last executing test programs: 11.873343016s ago: executing program 4 (id=1692): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, 0x0) 11.803563977s ago: executing program 4 (id=1695): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b40), 0x8100, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x604000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004885) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x100101) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x159102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r6, 0x856d}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 9.917781804s ago: executing program 1 (id=1709): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000095a800882"], 0x0}, 0x0) 7.264483046s ago: executing program 4 (id=1715): socket$inet6_udp(0xa, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) setregid(r2, r2) fchmod(0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20048080) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000100)=0x7fff, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.sectors\x00', 0x26e1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getpid() sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x418}, 0x0) 5.984336916s ago: executing program 1 (id=1720): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x38) 5.137417708s ago: executing program 2 (id=1723): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x400c0) sendmmsg$alg(r1, &(0x7f0000001d00)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000000480)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349d", 0x36}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000100)=""/98, 0x62}], 0x2}, 0x2) 5.1272141s ago: executing program 4 (id=1725): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b40), 0x8100, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x604000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004885) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x100101) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x159102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r6, 0x856d}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 4.873671869s ago: executing program 1 (id=1727): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xff, 0x49f, &(0x7f0000000640)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents(r0, 0x0, 0x0) 4.261551438s ago: executing program 2 (id=1728): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0) 4.137898325s ago: executing program 0 (id=1729): syz_mount_image$xfs(&(0x7f000000bb00), &(0x7f000000bb40)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0xbb82, &(0x7f0000023200)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000c000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000ffffffff"]) 3.991432751s ago: executing program 3 (id=1731): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getresuid(0x0, &(0x7f0000000000), 0x0) setreuid(0xee00, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000c00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x28, 0x6, 0x4000, 0x5, 0x0, 0x3, 0xff}}, 0x50) r4 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=r4, 0x1f, 0x0, 0x0, &(0x7f00000006c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3.849012957s ago: executing program 1 (id=1732): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x16543e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) ftruncate(r3, 0x7fff) fcntl$setstatus(r2, 0x4, 0x6800) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)="7f", 0x1}]) 3.32887314s ago: executing program 3 (id=1733): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff}, {0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x7, 0xfffffffffffffffe, 0x0, 0x9, 0x2004cb, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x800000000], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.219784323s ago: executing program 3 (id=1734): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.01244749s ago: executing program 1 (id=1735): socket$inet6_udp(0xa, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) setregid(r2, r2) fchmod(0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20048080) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000100)=0x7fff, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.sectors\x00', 0x26e1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getpid() sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x418}, 0x0) 1.856205356s ago: executing program 1 (id=1736): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000340)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0xe}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 1.819334465s ago: executing program 2 (id=1737): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x38) 1.665881659s ago: executing program 0 (id=1738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.124225323s ago: executing program 4 (id=1739): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='maps\x00') exit(0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.100847207s ago: executing program 0 (id=1740): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xc79c, 0x3, 0x101, 0x602, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xc, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) 1.095999538s ago: executing program 3 (id=1741): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x20}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0xc01, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8}]}, 0x44}}, 0x0) 1.049393313s ago: executing program 3 (id=1742): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x20000, 0x8000c61) 859.47368ms ago: executing program 2 (id=1743): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0xc0ffffff}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xa, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x3, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x0, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 850.31463ms ago: executing program 0 (id=1744): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff}, {0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x7, 0xfffffffffffffffe, 0x0, 0x9, 0x2004cb, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x800000000], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 696.975812ms ago: executing program 0 (id=1745): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 668.291616ms ago: executing program 0 (id=1746): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r1], 0x50}, 0x1, 0xba01}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044804}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x64}}, 0x80) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 663.50453ms ago: executing program 2 (id=1747): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x20}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) 56.054469ms ago: executing program 3 (id=1748): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 54.737887ms ago: executing program 4 (id=1749): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x224, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}, @TCA_U32_CLASSID={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x178, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xe0, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_nat={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x224}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 2 (id=1750): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): main item tag 0x0 [ 264.716078][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.723494][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.730938][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.738977][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.746839][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.754710][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.762284][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.769743][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.777621][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.785225][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.793766][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.801245][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.808711][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.816191][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.823600][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.831037][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.838550][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.846210][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.853612][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.861298][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.868789][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.876233][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.883632][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.891115][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.899216][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.907117][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.914516][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.921979][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.929423][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.936927][ T5307] hid-generic 0001:0000:0000.0016: unknown main item tag 0x0 [ 264.967479][ T5307] hid-generic 0001:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 265.121285][ T8498] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 265.563130][ T29] audit: type=1326 audit(1728414316.060:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8484 comm="syz.1.746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26d4f7dff9 code=0x0 [ 265.615614][ T8502] loop4: detected capacity change from 0 to 128 [ 265.623328][ T8502] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 265.654598][ T8502] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 267.640859][ T8517] loop3: detected capacity change from 0 to 1024 [ 269.680128][ T8519] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 270.084239][ T8525] loop3: detected capacity change from 0 to 1024 [ 270.152917][ T8525] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 270.240761][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.254131][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.262506][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.280986][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.288525][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.295809][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.478611][ T61] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.534966][ T5235] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 270.678503][ T61] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.697145][ T5235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.723462][ T5235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.746636][ T5235] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 270.756412][ T5235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.767052][ T61] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.794590][ T5235] usb 4-1: config 0 descriptor?? [ 270.801055][ T8526] chnl_net:caif_netlink_parms(): no params data found [ 270.842030][ T8543] loop1: detected capacity change from 0 to 256 [ 270.857545][ T61] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.891637][ T8545] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 271.023012][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.037352][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.047727][ T8526] bridge_slave_0: entered allmulticast mode [ 271.054583][ T8526] bridge_slave_0: entered promiscuous mode [ 271.071376][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.078738][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.086106][ T8526] bridge_slave_1: entered allmulticast mode [ 271.093231][ T8526] bridge_slave_1: entered promiscuous mode [ 271.634064][ T5235] hid (null): nested delimiters [ 271.641305][ T5235] hid-led 0003:27B8:01ED.0017: nested delimiters [ 271.647889][ T5235] hid-led 0003:27B8:01ED.0017: item 0 1 2 10 parsing failed [ 271.655899][ T5235] hid-led 0003:27B8:01ED.0017: probe with driver hid-led failed with error -22 [ 271.709697][ T61] bridge_slave_1: left allmulticast mode [ 271.746071][ T5235] usb 4-1: USB disconnect, device number 3 [ 271.750255][ T61] bridge_slave_1: left promiscuous mode [ 271.770944][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.866211][ T61] bridge_slave_0: left allmulticast mode [ 271.872117][ T61] bridge_slave_0: left promiscuous mode [ 271.891932][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.408262][ T8565] loop4: detected capacity change from 0 to 1024 [ 272.513058][ T5247] Bluetooth: hci1: command tx timeout [ 272.530499][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.607290][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.676178][ T61] bond0 (unregistering): Released all slaves [ 272.721314][ T8526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.761022][ T8526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.847715][ T8581] binder: 8580:8581 ioctl 4018620d 0 returned -22 [ 272.855885][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 272.895963][ T8526] team0: Port device team_slave_0 added [ 272.918760][ T8526] team0: Port device team_slave_1 added [ 272.964629][ T8581] bond0: entered promiscuous mode [ 272.987740][ T8581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 273.023114][ T8581] bond0: left promiscuous mode [ 273.032602][ T8595] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 273.092155][ T8571] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 273.155476][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.181066][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.208451][ T8526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.221765][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.228820][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.255019][ T8526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.314383][ T8526] hsr_slave_0: entered promiscuous mode [ 273.430650][ T8526] hsr_slave_1: entered promiscuous mode [ 273.440404][ T8526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.456188][ T8526] Cannot create hsr debugfs directory [ 273.520808][ T61] hsr_slave_0: left promiscuous mode [ 273.531377][ T61] hsr_slave_1: left promiscuous mode [ 273.548006][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.556249][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.565915][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.592137][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.613675][ T61] veth1_macvtap: left promiscuous mode [ 273.619796][ T61] veth0_macvtap: left promiscuous mode [ 273.627493][ T61] veth1_vlan: left promiscuous mode [ 273.632858][ T61] veth0_vlan: left promiscuous mode [ 273.774220][ T8609] loop3: detected capacity change from 0 to 128 [ 273.801883][ T8609] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.817629][ T8609] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.994448][ T61] team0 (unregistering): Port device team_slave_1 removed [ 274.034807][ T7169] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.050300][ T61] team0 (unregistering): Port device team_slave_0 removed [ 274.576238][ T5247] Bluetooth: hci1: command tx timeout [ 276.006312][ T8642] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 276.299865][ T8652] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 276.680273][ T5247] Bluetooth: hci1: command tx timeout [ 277.005036][ T5282] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 277.092670][ T8526] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.150906][ T8526] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.180993][ T5282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.209426][ T8526] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.322865][ T5282] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.348609][ T8526] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.378063][ T5282] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.775096][ T5282] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=1d.40 [ 277.794627][ T5282] usb 4-1: New USB device strings: Mfr=182, Product=151, SerialNumber=201 [ 277.815509][ T5282] usb 4-1: Product: syz [ 277.819718][ T5282] usb 4-1: Manufacturer: syz [ 277.824337][ T5282] usb 4-1: SerialNumber: syz [ 277.828116][ T8526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.022907][ T5282] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 278.037559][ T8526] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.055896][ T5282] cdc_ncm 4-1:1.0: bind() failure [ 278.186963][ T8526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.161778][ T5247] Bluetooth: hci1: command tx timeout [ 279.188006][ T8526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.483390][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.490561][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.508180][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.515347][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.747486][ T5830] usb 4-1: USB disconnect, device number 4 [ 279.757001][ T8698] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 279.924565][ T8526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.953546][ T8526] veth0_vlan: entered promiscuous mode [ 279.963261][ T8526] veth1_vlan: entered promiscuous mode [ 279.981457][ T8526] veth0_macvtap: entered promiscuous mode [ 279.989563][ T8526] veth1_macvtap: entered promiscuous mode [ 280.002669][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.013214][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.023172][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.033747][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.043646][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.054183][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.065045][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.099086][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.109776][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.119928][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.131194][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.141352][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.152208][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.163421][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.174381][ T8526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.183325][ T8526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.192132][ T8526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.201030][ T8526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.383858][ T7751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.412176][ T7751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.448036][ T962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.456882][ T962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.789264][ T8734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.804'. [ 282.228875][ T8768] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 282.378786][ T8773] netlink: 64 bytes leftover after parsing attributes in process `syz.4.811'. [ 282.509070][ T8773] netlink: 64 bytes leftover after parsing attributes in process `syz.4.811'. [ 283.172789][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 283.185041][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.817'. [ 283.441966][ T8792] bond1: entered promiscuous mode [ 283.447159][ T8792] bond1: entered allmulticast mode [ 283.452571][ T8792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.487984][ T8815] netlink: 64 bytes leftover after parsing attributes in process `syz.3.825'. [ 284.548296][ T8815] netlink: 64 bytes leftover after parsing attributes in process `syz.3.825'. [ 284.639277][ T8821] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 284.676696][ T8817] loop7: detected capacity change from 0 to 16384 [ 284.718466][ T8826] fuse: Bad value for 'fd' [ 284.763624][ T8817] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 284.783884][ T8817] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 284.903752][ T8819] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 284.944950][ T8819] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 284.960440][ T8819] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 284.965571][ T8835] netlink: 'syz.3.832': attribute type 16 has an invalid length. [ 284.986439][ T8835] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.832'. [ 284.988392][ T8819] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 285.021318][ T8819] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 285.032483][ T8819] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 285.044494][ T8819] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 285.053475][ T8819] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 285.068385][ T8819] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 285.083314][ T8819] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 285.439410][ T29] audit: type=1326 audit(1728414336.300:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78657dff9 code=0x7fc00000 [ 285.587167][ T8846] trusted_key: encrypted_key: insufficient parameters specified [ 286.794459][ T8877] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 287.474570][ T8878] netlink: 'syz.2.846': attribute type 21 has an invalid length. [ 287.499158][ T8878] netlink: 128 bytes leftover after parsing attributes in process `syz.2.846'. [ 287.597330][ T8891] loop3: detected capacity change from 0 to 1024 [ 287.604555][ T8891] EXT4-fs: Ignoring removed oldalloc option [ 287.654060][ T29] audit: type=1326 audit(1728414338.520:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d4f7dff9 code=0x7fc00000 [ 287.678180][ T8891] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 287.701413][ T29] audit: type=1326 audit(1728414338.520:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26d4f7dff9 code=0x7fc00000 [ 287.764009][ T8891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.796691][ T29] audit: type=1326 audit(1728414338.520:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d4f7dff9 code=0x7fc00000 [ 288.009531][ T29] audit: type=1326 audit(1728414338.520:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d4f7dff9 code=0x7fc00000 [ 288.187316][ T29] audit: type=1326 audit(1728414338.520:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d4f7dff9 code=0x7fc00000 [ 288.210068][ T29] audit: type=1326 audit(1728414338.520:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d4f7dff9 code=0x7fc00000 [ 288.232186][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.670257][ T29] audit: type=1326 audit(1728414338.520:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d4f7dff9 code=0x7fc00000 [ 288.695545][ T29] audit: type=1326 audit(1728414338.520:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d4f7dff9 code=0x7fc00000 [ 288.717634][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.724114][ T29] audit: type=1326 audit(1728414338.520:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8874 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d4f7dff9 code=0x7fc00000 [ 288.825486][ T7169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.062547][ T8943] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 290.292556][ T8952] loop4: detected capacity change from 0 to 128 [ 290.319262][ T8952] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 290.520991][ T8955] sctp: [Deprecated]: syz.0.870 (pid 8955) Use of int in max_burst socket option deprecated. [ 290.520991][ T8955] Use struct sctp_assoc_value instead [ 291.114948][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 291.114967][ T29] audit: type=1326 audit(1728414341.900:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8941 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d4f7dff9 code=0x7fc00000 [ 291.273873][ T8957] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 291.565280][ T8967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.875'. [ 291.625877][ T8981] netlink: 132 bytes leftover after parsing attributes in process `syz.3.878'. [ 291.769252][ T8986] netlink: 156 bytes leftover after parsing attributes in process `syz.3.880'. [ 291.795927][ T8986] netlink: 'syz.3.880': attribute type 2 has an invalid length. [ 291.805236][ T8986] netlink: 60 bytes leftover after parsing attributes in process `syz.3.880'. [ 291.924686][ T8988] sctp: [Deprecated]: syz.2.881 (pid 8988) Use of int in max_burst socket option deprecated. [ 291.924686][ T8988] Use struct sctp_assoc_value instead [ 293.524042][ T9015] netlink: 112 bytes leftover after parsing attributes in process `syz.0.888'. [ 293.693263][ T9020] netlink: 156 bytes leftover after parsing attributes in process `syz.1.893'. [ 293.704919][ T5236] Bluetooth: hci4: command 0x0406 tx timeout [ 293.716863][ T9020] netlink: 'syz.1.893': attribute type 2 has an invalid length. [ 293.804985][ T9020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.893'. [ 293.862531][ T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 294.059985][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.087609][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 294.217361][ T25] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 294.347144][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.036818][ T9048] openvswitch: netlink: Actions may not be safe on all matching packets [ 295.370694][ T25] usb 3-1: config 0 descriptor?? [ 295.385306][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 295.391959][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 295.402076][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 295.413972][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 295.421458][ T25] usb 3-1: media controller created [ 295.427684][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.502652][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 295.512414][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 295.649729][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 295.901190][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 295.908234][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 295.917713][ T25] usb 3-1: USB disconnect, device number 2 [ 296.063743][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 296.074663][ T9064] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.907'. [ 296.321168][ T9077] loop3: detected capacity change from 0 to 128 [ 296.344127][ T9077] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 297.662705][ T9098] loop7: detected capacity change from 0 to 16384 [ 298.016691][ T9099] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.042750][ T9099] buffer_io_error: 7 callbacks suppressed [ 298.042771][ T9099] Buffer I/O error on dev loop7, logical block 0, async page read [ 298.075969][ T9099] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.135003][ T9099] Buffer I/O error on dev loop7, logical block 0, async page read [ 298.143286][ T9099] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.153036][ T9099] Buffer I/O error on dev loop7, logical block 0, async page read [ 298.166335][ T9098] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.185572][ T9099] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.262074][ T9099] Buffer I/O error on dev loop7, logical block 0, async page read [ 298.305023][ T9099] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.335146][ T9099] Buffer I/O error on dev loop7, logical block 0, async page read [ 298.374548][ T9099] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.385426][ T9099] Buffer I/O error on dev loop7, logical block 0, async page read [ 298.443627][ T9099] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.482543][ T9099] Buffer I/O error on dev loop7, logical block 0, async page read [ 298.602164][ T9099] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.641614][ T9099] Buffer I/O error on dev loop7, logical block 0, async page read [ 298.717547][ T9099] ldm_validate_partition_table(): Disk read failed. [ 298.727069][ T9099] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.751895][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.928'. [ 298.883609][ T9099] Buffer I/O error on dev loop7, logical block 0, async page read [ 298.892987][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 298.905134][ T9099] Buffer I/O error on dev loop7, logical block 0, async page read [ 298.913169][ T9099] Dev loop7: unable to read RDB block 0 [ 298.919054][ T9099] loop7: unable to read partition table [ 298.924801][ T9099] loop_reread_partitions: partition scan of loop7 (K‹>¤i)ßí /480• #Ð …$qÝZ”©þ•I‘ŠçýÎ[†u±@3bÏàôüÏûj!5MMñ]z) failed (rc=-5) [ 298.999949][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 299.414106][ T9151] openvswitch: netlink: Actions may not be safe on all matching packets [ 300.188056][ T9160] sctp: [Deprecated]: syz.1.940 (pid 9160) Use of int in max_burst socket option deprecated. [ 300.188056][ T9160] Use struct sctp_assoc_value instead [ 300.269927][ T9166] loop1: detected capacity change from 0 to 128 [ 300.398107][ T9166] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.756469][ T9166] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.489702][ T9194] loop2: detected capacity change from 0 to 8 [ 301.796478][ T7151] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.410136][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 304.519060][ T9245] random: crng reseeded on system resumption [ 305.036676][ T9252] loop4: detected capacity change from 0 to 8 [ 307.668443][ T936] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 307.710635][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 307.837228][ T936] usb 4-1: Using ep0 maxpacket: 8 [ 307.845930][ T936] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 307.858343][ T936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.867094][ T936] usb 4-1: Product: syz [ 307.874598][ T936] usb 4-1: Manufacturer: syz [ 307.887083][ T936] usb 4-1: SerialNumber: syz [ 307.908015][ T936] usb 4-1: config 0 descriptor?? [ 307.918555][ T936] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 308.122318][ T936] gspca_vc032x: reg_r err -32 [ 308.127528][ T936] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 308.248361][ T936] usb 4-1: USB disconnect, device number 5 [ 308.319744][ T9293] loop1: detected capacity change from 0 to 8 [ 310.304580][ T29] audit: type=1326 audit(1728414361.170:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.3.986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aae57dff9 code=0x0 [ 310.580629][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 310.805703][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.992'. [ 310.866415][ T9319] binder: BINDER_SET_CONTEXT_MGR already set [ 310.873065][ T9319] binder: 9318:9319 ioctl 4018620d 200001c0 returned -16 [ 311.189774][ T9334] loop3: detected capacity change from 0 to 8 [ 315.516169][ T9363] sctp: [Deprecated]: syz.1.1008 (pid 9363) Use of int in max_burst socket option deprecated. [ 315.516169][ T9363] Use struct sctp_assoc_value instead [ 316.145300][ T9370] team0: entered promiscuous mode [ 316.151041][ T9370] team_slave_0: entered promiscuous mode [ 316.167435][ T9370] team_slave_1: entered promiscuous mode [ 316.198432][ T9369] team0: left promiscuous mode [ 316.203242][ T9369] team_slave_0: left promiscuous mode [ 316.222588][ T9369] team_slave_1: left promiscuous mode [ 317.299928][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.504150][ T9406] sctp: [Deprecated]: syz.0.1020 (pid 9406) Use of int in max_burst socket option deprecated. [ 319.504150][ T9406] Use struct sctp_assoc_value instead [ 319.682005][ T9412] team0: entered promiscuous mode [ 319.688486][ T9412] team_slave_0: entered promiscuous mode [ 319.694264][ T9412] team_slave_1: entered promiscuous mode [ 319.981557][ T9410] team0: left promiscuous mode [ 320.009805][ T9410] team_slave_0: left promiscuous mode [ 320.016843][ T9410] team_slave_1: left promiscuous mode [ 320.185855][ T9424] loop1: detected capacity change from 0 to 256 [ 320.576408][ T9433] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 320.636366][ T29] audit: type=1804 audit(1728414371.470:41): pid=9434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1018" name="/newroot/126/file1/file0" dev="loop1" ino=1048845 res=1 errno=0 [ 320.855856][ T9433] netlink: 9396 bytes leftover after parsing attributes in process `syz.0.1027'. [ 321.191157][ T9451] loop1: detected capacity change from 0 to 128 [ 321.222528][ T9456] sctp: [Deprecated]: syz.0.1034 (pid 9456) Use of int in max_burst socket option deprecated. [ 321.222528][ T9456] Use struct sctp_assoc_value instead [ 321.227617][ T9451] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 321.660452][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.677324][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.687073][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.697224][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.708779][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.737162][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.794193][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.805581][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.814647][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.823309][ T9473] netlink: 'syz.4.1039': attribute type 1 has an invalid length. [ 321.827369][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.836814][ T9473] netlink: 9396 bytes leftover after parsing attributes in process `syz.4.1039'. [ 321.840372][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.935226][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 321.943508][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.960733][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.971919][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 321.990827][ T9479] kvm: kvm [9477]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000007f) = 0x0 [ 322.002286][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.013232][ T9481] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 322.015030][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.055261][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.069398][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.084981][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.094330][ T25] usb 1-1: config 0 has no interfaces? [ 322.100245][ T25] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 322.137966][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.155150][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.166395][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.181559][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.192038][ T25] usb 1-1: config 0 descriptor?? [ 322.213088][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.220972][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.252444][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.278685][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.296522][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.314526][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.328214][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.358398][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.432745][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 322.975570][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: unknown main item tag 0x0 [ 323.182009][ T5283] hid-generic 0000:0000:FFFFFFFF.0018: hidraw0: HID v0.02 Device [syz0] on syz0 [ 323.192266][ T5235] usb 1-1: USB disconnect, device number 3 [ 323.261551][ T9505] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 323.297221][ T9505] netlink: 9396 bytes leftover after parsing attributes in process `syz.2.1053'. [ 323.306602][ T5830] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 323.472562][ T5830] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 323.512886][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.515608][ T5830] usb 5-1: config 0 descriptor?? [ 324.571938][ T5830] cp210x 5-1:0.0: cp210x converter detected [ 324.811592][ T5830] usb 5-1: cp210x converter now attached to ttyUSB0 [ 325.005005][ T5283] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 325.471975][ T5283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.482581][ T5283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 325.504654][ T5235] usb 5-1: USB disconnect, device number 2 [ 325.516603][ T5235] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 325.691490][ T5235] cp210x 5-1:0.0: device disconnected [ 325.836351][ T9533] ptrace attach of "./syz-executor exec"[9534] was attempted by "./syz-executor exec"[9533] [ 325.854592][ T9533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.861888][ T9533] IPv6: NLM_F_CREATE should be set when creating new route [ 326.662560][ T5283] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 326.672516][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.683148][ T5283] usb 1-1: config 0 descriptor?? [ 326.930701][ T5283] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 326.938606][ T5283] dvb-usb: bulk message failed: -22 (3/0) [ 326.957713][ T5283] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 326.970302][ T5283] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 326.977797][ T5283] usb 1-1: media controller created [ 326.983911][ T5283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.994441][ T5283] dvb-usb: bulk message failed: -22 (6/0) [ 327.000246][ T5283] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 327.019740][ T5283] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 327.033173][ T5283] dvb-usb: schedule remote query interval to 150 msecs. [ 327.040637][ T5283] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 327.154678][ T9540] batman_adv: batadv0: Adding interface: dummy0 [ 327.162494][ T9540] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.189432][ T9540] batman_adv: batadv0: Interface activated: dummy0 [ 327.198063][ T5235] dvb-usb: bulk message failed: -22 (1/0) [ 327.203964][ T5235] dvb-usb: error while querying for an remote control event. [ 327.237506][ T9540] batadv0: mtu less than device minimum [ 327.251479][ T9540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.262884][ T9540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.274182][ T9540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.285502][ T9540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.296773][ T9540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.308083][ T9540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.319375][ T9540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.330651][ T9540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.341938][ T9540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.407746][ T5235] dvb-usb: bulk message failed: -22 (1/0) [ 327.421383][ T9550] loop4: detected capacity change from 0 to 128 [ 327.432379][ T9519] No such timeout policy "syz1" [ 327.437393][ T5235] dvb-usb: error while querying for an remote control event. [ 327.468337][ T5282] usb 1-1: USB disconnect, device number 4 [ 327.483428][ T9550] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.500579][ T5282] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 327.521524][ T9550] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.589648][ T9570] loop2: detected capacity change from 0 to 8 [ 329.985105][ T8055] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 331.186103][ T5307] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 331.374988][ T5283] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 331.593152][ T5283] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 331.621098][ T5283] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 331.651371][ T5283] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.680940][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.710974][ T9615] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 331.737223][ T5283] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.849041][ T5307] usb 3-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=8b.92 [ 331.864131][ T9623] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1091'. [ 331.879176][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.879536][ T9623] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1091'. [ 331.904995][ T5307] usb 3-1: Product: syz [ 331.909192][ T5307] usb 3-1: Manufacturer: syz [ 331.913797][ T5307] usb 3-1: SerialNumber: syz [ 331.965023][ T5307] usb 3-1: config 0 descriptor?? [ 332.021559][ T5307] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7029 [ 332.150443][ T9637] team0: entered promiscuous mode [ 332.165576][ T9637] team_slave_0: entered promiscuous mode [ 332.171589][ T9637] team_slave_1: entered promiscuous mode [ 332.182880][ T9636] team0: left promiscuous mode [ 332.190193][ T9636] team_slave_0: left promiscuous mode [ 332.197491][ T5283] usb 1-1: USB disconnect, device number 5 [ 332.213995][ T9636] team_slave_1: left promiscuous mode [ 332.350564][ T9635] random: crng reseeded on system resumption [ 332.379877][ T9642] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.459449][ T9642] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.519446][ T9642] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.569578][ T5307] gspca_sn9c20x: Write register 1001 failed -71 [ 332.576258][ T5307] gspca_sn9c20x: Device initialization failed [ 332.583318][ T5307] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 332.597831][ T5307] usb 3-1: USB disconnect, device number 3 [ 332.605649][ T9642] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.715696][ T9642] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.733709][ T9642] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.750937][ T9642] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.771320][ T9642] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.684719][ T9668] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1103'. [ 335.226420][ T9693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.277201][ T9697] loop1: detected capacity change from 0 to 128 [ 335.307620][ T9697] EXT4-fs (loop1): Test dummy encryption mode enabled [ 335.390232][ T9697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 335.411327][ T9697] System zones: 1-3, 19-19, 35-36 [ 335.416614][ T9693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.428970][ T9697] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.430262][ T9705] geneve2: entered promiscuous mode [ 335.443488][ T9697] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.236945][ T9716] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 336.284790][ T9693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.330387][ T9724] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1120'. [ 336.353998][ T7151] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.401975][ T9693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.501616][ T9693] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.517102][ T9693] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.529515][ T9693] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.541793][ T9693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.892253][ T9744] loop2: detected capacity change from 0 to 128 [ 337.118398][ T9744] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 337.752098][ T9750] geneve2: entered promiscuous mode [ 338.269011][ T9757] loop0: detected capacity change from 0 to 1024 [ 338.288525][ T9757] EXT4-fs: Ignoring removed oldalloc option [ 338.300505][ T9757] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 338.375020][ T9762] binder: BINDER_SET_CONTEXT_MGR already set [ 