last executing test programs: 6.428245588s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r4, @ANYBLOB="d500000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x1, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r13}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2c09, &(0x7f0000000440)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303053303030000000002c696f636861727365743d63703835352c6572726f72733d72656d6f756e742d726f2c646d61736b3d303030303030303030303030303030262d303030303031312c756964431fcecc89c8fc33adce54bcc445e4701841af2a959531c70ce613f9052cb0ffa96af8e66dbde62fabeacffe7643218516fbc13440b21b013fd3a50d151d8cdd8e31e786075c8bf309f125307ce74b887bdd185d445bd9ac542b1a68a8cc77d4b230f38d5d8e11e89409a830832d0590396e8ec47f8903dd824fd3", @ANYRESHEX=r0, @ANYRES32=r0], 0x5, 0x1518, &(0x7f0000002280)="$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") r14 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r14, &(0x7f0000000400)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) listen(0xffffffffffffffff, 0x0) 6.229713098s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd2(0x0, 0x0) syz_read_part_table(0x1056, &(0x7f0000000040)="$eJzsz7GNwlAQBND5Z91Zl5OQUQEtYIqgAgrBGb0Q0Q5NIJEbfWTAogPk4L1oNTsbbJiL/TFJk6Sm/8ttjEo51yQ/SdquGXfp3+2h1sPn9nca7pehjrqkfZU3z7xksd4uk7K6Jv9Te3f63nsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMF+PAAAA//992BTp") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x5, {0x5, 0x0, "a809df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000001240)={0x2c, &(0x7f00000010c0)={0x0, 0x2, 0x19, {0x19, 0xd, "79de35613bbbde7f69d5b7038929f143a494372363c537"}}, &(0x7f0000001100)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "b5a777b50c9d88841aefe41035feb05e8702c09d65b84b4d06c3b03e2d93373b4822cd305d53f2b6ddc9d590ad84df5897beeacf00306a694e7e8a68388ad9983c8eab728615d3bb"}}, &(0x7f0000001180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000011c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x3, 0x3, 0x1, "c12289a3", "add24e22"}}, &(0x7f0000001200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0xd, 0x40, 0x4, 0x0, 0x1}}}, &(0x7f00000017c0)={0x84, &(0x7f0000001280)={0x20, 0x31, 0xce, "67faa2c96910cc307250aae81fbedabc16c4e98e26130ca15d885b0dba673d44c9ff564549675ee0f04fefbc74e39a9f18a43d0b1ec29440f4c102de220451fb3429b55193c52eea9f3522a689d0533293f4a1e475d27f3d1eb728b4e2cbdd6527a8eb77ad52f8cb9b7916d737c155789052032cdba5a77dedde17f0fb7b90e987cb29bebd5bb3ce4a10e7ee57c8b97f85fcd770eec34bd92abb56999e820cd1d496d867e9278c1cd60727053b380e80b09898948f43687456e0acb17b6e4873e3885235b84d2fd88ee04f960403"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x5e}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0xe5}, &(0x7f0000001400)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000001480)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001500)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001540)={0x40, 0xb, 0x2, "d3c1"}, &(0x7f0000001580)={0x40, 0xf, 0x2, 0x800}, &(0x7f00000015c0)={0x40, 0x13, 0x6}, &(0x7f0000001600)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f0000001640)={0x40, 0x19, 0x2, "c735"}, &(0x7f0000001680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000016c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001700)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001740)={0x40, 0x21, 0x1, 0x2}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031200000012033f00"], 0x0, 0x0}, 0x0) 6.069423193s ago: executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, 0x7fffdf004000}) 4.622260886s ago: executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000001380)=""/151, 0x97}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000014c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "076a1400"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r2 = syz_open_pts(r1, 0x42) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) 2.508553612s ago: executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 2.499185474s ago: executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x48, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x48}}, 0x0) 2.472676278s ago: executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000005b00)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0) ftruncate(r2, 0x2007ffd) fallocate(r0, 0x3, 0x0, 0x1a00) 2.415369287s ago: executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='sync\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x80000001}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="007db9b129e889cd3c1406f045f3f61df16b1a301ff4eb0db8b28415feb08f57051d2d35b3664e8b8dd4cb4a22984102769c3915"], 0x2, 0x598, &(0x7f00000009c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f00000002c0)) lseek(r3, 0x0, 0x3) bind$can_j1939(r0, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, 0x0}, 0x0) 2.39426733s ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_getaffinity(0x0, 0x8, &(0x7f0000000300)) 2.332024039s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x0, 0x0, 0x4}, 0x48) 2.32835614s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 2.2685121s ago: executing program 1: socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) accept$alg(r3, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000ac0)={0x2020}, 0x2020) open(0x0, 0x81000, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) socket$igmp(0x2, 0x3, 0x2) sendto$inet6(r7, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4004004) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080), 0x4) 2.253997072s ago: executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a0cc10, &(0x7f00000059c0)=ANY=[], 0x1, 0x559f, &(0x7f0000000400)="$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") sched_setscheduler(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)) 2.222891747s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fstat(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000000), 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c) r7 = socket$inet(0x2, 0x80000, 0x4) getsockopt$inet_opts(r7, 0x0, 