last executing test programs: 6.826421132s ago: executing program 1 (id=530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000400)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 6.671040633s ago: executing program 3 (id=532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, 0x0, 0x0) 6.442569741s ago: executing program 3 (id=534): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80111500, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 6.441425441s ago: executing program 1 (id=536): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000e7a19b84e3392c010000000000000000000000000a20000000000a0500000000000000010000000900010073797a300000000020000000020a01030000000000000000000000080900010073797a300000000020000000060a08040000000000000000010000000900010073797a300000000014000000110001000000000000"], 0x88}}, 0xc010800) r1 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$sock_int(r5, 0x28, 0x1, 0x0, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r3, &(0x7f00000000c0)=""/29, 0x1d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000000000001d00000008000300", @ANYRES32], 0x28}}, 0x0) r8 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) close(r2) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000580)}, {&(0x7f00000008c0)="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", 0x142}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}, {&(0x7f0000000380)="5597deaa11c6c960904b5954f93601206e41506c5e25b38b350b6f927d6c05762148baeecd3fc6a511a8cb25878a7f917e66fdafb3d0d98f79b689b840b40f10df1f7d464389b2b89be8f13a7bf7245226433215078a8a14418cb8062b8a9b9fcc817820f4474193afa1b942b3e63ba771336af0046c958eb9074fc9a4", 0x7d}, {&(0x7f0000000200)="e35d09d034982cdb7a4a98750c2d6623c7f67da6492fc61d0a24e1fce82908f0b09b6e51bd2255ef53a2e3170cc67cfb49866e7f65b2619ee824713497527743a9b2", 0x9d}, {&(0x7f00000004c0)="b64365a9139e8dc9a10bac6398e93911311f660b65841c2058d7aed0c317d0a0b0b959fdff9eb1abf8cfbca21ba3c3e3275f276294977ddd66816c0378548e0548e367432996334dacd643097037ad89cc80ac8659c183d29d07c6f03e0ad5a97136adc02c1ed8d1754648edc52f7e7b55381c5f4ec6976b069b573cf169d92e5f0b48d8f0d1", 0x86}], 0x6, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x158}, 0x0) socket(0x9, 0x6, 0x0) 6.277345602s ago: executing program 0 (id=537): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a00009040000010301010009210008000122030009", @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001100)={0x44, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.164502225s ago: executing program 1 (id=538): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) 5.646570421s ago: executing program 1 (id=540): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x2010000, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172640000008000200000ff5f78617474722c646973636172642c7768696e745f6d6f64653d757365722d626173651a9603642c6e6f696e6c696e48c8b8bd9db81b403801c199ffba3691ebc17570972cb0aab560ecd4a62772a15b05a04f8812838b6d154a85515cf6a313e8043c58707a92ff4e0d69fdd8fd380734190ccaff409ba8953c23b0c6f1c09d49447f1e1d0cedb97bb4daf266dcc2cec17b92cbbe1303abfc278ad789ffe0f34862de20f795a4b968385446d1964503b1815a337e284216bd6809000000000004000000d593d55b7516ceab7cd6f2aebee0e3b4e72511cc77b8aeb6cb60fe02009fbd67bd8d700393ec17bc2e14a4811bdefdda2f5f5ebead17e18e7fa077c6bf2fe6d11ac484b13898ad0c52acbc155d3426"], 0x1, 0x54f8, &(0x7f0000010140)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1a3341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fallocate(r1, 0x4c, 0x0, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) fallocate(r0, 0x8, 0x2000, 0x7000) 4.370415045s ago: executing program 3 (id=546): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) 4.153315179s ago: executing program 3 (id=547): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x80fe) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="000100001a0001000000000000000000fe880000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000662b0000002001000000000000000000000000000100000000000000"], 0x100}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffff800, 0x0) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000180)=""/239) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)={0x600400, 0x0, 0x25}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x6}, 0x48) 3.735036983s ago: executing program 4 (id=550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 3.52876302s ago: executing program 4 (id=552): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x3) getsockopt$inet6_mreq(r1, 0x11, 0x1, 0x0, &(0x7f00000004c0)) 3.148712959s ago: executing program 0 (id=553): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={0x0, 0x4, 0x4}, 0x8) 3.024433445s ago: executing program 4 (id=554): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.91710033s ago: executing program 3 (id=556): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80111500, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 2.882954426s ago: executing program 0 (id=557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) 2.789882748s ago: executing program 4 (id=558): fsopen(&(0x7f0000000040)='efs\x00', 0x0) 2.788624668s ago: executing program 1 (id=559): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x4008810) 2.651201771s ago: executing program 4 (id=561): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, 0x0, 0x20048000) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmsg$sock(r1, &(0x7f00000034c0)={&(0x7f0000005440)=@caif, 0x80, 0x0}, 0x0) sendfile(r1, r0, 0x0, 0xffefffff) 2.546818244s ago: executing program 0 (id=562): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000300)=ANY=[@ANYBLOB="d0000000080211000000080211000001ffffffffffff0000030000000000000000d8aae09a2ac0054ecc14f00a16a0cac2207b63f71fc3d345c4f51147a94e2c8b9d43"], 0x21) socket(0x18, 0x0, 0x0) connect$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 1.529487356s ago: executing program 1 (id=564): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a00009040000010301010009210008000122030009", @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001100)={0x44, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.416631923s ago: executing program 4 (id=567): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="000100001a0001000000000000000000fe880000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000662b0000002001000000000000000000000000000100000000000000"], 0x100}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffff800, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000180)=""/239) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)={0x600400, 0x0, 0x25}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x6}, 0x48) 1.085605338s ago: executing program 2 (id=568): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.005585339s ago: executing program 3 (id=569): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001100)={0x44, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRES16, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 821.45056ms ago: executing program 2 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0) 732.917279ms ago: executing program 2 (id=571): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x1a, 0x0) 521.51881ms ago: executing program 2 (id=572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pread64(r0, 0x0, 0x0, 0x0) 393.41969ms ago: executing program 0 (id=573): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000e7a19b84e3392c010000000000000000000000000a20000000000a0500000000000000010000000900010073797a300000000020000000020a01030000000000000000000000080900010073797a300000000020000000060a08040000000000000000010000000900010073797a300000000014000000110001000000000000"], 0x88}}, 0xc010800) r1 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, 0x0, 0x0) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$sock_int(r5, 0x28, 0x1, 0x0, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r3, &(0x7f00000000c0)=""/29, 0x1d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000000000001d00000008000300", @ANYRES32], 0x28}}, 0x0) r8 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) close(r2) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000580)}, {&(0x7f00000008c0)="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", 0x142}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}, {&(0x7f0000000380)="5597deaa11c6c960904b5954f93601206e41506c5e25b38b350b6f927d6c05762148baeecd3fc6a511a8cb25878a7f917e66fdafb3d0d98f79b689b840b40f10df1f7d464389b2b89be8f13a7bf7245226433215078a8a14418cb8062b8a9b9fcc817820f4474193afa1b942b3e63ba771336af0046c958eb9074fc9a4", 0x7d}, {&(0x7f0000000200)="e35d09d034982cdb7a4a98750c2d6623c7f67da6492fc61d0a24e1fce82908f0b09b6e51bd2255ef53a2e3170cc67cfb49866e7f65b2619ee824713497527743a9b2", 0x9d}, {&(0x7f00000004c0)="b64365a9139e8dc9a10bac6398e93911311f660b65841c2058d7aed0c317d0a0b0b959fdff9eb1abf8cfbca21ba3c3e3275f276294977ddd66816c0378548e0548e367432996334dacd643097037ad89cc80ac8659c183d29d07c6f03e0ad5a97136adc02c1ed8d1754648edc52f7e7b55381c5f4ec6976b069b573cf169d92e5f0b48d8f0d1", 0x86}], 0x6, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x158}, 0x0) socket(0x9, 0x6, 0x0) 109.281633ms ago: executing program 2 (id=574): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r2, 0x4, 0x4}, 0x8) 51.210113ms ago: executing program 0 (id=575): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x4008810) 0s ago: executing program 2 (id=576): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x3) getsockopt$inet6_mreq(r1, 0x11, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 748][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.456800][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.466546][ T5231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.478077][ T5231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.487572][ T5231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.497364][ T5231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.525924][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.538418][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.549970][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.560646][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.572972][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.583697][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.595189][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.606577][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.617359][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.627592][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.638185][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.650510][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.686900][ T5237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.696993][ T5237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.706779][ T5237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.724993][ T5237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.754296][ T5230] veth0_macvtap: entered promiscuous mode [ 74.773165][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.784760][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.795691][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.806586][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.818211][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.823146][ T5310] loop0: detected capacity change from 0 to 256 [ 74.836160][ T5310] exfat: Deprecated parameter 'namecase' [ 74.841012][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.841904][ T5310] exfat: Deprecated parameter 'utf8' [ 74.862709][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.908114][ T5226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.912966][ T5310] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 74.928123][ T5226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.939359][ T5226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.952007][ T5226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.964753][ T5230] veth1_macvtap: entered promiscuous mode [ 75.061962][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.091669][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.108418][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.119423][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.138046][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.150625][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.167740][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.178907][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.202661][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.233728][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.250898][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.262479][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.274463][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.289591][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.304646][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.373896][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.388107][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.447980][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.471766][ T54] Bluetooth: hci0: command tx timeout [ 75.572348][ T5229] Bluetooth: hci4: command tx timeout [ 75.578199][ T5229] Bluetooth: hci3: command tx timeout [ 75.584599][ T5229] Bluetooth: hci2: command tx timeout [ 75.591409][ T54] Bluetooth: hci1: command tx timeout [ 75.954295][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.963724][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.973399][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.982471][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.993918][ T968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.017422][ T968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.048052][ T968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.056102][ T968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.128933][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.146047][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.231464][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.247792][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.312140][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.327609][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.521998][ T968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.628532][ T968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.273318][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.296190][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.397035][ T5289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.487346][ T5289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.560727][ T5224] Bluetooth: hci0: command tx timeout [ 77.624805][ T5224] Bluetooth: hci1: command tx timeout [ 77.624825][ T54] Bluetooth: hci2: command tx timeout [ 77.624863][ T54] Bluetooth: hci3: command tx timeout [ 77.630321][ T5224] Bluetooth: hci4: command tx timeout [ 77.896543][ T5330] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.402601][ T5319] syz.0.6 (5319) used greatest stack depth: 18488 bytes left [ 78.752595][ T5277] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.891546][ T5339] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.684017][ T5277] usb 3-1: Using ep0 maxpacket: 32 [ 79.700608][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.729970][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 79.750031][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.790033][ T5277] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 79.823506][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.877438][ T5277] usb 3-1: config 0 descriptor?? [ 79.972653][ T5326] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 80.233856][ T5347] loop0: detected capacity change from 0 to 2048 [ 80.306320][ T5347] loop0: p1 p3 [ 80.312454][ T5347] loop0: p1 size 33024 extends beyond EOD, truncated [ 80.339135][ T5347] loop0: p3 start 4284289 is beyond EOD, truncated [ 80.832639][ T5277] hub 3-1:0.0: USB hub found [ 80.846547][ T5277] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 80.871526][ T5277] usbhid 3-1:0.0: can't add hid device: -71 [ 80.877640][ T5277] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 81.015905][ T5236] udevd[5236]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 81.107837][ T5236] udevd[5236]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 81.215529][ T5277] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 81.253775][ T5277] usb 3-1: device reset changed ep0 maxpacket size! [ 81.273349][ T5277] usb 3-1: USB disconnect, device number 2 [ 81.354771][ T5343] loop1: detected capacity change from 0 to 40427 [ 81.417703][ T5343] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.549669][ T5343] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.652655][ T5277] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.600008][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 82.609723][ T5277] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 82.640049][ T5277] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.660631][ T5277] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.676325][ T5277] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.707256][ T5277] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.737425][ T5277] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.754430][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.006640][ T5277] usb 3-1: GET_CAPABILITIES returned 0 [ 83.020043][ T5277] usbtmc 3-1:16.0: can't read capabilities [ 83.275213][ T5351] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 83.307452][ T5277] usb 3-1: USB disconnect, device number 3 [ 83.830253][ T5380] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.270011][ T5376] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.588154][ T5376] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 84.774407][ T5376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.990243][ T5376] usb 5-1: Product: syz [ 84.994472][ T5376] usb 5-1: Manufacturer: syz [ 84.999092][ T5376] usb 5-1: SerialNumber: syz [ 85.057161][ T5376] usb 5-1: config 0 descriptor?? [ 85.366700][ T5387] Zero length message leads to an empty skb [ 85.413494][ T5387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22'. [ 85.530208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.624555][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 85.668321][ T5376] mos7840 5-1:0.0: required endpoints missing [ 85.719577][ T5376] usb 5-1: USB disconnect, device number 2 [ 85.792665][ T5418] ptrace attach of "./syz-executor exec"[5222] was attempted by "./syz-executor exec"[5418] [ 86.109989][ T5307] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.902344][ T5428] tty tty26: ldisc open failed (-12), clearing slot 25 [ 87.163034][ T5307] usb 1-1: device descriptor read/64, error -71 [ 87.183502][ T8] cfg80211: failed to load regulatory.db [ 87.340066][ T5376] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.470001][ T5307] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.554743][ T5376] usb 4-1: Using ep0 maxpacket: 8 [ 87.590468][ T5376] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 87.610003][ T5376] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.641385][ T5376] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.662352][ T5376] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.673186][ T5307] usb 1-1: device descriptor read/64, error -71 [ 87.698687][ T5376] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.738936][ T5376] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.783442][ T5376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.792392][ T5307] usb usb1-port1: attempt power cycle [ 88.056437][ T5376] usb 4-1: GET_CAPABILITIES returned 0 [ 88.075282][ T5376] usbtmc 4-1:16.0: can't read capabilities [ 88.242230][ T5307] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.310886][ T5307] usb 1-1: device descriptor read/8, error -71 [ 88.345879][ T5432] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 88.366206][ T5376] usb 4-1: USB disconnect, device number 2 [ 88.590008][ T5307] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.661015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 88.749686][ T5307] usb 1-1: device descriptor read/8, error -71 [ 88.910111][ T5307] usb usb1-port1: unable to enumerate USB device [ 89.173870][ T5447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 89.230853][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 89.300299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.339995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 89.351200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 89.383982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 90.100321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.110560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.222754][ T5447] hsr_slave_1 (unregistering): left promiscuous mode [ 90.980586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.673218][ T5465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.43'. [ 91.888798][ T5401] coredump: 12(syz.3.24): written to core: VMAs: 35, size 97349632; core: 59929598 bytes, pos 97357824 [ 92.269987][ T5277] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.361050][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 93.374242][ T5277] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 93.387021][ T5277] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.175211][ T5277] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.206541][ T5277] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.237054][ T5277] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.256258][ T5277] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.266627][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.502272][ T5277] usb 1-1: GET_CAPABILITIES returned 0 [ 94.530064][ T5277] usbtmc 1-1:16.0: can't read capabilities [ 94.830674][ T5473] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 94.841178][ T5277] usb 1-1: USB disconnect, device number 6 [ 95.840037][ T5307] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 95.858901][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.867724][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.875497][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.910405][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.918150][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.925778][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.050469][ T5307] usb 1-1: Using ep0 maxpacket: 16 [ 96.087537][ T5307] usb 1-1: config 0 has no interfaces? [ 96.106921][ T5307] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 96.155191][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.179908][ T5307] usb 1-1: Product: syz [ 96.184126][ T5307] usb 1-1: Manufacturer: syz [ 96.206368][ T5307] usb 1-1: SerialNumber: syz [ 96.222172][ T5307] usb 1-1: config 0 descriptor?? [ 96.680362][ T5500] chnl_net:caif_netlink_parms(): no params data found [ 98.024990][ T5224] Bluetooth: hci5: command tx timeout [ 98.180014][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.279822][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.586408][ T5500] bridge_slave_0: entered allmulticast mode [ 98.603773][ T5500] bridge_slave_0: entered promiscuous mode [ 98.639016][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.678230][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.701456][ T25] usb 1-1: USB disconnect, device number 7 [ 98.753071][ T5500] bridge_slave_1: entered allmulticast mode [ 98.819048][ T5500] bridge_slave_1: entered promiscuous mode [ 99.396460][ T5535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 99.428386][ T5500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.473193][ T5500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.648628][ T5500] team0: Port device team_slave_0 added [ 99.673814][ T5500] team0: Port device team_slave_1 added [ 99.848834][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.859774][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.894162][ T5530] loop1: detected capacity change from 0 to 2048 [ 100.202709][ T54] Bluetooth: hci5: command tx timeout [ 100.265129][ T5530] loop1: p1 p3 [ 100.268900][ T5530] loop1: p1 size 33024 extends beyond EOD, truncated [ 100.397287][ T5530] loop1: p3 start 4284289 is beyond EOD, truncated [ 100.569183][ T5500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.629634][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.653384][ T4680] loop1: p1 p3 [ 100.657087][ T4680] loop1: p1 size 33024 extends beyond EOD, truncated [ 100.660262][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.695131][ T4680] loop1: p3 start 4284289 is beyond EOD, truncated [ 100.719970][ T5500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.866208][ T5500] hsr_slave_0: entered promiscuous mode [ 100.876393][ T5500] hsr_slave_1: entered promiscuous mode [ 100.894699][ T5500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.919923][ T5500] Cannot create hsr debugfs directory [ 101.169215][ T5236] udevd[5236]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 101.728338][ T5562] netlink: 'syz.4.71': attribute type 4 has an invalid length. [ 101.785644][ T5568] netlink: 'syz.4.71': attribute type 4 has an invalid length. [ 102.214270][ T5500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.260291][ T5240] Bluetooth: hci6: command 0x1003 tx timeout [ 102.266864][ T5240] Bluetooth: hci5: command tx timeout [ 102.272592][ T5224] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 102.507455][ T5500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.679966][ T945] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.687950][ T5500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.710537][ T5581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'. [ 102.720269][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 102.784103][ T5582] hsr_slave_1 (unregistering): left promiscuous mode [ 102.820104][ T54] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 102.820115][ T5224] Bluetooth: hci7: command 0x1003 tx timeout [ 102.893634][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.916722][ T5500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.929301][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.977106][ T945] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.020181][ T945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.076893][ T945] usb 2-1: config 0 descriptor?? [ 103.265649][ T5500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.297001][ T5500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.333753][ T5500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.363865][ T5500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.461196][ T54] Bluetooth: hci5: command tx timeout [ 104.517358][ T29] audit: type=1326 audit(1723725511.282:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5575 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac73799b9 code=0x7ffc0000 [ 104.549402][ T5603] netlink: 'syz.4.82': attribute type 4 has an invalid length. [ 104.574194][ T5604] netlink: 'syz.4.82': attribute type 4 has an invalid length. [ 104.594914][ T5500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.596151][ T945] usb 2-1: string descriptor 0 read error: -71 [ 104.610051][ T29] audit: type=1326 audit(1723725511.332:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5575 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac73799b9 code=0x7ffc0000 [ 104.621393][ T945] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 104.655007][ T945] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 104.671185][ T945] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 104.686550][ T945] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 104.696174][ T945] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 104.832392][ T5609] loop0: detected capacity change from 0 to 16 [ 104.881850][ T5609] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff]‰çõ®#[8û¨ÞÏ+K·þ¬Wù䶓Ú?