338.381043][ T9762] binder: 9755:9762 ioctl 4018620d 20000040 returned -16 [ 338.450557][ T9757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.577992][ T9768] loop3: detected capacity change from 0 to 128 [ 338.596324][ T9768] EXT4-fs (loop3): Test dummy encryption mode enabled [ 338.610238][ T9770] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1134'. [ 338.628768][ T9768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 338.637068][ T9768] System zones: 1-3, 19-19, 35-36 [ 338.678961][ T9768] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.735028][ T9768] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.458487][ T9783] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 339.536544][ T7169] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.762519][ T29] audit: type=1326 audit(1728414390.560:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.3.1136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aae57dff9 code=0x0 [ 340.027353][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 340.062699][ T7064] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.412959][ T9802] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 340.623830][ T9799] kvm: pic: non byte read [ 340.628920][ T9799] kvm: pic: level sensitive irq not supported [ 340.628989][ T9799] kvm: pic: non byte read [ 340.640124][ T9799] kvm: pic: level sensitive irq not supported [ 340.640220][ T9799] kvm: pic: non byte read [ 340.708574][ T9811] fuse: Bad value for 'fd' [ 341.264665][ T9826] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1147'. [ 341.274083][ T9826] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1147'. [ 342.142779][ T9835] loop1: detected capacity change from 0 to 128 [ 342.159839][ T9836] loop3: detected capacity change from 0 to 1024 [ 342.187679][ T9835] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 342.212365][ T9836] EXT4-fs: Ignoring removed oldalloc option [ 342.244138][ T9836] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 342.516414][ T9836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.567715][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'. [ 343.592130][ T9863] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 345.276403][ T7169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.977230][ T9907] team0: entered promiscuous mode [ 345.999691][ T9907] team_slave_0: entered promiscuous mode [ 346.055139][ T9907] team_slave_1: entered promiscuous mode [ 346.098432][ T9906] team0: left promiscuous mode [ 346.103319][ T9906] team_slave_0: left promiscuous mode [ 346.137331][ T9906] team_slave_1: left promiscuous mode [ 346.278537][ T9918] loop3: detected capacity change from 0 to 256 [ 347.058218][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 347.067910][ T9925] bridge_slave_1: left allmulticast mode [ 347.074006][ T9925] bridge_slave_1: left promiscuous mode [ 347.079870][ T9925] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.100196][ T9925] bridge_slave_0: left allmulticast mode [ 347.106240][ T9925] bridge_slave_0: left promiscuous mode [ 347.116620][ T9925] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.632277][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 348.399313][ T9950] team0: entered promiscuous mode [ 348.618651][ T9949] team0: left promiscuous mode [ 348.847597][ T9965] loop0: detected capacity change from 0 to 256 [ 349.230235][ T29] audit: type=1804 audit(1728414400.010:43): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1188" name="/newroot/159/file1/file0" dev="loop0" ino=1048860 res=1 errno=0 [ 349.586318][ T9979] net_ratelimit: 11 callbacks suppressed [ 349.586341][ T9979] openvswitch: netlink: Actions may not be safe on all matching packets [ 350.292189][ T9996] team0: entered promiscuous mode [ 350.297760][ T9996] team_slave_0: entered promiscuous mode [ 350.303866][ T9996] team_slave_1: entered promiscuous mode [ 350.310677][ T9994] team0: left promiscuous mode [ 350.315563][ T9994] team_slave_0: left promiscuous mode [ 350.323604][ T9994] team_slave_1: left promiscuous mode [ 350.503770][T10004] loop2: detected capacity change from 0 to 128 [ 350.527426][T10004] EXT4-fs (loop2): Test dummy encryption mode enabled [ 350.550232][T10004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 350.560217][T10004] System zones: 1-3, 19-19, 35-36 [ 350.576590][T10004] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.590158][T10004] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.330928][T10017] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 351.482265][ T8526] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.231369][T10044] team0: entered promiscuous mode [ 352.269169][T10044] team_slave_0: entered promiscuous mode [ 352.275920][T10045] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1214'. [ 352.295244][T10044] team_slave_1: entered promiscuous mode [ 352.301698][T10045] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1214'. [ 352.339801][T10052] openvswitch: netlink: Actions may not be safe on all matching packets [ 352.359348][T10040] team0: left promiscuous mode [ 352.384604][T10040] team_slave_0: left promiscuous mode [ 352.437317][T10040] team_slave_1: left promiscuous mode [ 352.839299][T10064] mmap: syz.1.1221 (10064) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 353.183691][T10076] loop3: detected capacity change from 0 to 128 [ 353.194265][T10076] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 353.387039][T10080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 353.432715][T10080] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 353.441427][ T5247] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 353.465807][T10080] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 353.502887][T10080] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 353.572456][T10080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 353.599627][T10080] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 353.635707][T10080] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 353.647086][T10080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 353.682115][T10080] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 353.721811][T10080] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 353.737322][T10088] team0: entered promiscuous mode [ 353.754988][T10088] team_slave_0: entered promiscuous mode [ 353.770995][T10088] team_slave_1: entered promiscuous mode [ 353.805813][T10087] team0: left promiscuous mode [ 353.847058][T10087] team_slave_0: left promiscuous mode [ 353.864967][T10087] team_slave_1: left promiscuous mode [ 353.961443][T10093] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 355.535217][ T5247] Bluetooth: hci5: command 0x0406 tx timeout [ 355.627192][ T5247] Bluetooth: hci3: command 0x0405 tx timeout [ 355.694929][ T5247] Bluetooth: hci1: command 0x0c1a tx timeout [ 355.945530][T10124] team0: entered promiscuous mode [ 355.950742][T10124] team_slave_0: entered promiscuous mode [ 355.965239][T10124] team_slave_1: entered promiscuous mode [ 355.982330][T10123] team0: left promiscuous mode [ 355.988852][T10123] team_slave_0: left promiscuous mode [ 355.999066][T10123] team_slave_1: left promiscuous mode [ 356.069678][T10128] fuse: Unknown parameter 'grou00000000000000000000' [ 356.699714][ T936] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 357.128671][T10162] loop3: detected capacity change from 0 to 128 [ 357.150018][T10162] EXT4-fs (loop3): Test dummy encryption mode enabled [ 357.182073][T10162] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 357.204339][T10162] System zones: 1-3, 19-19, 35-36 [ 357.230898][T10162] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 357.259617][T10162] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.464950][ T5247] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 357.473452][ T5247] Bluetooth: hci4: Injecting HCI hardware error event [ 357.702645][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 357.709231][ T5236] Bluetooth: hci3: command 0x0405 tx timeout [ 357.718104][ T5247] Bluetooth: hci4: hardware error 0x00 [ 357.775628][ T5236] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.001863][T10169] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 358.086535][ T936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.104858][ T936] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.116925][ T7169] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.130282][ T936] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 358.141861][T10176] loop2: detected capacity change from 0 to 8 [ 358.150779][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 358.175856][ T936] usb 2-1: SerialNumber: syz [ 358.475728][T10105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.513881][T10105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.525155][ T5283] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 358.528840][ T936] usb 2-1: 0:2 : does not exist [ 358.539115][ T936] usb 2-1: unit 6 not found! [ 358.575110][ T936] usb 2-1: USB disconnect, device number 2 [ 358.644606][ T8044] udevd[8044]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.781091][ T5247] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 359.787839][ T5247] Bluetooth: hci3: command 0x0405 tx timeout [ 359.811251][T10210] loop3: detected capacity change from 0 to 8 [ 359.815266][ T5283] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.836961][ T5283] usb 3-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=f5.0f [ 359.846454][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.854490][ T5283] usb 3-1: Product: syz [ 359.858769][ T5247] Bluetooth: hci1: command 0x0c1a tx timeout [ 359.866807][ T5283] usb 3-1: Manufacturer: syz [ 359.871439][ T5283] usb 3-1: SerialNumber: syz [ 359.887356][ T5283] usb 3-1: config 0 descriptor?? [ 361.364291][T10269] loop0: detected capacity change from 0 to 1024 [ 361.377819][T10271] team0: entered promiscuous mode [ 361.381510][T10269] EXT4-fs: Ignoring removed oldalloc option [ 361.386855][T10271] team_slave_0: entered promiscuous mode [ 361.398634][T10271] team_slave_1: entered promiscuous mode [ 361.408313][T10270] team0: left promiscuous mode [ 361.413919][T10270] team_slave_0: left promiscuous mode [ 361.419862][T10270] team_slave_1: left promiscuous mode [ 361.435509][T10269] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 361.462106][T10269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.434722][T10292] fuse: Unknown parameter 'group_id00000000000000000000' [ 362.534623][ T5282] usb 3-1: USB disconnect, device number 4 [ 362.746158][ T25] IPVS: starting estimator thread 0... [ 362.752112][T10304] tipc: Started in network mode [ 362.774300][T10307] loop1: detected capacity change from 0 to 128 [ 362.775253][T10304] tipc: Node identity ac1414aa, cluster identity 4711 [ 362.803728][T10304] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 362.811173][T10307] EXT4-fs (loop1): Test dummy encryption mode enabled [ 362.812475][T10304] tipc: Enabled bearer , priority 10 [ 362.825828][T10307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 362.835076][T10305] IPVS: using max 34 ests per chain, 81600 per kthread [ 362.846788][T10307] System zones: 1-3, 19-19, 35-36 [ 362.865659][T10307] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 362.887959][T10307] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.934941][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 362.942168][ T5282] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 363.074877][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.098053][ T7064] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.214903][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.354893][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.494867][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.632702][T10317] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 363.642285][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.718976][ T5282] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 363.721053][ T7151] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.728215][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 363.750011][ T5282] usb 3-1: Product: syz [ 363.754218][ T5282] usb 3-1: Manufacturer: syz [ 363.758891][ T5282] usb 3-1: SerialNumber: syz [ 363.772778][ T5282] usb 3-1: config 0 descriptor?? [ 363.777888][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.792332][ T5282] ch341 3-1:0.0: ch341-uart converter detected [ 363.919864][ T25] tipc: Node number set to 2886997162 [ 364.054867][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 364.324921][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 364.447528][T10353] loop1: detected capacity change from 0 to 128 [ 364.460636][T10353] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 364.878763][T10369] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 364.900222][ T5282] usb 3-1: failed to receive control message: -110 [ 364.907779][ T5282] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 365.035636][T10371] ptrace attach of "./syz-executor exec"[10372] was attempted by "./syz-executor exec"[10371] [ 365.056570][T10371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.063820][T10371] IPv6: NLM_F_CREATE should be set when creating new route [ 365.451367][T10348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.489279][T10348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.905329][T10395] loop0: detected capacity change from 0 to 128 [ 365.913741][T10395] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 366.509639][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'. [ 366.591544][T10402] netlink: 'syz.1.1339': attribute type 10 has an invalid length. [ 366.598082][ T5282] usb 3-1: USB disconnect, device number 5 [ 366.599579][T10402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1339'. [ 366.616425][T10402] batman_adv: batadv0: Adding interface: vlan1 [ 366.622619][T10402] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.625465][ T5282] ch341 3-1:0.0: device disconnected [ 366.647813][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.682652][T10402] batman_adv: batadv0: Interface activated: vlan1 [ 366.738887][T10395] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 366.913971][T10415] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 368.014934][ C1] net_ratelimit: 3 callbacks suppressed [ 368.014958][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 369.054870][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 369.076044][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 