memcpy+0x3c/0x60 [ 278.350396][ T6274] ? ndisc_alloc_skb+0x2c0/0x2c0 [ 278.355351][ T6274] ? ipv6_get_lladdr+0x356/0x3c0 [ 278.360309][ T6274] ? ipv6_get_lladdr+0x28/0x3c0 [ 278.365203][ T6274] ndisc_solicit+0x48a/0x690 [ 278.369798][ T6274] ? __neigh_event_send+0xee1/0x1610 [ 278.375092][ T6274] ? ndisc_cleanup+0x30/0x30 [ 278.379685][ T6274] ? ndisc_cleanup+0x30/0x30 [ 278.384276][ T6274] __neigh_event_send+0xf30/0x1610 [ 278.389415][ T6274] neigh_resolve_output+0x1b4/0x730 [ 278.394622][ T6274] ip6_finish_output2+0xee6/0x15f0 [ 278.399740][ T6274] ? __lock_acquire+0x1f80/0x1f80 [ 278.404782][ T6274] ? ip6_finish_output2+0x698/0x15f0 [ 278.410071][ T6274] ? nf_hook+0x450/0x450 [ 278.414329][ T6274] ? ip6_mtu+0x7d/0x3e0 [ 278.418505][ T6274] ip6_finish_output+0x6a0/0xa80 [ 278.423461][ T6274] ? ip6_send_skb+0x110/0x3b0 [ 278.428165][ T6274] ip6_send_skb+0x1c2/0x3b0 [ 278.432693][ T6274] ? icmp6_send+0xb70/0x2160 [ 278.437294][ T6274] icmp6_send+0x166f/0x2160 [ 278.441801][ T6274] ? icmp6_send+0xb70/0x2160 [ 278.446403][ T6274] ? icmpv6_push_pending_frames+0x4a0/0x4a0 [ 278.452297][ T6274] ? ip6_neigh_lookup+0x138/0x580 [ 278.457316][ T6274] ? __lock_acquire+0x1f80/0x1f80 [ 278.462349][ T6274] ? ip6_neigh_lookup+0x447/0x580 [ 278.467370][ T6274] ? rt6_uncached_list_del+0x180/0x180 [ 278.472848][ T6274] ip6_link_failure+0x38/0x4e0 [ 278.477620][ T6274] ? ip6_negative_advice+0x3f0/0x3f0 [ 278.482906][ T6274] ip_tunnel_xmit+0x1905/0x2cc0 [ 278.487759][ T6274] ? reacquire_held_locks+0x660/0x660 [ 278.493144][ T6274] ? mark_lock+0x9a/0x340 [ 278.497503][ T6274] ? tnl_update_pmtu+0x10b0/0x10b0 [ 278.502609][ T6274] ? __lock_acquire+0x125b/0x1f80 [ 278.507641][ T6274] ? gre_build_header+0x25b/0x9a0 [ 278.512691][ T6274] erspan_xmit+0xaf4/0x1590 [ 278.517229][ T6274] ? read_lock_is_recursive+0x10/0x10 [ 278.522607][ T6274] dev_hard_start_xmit+0x261/0x8c0 [ 278.527721][ T6274] sch_direct_xmit+0x2b2/0x5e0 [ 278.532487][ T6274] ? mrp_pdu_append_vecattr_event+0x1630/0x1630 [ 278.538732][ T6274] __dev_queue_xmit+0x1ace/0x3cf0 [ 278.543762][ T6274] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 278.548873][ T6274] ? netdev_core_pick_tx+0x320/0x320 [ 278.554159][ T6274] ? neigh_event_send+0x120/0x120 [ 278.559181][ T6274] ? neigh_resolve_output+0x2de/0x730 [ 278.564567][ T6274] ? _local_bh_enable+0xa0/0xa0 [ 278.569444][ T6274] ? eth_header+0x118/0x1e0 [ 278.574046][ T6274] ? memcpy+0x3c/0x60 [ 278.578125][ T6274] ? eth_header+0x118/0x1e0 [ 278.582647][ T6274] ? llc_sysctl_exit+0x60/0x60 [ 278.587436][ T6274] ? neigh_resolve_output+0x610/0x730 [ 278.592840][ T6274] ip6_finish_output2+0xee6/0x15f0 [ 278.597972][ T6274] ? __lock_acquire+0x1f80/0x1f80 [ 278.603021][ T6274] ? ip6_finish_output2+0x698/0x15f0 [ 278.608312][ T6274] ? nf_hook+0x450/0x450 [ 278.612574][ T6274] ? ip6_mtu+0x7d/0x3e0 [ 278.616734][ T6274] ip6_finish_output+0x6a0/0xa80 [ 278.621683][ T6274] ? rawv6_send_hdrinc+0xa8b/0x1850 [ 278.626894][ T6274] rawv6_send_hdrinc+0xd15/0x1850 [ 278.631937][ T6274] ? rawv6_probe_proto_opt+0x300/0x300 [ 278.637406][ T6274] ? ip6_dst_lookup_flow+0x13a/0x170 [ 278.642713][ T6274] ? rawv6_push_pending_frames+0xa00/0xa00 [ 278.648555][ T6274] ? ip6_dst_lookup_tail+0x1470/0x1470 [ 278.654030][ T6274] ? rawv6_sendmsg+0xe19/0x2150 [ 278.658902][ T6274] rawv6_sendmsg+0x1648/0x2150 [ 278.663701][ T6274] ? compat_rawv6_ioctl+0x60/0x60 [ 278.668759][ T6274] ? aa_sk_perm+0x92d/0xa60 [ 278.673283][ T6274] ? aa_af_perm+0x350/0x350 [ 278.677810][ T6274] ? sock_rps_record_flow+0x1a/0x3f0 [ 278.683153][ T6274] ? inet_sendmsg+0x81/0x310 [ 278.687780][ T6274] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 278.693108][ T6274] ? security_socket_sendmsg+0x7d/0xa0 [ 278.698576][ T6274] ? inet_send_prepare+0x250/0x250 [ 278.703720][ T6274] ____sys_sendmsg+0x5a5/0x8f0 [ 278.708495][ T6274] ? __sys_sendmsg_sock+0x30/0x30 [ 278.713532][ T6274] __sys_sendmmsg+0x3ab/0x730 [ 278.718226][ T6274] ? __ia32_sys_sendmsg+0x90/0x90 [ 278.723268][ T6274] ? futex_unqueue+0xc7/0xf0 [ 278.727878][ T6274] ? futex_wait_setup+0x340/0x340 [ 278.732924][ T6274] ? futex_wake+0x4bd/0x590 [ 278.737457][ T6274] ? do_futex+0x3b5/0x490 [ 278.741822][ T6274] ? print_irqtrace_events+0x210/0x210 [ 278.747311][ T6274] ? syscall_enter_from_user_mode+0x2e/0x230 [ 278.753311][ T6274] __x64_sys_sendmmsg+0x9c/0xb0 [ 278.758172][ T6274] do_syscall_64+0x3b/0xb0 [ 278.762595][ T6274] ? clear_bhb_loop+0x45/0xa0 [ 278.767285][ T6274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.773259][ T6274] RIP: 0033:0x7f672af7df39 [ 278.777690][ T6274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.797316][ T6274] RSP: 002b:00007f672bd07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 278.805735][ T6274] RAX: ffffffffffffffda RBX: 00007f672b135f80 RCX: 00007f672af7df39 [ 278.813713][ T6274] RDX: 0000000000000002 RSI: 0000000020001e80 RDI: 0000000000000003 [ 278.821711][ T6274] RBP: 00007f672aff0216 R08: 0000000000000000 R09: 0000000000000000 [ 278.829705][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.837675][ T6274] R13: 0000000000000000 R14: 00007f672b135f80 R15: 00007fff62024068 [ 278.845757][ T6274] [ 278.848861][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.871820][ T6274] syz.1.671 (6274) used greatest stack depth: 17848 bytes left [ 278.972233][ T27] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 278.981408][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.989464][ T27] usb 5-1: Product: syz [ 278.993725][ T27] usb 5-1: Manufacturer: syz [ 278.998371][ T27] usb 5-1: SerialNumber: syz [ 279.004831][ T27] usb 5-1: config 0 descriptor?? [ 279.053576][ T27] radio-usb-si4713 5-1:0.128: Si4713 development board discovered: (10C4:8244) [ 279.699224][ T7] usb 1-1: USB disconnect, device number 29 [ 280.222226][ T27] radio-usb-si4713: probe of 5-1:0.128 failed with error -71 [ 280.229796][ T27] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 280.240930][ T27] usb 5-1: USB disconnect, device number 22