¸Ò‡í98 7' [ 104.935522][ T945] usb 2-1: USB disconnect, device number 2 [ 104.970598][ T5500] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.082412][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.089616][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.114736][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.121945][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.580727][ T5623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.88'. [ 105.585299][ T5621] loop0: detected capacity change from 0 to 2048 [ 105.660669][ T5621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.694596][ T5500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.725467][ T5598] loop3: detected capacity change from 0 to 40427 [ 105.739610][ T5598] F2FS-fs (loop3): Image doesn't support compression [ 105.748899][ T5598] F2FS-fs (loop3): Unrecognized mount option "prjquota=" or missing value [ 105.787795][ T5500] veth0_vlan: entered promiscuous mode [ 105.799509][ T5500] veth1_vlan: entered promiscuous mode [ 105.825470][ T5500] veth0_macvtap: entered promiscuous mode [ 105.836585][ T5500] veth1_macvtap: entered promiscuous mode [ 105.920949][ T5500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.982693][ T5500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.993335][ T5500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.004037][ T5500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.014082][ T5500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.025037][ T5500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.035609][ T5500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.046988][ T5500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.063204][ T5500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.129072][ T5500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.436645][ T5500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.487368][ T5500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.556667][ T5500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.900073][ T5277] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.919392][ T5500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.149128][ T5500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.284209][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.307044][ T5500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.399887][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.410041][ T5500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.443510][ T5277] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 107.461274][ T5500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.491216][ T5500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.493983][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.501244][ T5500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.519582][ T5500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.534031][ T5500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.545667][ T5500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.554608][ T5500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.555557][ T5222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.563403][ T5500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.563438][ T5500] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.646958][ T5277] usb 5-1: config 0 descriptor?? [ 107.768852][ T5289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.805069][ T5289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.945896][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.964298][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.115680][ T5277] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 108.519583][ T5279] usb 5-1: USB disconnect, device number 3 [ 108.579621][ T5660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'. [ 109.591206][ T5275] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.065393][ T5275] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 110.106565][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.145483][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.175854][ T5275] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 110.219993][ T5275] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 110.225151][ T5682] netlink: 'syz.4.104': attribute type 27 has an invalid length. [ 110.261044][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.302092][ T5275] usb 1-1: config 0 descriptor?? [ 110.598702][ T5693] loop3: detected capacity change from 0 to 128 [ 110.655093][ T5693] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.703964][ T5693] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.765273][ T5275] wacom 0003:056A:0331.0003: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 110.802806][ T29] audit: type=1804 audit(1723725517.562:4): pid=5693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.110" name="/newroot/22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=12 res=1 errno=0 [ 110.866721][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.875575][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.905001][ T5231] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.952016][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.983388][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.226830][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.246581][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.271907][ T5278] usb 1-1: USB disconnect, device number 8 [ 112.272544][ T5682] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.312908][ T5682] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.323434][ T5682] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.332787][ T5682] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.638603][ T5691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.109'. [ 112.847115][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 112.950224][ T5741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 113.056311][ T5744] loop4: detected capacity change from 0 to 128 [ 113.093892][ T5744] ======================================================= [ 113.093892][ T5744] WARNING: The mand mount option has been deprecated and [ 113.093892][ T5744] and is ignored by this kernel. Remove the mand [ 113.093892][ T5744] option from the mount to silence this warning. [ 113.093892][ T5744] ======================================================= [ 113.266068][ T5744] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.308992][ T5744] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.414034][ T5760] loop1: detected capacity change from 0 to 256 [ 114.451069][ T5230] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.462590][ T5762] loop3: detected capacity change from 0 to 128 [ 115.598121][ T5771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 115.737012][ T5778] 9pnet_fd: p9_fd_create_tcp (5778): problem connecting socket to 127.0.0.1 [ 116.492575][ T5776] loop0: detected capacity change from 0 to 512 [ 116.576326][ T5776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.625507][ T5776] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.695127][ T5785] input: syz0 as /devices/virtual/input/input8 [ 116.735931][ T5776] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.133: bg 0: block 18: invalid block bitmap [ 116.841718][ T5776] Quota error (device loop0): write_blk: dquota write failed [ 116.856903][ T5776] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 116.867205][ T5776] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.133: Failed to acquire dquot type 1 [ 116.867792][ T5786] Quota error (device loop0): write_blk: dquota write failed [ 116.925097][ T5786] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 116.945715][ T5786] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.133: Failed to acquire dquot type 1 [ 117.065446][ T5222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.125724][ T5289] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.352295][ T5289] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.432918][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 117.585029][ T5289] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.740855][ T5289] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.993428][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.006791][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.020119][ T5224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.031094][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.040933][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.061568][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.507605][ T5289] bridge_slave_1: left allmulticast mode [ 118.552613][ T5289] bridge_slave_1: left promiscuous mode [ 118.580835][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.036468][ T5289] bridge_slave_0: left allmulticast mode [ 120.076729][ T5289] bridge_slave_0: left promiscuous mode [ 120.124985][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.270911][ T54] Bluetooth: hci3: command tx timeout [ 120.549417][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 120.592544][ T5832] netlink: 88 bytes leftover after parsing attributes in process `syz.0.147'. [ 120.704201][ T5837] loop4: detected capacity change from 0 to 512 [ 120.717151][ T5837] ext4: Unknown parameter 'dont_measure' [ 121.192460][ T5843] No such timeout policy "syz0" [ 122.319414][ T5289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.328427][ T5708] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.340399][ T54] Bluetooth: hci3: command tx timeout [ 122.362030][ T5289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.373599][ T5289] bond0 (unregistering): Released all slaves [ 122.755413][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.768519][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.778546][ T5708] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 122.787703][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.798719][ T5708] usb 2-1: config 0 descriptor?? [ 123.793218][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 124.260363][ T5289] hsr_slave_0: left promiscuous mode [ 124.314474][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.323114][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.335349][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.345297][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.418956][ T5289] veth1_macvtap: left promiscuous mode [ 124.425059][ T54] Bluetooth: hci3: command tx timeout [ 124.432628][ T5289] veth0_macvtap: left promiscuous mode [ 124.459637][ T5289] veth1_vlan: left promiscuous mode [ 124.490299][ T5289] veth0_vlan: left promiscuous mode [ 124.685386][ T5907] loop4: detected capacity change from 0 to 512 [ 124.734584][ T5907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 124.771605][ T5907] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.039052][ T5708] usbhid 2-1:0.0: can't add hid device: -71 [ 125.692641][ T5708] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 125.705605][ T5708] usb 2-1: USB disconnect, device number 3 [ 126.270103][ T5289] team0 (unregistering): Port device team_slave_1 removed [ 126.330694][ T5289] team0 (unregistering): Port device team_slave_0 removed [ 126.504360][ T54] Bluetooth: hci3: command tx timeout [ 126.521131][ T5925] loop0: detected capacity change from 0 to 1024 [ 126.579567][ T5925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.732340][ T5222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.770328][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 128.045426][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 128.096509][ T5935] loop0: detected capacity change from 0 to 128 [ 128.143305][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.171234][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.178502][ T5800] bridge_slave_0: entered allmulticast mode [ 128.261964][ T5800] bridge_slave_0: entered promiscuous mode [ 128.345091][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.382421][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.399125][ T5800] bridge_slave_1: entered allmulticast mode [ 128.406311][ T5800] bridge_slave_1: entered promiscuous mode [ 129.590337][ T5222] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 129.598518][ T5222] FAT-fs (loop0): Filesystem has been set read-only [ 129.655390][ T5222] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000074f) [ 129.659073][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.897750][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.054661][ T5800] team0: Port device team_slave_0 added [ 130.087351][ T5800] team0: Port device team_slave_1 added [ 130.207239][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.225044][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.310760][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.344051][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.379450][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.458694][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.563661][ T5953] loop4: detected capacity change from 0 to 40427 [ 130.610955][ T5953] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 130.618747][ T5953] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 130.654545][ T5953] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 130.751173][ T5289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.803934][ T5800] hsr_slave_0: entered promiscuous mode [ 130.860611][ T5800] hsr_slave_1: entered promiscuous mode [ 130.908877][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.930086][ T5800] Cannot create hsr debugfs directory [ 130.945237][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.954359][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.962545][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.974765][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.984610][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.995095][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.070160][ T54] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 131.212525][ T5984] loop1: detected capacity change from 0 to 64 [ 131.326633][ T5289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.568982][ T5289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.763956][ T5289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.863449][ T5972] loop2: detected capacity change from 0 to 32768 [ 131.881449][ T5993] smc: net device lo applied user defined pnetid SYZ2 [ 132.147860][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 132.874491][ T5289] bridge_slave_1: left allmulticast mode [ 132.899011][ T5289] bridge_slave_1: left promiscuous mode [ 132.916291][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.977452][ T5289] bridge_slave_0: left allmulticast mode [ 132.994708][ T5289] bridge_slave_0: left promiscuous mode [ 133.018522][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.063082][ T54] Bluetooth: hci0: command tx timeout [ 133.223131][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.240074][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.260012][ T5278] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.398227][ T6020] netlink: 88 bytes leftover after parsing