370.104855][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 370.923641][ T5307] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 371.085113][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.110615][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.134888][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 371.142424][T10483] loop4: detected capacity change from 0 to 128 [ 371.152260][ T5307] usb 2-1: New USB device found, idVendor=046d, idProduct=c094, bcdDevice= 0.00 [ 371.163118][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.180703][ T5307] usb 2-1: config 0 descriptor?? [ 371.191165][T10483] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.207166][T10483] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.455193][ T936] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 371.604948][ T936] usb 4-1: Using ep0 maxpacket: 8 [ 371.622215][ T936] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.637500][ T5307] logitech-hidpp-device 0003:046D:C094.0019: unknown main item tag 0x0 [ 371.653772][ T936] usb 4-1: config 0 has no interface number 0 [ 371.682473][ T936] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.703304][ T5307] logitech-hidpp-device 0003:046D:C094.0019: hidraw0: USB HID v0.00 Device [HID 046d:c094] on usb-dummy_hcd.1-1/input0 [ 371.732445][ T936] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 371.743147][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.758606][ T936] usb 4-1: config 0 descriptor?? [ 371.813770][ T936] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 371.863011][ T5235] usb 2-1: USB disconnect, device number 3 [ 372.083132][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1367'. [ 372.174858][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.214886][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.463471][ T936] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 373.615960][ T936] usb 3-1: Using ep0 maxpacket: 32 [ 373.622575][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.636602][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.668759][ T936] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.681601][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.044888][ T936] usb 3-1: config 0 descriptor?? [ 374.051948][ T936] hub 3-1:0.0: USB hub found [ 374.172241][ T5830] usb 4-1: USB disconnect, device number 6 [ 374.254858][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 374.276522][ T936] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 374.278857][ T8055] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.294879][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 376.344880][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 376.871646][ T936] usbhid 3-1:0.0: can't add hid device: -71 [ 376.878072][ T936] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 376.971621][ T936] usb 3-1: USB disconnect, device number 6 [ 377.292046][T10566] loop1: detected capacity change from 0 to 1024 [ 377.326040][T10566] EXT4-fs: Ignoring removed oldalloc option [ 377.370645][T10566] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 377.384860][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 377.455241][T10566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.232721][ T7151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.424863][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 378.424908][ T5830] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 379.382063][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.464852][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 379.544860][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 379.552551][ T5830] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.696648][ T5830] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 379.705739][ T5830] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 379.725712][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.926862][ T5830] usb 1-1: config 0 descriptor?? [ 380.067036][ T5247] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 380.209791][T10622] loop4: detected capacity change from 0 to 1024 [ 380.229206][T10622] EXT4-fs: Ignoring removed oldalloc option [ 380.257441][T10622] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 380.292557][T10622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.504867][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 381.120226][ T8055] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.254484][T10644] loop3: detected capacity change from 0 to 128 [ 381.534852][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 381.843043][T10644] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 382.584876][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 383.624868][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 384.096669][ T5830] usb 1-1: USB disconnect, device number 6 [ 384.108272][ T5247] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 384.116683][ T5247] Bluetooth: hci3: Injecting HCI hardware error event [ 384.124950][ T5247] Bluetooth: hci3: hardware error 0x00 [ 384.654858][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 384.736076][T10694] : entered promiscuous mode [ 385.117362][T10698] openvswitch: netlink: Actions may not be safe on all matching packets [ 385.694874][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 386.264997][ T5247] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 386.734853][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 387.551698][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'. [ 387.578425][T10732] netlink: 'syz.2.1448': attribute type 10 has an invalid length. [ 387.594984][T10732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1448'. [ 387.604421][T10732] batman_adv: batadv0: Adding interface: vlan1 [ 387.654967][T10732] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.715996][T10732] batman_adv: batadv0: Interface activated: vlan1 [ 387.774891][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 388.814855][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 388.841811][T10748] loop1: detected capacity change from 0 to 128 [ 388.894195][T10748] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 388.916618][T10748] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.072729][T10752] loop0: detected capacity change from 0 to 1024 [ 389.079769][T10752] EXT4-fs: Ignoring removed oldalloc option [ 389.100221][T10752] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 389.159245][T10752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.864897][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 390.010246][ T7064] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.103502][ T7151] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.187855][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 390.684880][ T5282] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 390.894958][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 391.934932][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 392.185218][ T5282] usb 1-1: device descriptor read/64, error -71 [ 392.435780][ T5282] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 392.596941][ T5282] usb 1-1: device descriptor read/64, error -71 [ 392.804967][ T5282] usb usb1-port1: attempt power cycle [ 392.984986][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 393.184872][ T5282] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 393.205278][ T5282] usb 1-1: device descriptor read/8, error -71 [ 394.025676][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 395.054861][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 396.043506][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 396.104848][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 396.602573][T10870] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1492'. [ 397.134930][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 397.496865][T10892] loop0: detected capacity change from 0 to 128 [ 397.754876][ T5282] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 398.076156][T10892] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 398.174865][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 398.323188][T10905] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1505'. [ 398.414917][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 398.427721][ T5282] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 398.436987][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.445033][ T5282] usb 3-1: Product: syz [ 398.449211][ T5282] usb 3-1: Manufacturer: syz [ 398.453816][ T5282] usb 3-1: SerialNumber: syz [ 398.483307][T10907] netlink: 'syz.1.1506': attribute type 9 has an invalid length. [ 398.491994][ T5282] usb 3-1: config 0 descriptor?? [ 398.497646][T10907] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1506'. [ 398.560980][ T5282] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 398.762377][ T5282] gspca_vc032x: reg_r err -32 [ 398.767719][ T5282] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 398.794911][ T936] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 398.846609][ T5282] usb 3-1: USB disconnect, device number 7 [ 398.946241][ T936] usb 5-1: Using ep0 maxpacket: 32 [ 398.954101][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.969433][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.988913][ T936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 399.009404][ T936] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 399.019673][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.170109][ T936] usb 5-1: config 0 descriptor?? [ 399.214854][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 399.808656][ T936] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001A/input/input10 [ 399.917306][ T936] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001A/input/input11 [ 399.991917][ T936] kye 0003:0458:5011.001A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 400.120593][T10943] team0: entered promiscuous mode [ 400.134975][T10943] team_slave_0: entered promiscuous mode [ 400.142277][T10943] team_slave_1: entered promiscuous mode [ 400.173921][T10943] team0: left promiscuous mode [ 400.184615][ T5282] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 400.195212][T10943] team_slave_0: left promiscuous mode [ 400.201111][T10943] team_slave_1: left promiscuous mode [ 400.254888][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 400.360127][ T5282] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 400.370533][ T5282] usb 3-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 400.391780][ T5282] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 400.644347][ T5282] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.669812][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.687185][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.689778][T10947] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1519'. [ 400.708877][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.709990][ T5282] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 400.729536][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 400.738068][ T5282] usb 3-1: Product: syz [ 400.742331][ T5282] usb 3-1: Manufacturer: syz [ 400.753854][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.784861][ T936] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 400.934952][ T936] usb 1-1: Using ep0 maxpacket: 16 [ 400.945224][ C1] kye 0003:0458:5011.001A: usb_submit_urb(ctrl) failed: -1 [ 400.945385][ T936] usb 1-1: config 1 interface 0 altsetting 161 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.004143][ T936] usb 1-1: config 1 interface 0 has no altsetting 0 [ 401.009696][ T5282] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 401.038447][ T5282] usb 3-1: USB disconnect, device number 8 [ 401.041029][ T936] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.40 [ 401.057135][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.065501][ T936] usb 1-1: Product: syz [ 401.069897][ T936] usb 1-1: Manufacturer: syz [ 401.074614][ T936] usb 1-1: SerialNumber: syz [ 401.291955][ T936] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 401.304036][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 401.304976][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 401.457095][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.468110][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.478380][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 401.487549][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.501562][ T8] usb 4-1: config 0 descriptor?? [ 401.534988][ T5282] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 401.572470][T10956] loop4: detected capacity change from 0 to 256 [ 401.740028][ T5830] usb 5-1: USB disconnect, device number 3 [ 401.818925][ T5282] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.837817][ T5282] usb 3-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 402.055382][ T29] audit: type=1804 audit(1728414452.810:44): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1523" name="/newroot/186/file1/file0" dev="loop4" ino=1048861 res=1 errno=0 [ 402.223392][T10961] loop1: detected capacity change from 0 to 128 [ 402.268628][ T8] logitech-djreceiver 0003:046D:C534.001B: hidraw1: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.3-1/input0 [ 402.281787][T10941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.334898][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 402.336727][ T8] usb 4-1: USB disconnect, device number 7 [ 402.344466][ T5282] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.360112][ T5282] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.378794][ T5282] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.388034][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 402.396132][ T5282] usb 3-1: Product: syz [ 402.400463][ T5282] usb 3-1: Manufacturer: syz [ 402.421459][T10941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.496970][T10961] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.529266][T10961] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.705528][ T5282] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 402.718097][ T5282] usb 3-1: USB disconnect, device number 9 [ 402.730037][ T25] usb 1-1: USB disconnect, device number 11 [ 402.742085][ T9638] bcm5974 1-1:1.0: could not read from device [ 403.357781][ T7151] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.374873][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 403.402683][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 403.427832][T10980] fuse: Unknown parameter 'use00000000000000000000' [ 404.414846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 