0x1, &(0x7f00000000c0)=""/119, &(0x7f0000000040)=0x77) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 507.040931ms ago: executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000001380)=""/151, 0x97}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000014c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "076a1400"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r2 = syz_open_pts(r1, 0x42) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 506.683762ms ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x4, 0x1}]}}]}]}, 0x34}}, 0x0) 505.009121ms ago: executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x48, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x48}}, 0x0) 502.839262ms ago: executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000005b00)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0) ftruncate(r2, 0x2007ffd) fallocate(r0, 0x3, 0x0, 0x1a00) 366.173213ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x6a, 0xa, 0xff00}, [@call={0x45}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 358.922894ms ago: executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 328.231169ms ago: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='sync\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x80000001}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="007db9b129e889cd3c1406f045f3f61df16b1a301ff4eb0db8b28415feb08f57051d2d35b3664e8b8dd4cb4a22984102769c3915"], 0x2, 0x598, &(0x7f00000009c0)="$eJzs3d9v0+oZwPHHbUqzbkLTNiFU8eOlbFKRSnBcGhRx5TlvUkNiR7aD2itUrSmqSNlEmbT2ZuUGgbb9C5P4I3a7f2bXaNfnXJwc2Y570jY/Ci0NcL6f6hy/jZ+8fl4T+eE1diwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAMp2KaRUPqrtdaU8M5lcBvjFif9XfnyGLEdkWM+D/J5+Vq+tLV3/20+kr8vwW5lv52TfLxIi/7v7zy64e/zU1l7x+R0IXY3dt/vtHptF+eMj438YzPV017bui7DbumlRv6qlwqmfdWq6GqunUdroeRbign0HbkB2rRuaOK5fKy0oV1v+XVKnZdZy8+uGuZZkk9KjS1HYS+d+9RIXRW3Xrd9WpJTLw6jnkQfxAfu5GKtN1Qamu7014el2QcVOy1j/8BHPQHWeN6skzLKuZEpLRyqfdBtaxi0bKKpZXyygPTzJnHSPKW/oi+D23tu7SPj9zp+Lqd16EbOLOpXv2XurjiSUvWRA38caQigfjSGLK+J6v/f7inR263v/5nVf6q/4ts9bwk9f9G+tuNYfVflMwOyedifnZlT/bluWxIRzrSlpdn628qG/8kx6TinXtwusiaaPHElVB8caUhdvKKElfy4ouSspSkJKY8lVWpSihKquJKXbSEsi6hRKKTT5QjgWixJRJfAlGyKI7cESVFKUtZlkWJloKsiy8t8aQmFbGTXrZkO9nvyyNyPAwqnibIGhF0opifeOGj6j9+ls75CA58um5W/wEAAAAAwDfLSM6+x/P/GbmetKpuXZuTTgsAAAAAAJyjt9Xk+nojnv+LyHUxhs7/D3onCgAAAAAAwFfGSO6xi6f1c3IzbWV3Qh2eBJiabIoAAAAAAOCMkn/QvxEv5uLWTTFOzv+HyF9IggAAAAAA4Mzejv2O/bA5a/z3/xIEM8br5trvjR07jrN3ptP3TR/vMarOS3c2bSd9lXK9Lh19zeh9++Xhl2B+SBc56XZH52GMTCB3NAHjcu/dRxOQf8qtOOJ/cmszjd3M1qRbmau6dV1w/PrDotj25alIr0V/fbH9N0mG/85rxElud9qFP/25s5nk8jru5fVO776IE7dHjMjlVXb+5PrgEc8kN2L0tjtnyNZ2p232j793WcaJqzNGbPONLKQxC3Ppcu7o+PPxNouFYaNPs5iRM478jdxOY24v3k4XA7KwxmTRtvqz+KR9cYoslsdlsXzGLABgUraSb/0ZWIWyQ/rxuvsJR7mtcX/LGF3dT7mVN7KYxizOJwfW3PyAI7o57ohuNteyypxWt0sjq5sciAw+oh8+A2lYjY23+6/D7RaT0b//u4i8z6rqieGHdcuId+H0q52/yJXdvf272zsbz9rP2i8sa7lk3jfNFUtmkmH0FtQeAMAA45+xMzbCuJ/OqmXYrPo3vUsKsrMCHdmUpeRug+SKg7zMHun1H/+OZ+J9lyEsHZ+15qS//25WLL/vdrtLY2Z1ab+Z08Smj5cBAOBbstBfh0fW/17cgPq/NGbefbSWH39C8LDY4pCM33E7IgAAZ6SDDz90U82nxXK5aEerWgW+81gFbqWmletFOnBWba+mVTPwI9/xp+PGE7eiQxW2mk0/iFTVD1TTD9215Mnvqvfo91A3bC9ynbBZ13aoleN7ke1EquKGjmq2/lh3w1UdJG8Om9pxq65jR67vqdBvBY4uKBVq3RfoVrQXuVU3bnqqGbgNO1hXT/x6q6FVRYdO4DYjP+0w25brVf2gEXd7adL7GgCAL8Xu3v7zjU6n/fIzNiY9RgAAcNTHVGmuGAMAAAAAAAAAAAAAAAAAAAAAYDIu4v6/8Y3//ErkC0iDBo2vvZGXc+pw0kcmAJ/bjwEAAP//jspakg==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f00000002c0)) lseek(r3, 0x0, 0x3) bind$can_j1939(r0, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, 0x0}, 0x0) 253.53062ms ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x0, 0x0, 0x4}, 0x48) 238.673033ms ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 177.206552ms ago: executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_getaffinity(0x0, 0x8, &(0x7f0000000300)) 145.008477ms ago: executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) 130.238149ms ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 93.413025ms ago: executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 78.013958ms ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14.972417ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000300)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000700)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r9, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000400)=0x12) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)) kernel console output (not intermixed with test programs): resses unique to avoid problems! [ 287.198500][ T1069] usb 2-1: USB disconnect, device number 8 [ 287.210970][ T9858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.235642][ T9858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.250866][ T9858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.267835][ T9858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.290109][ T9858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.314582][T10045] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.323700][T10045] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.332738][T10045] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.341635][T10045] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.354422][T10045] device vxlan0 entered promiscuous mode [ 287.371376][T10045] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.380334][T10045] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.389469][T10045] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.398694][T10045] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.458347][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.480580][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.507660][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.535502][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.552815][ T9858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.567169][ T9858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.577289][ T9858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.590837][ T9858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.602169][ T9858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.613435][T10060] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.623698][ T9858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.633674][ T9858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.644331][ T9858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.654719][ T9858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.665921][ T9858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.690470][ T9858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.705184][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.714888][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.748487][ T9858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.767966][ T9858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.789100][ T9858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.804244][ T9858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.962747][T10072] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 287.974952][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.053461][ T3661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.262568][ T3661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.588792][ T4031] Bluetooth: hci1: command 0x040f tx timeout [ 288.626172][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.653023][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.669745][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.689209][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.971813][T10094] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.987402][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 288.987415][ T26] audit: type=1326 audit(1718183488.196:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5372aacea9 code=0x7ffc0000 [ 289.100320][ T26] audit: type=1326 audit(1718183488.236:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5372aacea9 code=0x7ffc0000 [ 289.123216][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.216802][ T26] audit: type=1326 audit(1718183488.236:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5372aacea9 code=0x7ffc0000 [ 289.240278][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.706066][ T26] audit: type=1326 audit(1718183488.236:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5372aacea9 code=0x7ffc0000 [ 290.733153][ T4031] Bluetooth: hci1: command 0x0419 tx timeout [ 290.834175][ T26] audit: type=1326 audit(1718183488.236:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5372aacea9 code=0x7ffc0000 [ 290.859806][T10108] loop2: detected capacity change from 0 to 1024 [ 290.941125][T10108] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 290.944111][ T26] audit: type=1326 audit(1718183488.246:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5372aacea9 code=0x7ffc0000 [ 290.962316][T10108] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 290.999175][ T26] audit: type=1326 audit(1718183488.246:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5372aacea9 code=0x7ffc0000 [ 291.014821][T10108] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 291.041218][ T26] audit: type=1326 audit(1718183488.246:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5372aaa627 code=0x7ffc0000 [ 291.189369][T10108] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 291.250473][ T26] audit: type=1326 audit(1718183488.246:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5372a702e9 code=0x7ffc0000 [ 291.576068][ T26] audit: type=1326 audit(1718183488.246:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5372aaa627 code=0x7ffc0000 [ 291.942016][T10139] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 292.016024][T10134] loop2: detected capacity change from 0 to 4096 [ 292.105198][T10149] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.921358][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.182031][T10180] loop3: detected capacity change from 0 to 256 [ 293.261701][T10159] Falling back ldisc for ttyS3. [ 293.270765][T10183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.281190][T10180] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 293.299491][T10180] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 293.454317][T10199] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 293.462742][ T4031] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 293.547976][T10203] loop3: detected capacity change from 0 to 1024 [ 293.589118][ T3642] Bluetooth: hci3: command 0x0406 tx timeout [ 293.597898][T10205] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 293.607920][T10205] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.617721][T10203] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 293.631739][T10203] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 293.641666][T10205] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 293.649956][T10205] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.659405][T10203] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 293.668181][T10203] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 293.700226][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.839356][ T4031] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 293.856062][ T4031] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 293.876398][ T4031] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 293.896677][ T4031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.907789][T10211] loop3: detected capacity change from 0 to 4096 [ 293.949601][T10190] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 294.001070][T10212] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.020933][ T26] kauditd_printk_skb: 76 callbacks suppressed [ 294.020947][ T26] audit: type=1800 audit(1718183493.226:1053): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 294.047838][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.056230][ T26] audit: type=1800 audit(1718183493.266:1054): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 295.538281][T10229] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 