attributes in process `syz.4.191'. [ 133.408994][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 133.461930][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 133.473575][ T5278] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.484483][ T5278] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 133.495477][ T5278] usb 3-1: config 179 has no interface number 0 [ 133.502221][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 133.513901][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 133.525417][ T5278] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 133.538928][ T5278] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 133.548158][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.571184][ T6016] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.675059][ T5289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.688220][ T5289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.700727][ T5289] bond0 (unregistering): Released all slaves [ 133.717460][ T6018] warning: `syz.1.190' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.783586][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 133.814567][ T5279] usb 3-1: USB disconnect, device number 4 [ 134.056838][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.166121][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.187602][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.213069][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.238580][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.247420][ T5976] bridge_slave_0: entered allmulticast mode [ 134.255127][ T5976] bridge_slave_0: entered promiscuous mode [ 134.265955][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.284030][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.300983][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.320177][ T5976] bridge_slave_1: entered allmulticast mode [ 134.328121][ T5976] bridge_slave_1: entered promiscuous mode [ 134.438389][ T6026] loop1: detected capacity change from 0 to 32768 [ 134.476605][ T5289] hsr_slave_0: left promiscuous mode [ 134.506207][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.525492][ T6026] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.541999][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.598872][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.609791][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.653613][ T5289] veth1_macvtap: left promiscuous mode [ 134.659298][ T5289] veth0_macvtap: left promiscuous mode [ 134.665093][ T5289] veth1_vlan: left promiscuous mode [ 134.669250][ T6026] XFS (loop1): Ending clean mount [ 134.670639][ T5289] veth0_vlan: left promiscuous mode [ 134.712166][ T6026] XFS (loop1): Quotacheck needed: Please wait. [ 134.793440][ T6026] XFS (loop1): Quotacheck: Done. [ 135.023934][ T5237] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.143129][ T54] Bluetooth: hci0: command tx timeout [ 135.346307][ T5289] team0 (unregistering): Port device team_slave_1 removed [ 135.385298][ T5289] team0 (unregistering): Port device team_slave_0 removed [ 135.590162][ T5708] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.720890][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.775053][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.785705][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 135.800335][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.827203][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 135.841107][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.853749][ T5708] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 135.864148][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.917252][ T5708] usb 2-1: config 0 descriptor?? [ 135.924294][ T6049] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.954210][ T5976] team0: Port device team_slave_0 added [ 135.962280][ T5708] hub 2-1:0.0: USB hub found [ 135.991883][ T5976] team0: Port device team_slave_1 added [ 136.054038][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.069744][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.089550][ T6058] loop4: detected capacity change from 0 to 128 [ 136.109011][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.203551][ T5708] hub 2-1:0.0: 2 ports detected [ 136.325957][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.338298][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.365044][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.422269][ T5976] hsr_slave_0: entered promiscuous mode [ 136.435955][ T5976] hsr_slave_1: entered promiscuous mode [ 136.574041][ T5279] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.637630][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.727596][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.817088][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.824309][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.841622][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 136.860220][ T5279] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 136.868557][ T5279] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 136.880273][ T5279] usb 3-1: config 179 has no interface number 0 [ 136.886916][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 136.912069][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 136.935638][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.942856][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.952594][ T5279] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 136.978032][ T5279] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 136.987630][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.018779][ T6060] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 137.220034][ T54] Bluetooth: hci0: command tx timeout [ 137.288176][ T5976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.297663][ T5278] usb 3-1: USB disconnect, device number 5 [ 137.321903][ T5976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.355142][ T5976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.386190][ T5976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.463690][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.526941][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.578488][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.599640][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.606883][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.617802][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.625033][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.630843][ T5278] usb 2-1: USB disconnect, device number 4 [ 137.642831][ T5800] veth0_vlan: entered promiscuous mode [ 137.690860][ T5800] veth1_vlan: entered promiscuous mode [ 137.755788][ T5800] veth0_macvtap: entered promiscuous mode [ 137.767803][ T5800] veth1_macvtap: entered promiscuous mode [ 137.815286][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.856817][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.899647][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.920913][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.936701][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.947977][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.965647][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.986036][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.006930][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.028715][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.053535][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.065214][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.077208][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.089818][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.145763][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.166195][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.183929][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.247275][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.342538][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.495881][ T5289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.688040][ T5289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.971738][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.042866][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.196705][ T5976] veth0_vlan: entered promiscuous mode [ 139.376835][ T54] Bluetooth: hci0: command tx timeout [ 139.621645][ T5976] veth1_vlan: entered promiscuous mode [ 139.726732][ T5976] veth0_macvtap: entered promiscuous mode [ 139.793642][ T5976] veth1_macvtap: entered promiscuous mode [ 139.891352][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.941454][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.964586][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.986870][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.997392][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.124975][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.158891][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.297419][ T6098] netlink: 'syz.1.211': attribute type 27 has an invalid length. [ 140.385186][ T5708] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.386352][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.456246][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.460161][ T5279] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.497498][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.509368][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.524192][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.537476][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.744290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 140.845938][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.862636][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.872876][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 140.878331][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.890409][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.908104][ T5708] usb 5-1: config 32 has an invalid interface number: 16 but max is 0 [ 140.920157][ T5708] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 140.931424][ T5708] usb 5-1: config 32 has no interface number 0 [ 140.937810][ T5708] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 141.245435][ T5279] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.258010][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.270703][ T5279] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.310397][ T5279] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 141.320629][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.328933][ T5279] usb 4-1: Product: syz [ 141.574682][ T5708] hub 5-1:32.16: bad descriptor, ignoring hub [ 141.583021][ T5279] usb 4-1: Manufacturer: syz [ 141.590058][ T5708] hub 5-1:32.16: probe with driver hub failed with error -5 [ 141.599935][ T5279] usb 4-1: SerialNumber: syz [ 141.651625][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.670509][ T5279] usb 4-1: config 0 descriptor?? [ 141.784045][ T6094] loop4: detected capacity change from 0 to 256 [ 141.809702][ T5976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.822989][ T5976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.835804][ T5976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.865044][ T5976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.741771][ T6112] syz.4.213[6112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.743048][ T6112] syz.4.213[6112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.756846][ T6112] syz.4.213[6112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.530138][ T5271] usb 4-1: USB disconnect, device number 3 [ 144.708377][ T5315] usb 5-1: USB disconnect, device number 4 [ 144.761405][ T5289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.795282][ T5289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.894958][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.953421][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.437260][ T6157] loop1: detected capacity change from 0 to 512 [ 149.450666][ T6157] EXT4-fs: Ignoring removed nobh option [ 149.461333][ T6157] ext2: Unknown parameter 'defcontext' [ 150.012910][ T5708] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.120033][ T51] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.209927][ T5708] usb 5-1: Using ep0 maxpacket: 16 [ 150.226265][ T5708] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 150.247190][ T5708] usb 5-1: config 0 has no interface number 0 [ 150.265864][ T5708] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 150.296270][ T5708] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 150.310661][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.321404][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 150.328482][ T5708] usb 5-1: Product: syz [ 150.337357][ T5708] usb 5-1: Manufacturer: syz [ 150.345965][ T51] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.347809][ T5708] usb 5-1: SerialNumber: syz [ 150.376692][ T51] usb 2-1: config 179 has no interface number 0 [ 150.394523][ T5708] usb 5-1: config 0 descriptor?? [ 150.394987][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 150.456771][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 150.502790][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 150.520090][ T51] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.559984][ T51] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.569352][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.608605][ T5708] usbtouchscreen 5-1:0.214: Failed to read FW rev: -32 [ 150.620023][ T6167] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 150.636417][ T5708] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 150.676238][ T5708] usb 5-1: USB disconnect, device number 5 [ 150.778906][ T6151] loop2: detected capacity change from 0 to 40427 [ 150.810040][ T6151] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 150.817819][ T6151] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 150.840624][ T6151] F2FS-fs (loop2): invalid crc value [ 150.858122][ T6165] loop3: detected capacity change from 0 to 32768 [ 150.899313][ T5271] usb 2-1: USB disconnect, device number 5 [ 150.907635][ T6151] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.938607][ T6165] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.079076][ T6151] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.096194][ T6151] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.115669][ T6165] XFS (loop3): Ending clean mount [ 151.143850][ T6165] XFS (loop3): Quotacheck needed: Please wait. [ 151.244492][ T6165] XFS (loop3): Quotacheck: Done. [ 151.331455][ T29] audit: type=1800 audit(1723725558.092:5): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.236" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 151.399051][ T5289] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 151.427522][ T5289] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 151.448881][ T5800] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.840838][ T6195] trusted_key: encrypted_key: insufficient parameters specified [ 152.800786][ T51] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 153.125556][ T51] usb 1-1: device descriptor read/64, error -71 [ 153.131234][ T29] audit: type=1326 audit(1723725559.702:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26e1799b9 code=0x7ffc0000 [ 153.230188][ T5710] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.254809][ T29] audit: type=1326 audit(1723725559.702:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26e1799b9 code=0x7ffc0000 [ 153.296933][ T29] audit: type=1326 audit(1723725559.702:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26e1799b9 code=0x7ffc0000 [ 153.320076][ T5315] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.344739][ T29] audit: type=1326 audit(1723725559.702:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26e1799b9 code=0x7ffc0000 [ 153.385379][ T29] audit: type=1326 audit(1723725559.702:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26e1799b9 code=0x7ffc0000 [ 153.416994][ T5710] usb 2-1: device descriptor read/64, error -71 [ 153.429109][ T29] audit: type=1326 audit(1723725559.702:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26e1799b9 code=0x7ffc0000 [ 153.460335][ T51] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 153.468101][ T29] audit: type=1326 audit(1723725559.702:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26e1799b9 code=0x7ffc0000 [ 153.535051][ T29] audit: type=1326 audit(1723725559.702:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26e1799b9 code=0x7ffc0000 [ 153.562107][ T5315] usb 3-1: Using ep0 maxpacket: 8 [ 153.577062][ T5315] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 153.598146][ T5315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.645446][ T29] audit: type=1326 audit(1723725559.702:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb26e178350 code=0x7ffc0000 [ 153.675061][ T51] usb 1-1: device descriptor read/64, error -71 [ 153.688385][ T5315] usb 3-1: Product: syz [ 153.696091][ T5315] usb 3-1: Manufacturer: syz [ 153.721220][ T5710] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.744502][ T5315] usb 3-1: SerialNumber: syz [ 153.759599][ T5315] usb 3-1: config 0 descriptor?? [ 153.794082][ T6216] usb usb8: usbfs: process 6216 (syz.4.251) did not claim interface 0 before use [ 153.810820][ T51] usb usb1-port1: attempt power cycle [ 153.900081][ T5710] usb 2-1: device descriptor read/64, error -71 [ 153.987395][ T5315] usb read operation failed. (-71) [ 153.997948][ T5315] usb write operation failed. (-71) [ 154.008909][ T5315] usb write operation failed. (-71) [ 154.018046][ T5315] usb write operation failed. (-71) [ 154.027331][ T5315] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 154.035366][ T5710] usb usb2-port1: attempt power cycle [ 154.054868][ T5315] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 154.066303][ T5315] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 154.083720][ T5708] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.229974][ T51] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 154.250078][ T5708] usb 5-1: device descriptor read/64, error -71 [ 154.263029][ T51] usb 1-1: device descriptor read/8, error -71 [ 154.336376][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.346496][ T6220] batadv_slave_0: entered allmulticast mode [ 154.480210][ T5710] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.517031][ T5710] usb 2-1: device descriptor read/8, error -71 [ 154.520033][ T5708] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.539947][ T51] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.581107][ T51] usb 1-1: device descriptor read/8, error -71 [ 154.702794][ T5708] usb 5-1: device descriptor read/64, error -71 [ 154.711525][ T51] usb usb1-port1: unable to enumerate USB device [ 154.750162][ T5279] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.809995][ T5710] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.827201][ T5708] usb usb5-port1: attempt power cycle [ 154.841836][ T5710] usb 2-1: device descriptor read/8, error -71 [ 154.939966][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 154.948362][ T5279] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 154.958907][ T5279] usb 4-1: config 179 has no interface number 0 [ 154.966058][ T5279] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 154.981853][ T5279] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 154.992345][ T5710] usb usb2-port1: unable to enumerate USB device [ 154.994525][ T5279] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 155.026340][ T5279] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.053920][ T5279] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.067975][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.086898][ T6222] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 155.239965][ T5708] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.282768][ T5708] usb 5-1: device descriptor read/8, error -71 [ 155.322859][ T5279] usb 4-1: USB disconnect, device number 4 [ 155.589083][ T5708] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.622515][ T5708] usb 5-1: device descriptor read/8, error -71 [ 155.740203][ T5708] usb usb5-port1: unable to enumerate USB device [ 157.152879][ T6253] loop2: detected capacity change from 0 to 1024 [ 157.160622][ T51] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.223059][ T6253] hfsplus: failed to load root directory [ 157.349966][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 157.385879][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.422284][ T6258] kvm: emulating exchange as write [ 157.427915][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.458905][ T51] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.479358][ T51] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 157.489616][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.545200][ T51] usb 4-1: config 0 descriptor?? [ 157.798345][ T6262] loop1: detected capacity change from 0 to 256 [ 157.858584][ T6262] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 157.928199][ T6262] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 157.966992][ T6262] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 157.987826][ T51] usbhid 4-1:0.0: can't add hid device: -71 [ 157.989890][ T6262] UDF-fs: Scanning with blocksize 512 failed [ 158.010389][ T51] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 158.040414][ T6262] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 158.048301][ T51] usb 4-1: USB disconnect, device number 5 [ 158.089407][ T6262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.402511][ T6249] loop4: detected capacity change from 0 to 40427 [ 158.411107][ T6249] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 158.438792][ T6249] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 158.469083][ T6249] F2FS-fs (loop4): Found nat_bits in checkpoint [ 158.693809][ T6249] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 158.738989][ T6249] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 158.936824][ T5230] syz-executor: attempt to access beyond end of device [ 158.936824][ T5230] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.997439][ T5230] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 159.161555][ T5278] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.360294][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 159.394688][ T5278] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.440204][ T5278] usb 4-1: config 179 has no interface number 0 [ 159.457174][ T5278] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 159.518903][ T5278] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 159.548391][ T5278] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.596340][ T5278] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 159.634537][ T5278] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.649180][ T5278] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.705735][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.735597][ T6272] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 159.757976][ T5278] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 159.800711][ T6277] xt_hashlimit: invalid rate [ 160.020645][ T51] usb 4-1: USB disconnect, device number 6 [ 160.443101][ T6285] loop0: detected capacity change from 0 to 2048 [ 160.554359][ T6285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.592348][ T6285] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.657192][ T6285] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 16: comm syz.0.273: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 160.799708][ T5976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.095415][ T6300] loop0: detected capacity change from 0 to 512 [ 161.149392][ T6300] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.172111][ T6300] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.230659][ T6300] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 161.427851][ T6300] EXT4-fs (loop0): 1 orphan inode deleted [ 161.487208][ T6300] EXT4-fs (loop0): 1 truncate cleaned up [ 161.553005][ T6300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.774839][ T6310] loop1: detected capacity change from 0 to 1024 [ 164.782339][ T6310] hfsplus: unable to parse mount options [ 164.831727][ T6288] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 165.367107][ T6314] overlayfs: failed to resolve './file0': -2 [ 165.774533][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 165.900177][ T6288] EXT4-fs (loop0): Remounting filesystem read-only [ 166.125061][ T5976] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.776444][ T6317] loop1: detected capacity change from 0 to 512 [ 168.934256][ T6317] EXT4-fs: error -4 creating inode table initialization thread [ 168.942591][ T6317] EXT4-fs (loop1): mount failed [ 169.675411][ T6331] loop1: detected capacity change from 0 to 2048 [ 169.873099][ T6331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.125607][ T5237] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.359961][ T5708] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.559935][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 170.571213][ T5708] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 170.599996][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.612596][ T5708] usb 4-1: config 0 descriptor?? [ 170.634416][ T5708] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 171.209302][ T6349] loop4: detected capacity change from 0 to 32768 [ 171.255187][ T6347] loop1: detected capacity change from 0 to 40427 [ 171.281423][ T6347] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 171.289158][ T6347] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 171.290161][ T6349] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.312828][ T6347] F2FS-fs (loop1): invalid crc value [ 171.338559][ T6347] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.435454][ T6347] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 171.444252][ T6347] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 171.484691][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 171.484731][ T29] audit: type=1800 audit(1723725578.252:72): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.292" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 171.485102][ T6349] XFS (loop4): Ending clean mount [ 171.534460][ T6349] XFS (loop4): Quotacheck needed: Please wait. [ 171.560266][ T29] audit: type=1800 audit(1723725578.322:73): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.292" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 171.648407][ T6349] XFS (loop4): Quotacheck: Done. [ 171.654934][ T6368] syz.1.292: attempt to access beyond end of device [ 171.654934][ T6368] loop1: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 171.712162][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 171.749318][ T6369] syz.1.292: attempt to access beyond end of device [ 171.749318][ T6369] loop1: rw=0, sector=77840, nr_sectors = 8 limit=40427 [ 171.840269][ T5230] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.887893][ T5237] syz-executor: attempt to access beyond end of device [ 171.887893][ T5237] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 171.920223][ T5237] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 171.927178][ T5237] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 172.376044][ T6374] loop4: detected capacity change from 0 to 1024 [ 172.469538][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.003771][ T6384] ext4: Unknown parameter 'nostrict' [ 173.616068][ T5230] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 173.643580][ T5230] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 173.695811][ T5708] gspca_sonixj: reg_w err -71 [ 173.711988][ T5708] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 173.743558][ T5708] usb 4-1: USB disconnect, device number 7 [ 174.026247][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.609964][ T51] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 174.822917][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 174.858387][ T51] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 174.881093][ T51] usb 1-1: config 179 has no interface number 0 [ 174.886556][ T5768] bridge_slave_1: left allmulticast mode [ 174.906120][ T51] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 174.916763][ T5768] bridge_slave_1: left promiscuous mode [ 174.939181][ T51] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 174.947381][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.982059][ T51] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 175.004334][ T5768] bridge_slave_0: left allmulticast mode [ 175.013755][ T51] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 175.025984][ T5768] bridge_slave_0: left promiscuous mode [ 