404.423887][T10998] team0: entered promiscuous mode [ 404.429350][T10998] team_slave_0: entered promiscuous mode [ 404.435274][T10998] team_slave_1: entered promiscuous mode [ 404.441930][T10998] team0: left promiscuous mode [ 404.446852][T10998] team_slave_0: left promiscuous mode [ 405.022780][T10998] team_slave_1: left promiscuous mode [ 405.130760][T11009] loop3: detected capacity change from 0 to 128 [ 405.169874][T11009] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 405.185771][T11009] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.454476][T11020] fuse: Unknown parameter 'use00000000000000000000' [ 405.464870][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 405.710176][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 405.759679][T11026] netlink: 'syz.0.1546': attribute type 10 has an invalid length. [ 405.768392][T11026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1546'. [ 405.780823][T11026] batman_adv: batadv0: Adding interface: vlan1 [ 405.788872][T11026] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.816746][T11026] batman_adv: batadv0: Interface activated: vlan1 [ 406.064874][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 406.105293][ T7169] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.134927][ T5282] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 406.168490][T11037] loop3: detected capacity change from 0 to 256 [ 406.214937][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 406.223037][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.231813][ T8] usb 2-1: config 0 has no interface number 0 [ 406.249799][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.301340][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 406.311970][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.322285][ T8] usb 2-1: config 0 descriptor?? [ 406.337129][ T8] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 406.368569][ T29] audit: type=1804 audit(1728414457.240:45): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1551" name="/newroot/221/file1/file0" dev="loop3" ino=1048862 res=1 errno=0 [ 406.394900][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 406.452480][ T5282] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 406.462075][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.470323][ T5282] usb 5-1: Product: syz [ 406.474712][ T5282] usb 5-1: Manufacturer: syz [ 406.479488][ T5282] usb 5-1: SerialNumber: syz [ 406.487023][ T5282] usb 5-1: config 0 descriptor?? [ 406.504849][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 406.541264][ T5282] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 406.744005][T11045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.754778][T11045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.396402][T11054] fuse: Unknown parameter 'use00000000000000000000' [ 407.534849][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 407.620074][ T5885] usb 2-1: USB disconnect, device number 4 [ 407.710696][T11072] loop0: detected capacity change from 0 to 128 [ 407.736192][T11072] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 407.766879][T11072] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.362220][ T5282] gspca_stk1135: reg_w 0x200 err -71 [ 408.371241][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 408.422178][ T5282] gspca_stk1135: Sensor write failed [ 408.481883][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 408.488358][ T5282] gspca_stk1135: Sensor write failed [ 408.493882][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 408.500360][ T5282] gspca_stk1135: Sensor read failed [ 408.505901][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 408.512320][ T5282] gspca_stk1135: Sensor read failed [ 408.517871][ T5282] gspca_stk1135: Detected sensor type unknown (0x0) [ 408.524899][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 408.531288][ T5282] gspca_stk1135: Sensor read failed [ 408.543854][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 408.550285][ T5282] gspca_stk1135: Sensor read failed [ 408.584888][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 408.594297][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 408.600697][ T5282] gspca_stk1135: Sensor write failed [ 408.644942][ T5282] gspca_stk1135: serial bus timeout: status=0x00 [ 408.651345][ T5282] gspca_stk1135: Sensor write failed [ 408.659501][ T5282] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 408.714868][ T5282] usb 5-1: USB disconnect, device number 4 [ 408.875251][ T7064] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.160816][T11122] loop0: detected capacity change from 0 to 256 [ 409.361898][ T29] audit: type=1804 audit(1728414460.230:46): pid=11130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1563" name="/newroot/247/file1/file0" dev="loop0" ino=1048863 res=1 errno=0 [ 409.515660][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 409.614911][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 409.703108][T11139] serio: Serial port pts0 [ 409.747076][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 409.756554][ T8] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 409.765158][ T8] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 409.773454][ T8] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 409.783406][ T8] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 409.796112][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 409.808418][ T8] usb 2-1: config 0 has no interface number 0 [ 409.849286][ T8] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 409.866412][ T8] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 409.890207][ T8] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 409.911530][ T8] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.939400][ T8] usb 2-1: config 0 interface 125 has no altsetting 0 [ 409.947689][ T8] usb 2-1: config 0 interface 125 has no altsetting 2 [ 409.959183][ T8] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 409.971597][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.982491][ T8] usb 2-1: Product: syz [ 410.025653][ T8] usb 2-1: Manufacturer: syz [ 410.034936][ T8] usb 2-1: SerialNumber: syz [ 410.059990][ T8] usb 2-1: config 0 descriptor?? [ 410.086570][ T8] usb 2-1: selecting invalid altsetting 2 [ 410.114921][ T5282] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 410.305127][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 410.319434][ T5282] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 410.336723][ T5282] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 410.432658][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 410.482004][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 410.522970][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 410.554712][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 410.587155][ T5282] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 410.607096][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.642635][ T5282] usb 3-1: config 0 descriptor?? [ 410.654864][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 410.854465][T11148] loop4: detected capacity change from 0 to 32768 [ 410.856217][T11155] netlink: 'syz.3.1577': attribute type 1 has an invalid length. [ 410.873036][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.885746][T11155] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1577'. [ 410.895101][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.918056][ T5282] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 410.938377][T11148] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 410.948502][ T5282] usb 3-1: USB disconnect, device number 10 [ 410.956815][ T5282] usblp0: removed [ 411.043535][T11148] XFS (loop4): Ending clean mount [ 411.043944][T11170] loop3: detected capacity change from 0 to 256 [ 411.059228][T11148] XFS (loop4): Quotacheck needed: Please wait. [ 411.074368][T11148] XFS (loop4): Quotacheck: Done. [ 411.137120][ T8] get_1284_register timeout [ 411.144795][ C0] usb 2-1: async_complete: urb error -104 [ 411.150645][ C0] usb 2-1: async_complete: urb error -104 [ 411.156493][ T8] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 411.210516][ T5235] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 411.365475][ T5235] usb 1-1: Using ep0 maxpacket: 8 [ 411.480259][ T5235] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 411.604999][ T5282] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 411.658231][ T5235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.668102][ T25] usb 2-1: USB disconnect, device number 5 [ 411.704875][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 411.728412][ T5235] usb 1-1: Product: syz [ 411.732755][ T5235] usb 1-1: Manufacturer: syz [ 411.732838][ T8055] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 411.737498][ T5235] usb 1-1: SerialNumber: syz [ 411.739256][ T5235] usb 1-1: config 0 descriptor?? [ 411.759958][ T5235] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 411.935415][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 411.944144][ T5282] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 411.972355][ T5235] gspca_vc032x: reg_r err -32 [ 411.977305][ T5235] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 411.977812][T11181] loop4: detected capacity change from 0 to 256 [ 412.012132][ T5282] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 412.037677][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 412.047306][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 412.057247][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 412.084070][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 412.160170][ T5282] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 412.169783][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.183482][ T5235] usb 1-1: USB disconnect, device number 12 [ 412.196480][ T29] audit: type=1804 audit(1728414463.070:47): pid=11185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1584" name="/newroot/198/file1/file0" dev="loop4" ino=1048867 res=1 errno=0 [ 412.221009][ T5282] usb 3-1: config 0 descriptor?? [ 412.433154][ T5282] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 412.486607][T11193] netlink: 'syz.1.1589': attribute type 1 has an invalid length. [ 412.494375][T11193] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1589'. [ 412.507735][T11188] loop3: detected capacity change from 0 to 32768 [ 412.622365][T11188] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 412.689577][T11188] XFS (loop3): Ending clean mount [ 412.698874][T11188] XFS (loop3): Quotacheck needed: Please wait. [ 412.734917][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 412.745551][ C0] usblp0: nonzero read bulk status received: -71 [ 412.745866][ T5282] usb 3-1: USB disconnect, device number 11 [ 412.999130][T11188] XFS (loop3): Quotacheck: Done. [ 413.423256][T11141] usblp0: removed [ 413.774939][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 414.078839][ T7169] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 414.141569][T11221] loop4: detected capacity change from 0 to 128 [ 414.147927][T11223] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1599'. [ 414.194501][T11221] EXT4-fs (loop4): Test dummy encryption mode enabled [ 414.207425][T11221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2802c018, mo2=0002] [ 414.219865][T11221] System zones: 1-3, 19-19, 35-36 [ 414.226949][T11221] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 414.246079][T11221] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.270554][T11229] loop0: detected capacity change from 0 to 512 [ 414.413986][T11229] EXT4-fs error (device loop0): __ext4_fill_super:5458: inode #2: comm syz.0.1601: casefold flag without casefold feature [ 414.439292][T11212] loop1: detected capacity change from 0 to 32768 [ 414.447538][T11229] EXT4-fs (loop0): get root inode failed [ 414.454850][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 414.507686][T11229] EXT4-fs (loop0): mount failed [ 414.644948][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 414.654817][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.679258][T11212] XFS: ikeep mount option is deprecated. [ 414.761276][ T25] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 414.824829][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 414.927373][T11212] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 414.943314][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.967864][T11233] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 414.985477][T11244] loop3: detected capacity change from 0 to 164 [ 415.018851][ T25] usb 3-1: config 0 descriptor?? [ 415.056451][ T8055] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 415.102863][T11212] XFS (loop1): Ending clean mount [ 415.221154][T11212] XFS (loop1): Quotacheck needed: Please wait. [ 415.254429][T11212] XFS (loop1): Quotacheck: Done. [ 415.292859][T11257] input: syz1 as /devices/virtual/input/input13 [ 415.725540][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 415.734280][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 415.839721][ T25] usb 3-1: USB disconnect, device number 12 [ 415.854855][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 415.886926][ T7151] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 416.314943][ T5282] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 416.505012][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 416.511436][ T5282] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 416.519789][ T5282] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.530264][ T5282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.540066][ T5282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.550183][ T5282] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.563290][ T5282] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.572389][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.575033][ T5830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 416.638212][T11299] loop2: detected capacity change from 0 to 1024 [ 416.648101][T11299] EXT4-fs: Ignoring removed oldalloc option [ 416.658046][T11299] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 416.692054][T11299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.756410][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 416.795499][ T5830] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 416.828054][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.858280][ T5282] usb 2-1: GET_CAPABILITIES returned 0 [ 416.864150][ T5282] usbtmc 2-1:16.0: can't read capabilities [ 416.884972][ T5830] usb 5-1: Product: syz [ 