295.579205][T10229] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.589022][T10229] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.880865][ T26] audit: type=1326 audit(1718183495.086:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66bcc1ea9 code=0x7ffc0000 [ 295.961701][ T26] audit: type=1326 audit(1718183495.086:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66bcc1ea9 code=0x7ffc0000 [ 296.029102][ T26] audit: type=1326 audit(1718183495.116:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa66bcc1ea9 code=0x7ffc0000 [ 296.098371][ T26] audit: type=1326 audit(1718183495.116:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66bcc1ea9 code=0x7ffc0000 [ 296.100438][ T263] block nbd3: Attempted send on invalid socket [ 296.131547][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.145595][T10255] exFAT-fs (nbd3): unable to read boot sector [ 296.156252][T10255] exFAT-fs (nbd3): failed to read boot sector [ 296.174580][ T26] audit: type=1326 audit(1718183495.116:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66bcc1ea9 code=0x7ffc0000 [ 296.249237][T10255] exFAT-fs (nbd3): failed to recognize exfat type [ 296.258275][ T26] audit: type=1326 audit(1718183495.116:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa66bcc1ea9 code=0x7ffc0000 [ 296.346443][ T26] audit: type=1326 audit(1718183495.116:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66bcc1ea9 code=0x7ffc0000 [ 296.370577][ T26] audit: type=1326 audit(1718183495.116:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66bcc1ea9 code=0x7ffc0000 [ 296.418694][T10266] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 296.428163][T10266] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.438677][T10266] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.656274][ T4031] usb 3-1: USB disconnect, device number 9 [ 298.058038][ T263] block nbd3: Attempted send on invalid socket [ 298.064424][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.078130][T10292] exFAT-fs (nbd3): unable to read boot sector [ 298.091343][T10292] exFAT-fs (nbd3): failed to read boot sector [ 298.100338][T10292] exFAT-fs (nbd3): failed to recognize exfat type [ 298.426041][T10300] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.553112][T10306] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 298.584736][T10306] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 298.623229][T10306] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 298.961621][T10323] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 298.979102][T10323] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.993911][T10323] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 299.003237][T10323] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 299.826181][T10329] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.882673][T10302] loop3: detected capacity change from 0 to 32768 [ 300.034180][T10302] XFS (loop3): Mounting V5 Filesystem [ 300.104794][T10361] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 300.116522][T10361] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.126323][T10361] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 300.136821][T10361] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.169316][T10302] XFS (loop3): Ending clean mount [ 300.197753][T10302] XFS (loop3): Quotacheck needed: Please wait. [ 300.205085][T10368] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.289009][ T5193] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 300.411202][T10302] XFS (loop3): Quotacheck: Done. [ 300.423783][T10302] Process accounting resumed [ 300.884208][ T6755] XFS (loop3): Unmounting Filesystem [ 301.189515][ T5193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.212320][ T263] block nbd0: Attempted send on invalid socket [ 301.218524][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 301.233121][T10382] exFAT-fs (nbd0): unable to read boot sector [ 301.239304][ T5193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.257162][T10382] exFAT-fs (nbd0): failed to read boot sector [ 301.263389][ T5193] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 301.279151][ T5193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.279930][T10382] exFAT-fs (nbd0): failed to recognize exfat type [ 301.296033][ T5193] usb 3-1: config 0 descriptor?? [ 301.793193][ T5193] a4tech 0003:09DA:022B.0009: invalid report_count 36114 [ 301.827232][ T5193] a4tech 0003:09DA:022B.0009: item 0 2 1 9 parsing failed [ 301.847602][ T5193] a4tech 0003:09DA:022B.0009: parse failed [ 301.864946][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 301.864960][ T26] audit: type=1800 audit(1718183501.066:1072): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1945 res=0 errno=0 [ 301.894057][ T5193] a4tech: probe of 0003:09DA:022B.0009 failed with error -22 [ 302.024672][ T3569] usb 3-1: USB disconnect, device number 10 [ 302.667615][T10450] loop2: detected capacity change from 0 to 8 [ 302.723257][T10450] SQUASHFS error: Unable to read inode 0x11f [ 302.832156][ T8418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.896507][ T8418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.912594][ T26] audit: type=1800 audit(1718183502.116:1073): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1937 res=0 errno=0 [ 303.007364][ T8418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.034274][T10441] chnl_net:caif_netlink_parms(): no params data found [ 303.104513][ T8418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.269028][ T3646] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 303.282446][T10441] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.291047][T10441] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.299356][T10441] device bridge_slave_0 entered promiscuous mode [ 303.347265][T10441] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.362938][T10441] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.386142][T10441] device bridge_slave_1 entered promiscuous mode [ 303.598450][T10441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.657861][T10441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.702945][T10493] loop2: detected capacity change from 0 to 1024 [ 303.709747][ T3646] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 303.718142][ T3646] usb 5-1: config 0 has no interface number 0 [ 303.724763][ T3646] usb 5-1: config 0 interface 145 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 303.737482][ T3646] usb 5-1: New USB device found, idVendor=0930, idProduct=0700, bcdDevice=74.3a [ 303.746749][ T3646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.793778][T10441] team0: Port device team_slave_0 added [ 303.800575][ T3646] usb 5-1: config 0 descriptor?? [ 303.803603][T10457] chnl_net:caif_netlink_parms(): no params data found [ 303.820962][T10441] team0: Port device team_slave_1 added [ 303.823846][ T26] audit: type=1800 audit(1718183503.026:1074): pid=10493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 303.909116][ T3927] hfsplus: b-tree write err: -5, ino 4 [ 303.929466][T10441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.936596][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.966646][T10441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.027202][T10441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.037365][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.064364][T10441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.075424][ T3569] usb 5-1: USB disconnect, device number 11 [ 304.206043][T10457] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.215304][T10512] loop2: detected capacity change from 0 to 2048 [ 304.221752][T10457] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.222801][T10457] device bridge_slave_0 entered promiscuous mode [ 304.244531][T10457] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.252256][T10457] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.260513][T10457] device bridge_slave_1 entered promiscuous mode [ 304.270447][T10441] device hsr_slave_0 entered promiscuous mode [ 304.277996][T10441] device hsr_slave_1 entered promiscuous mode [ 304.286449][T10441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.296294][T10441] Cannot create hsr debugfs directory [ 304.321038][T10512] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 304.391008][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.451275][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.574158][ T26] audit: type=1800 audit(1718183503.776:1075): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1940 res=0 errno=0 [ 304.599120][T10530] loop2: detected capacity change from 0 to 256 [ 304.614143][T10457] team0: Port device team_slave_0 added [ 304.629095][ T3646] Bluetooth: hci3: command 0x0409 tx timeout [ 304.711997][T10457] team0: Port device team_slave_1 added [ 304.739353][T10536] netlink: 'syz-executor.4': attribute type 32 has an invalid length. [ 304.804905][T10441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.838348][T10457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.868546][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.896063][T10457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.940073][T10441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.977270][T10457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.999824][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.039248][ T4031] Bluetooth: hci4: command 0x0409 tx timeout [ 305.059067][ T3569] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 305.070001][T10457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.093561][ T8418] device hsr_slave_0 left promiscuous mode [ 305.105601][ T8418] device hsr_slave_1 left promiscuous mode [ 305.125815][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.149847][ T8418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.177325][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.197876][ T8418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.223615][ T8418] device bridge_slave_1 left promiscuous mode [ 305.242872][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.258852][ T8418] device bridge_slave_0 left promiscuous mode [ 305.275474][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.299385][ T8418] device veth1_macvtap left promiscuous mode [ 305.305459][ T8418] device veth0_macvtap left promiscuous mode [ 305.336186][ T8418] device veth1_vlan left promiscuous mode [ 305.349453][ T8418] device veth0_vlan left promiscuous mode [ 305.374237][ T26] audit: type=1800 audit(1718183504.576:1076): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 305.429202][ T3569] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 305.449606][ T3569] usb 3-1: config 0 has no interface number 0 [ 305.459120][ T3569] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.484890][ T3569] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.503732][ T3569] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 305.537684][ T3569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.561753][ T3569] usb 3-1: config 0 descriptor?? [ 305.948870][ T8418] team0 (unregistering): Port device team_slave_1 removed [ 305.965442][ T8418] team0 (unregistering): Port device team_slave_0 removed [ 305.983519][ T8418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.004354][ T8418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.013432][ T5195] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 306.055123][ T3569] logitech-djreceiver 0003:046D:C71B.000A: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input32 [ 306.114840][ T8418] bond0 (unregistering): Released all slaves [ 306.194256][T10441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.245214][T10457] device hsr_slave_0 entered promiscuous mode [ 306.275176][ T3652] usb 3-1: USB disconnect, device number 11 [ 306.287645][T10457] device hsr_slave_1 entered promiscuous mode [ 306.294482][T10457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.294553][T10457] Cannot create hsr debugfs directory [ 306.332045][T10441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.376967][T10564] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 306.404518][ T5195] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 306.413877][ T5195] usb 5-1: config 0 has no interface number 0 [ 306.420339][ T5195] usb 5-1: config 0 interface 145 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 306.431368][ T5195] usb 5-1: New USB device found, idVendor=0930, idProduct=0700, bcdDevice=74.3a [ 306.440774][ T5195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.450549][ T5195] usb 5-1: config 0 descriptor?? [ 306.665198][T10441] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 306.685081][T10441] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 306.715650][T10441] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.721967][ T5194] usb 5-1: USB disconnect, device number 12 [ 306.723131][ T3652] Bluetooth: hci3: command 0x041b tx timeout [ 306.758194][T10441] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.061793][T10441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.082950][T10457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 307.109548][ T3569] Bluetooth: hci4: command 0x041b tx timeout [ 307.126879][T10584] loop2: detected capacity change from 0 to 256 [ 307.133782][T10441] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.159911][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.174703][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.185097][T10457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 307.216780][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.229364][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.249307][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.256537][ T3646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.285959][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.304104][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.325698][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.332923][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.369292][T10457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 307.387171][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.395946][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.416392][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.439015][T10457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.465211][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.493740][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.517647][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.536702][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.574681][T10441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.596696][T10441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.616458][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.625879][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.637544][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.646352][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.664398][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.736887][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.932054][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.941731][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.987008][T10457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.011272][T10441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.032355][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.050188][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.073901][T10457] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.103974][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.113669][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.133240][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.140944][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.223272][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.249851][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.279311][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.289042][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.319567][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.339571][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.347127][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.409453][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.444056][T10441] device veth0_vlan entered promiscuous mode [ 308.458734][ T26] audit: type=1800 audit(1718183507.656:1077): pid=10594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 308.493627][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.519094][ T26] audit: type=1800 audit(1718183507.686:1078): pid=10594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 308.521113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.564680][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.582759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.596973][T10634] netlink: 'syz-executor.0': attribute type 43 has an invalid length. [ 308.600185][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.615236][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.623739][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.635022][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.643627][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.653340][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.727101][T10441] device veth1_vlan entered promiscuous mode [ 308.756345][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.775591][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.799798][ T3646] Bluetooth: hci3: command 0x040f tx timeout [ 308.809908][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.828553][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.857528][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.891419][T10457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.995800][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 309.009845][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.051148][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.089135][T10441] device veth0_macvtap entered promiscuous mode [ 309.112064][T10441] device veth1_macvtap entered promiscuous mode [ 