175.052837][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.061369][ T51] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 175.119183][ T51] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 175.155302][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.182059][ T6401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.190858][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.205207][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.213398][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.221583][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.228825][ T51] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 175.241606][ T5224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.254722][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.351146][ T6398] loop1: detected capacity change from 0 to 32768 [ 175.398238][ T6398] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.428027][ T51] usb 1-1: USB disconnect, device number 13 [ 175.683879][ T6398] XFS (loop1): Ending clean mount [ 175.715265][ T6398] XFS (loop1): Quotacheck needed: Please wait. [ 175.803057][ T6398] XFS (loop1): Quotacheck: Done. [ 175.933775][ T5237] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.942917][ T5768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.963341][ T5768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.985066][ T5768] bond0 (unregistering): Released all slaves [ 176.037029][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 176.138183][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 176.767006][ T5768] hsr_slave_0: left promiscuous mode [ 176.786406][ T5768] hsr_slave_1: left promiscuous mode [ 176.814307][ T5768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.851583][ T5768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.301999][ T54] Bluetooth: hci2: command tx timeout [ 177.598966][ T6442] loop1: detected capacity change from 0 to 32768 [ 177.668038][ T6442] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.809964][ T5278] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.851509][ T6442] XFS (loop1): Ending clean mount [ 177.880353][ T6442] XFS (loop1): Quotacheck needed: Please wait. [ 178.011760][ T6442] XFS (loop1): Quotacheck: Done. [ 178.018837][ T5768] team0 (unregistering): Port device team_slave_1 removed [ 178.027363][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 178.072245][ T5278] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 178.083246][ T6419] coredump: 124(syz.2.311): written to core: VMAs: 43, size 99782656; core: 62034803 bytes, pos 99799040 [ 178.086176][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.118837][ T5237] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.129537][ T5278] usb 4-1: Product: syz [ 178.136258][ T5278] usb 4-1: Manufacturer: syz [ 178.141124][ T5278] usb 4-1: SerialNumber: syz [ 178.147907][ T5278] usb 4-1: config 0 descriptor?? [ 178.160469][ T5278] safe_serial 4-1:0.0: safe_serial converter detected [ 178.183825][ T5278] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 178.192977][ T5768] team0 (unregistering): Port device team_slave_0 removed [ 179.450511][ T54] Bluetooth: hci2: command tx timeout [ 179.533259][ T6430] coredump: 63(syz.0.314): interrupted: fatal signal pending [ 179.556630][ T6430] coredump: 63(syz.0.314): written to core: VMAs: 36, size 97423360; core: 46535480 bytes, pos 84070400 [ 180.090202][ T5279] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 180.225752][ T6411] chnl_net:caif_netlink_parms(): no params data found [ 180.272983][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 180.288785][ T5279] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 180.312788][ T5279] usb 2-1: config 179 has no interface number 0 [ 180.319360][ T5279] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 180.338830][ T5279] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 180.365991][ T5279] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.386741][ T5279] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 180.399303][ T5279] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 180.418858][ T5279] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 180.428347][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.429544][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.444007][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.451684][ T6411] bridge_slave_0: entered allmulticast mode [ 180.460318][ T6411] bridge_slave_0: entered promiscuous mode [ 180.470949][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.479532][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.487140][ T6411] bridge_slave_1: entered allmulticast mode [ 180.496371][ T6411] bridge_slave_1: entered promiscuous mode [ 180.508416][ T6458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.533525][ T5278] usb 4-1: USB disconnect, device number 8 [ 180.625166][ T5278] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 180.651818][ T5278] safe_serial 4-1:0.0: device disconnected [ 180.754094][ T6411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.857043][ T6411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.995239][ T5271] usb 2-1: USB disconnect, device number 10 [ 181.001195][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 181.001232][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 181.042240][ T6411] team0: Port device team_slave_0 added [ 181.059590][ T6411] team0: Port device team_slave_1 added [ 181.122245][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.167681][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.223805][ T6411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.298377][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.365448][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.405437][ T6411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.460003][ T54] Bluetooth: hci2: command tx timeout [ 181.501996][ T6411] hsr_slave_0: entered promiscuous mode [ 181.567227][ T6411] hsr_slave_1: entered promiscuous mode [ 181.614699][ T6411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.631601][ T6411] Cannot create hsr debugfs directory [ 181.761740][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 182.515810][ T6411] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.543514][ T6411] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.563671][ T6411] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.597344][ T6411] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.873517][ T6411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.942665][ T6411] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.994665][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.001913][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.094116][ T6499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.385214][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.386105][ T6471] coredump: 66(syz.0.323): interrupted: fatal signal pending [ 183.392370][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.407616][ T6471] coredump: 66(syz.0.323): written to core: VMAs: 48, size 102010880; core: 48462844 bytes, pos 86347776 [ 183.541908][ T54] Bluetooth: hci2: command tx timeout [ 183.940916][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.494500][ T6411] veth0_vlan: entered promiscuous mode [ 184.536406][ T6411] veth1_vlan: entered promiscuous mode [ 184.637218][ T6411] veth0_macvtap: entered promiscuous mode [ 184.659767][ T6411] veth1_macvtap: entered promiscuous mode [ 184.702573][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.725523][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.746603][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.769034][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.780028][ T5278] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 184.792698][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.816001][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.836996][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.859585][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.884396][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.921254][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.945526][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.967560][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.990191][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.994699][ T5278] usb 2-1: Using ep0 maxpacket: 8 [ 185.013311][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.022866][ T5278] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.035828][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.055850][ T5278] usb 2-1: config 179 has no interface number 0 [ 185.065991][ T5278] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 185.066021][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.089930][ T5278] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 185.097417][ T6493] coredump: 139(syz.2.330): written to core: VMAs: 36, size 97423360; core: 59917112 bytes, pos 97435648 [ 185.109925][ T5278] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.120846][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.123986][ T6495] coredump: 64(syz.3.332): written to core: VMAs: 34, size 97292288; core: 59919238 bytes, pos 97300480 [ 185.145265][ T5278] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 185.156930][ T5278] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 185.157175][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.170826][ T5278] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 185.194740][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.204995][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.215327][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.238913][ T6511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.250801][ T6411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.269612][ T6411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.285503][ T6411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.318198][ T6411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.664672][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.692314][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.705181][ T5271] usb 2-1: USB disconnect, device number 11 [ 185.705234][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 185.809041][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.848991][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.643508][ T6538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.759983][ T5279] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.960049][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 188.977670][ T5279] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 188.999956][ T5279] usb 5-1: config 179 has no interface number 0 [ 189.006280][ T5279] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 189.050666][ T5279] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 189.083032][ T5279] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.097595][ T6524] coredump: 81(syz.0.341): interrupted: fatal signal pending [ 189.111060][ T5279] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 189.120948][ T6524] coredump: 81(syz.0.341): written to core: VMAs: 34, size 97292288; core: 56834950 bytes, pos 94244864 [ 189.135664][ T5279] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 189.172203][ T5279] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 189.202176][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.226057][ T6558] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.382211][ T6529] coredump: 66(syz.3.337): interrupted: fatal signal pending [ 189.400025][ T6529] coredump: 66(syz.3.337): written to core: VMAs: 34, size 97292288; core: 59427718 bytes, pos 96817152 [ 189.670942][ T5279] usb 5-1: USB disconnect, device number 10 [ 189.676903][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 189.676944][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 190.617683][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.194133][ T6580] loop4: detected capacity change from 0 to 40427 [ 191.207039][ T6580] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 191.215216][ T6580] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 191.228948][ T6580] F2FS-fs (loop4): invalid crc value [ 191.259360][ T6580] F2FS-fs (loop4): Found nat_bits in checkpoint [ 191.373067][ T6580] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 191.388562][ T6580] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 191.437874][ T29] audit: type=1800 audit(1723725598.202:74): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.361" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 191.474346][ T6580] syz.4.361: attempt to access beyond end of device [ 191.474346][ T6580] loop4: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 191.494762][ T6580] syz.4.361: attempt to access beyond end of device [ 191.494762][ T6580] loop4: rw=0, sector=77840, nr_sectors = 8 limit=40427 [ 191.527745][ T6411] syz-executor: attempt to access beyond end of device [ 191.527745][ T6411] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.542668][ T6411] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 191.628197][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 191.634372][ T5229] Bluetooth: hci4: command 0x0406 tx timeout [ 191.740743][ T29] audit: type=1800 audit(1723725598.232:75): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.361" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 192.708032][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 192.718005][ T6621] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 193.230053][ T51] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 193.294678][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'. [ 193.431356][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 193.445174][ T51] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 193.475513][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.500615][ T51] usb 4-1: config 0 descriptor?? [ 193.513021][ T51] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 194.009930][ T5708] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 194.245876][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 194.254034][ T5708] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 194.263528][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.281961][ T5708] usb 2-1: config 0 