416.889173][ T5830] usb 5-1: Manufacturer: syz [ 416.893785][ T5830] usb 5-1: SerialNumber: syz [ 416.904874][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 416.916179][ T5830] usb 5-1: config 0 descriptor?? [ 417.410163][ T5830] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 417.546521][ T29] audit: type=1326 audit(1728414468.410:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aae57dff9 code=0x7ffc0000 [ 417.569841][T11312] loop3: detected capacity change from 0 to 128 [ 417.576483][T11313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.586505][ T29] audit: type=1326 audit(1728414468.410:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aae57dff9 code=0x7ffc0000 [ 417.612668][T11313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.615026][ T29] audit: type=1326 audit(1728414468.410:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f8aae57dff9 code=0x7ffc0000 [ 417.644654][ T5830] gspca_vc032x: reg_r err -32 [ 417.649558][ T5830] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 417.660890][ T29] audit: type=1326 audit(1728414468.410:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aae57dff9 code=0x7ffc0000 [ 417.684290][ T29] audit: type=1326 audit(1728414468.410:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8aae57dff9 code=0x7ffc0000 [ 417.729693][ T8526] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.742882][ T29] audit: type=1326 audit(1728414468.410:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8aae57e033 code=0x7ffc0000 [ 417.768501][ T29] audit: type=1326 audit(1728414468.420:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8aae57cadf code=0x7ffc0000 [ 417.810618][ T29] audit: type=1326 audit(1728414468.420:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8aae57e087 code=0x7ffc0000 [ 417.833440][ T29] audit: type=1326 audit(1728414468.440:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8aae57c990 code=0x7ffc0000 [ 417.856922][ T29] audit: type=1326 audit(1728414468.440:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8aae57dbfb code=0x7ffc0000 [ 417.884284][T11271] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 417.884593][ T5830] usb 2-1: USB disconnect, device number 6 [ 417.890832][T11315] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -19 [ 417.916982][T11316] usbtmc 2-1:16.0: usb_control_msg returned -19 [ 417.928228][ T5283] usb 5-1: USB disconnect, device number 5 [ 417.934855][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 418.062705][ T7169] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000074f) [ 418.092289][ T7169] FAT-fs (loop3): Filesystem has been set read-only [ 418.099976][ T7169] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000074f) [ 418.922790][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.936103][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.974919][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 419.026067][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 419.045163][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 419.052437][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 419.202804][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.612553][T11345] chnl_net:caif_netlink_parms(): no params data found [ 419.782619][T11345] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.792855][T11345] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.809517][T11345] bridge_slave_0: entered allmulticast mode [ 419.837815][T11345] bridge_slave_0: entered promiscuous mode [ 419.858007][T11345] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.871611][T11345] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.903230][T11345] bridge_slave_1: entered allmulticast mode [ 419.929640][T11345] bridge_slave_1: entered promiscuous mode [ 420.014835][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 420.022617][T11345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.065593][T11345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.165608][T11345] team0: Port device team_slave_0 added [ 420.187884][T11345] team0: Port device team_slave_1 added [ 420.307060][T11345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.335163][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.337765][T11376] trusted_key: syz.4.1649 sent an empty control message without MSG_MORE. [ 420.361647][T11345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.381971][T11345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.388968][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.415149][T11345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.473585][T11345] hsr_slave_0: entered promiscuous mode [ 420.479738][T11345] hsr_slave_1: entered promiscuous mode [ 420.487255][T11345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.495550][T11345] Cannot create hsr debugfs directory [ 420.514853][ T5307] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 420.633778][T11345] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.676670][ T5307] usb 2-1: Using ep0 maxpacket: 8 [ 420.682984][T11345] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.695549][ T5307] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 420.705504][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.713498][ T5307] usb 2-1: Product: syz [ 420.723664][ T5307] usb 2-1: Manufacturer: syz [ 420.733793][ T5307] usb 2-1: SerialNumber: syz [ 420.745335][ T5307] usb 2-1: config 0 descriptor?? [ 420.757180][ T5307] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 420.767510][T11345] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.831931][T11345] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.920680][T11345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 420.936071][T11345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.949135][T11345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.959961][ T5307] gspca_vc032x: reg_r err -32 [ 420.964712][ T5307] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 420.985725][T11345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.028818][ T5307] usb 2-1: USB disconnect, device number 7 [ 421.054934][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 421.126435][T11345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.142042][T11345] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.153056][ T3224] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.160161][ T3224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.201813][ T3224] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.208944][ T3224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.244516][T11345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.255157][T11345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.294859][ T5236] Bluetooth: hci0: command tx timeout [ 421.461333][T11345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.501845][T11345] veth0_vlan: entered promiscuous mode [ 421.528898][T11345] veth1_vlan: entered promiscuous mode [ 421.596411][T11345] veth0_macvtap: entered promiscuous mode [ 421.616288][T11345] veth1_macvtap: entered promiscuous mode [ 421.658574][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.671371][T11397] xt_hashlimit: size too large, truncated to 1048576 [ 421.689578][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.724877][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.755018][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.776008][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.804868][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.814713][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.875414][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.899127][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 421.908976][T11391] loop0: detected capacity change from 0 to 32768 [ 421.916049][T11345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.946039][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.964824][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.968733][T11391] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 421.974644][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.974663][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.974681][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.974695][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.037349][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.048247][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.089431][T11391] XFS (loop0): Ending clean mount [ 422.097718][T11345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.105105][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 422.147261][T11403] netlink: 'syz.4.1655': attribute type 10 has an invalid length. [ 422.159802][T11403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1655'. [ 422.187973][T11403] batman_adv: batadv0: Adding interface: vlan1 [ 422.202058][T11403] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.291901][ T7064] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 422.302757][T11403] batman_adv: batadv0: Interface activated: vlan1 [ 422.336698][T11345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.348310][T11345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.362735][T11345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.372644][T11345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.529808][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.594848][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.646481][T11371] loop2: detected capacity change from 0 to 131072 [ 422.665962][ T9417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.727509][ T9417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.860423][T11371] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop2": -EINTR [ 423.134911][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 423.375269][ T5236] Bluetooth: hci0: command tx timeout [ 423.425288][T11437] loop0: detected capacity change from 0 to 256 [ 423.666929][T11446] loop4: detected capacity change from 0 to 128 [ 423.813025][T11451] loop2: detected capacity change from 0 to 1764 [ 423.855439][T11451] iso9660: Unknown parameter 'utf8000000000013' [ 424.174865][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 424.306120][ T5235] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 424.434248][T11462] syzkaller0: entered promiscuous mode [ 424.443493][T11462] syzkaller0: entered allmulticast mode [ 424.464849][ T5235] usb 5-1: Using ep0 maxpacket: 8 [ 424.546380][ T5235] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 424.554724][ T5235] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.564742][ T5235] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.565581][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 424.565597][ T29] audit: type=1326 audit(1728414475.440:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0af7dff9 code=0x7ffc0000 [ 424.574643][ T5235] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.574673][ T5235] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.627598][ T5235] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 424.636742][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.648449][ T29] audit: type=1326 audit(1728414475.450:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0af7dff9 code=0x7ffc0000 [ 424.741525][ T29] audit: type=1326 audit(1728414475.450:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e0af7dff9 code=0x7ffc0000 [ 424.774330][ T29] audit: type=1326 audit(1728414475.450:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0af7dff9 code=0x7ffc0000 [ 424.790190][T11457] loop2: detected capacity change from 0 to 32768 [ 424.834914][ T29] audit: type=1326 audit(1728414475.470:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1e0af7dff9 code=0x7ffc0000 [ 424.860573][ T29] audit: type=1326 audit(1728414475.470:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0af7dff9 code=0x7ffc0000 [ 424.863032][T11457] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 424.884532][ T29] audit: type=1326 audit(1728414475.470:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz.3.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0af7dff9 code=0x7ffc0000 [ 425.049218][ T5235] usb 5-1: usb_control_msg returned -71 [ 425.055192][ T5235] usbtmc 5-1:16.0: can't read capabilities [ 425.079060][ T5235] usb 5-1: USB disconnect, device number 6 [ 425.111719][T11457] XFS (loop2): Ending clean mount [ 425.119851][T11457] XFS (loop2): Quotacheck needed: Please wait. [ 425.150973][T11457] XFS (loop2): Quotacheck: Done. [ 425.201055][ T8526] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 425.214844][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 425.615247][ T5236] Bluetooth: hci0: command tx timeout [ 426.254843][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 426.372921][T11522] netlink: 'syz.1.1694': attribute type 10 has an invalid length. [ 426.397927][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 426.861779][T11512] loop2: detected capacity change from 0 to 32768 [ 426.898190][T11512] XFS: ikeep mount option is deprecated. [ 426.947619][T11512] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 427.027195][T11512] XFS (loop2): Ending clean mount [ 427.033352][T11512] XFS (loop2): Quotacheck needed: Please wait. [ 427.060486][T11512] XFS (loop2): Quotacheck: Done. [ 427.304861][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 427.374401][ T8526] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 427.420576][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'. [ 427.453389][T11546] netlink: 'syz.1.1698': attribute type 10 has an invalid length. [ 427.464410][T11546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1698'. [ 427.532942][T11552] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.541773][T11552] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.550525][T11552] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.559236][T11552] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.596516][T11552] vxlan0: entered promiscuous mode [ 427.601851][T11552] vxlan0: entered allmulticast mode [ 427.675560][T11552] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.675588][T11552] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.675608][T11552] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.675627][T11552] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.714925][ T5236] Bluetooth: hci0: command tx timeout [ 428.334845][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 428.509861][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 428.544024][T11582] netlink: 'syz.3.1712': attribute type 10 has an invalid length. [ 