descriptor?? [ 194.290939][ T5708] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 194.445654][ T5710] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 194.674755][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.682879][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.690566][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 194.697593][ T5710] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.706107][ T5710] usb 5-1: config 179 has no interface number 0 [ 194.714426][ T5710] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 194.725970][ T5710] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 194.737445][ T5710] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.749073][ T5710] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 194.760865][ T5710] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.774272][ T5710] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 194.783485][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.798396][ T6652] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 195.030701][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 195.030702][ T5307] usb 5-1: USB disconnect, device number 11 [ 195.397977][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.392'. [ 195.698673][ T6669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.379646][ T51] gspca_sonixj: reg_w err -71 [ 196.388667][ T51] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 196.419282][ T51] usb 4-1: USB disconnect, device number 9 [ 197.995687][ T5708] gspca_sonixj: reg_w1 err -71 [ 198.005871][ T5708] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 198.016166][ T5708] usb 2-1: USB disconnect, device number 12 [ 198.232325][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 198.280433][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 198.354495][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.402'. [ 200.106448][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.369667][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 200.599919][ T5279] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.791663][ T5279] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 200.817795][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.844643][ T5279] usb 5-1: config 0 descriptor?? [ 201.247950][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 201.275369][ T5279] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 201.305910][ T5279] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 201.338686][ T5279] asix 5-1:0.0: probe with driver asix failed with error -71 [ 201.381198][ T5279] usb 5-1: USB disconnect, device number 12 [ 201.459469][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.422'. [ 201.560568][ T6746] smc: net device lo applied user defined pnetid SYZ2 [ 202.830930][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 203.281898][ T6780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.401429][ T5708] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 203.650198][ T5279] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 203.683380][ T5708] usb 2-1: Using ep0 maxpacket: 8 [ 203.792429][ T5708] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.895771][ T5708] usb 2-1: config 179 has no interface number 0 [ 203.980106][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 204.047007][ T5708] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 204.083556][ T5279] usb 1-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 204.098319][ T5708] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 204.110350][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.118440][ T5279] usb 1-1: Product: syz [ 204.123543][ T5708] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 204.136051][ T5279] usb 1-1: Manufacturer: syz [ 204.141724][ T5279] usb 1-1: SerialNumber: syz [ 204.146458][ T5708] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 204.160689][ T5279] usb 1-1: config 0 descriptor?? [ 204.168518][ T5279] safe_serial 1-1:0.0: safe_serial converter detected [ 204.175544][ T5708] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 205.208025][ T5708] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 205.732920][ T5279] usb 1-1: safe_serial converter now attached to ttyUSB0 [ 205.749942][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.790197][ T6770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.063662][ T5708] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input12 [ 206.264102][ T5708] usb 2-1: USB disconnect, device number 13 [ 206.270159][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 206.270203][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 206.441924][ T5708] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 206.660383][ T5279] usb 1-1: USB disconnect, device number 14 [ 206.685730][ T5279] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 206.770437][ T5279] safe_serial 1-1:0.0: device disconnected [ 206.917266][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 207.271365][ T6807] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 207.535157][ T6813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.461866][ T6818] smc: net device lo applied user defined pnetid SYZ2 [ 210.118491][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 210.440202][ T5271] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 210.653538][ T5271] usb 1-1: Using ep0 maxpacket: 8 [ 210.689009][ T5271] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 210.722222][ T5271] usb 1-1: config 179 has no interface number 0 [ 210.757866][ T5271] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 210.804113][ T5271] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 210.818729][ T5271] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.900833][ T5271] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 210.957382][ T5271] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 211.079321][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 211.119278][ T5271] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 211.154184][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.264511][ T6821] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.968330][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 212.968339][ T5308] usb 1-1: USB disconnect, device number 15 [ 213.169466][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 213.250067][ T5279] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 213.468843][ T5279] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 213.498678][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.518107][ T5279] usb 4-1: Product: syz [ 213.539951][ T5279] usb 4-1: Manufacturer: syz [ 213.544604][ T5279] usb 4-1: SerialNumber: syz [ 213.559914][ T5308] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.585849][ T5279] usb 4-1: config 0 descriptor?? [ 213.592034][ T6882] pim6reg1: entered promiscuous mode [ 213.608406][ T6882] pim6reg1: entered allmulticast mode [ 213.754334][ T5308] usb 5-1: Using ep0 maxpacket: 16 [ 213.769342][ T5308] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 213.803178][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.839557][ T5308] usb 5-1: config 0 descriptor?? [ 213.845562][ T6884] sit0: entered allmulticast mode [ 213.891191][ T5308] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 214.018500][ T5279] mos7840 4-1:0.0: required endpoints missing [ 214.059335][ T5279] usb 4-1: USB disconnect, device number 10 [ 214.135378][ T6868] loop2: detected capacity change from 0 to 32768 [ 214.202285][ T6868] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.240047][ T51] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.440032][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 214.448694][ T6868] XFS (loop2): Ending clean mount [ 214.468516][ T51] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 214.489699][ T51] usb 2-1: config 179 has no interface number 0 [ 214.497851][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 214.514105][ T6868] XFS (loop2): Quotacheck needed: Please wait. [ 214.532587][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 214.552888][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.584171][ T51] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 214.606775][ T51] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 214.630207][ T51] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 214.641579][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.655805][ T6868] XFS (loop2): Quotacheck: Done. [ 214.708859][ T6887] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 214.967960][ T51] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input13 [ 214.968916][ T5500] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.183792][ T5315] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 215.276707][ T5315] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 215.304120][ T5278] usb 2-1: USB disconnect, device number 14 [ 215.304181][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 215.304219][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 215.358058][ T5315] usb 3-1: USB disconnect, device number 6 [ 215.388835][ T5278] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 215.598291][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 215.843223][ T6913] smc: net device lo applied user defined pnetid SYZ2 [ 215.990029][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 216.720451][ T5308] gspca_sonixj: reg_w err -71 [ 216.726441][ T5308] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 216.756771][ T5308] usb 5-1: USB disconnect, device number 13 [ 217.897741][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 218.066413][ T6944] syzkaller0: entered promiscuous mode [ 218.088317][ T6944] syzkaller0: entered allmulticast mode [ 218.280134][ T5307] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 218.469992][ T5307] usb 4-1: Using ep0 maxpacket: 8 [ 218.486780][ T5307] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 218.505599][ T5307] usb 4-1: config 179 has no interface number 0 [ 218.515752][ T5307] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 218.537163][ T5307] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 218.570466][ T5307] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 218.600034][ T5307] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 218.629864][ T5307] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 218.653535][ T5307] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 218.669870][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.720614][ T6945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.964315][ T5307] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 219.164561][ T5308] usb 4-1: USB disconnect, device number 11 [ 219.164675][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 219.181777][ T5308] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 220.063212][ T5308] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 220.260575][ T5308] usb 4-1: Using ep0 maxpacket: 16 [ 220.280555][ T5308] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 220.289704][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.302679][ T6963] Â: renamed from pim6reg1 [ 220.321808][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 220.332926][ T5308] usb 4-1: config 0 descriptor?? [ 220.354262][ T5308] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 220.739073][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 221.300558][ T5315] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 221.529956][ T5315] usb 1-1: Using ep0 maxpacket: 8 [ 221.545862][ T5315] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 221.564692][ T5315] usb 1-1: config 179 has no interface number 0 [ 221.613734][ T5315] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 221.656990][ T7004] process 'syz.1.520' launched './file2' with NULL argv: empty string added [ 221.662632][ T5315] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 Stopping sshd: [ 221.744571][ T5315] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 221.783056][ T5315] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 221.829665][ T5315] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 221.887907][ T5315] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 221.929291][ T5315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.988692][ T6991] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 222.284495][ T51] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 222.340348][ T5240] Bluetooth: hci5: command 0x0406 tx timeout [ 222.532944][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 222.541269][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 222.573680][ T51] usb 1-1: USB disconnect, device number 16 [ 222.597593][ T51] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 222.799411][ T6988] loop4: detected capacity change from 0 to 40427 [ 222.834549][ T6988] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 222.859943][ T6988] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.887831][ T6988] F2FS-fs (loop4): invalid crc value [ 222.932500][ T6988] F2FS-fs (loop4): Found nat_bits in checkpoint Connection to 10.128.1.19 closed by remote host. OK [ 223.184910][ T5308] gspca_sonixj: reg_w err -71 [ 223.191223][ T6988] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 223.200537][ T5308] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 223.235808][ T6988] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 223.241352][ T5308] usb 4-1: USB disconnect, device number 12 [ 223.302675][ T29] audit: type=1800 audit(1723725630.072:76): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.515" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 223.372242][ T7018] netlink: 88 bytes leftover after parsing attributes in process `syz.0.524'. Stopping dhcpcd... [ 223.418647][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 223.439224][ T29] audit: type=1800 audit(1723725630.202:77): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.515" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 223.486827][ T7020] syz.4.515: attempt to access beyond end of device [ 223.486827][ T7020] loop4: rw=2049, sector=77824, nr_sectors = 848 limit=40427 no /sbin/dhcpcd found; none killed [ 223.675085][ T7021] syz.4.515: attempt to access beyond end of device [ 223.675085][ T7021] loop4: rw=0, sector=77840, nr_sectors = 8 limit=40427 Stopping network: [ 224.018738][ T7011] loop2: detected