428.570400][T11582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1712'. [ 428.581869][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 428.596153][T11582] batman_adv: batadv0: Adding interface: vlan1 [ 428.602362][T11582] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.627776][T11582] batman_adv: batadv0: Interface activated: vlan1 [ 429.384876][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 430.414839][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 431.045216][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 431.051826][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.062849][ T5830] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 431.074893][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.086016][ T5830] usb 2-1: config 0 descriptor?? [ 431.355007][ T5307] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 431.464837][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 431.523739][ T5307] usb 1-1: Using ep0 maxpacket: 8 [ 431.531661][ T5307] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 431.540087][ T5307] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 431.548825][ T5307] usb 1-1: config 0 has no interface number 0 [ 431.556372][ T5830] usbhid 2-1:0.0: can't add hid device: -71 [ 431.562445][ T5830] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 431.575779][ T5830] usb 2-1: USB disconnect, device number 8 [ 431.583820][ T5307] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.604374][ T5307] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 431.618364][ T5307] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 431.630300][ T5307] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 431.642576][ T5307] usb 1-1: New USB device strings: Mfr=31, Product=0, SerialNumber=0 [ 431.652611][ T5307] usb 1-1: Manufacturer: syz [ 431.666076][ T5307] usb 1-1: config 0 descriptor?? [ 432.467960][ T5307] usb 1-1: USB disconnect, device number 13 [ 432.494855][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 433.535073][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 433.940139][T11628] loop1: detected capacity change from 0 to 512 [ 434.108461][T11628] EXT4-fs (loop1): 1 truncate cleaned up [ 434.118732][T11628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.139765][T11628] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.1727: Directory hole found for htree leaf block 0 [ 434.209230][T11638] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.1727: Directory hole found for htree leaf block 0 [ 434.224350][ T936] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 434.321394][ T7151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.386411][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 434.393505][ T936] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 434.402362][ T936] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 434.423572][ T936] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 434.574840][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 434.742359][ T936] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 434.750085][T11643] loop1: detected capacity change from 0 to 8192 [ 434.786741][ T936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 434.806464][ T936] usb 3-1: config 0 has no interface number 0 [ 434.815070][ T936] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 434.835135][ T936] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 434.904914][ T936] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 434.931936][ T936] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.955699][ T29] audit: type=1800 audit(1728414485.820:117): pid=11643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1732" name="bus" dev="loop1" ino=1048894 res=0 errno=0 [ 434.978628][ T29] audit: type=1800 audit(1728414485.840:118): pid=11643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1732" name="bus" dev="loop1" ino=1048894 res=0 errno=0 [ 435.013999][ T936] usb 3-1: config 0 interface 125 has no altsetting 0 [ 435.044118][ T936] usb 3-1: config 0 interface 125 has no altsetting 2 [ 435.066939][ T936] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 435.079182][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.104640][ T936] usb 3-1: Product: syz [ 435.109910][ T936] usb 3-1: Manufacturer: syz [ 435.142275][ T936] usb 3-1: SerialNumber: syz [ 435.153291][ T936] usb 3-1: config 0 descriptor?? [ 435.168611][ T936] usb 3-1: selecting invalid altsetting 2 [ 435.264913][ T5307] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 435.426302][ T5307] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 435.446061][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.555902][ T5307] usb 4-1: config 0 descriptor?? [ 435.615096][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 435.803081][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.812069][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.835755][ C0] usb 3-1: async_complete: urb error -71 [ 435.841465][ C0] usb 3-1: async_complete: urb error -71 [ 435.847869][ T936] get_1284_register: usb error -71 [ 435.857999][ T936] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 435.903450][ T936] usb 3-1: USB disconnect, device number 13 [ 435.910780][T11634] loop0: detected capacity change from 0 to 65536 [ 435.952900][T11634] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 436.005866][ T5307] ath6kl: Unsupported hardware version: 0x0 [ 436.054622][ T5307] ath6kl: Failed to init ath6kl core: -22 [ 436.064122][ T5307] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 436.265403][ T936] usb 4-1: USB disconnect, device number 8 [ 436.585771][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1738'. [ 436.654875][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 436.674912][ T5235] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 437.198512][T11676] loop3: detected capacity change from 0 to 1024 [ 437.205566][T11676] EXT4-fs: Ignoring removed oldalloc option [ 437.212302][T11676] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 437.307142][T11674] ptrace attach of "./syz-executor exec"[11681] was attempted by "./syz-executor exec"[11674] [ 437.319047][T11674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.326291][T11674] IPv6: NLM_F_CREATE should be set when creating new route [ 437.377053][ T5235] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.391163][T11676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.396917][ T5235] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.586556][ T5235] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.596129][ T5235] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.608872][ T5235] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.619993][ T5235] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.629026][ T5235] usb 2-1: Product: syz [ 437.633241][ T5235] usb 2-1: Manufacturer: syz [ 437.642327][ T5235] cdc_wdm 2-1:1.0: skipping garbage [ 437.647711][ T5235] cdc_wdm 2-1:1.0: skipping garbage [ 437.654664][T11691] netlink: 'syz.0.1746': attribute type 10 has an invalid length. [ 437.687385][ T5235] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 437.693487][ T5235] cdc_wdm 2-1:1.0: Unknown control protocol [ 437.699468][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 437.825205][T11691] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 437.834328][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 438.128719][T11693] netlink: 'syz.2.1747': attribute type 9 has an invalid length. [ 438.157310][T11693] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.1747'. [ 438.167502][T11693] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 438.180253][T11345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.195859][ T5283] usb 2-1: USB disconnect, device number 9 [ 438.253972][T11695] bond0: (slave bridge0): Releasing backup interface [ 438.282395][ T9638] BUG: unable to handle page fault for address: fffffbfff0000000 [ 438.290254][ T9638] #PF: supervisor read access in kernel mode [ 438.296226][ T9638] #PF: error_code(0x0000) - not-present page [ 438.302206][ T9638] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0 [ 438.308721][ T9638] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 438.314781][ T9638] CPU: 1 UID: 0 PID: 9638 Comm: udevd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 438.324484][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 438.334548][ T9638] RIP: 0010:kasan_check_range+0x82/0x290 [ 438.340273][ T9638] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 438.359873][ T9638] RSP: 0018:ffffc9000e7b7af8 EFLAGS: 00010286 [ 438.365943][ T9638] RAX: 0000000000000001 RBX: 1ffffffff0000000 RCX: ffffffff81cf65ff [ 438.373926][ T9638] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffffff80000000 [ 438.381891][ T9638] RBP: ffffffffffffffff R08: ffffffff80000001 R09: 1ffffffff0000000 [ 438.389850][ T9638] R10: dffffc0000000000 R11: fffffbfff0000000 R12: ffffffff80000000 [ 438.397818][ T9638] R13: 0000000000000002 R14: dffffc0000000001 R15: fffffbfff0000001 [ 438.405798][ T9638] FS: 00007f88d84a4c80(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 438.414750][ T9638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.421321][ T9638] CR2: fffffbfff0000000 CR3: 000000002f216000 CR4: 00000000003526f0 [ 438.429293][ T9638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 438.437254][ T9638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 438.445216][ T9638] Call Trace: [ 438.448570][ T9638] [ 438.451491][ T9638] ? __die_body+0x5f/0xb0 [ 438.455825][ T9638] ? page_fault_oops+0x8e4/0xcc0 [ 438.460762][ T9638] ? dput+0x37/0x2b0 [ 438.464656][ T9638] ? __pfx_page_fault_oops+0x10/0x10 [ 438.469940][ T9638] ? mntput_no_expire+0xc2/0x850 [ 438.474964][ T9638] ? is_prefetch+0x4ed/0x780 [ 438.479552][ T9638] ? do_raw_spin_unlock+0x13c/0x8b0 [ 438.484744][ T9638] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 438.490888][ T9638] ? __pfx_is_prefetch+0x10/0x10 [ 438.495820][ T9638] ? __bad_area_nosemaphore+0x118/0x770 [ 438.501362][ T9638] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 438.507261][ T9638] ? spurious_kernel_fault+0x119/0x5a0 [ 438.512719][ T9638] ? exc_page_fault+0x5c8/0x8c0 [ 438.517564][ T9638] ? asm_exc_page_fault+0x26/0x30 [ 438.522583][ T9638] ? copy_from_kernel_nofault+0x6f/0x2f0 [ 438.528213][ T9638] ? kasan_check_range+0x82/0x290 [ 438.533237][ T9638] copy_from_kernel_nofault+0x6f/0x2f0 [ 438.538692][ T9638] bpf_probe_read_compat+0x10f/0x180 [ 438.543976][ T9638] ? bpf_trace_run3+0x24c/0x5a0 [ 438.548837][ T9638] bpf_prog_0dc8cba909c10bee+0x43/0x45 [ 438.554286][ T9638] bpf_trace_run3+0x33a/0x5a0 [ 438.558954][ T9638] ? __pfx_bpf_trace_run3+0x10/0x10 [ 438.564145][ T9638] ? __pfx_lock_release+0x10/0x10 [ 438.569158][ T9638] ? do_sys_openat2+0x17a/0x1d0 [ 438.574008][ T9638] ? do_sys_openat2+0x17a/0x1d0 [ 438.578866][ T9638] ? do_sys_openat2+0x17a/0x1d0 [ 438.583718][ T9638] kmem_cache_free+0x355/0x420 [ 438.588492][ T9638] do_sys_openat2+0x17a/0x1d0 [ 438.593177][ T9638] ? kvm_sched_clock_read+0x11/0x20 [ 438.598363][ T9638] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.603555][ T9638] ? sched_clock_cpu+0x76/0x490 [ 438.608405][ T9638] ? __pfx_sched_clock_cpu+0x10/0x10 [ 438.613696][ T9638] __x64_sys_openat+0x247/0x2a0 [ 438.618536][ T9638] ? __pfx___x64_sys_openat+0x10/0x10 [ 438.623943][ T9638] ? irqtime_account_irq+0xd4/0x1e0 [ 438.629132][ T9638] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 438.635559][ T9638] ? __irq_exit_rcu+0x100/0x1c0 [ 438.640406][ T9638] ? rcu_is_watching+0x15/0xb0 [ 438.645174][ T9638] do_syscall_64+0xf3/0x230 [ 438.649755][ T9638] ? clear_bhb_loop+0x35/0x90 [ 438.654429][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.660317][ T9638] RIP: 0033:0x7f88d857a9a4 [ 438.664721][ T9638] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 438.684313][ T9638] RSP: 002b:00007ffee27ed500 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 438.692717][ T9638] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f88d857a9a4 [ 438.700768][ T9638] RDX: 0000000000080000 RSI: 00007ffee27ed638 RDI: 00000000ffffff9c [ 438.708731][ T9638] RBP: 00007ffee27ed638 R08: 0000000000000008 R09: 0000000000000001 [ 438.716704][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 438.724663][ T9638] R13: 000055f5193e7b42 R14: 0000000000000001 R15: 000055f519403160 [ 438.732631][ T9638] [ 438.735661][ T9638] Modules linked in: [ 438.739554][ T9638] CR2: fffffbfff0000000 [ 438.743699][ T9638] ---[ end trace 0000000000000000 ]--- [ 438.743729][T11701] BUG: unable to handle page fault for address: fffffbfff0000000 [ 438.749149][ T9638] RIP: 0010:kasan_check_range+0x82/0x290 [ 438.756852][T11701] #PF: supervisor read access in kernel mode [ 438.762460][ T9638] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 438.768418][T11701] #PF: error_code(0x0000) - not-present page [ 438.788004][ T9638] RSP: 0018:ffffc9000e7b7af8 EFLAGS: 00010286 [ 438.793965][T11701] PGD 23ffe4067 [ 438.793979][ T9638] [ 438.793988][ T9638] RAX: 0000000000000001 RBX: 1ffffffff0000000 RCX: ffffffff81cf65ff [ 438.800046][T11701] P4D 23ffe4067 [ 438.803572][ T9638] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffffff80000000 [ 438.805890][T11701] PUD 23ffe3067 [ 438.813837][ T9638] RBP: ffffffffffffffff R08: ffffffff80000001 R09: 1ffffffff0000000 [ 438.817364][T11701] PMD 0 [ 438.825313][ T9638] R10: dffffc0000000000 R11: fffffbfff0000000 R12: ffffffff80000000 [ 438.828839][T11701] [ 438.828849][T11701] Oops: Oops: 0000 [#2] PREEMPT SMP KASAN PTI [ 438.836794][ T9638] R13: 0000000000000002 R14: dffffc0000000001 R15: fffffbfff0000001 [ 438.839640][T11701] CPU: 0 UID: 0 PID: 11701 Comm: syz.3.1748 Tainted: G D 6.12.0-rc2-next-20241008-syzkaller #0 [ 438.847588][ T9638] FS: 00007f88d84a4c80(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 438.849907][T11701] Tainted: [D]=DIE [ 438.855942][ T9638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.863892][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 438.875579][ T9638] CR2: fffffbfff0000000 CR3: 000000002f216000 CR4: 00000000003526f0 [ 438.884489][T11701] RIP: 0010:kasan_check_range+0x82/0x290 [ 438.888189][ T9638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 438.894834][T11701] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 438.904953][ T9638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 438.912917][T11701] RSP: 0018:ffffc9000eabfaf8 EFLAGS: 00010286 [ 438.918528][ T9638] Kernel panic - not syncing: Fatal exception [ 440.061728][ T9638] Shutting down cpus with NMI [ 440.106789][ T9638] Kernel Offset: disabled [ 440.111197][ T9638] Rebooting in 86400 seconds..