capacity change from 0 to 32768 [ 224.104869][ T6411] syz-executor: attempt to access beyond end of device [ 224.104869][ T6411] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 224.170083][ T6411] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 224.170137][ T7011] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.194581][ T6411] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 224.516013][ T7011] XFS (loop2): Ending clean mount [ 224.534023][ T7011] XFS (loop2): Quotacheck needed: Please wait. [ 224.704949][ T7011] XFS (loop2): Quotacheck: Done. [ 224.821587][ T5271] usb 4-1: new high-speed USB device number 13 using dummy_hcd OK [ 224.999934][ T5308] usb 1-1: new high-speed USB device number 17 using dummy_hcd Stopping iptables: [ 225.049932][ T5271] usb 4-1: Using ep0 maxpacket: 8 [ 225.115233][ T5500] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.167717][ T5271] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 225.177192][ T5271] usb 4-1: config 179 has no interface number 0 [ 225.183612][ T5271] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 225.194837][ T5271] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 225.206208][ T5271] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 225.217514][ T5271] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 225.230189][ T5271] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 225.243616][ T5271] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 225.250364][ T5308] usb 1-1: Using ep0 maxpacket: 32 [ 225.252882][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.274903][ T5308] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.280219][ T7053] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.297071][ T5308] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 225.308123][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 OK [ 225.390783][ T5308] usb 1-1: config 0 descriptor?? [ 225.428645][ T5308] hub 1-1:0.0: bad descriptor, ignoring hub [ 225.470064][ T5308] hub 1-1:0.0: probe with driver hub failed with error -5 [ 225.498239][ T5308] usbhid 1-1:0.0: couldn't find an input interrupt endpoint Stopping system message bus: [ 225.615099][ T5271] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16 [ 225.883185][ T51] usb 4-1: USB disconnect, device number 13 [ 225.883302][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 225.897420][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 225.905798][ T51] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 done [ 226.886627][ T7070] loop1: detected capacity change from 0 to 40427 [ 226.925454][ T7070] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 226.934784][ T7070] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 226.957431][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'. [ 226.991374][ T7070] F2FS-fs (loop1): invalid crc value [ 227.047879][ T7070] F2FS-fs (loop1): Found nat_bits in checkpoint [ 227.353312][ T7070] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 227.427310][ T7070] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 227.612673][ T29] audit: type=1800 audit(1723725634.382:78): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.540" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 227.745477][ T29] audit: type=1800 audit(1723725634.462:79): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.540" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 227.778636][ T7120] syz.1.540: attempt to access beyond end of device [ 227.778636][ T7120] loop1: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 227.800332][ T5308] usb 1-1: USB disconnect, device number 17 [ 227.970463][ T7120] syz.1.540: attempt to access beyond end of device [ 227.970463][ T7120] loop1: rw=0, sector=77840, nr_sectors = 8 limit=40427 [ 228.147166][ T5237] syz-executor: attempt to access beyond end of device [ 228.147166][ T5237] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 228.184377][ T5237] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 228.282655][ T5237] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 228.355192][ T5307] usb 4-1: new high-speed USB device number 14 using dummy_hcd Stopping klogd: [ 228.560451][ T5307] usb 4-1: Using ep0 maxpacket: 8 [ 228.572764][ T5307] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 228.588987][ T5307] usb 4-1: config 179 has no interface number 0 OK [ 228.613099][ T5307] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 228.637922][ T7149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.658155][ T5307] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 228.690021][ T5307] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 228.713476][ T5307] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 228.734252][ T5307] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 228.770018][ T5307] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 228.779095][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.826314][ T7128] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 Stopping acpid: [ 229.058782][ T5307] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input17 [ 229.267884][ T5307] usb 4-1: USB disconnect, device number 14 [ 229.273872][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 229.273910][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 229.373227][ T5307] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 229.679945][ T5278] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 229.909972][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 229.936179][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.973382][ T5278] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 229.998611][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.025520][ T5278] usb 2-1: config 0 descriptor?? [ 230.045484][ T5278] hub 2-1:0.0: bad descriptor, ignoring hub [ 230.062811][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.567'. [ 230.079953][ T5278] hub 2-1:0.0: probe with driver hub failed with error -5 [ 230.096000][ T5278] usbhid 2-1:0.0: couldn't find an input interrupt endpoint OK Stopping syslogd: [ 230.340044][ T5307] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 230.551384][ T5307] usb 4-1: Using ep0 maxpacket: 32 [ 230.575597][ T5307] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.624460][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 230.656383][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.675196][ T5307] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 230.685253][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.705534][ T5307] usb 4-1: config 0 descriptor?? OK [ 230.721178][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 230.746623][ T5307] hub 4-1:0.0: USB hub found [ 230.952202][ T7183] ------------[ cut here ]------------ [ 230.957836][ T7183] WARNING: CPU: 0 PID: 7183 at mm/zswap.c:1700 zswap_swapoff+0x11b/0x2b0 [ 230.966664][ T7183] Modules linked in: [ 230.970923][ T7183] CPU: 0 UID: 0 PID: 7183 Comm: swapoff Not tainted 6.11.0-rc3-next-20240815-syzkaller #0 [ 230.980941][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 230.991095][ T7183] RIP: 0010:zswap_swapoff+0x11b/0x2b0 [ 230.996483][ T7183] Code: 74 05 e8 48 70 07 00 4b 83 7c 35 00 00 75 15 e8 4b e1 9e ff 48 ff c5 49 83 c6 50 83 7c 24 0c 17 76 9b eb 24 e8 36 e1 9e ff 90 <0f> 0b 90 eb e5 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 7c 90 48 8b 3c [ 231.016197][ T7183] RSP: 0018:ffffc90003977a38 EFLAGS: 00010293 [ 231.022533][ T7183] RAX: ffffffff81f4b14a RBX: dffffc0000000000 RCX: ffff88801cb99e00 [ 231.030734][ T7183] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff8880186d3248 [ 231.038760][ T7183] RBP: 0000000000000000 R08: ffffffff81f4b100 R09: 1ffffffff1d4764c [ 231.046768][ T7183] R10: dffffc0000000000 R11: fffffbfff1d4764d R12: dffffc0000000000 [ 231.054795][ T7183] R13: ffff8880186d3200 R14: 0000000000000048 R15: 0000000000000002 [ 231.063262][ T7183] FS: 00007f82104e8380(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 231.072836][ T7183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.079445][ T7183] CR2: 000000110c244a5b CR3: 000000002dc38000 CR4: 00000000003506f0 [ 231.087500][ T7183] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.095515][ T7183] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 231.103635][ T7183] Call Trace: [ 231.106917][ T7183] [ 231.109912][ T7183] ? __warn+0x163/0x4e0 [ 231.114097][ T7183] ? zswap_swapoff+0x11b/0x2b0 [ 231.118901][ T7183] ? report_bug+0x2b3/0x500 [ 231.123518][ T7183] ? zswap_swapoff+0x11b/0x2b0 [ 231.128322][ T7183] ? handle_bug+0x60/0x90 [ 231.132787][ T7183] ? exc_invalid_op+0x1a/0x50 [ 231.137476][ T7183] ? asm_exc_invalid_op+0x1a/0x20 [ 231.142651][ T7183] ? zswap_swapoff+0xd0/0x2b0 [ 231.147355][ T7183] ? zswap_swapoff+0x11a/0x2b0 [ 231.152242][ T7183] ? zswap_swapoff+0x11b/0x2b0 [ 231.157076][ T7183] ? zswap_swapoff+0x11a/0x2b0 [ 231.162013][ T7183] __se_sys_swapoff+0x4657/0x4d00 [ 231.167441][ T7183] ? seq_read+0x3a4/0x4f0 [ 231.172219][ T7183] ? proc_reg_read+0x16a/0x2f0 [ 231.177011][ T7183] ? vfs_read+0x648/0xbc0 [ 231.181393][ T7183] ? __pfx_lock_release+0x10/0x10 [ 231.186442][ T7183] ? __pfx___se_sys_swapoff+0x10/0x10 [ 231.191872][ T7183] ? vfs_fstatat+0xfd/0x190 [ 231.196411][ T7183] ? __pfx_vfs_read+0x10/0x10 [ 231.201133][ T7183] ? __might_fault+0xaa/0x120 [ 231.205815][ T7183] ? rcu_is_watching+0x15/0xb0 [ 231.210638][ T7183] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 231.216721][ T7183] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.222884][ T7183] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.229257][ T7183] ? do_syscall_64+0x100/0x230 [ 231.234155][ T7183] ? do_syscall_64+0xb6/0x230 [ 231.238882][ T7183] do_syscall_64+0xf3/0x230 [ 231.243476][ T7183] ? clear_bhb_loop+0x35/0x90 [ 231.248186][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.254203][ T7183] RIP: 0033:0x7f8210641b37 [ 231.258684][ T7183] Code: 73 01 c3 48 8b 0d f1 52 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 52 0d 00 f7 d8 64 89 01 48 [ 231.278951][ T7183] RSP: 002b:00007ffcd774cb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a8 [ 231.287911][ T7183] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8210641b37 [ 231.296084][ T7183] RDX: 00007f82106e17e8 RSI: 00007f82107deeed RDI: 000055776de37a20 [ 231.304275][ T7183] RBP: 000055776de37a20 R08: 0000000000000000 R09: c50df4b0ef7f3df2 [ 231.312351][ T7183] R10: 000000000000001f R11: 0000000000000246 R12: 00007ffcd774cd78 [ 231.320433][ T7183] R13: 000055776de372a0 R14: 0000557742773169 R15: 00007f8210820a80 [ 231.328458][ T7183] [ 231.331613][ T7183] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 231.338915][ T7183] CPU: 0 UID: 0 PID: 7183 Comm: swapoff Not tainted 6.11.0-rc3-next-20240815-syzkaller #0 [ 231.348834][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 231.358902][ T7183] Call Trace: [ 231.362183][ T7183] [ 231.365119][ T7183] dump_stack_lvl+0x241/0x360 [ 231.369819][ T7183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.375040][ T7183] ? __pfx__printk+0x10/0x10 [ 231.379632][ T7183] ? _printk+0xd5/0x120 [ 231.383806][ T7183] ? __init_begin+0x41000/0x41000 [ 231.388843][ T7183] ? vscnprintf+0x5d/0x90 [ 231.393171][ T7183] panic+0x349/0x870 [ 231.397073][ T7183] ? __warn+0x172/0x4e0 [ 231.401231][ T7183] ? __pfx_panic+0x10/0x10 [ 231.405653][ T7183] ? show_trace_log_lvl+0x3b2/0x410 [ 231.410969][ T7183] __warn+0x346/0x4e0 [ 231.414960][ T7183] ? zswap_swapoff+0x11b/0x2b0 [ 231.419743][ T7183] report_bug+0x2b3/0x500 [ 231.424071][ T7183] ? zswap_swapoff+0x11b/0x2b0 [ 231.428845][ T7183] handle_bug+0x60/0x90 [ 231.433014][ T7183] exc_invalid_op+0x1a/0x50 [ 231.437526][ T7183] asm_exc_invalid_op+0x1a/0x20 [ 231.442389][ T7183] RIP: 0010:zswap_swapoff+0x11b/0x2b0 [ 231.447769][ T7183] Code: 74 05 e8 48 70 07 00 4b 83 7c 35 00 00 75 15 e8 4b e1 9e ff 48 ff c5 49 83 c6 50 83 7c 24 0c 17 76 9b eb 24 e8 36 e1 9e ff 90 <0f> 0b 90 eb e5 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 7c 90 48 8b 3c [ 231.467384][ T7183] RSP: 0018:ffffc90003977a38 EFLAGS: 00010293 [ 231.473559][ T7183] RAX: ffffffff81f4b14a RBX: dffffc0000000000 RCX: ffff88801cb99e00 [ 231.481538][ T7183] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff8880186d3248 [ 231.489511][ T7183] RBP: 0000000000000000 R08: ffffffff81f4b100 R09: 1ffffffff1d4764c [ 231.497484][ T7183] R10: dffffc0000000000 R11: fffffbfff1d4764d R12: dffffc0000000000 [ 231.505457][ T7183] R13: ffff8880186d3200 R14: 0000000000000048 R15: 0000000000000002 [ 231.513445][ T7183] ? zswap_swapoff+0xd0/0x2b0 [ 231.518137][ T7183] ? zswap_swapoff+0x11a/0x2b0 [ 231.522913][ T7183] ? zswap_swapoff+0x11a/0x2b0 [ 231.527693][ T7183] __se_sys_swapoff+0x4657/0x4d00 [ 231.532734][ T7183] ? seq_read+0x3a4/0x4f0 [ 231.537099][ T7183] ? proc_reg_read+0x16a/0x2f0 [ 231.541878][ T7183] ? vfs_read+0x648/0xbc0 [ 231.546225][ T7183] ? __pfx_lock_release+0x10/0x10 [ 231.551258][ T7183] ? __pfx___se_sys_swapoff+0x10/0x10 [ 231.556634][ T7183] ? vfs_fstatat+0xfd/0x190 [ 231.561167][ T7183] ? __pfx_vfs_read+0x10/0x10 [ 231.565847][ T7183] ? __might_fault+0xaa/0x120 [ 231.570541][ T7183] ? rcu_is_watching+0x15/0xb0 [ 231.575323][ T7183] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 231.581409][ T7183] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.587404][ T7183] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.593741][ T7183] ? do_syscall_64+0x100/0x230 [ 231.598515][ T7183] ? do_syscall_64+0xb6/0x230 [ 231.603199][ T7183] do_syscall_64+0xf3/0x230 [ 231.607706][ T7183] ? clear_bhb_loop+0x35/0x90 [ 231.612385][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.618286][ T7183] RIP: 0033:0x7f8210641b37 [ 231.622710][ T7183] Code: 73 01 c3 48 8b 0d f1 52 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 52 0d 00 f7 d8 64 89 01 48 [ 231.642320][ T7183] RSP: 002b:00007ffcd774cb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a8 [ 231.650743][ T7183] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8210641b37 [ 231.658716][ T7183] RDX: 00007f82106e17e8 RSI: 00007f82107deeed RDI: 000055776de37a20 [ 231.666688][ T7183] RBP: 000055776de37a20 R08: 0000000000000000 R09: c50df4b0ef7f3df2 [ 231.674657][ T7183] R10: 000000000000001f R11: 0000000000000246 R12: 00007ffcd774cd78 [ 231.682630][ T7183] R13: 000055776de372a0 R14: 0000557742773169 R15: 00007f8210820a80 [ 231.690711][ T7183] [ 231.694020][ T7183] Kernel Offset: disabled [ 231.698397][ T7183] Rebooting in 86400 seconds..