309.166663][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.188684][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.199402][ T3569] Bluetooth: hci4: command 0x040f tx timeout [ 309.224933][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.259517][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.280787][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.310570][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.348944][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.369189][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.398980][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.430914][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.456681][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.478939][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.498992][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.518931][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.558839][T10441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.590180][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.605736][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.637620][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.681072][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.718941][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.728512][T10672] loop2: detected capacity change from 0 to 1764 [ 309.761568][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.792620][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.823103][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.842839][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.852995][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.863907][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.875244][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.886130][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.897735][T10441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.910462][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.928011][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.949471][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.960687][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.001097][T10441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.019088][T10441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.053108][T10441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.069558][T10441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.153728][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.166418][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.240932][T10457] device veth0_vlan entered promiscuous mode [ 310.300152][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.308758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.346549][T10457] device veth1_vlan entered promiscuous mode [ 310.379584][ T3925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.388005][ T3925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.429927][T10676] loop2: detected capacity change from 0 to 512 [ 310.436971][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.446807][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 310.470664][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.487827][T10457] device veth0_macvtap entered promiscuous mode [ 310.514802][T10676] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 310.517966][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.540169][T10676] EXT4-fs (loop2): 1 truncate cleaned up [ 310.554038][T10676] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 310.560411][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.629635][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.639655][T10457] device veth1_macvtap entered promiscuous mode [ 310.661233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.661935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.673767][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.688232][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.688252][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.688264][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.688275][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.688287][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.688298][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.688309][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.688320][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.688331][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.688343][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.688354][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.688366][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.690861][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.838188][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.847796][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.857261][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.869436][ T3569] Bluetooth: hci3: command 0x0419 tx timeout [ 310.881189][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.919193][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.934814][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.948859][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.968275][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.979062][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.998045][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.009094][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.020531][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.031328][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.041485][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.052314][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.081065][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.105760][T10457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.120086][T10457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.131702][T10457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.143283][T10457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.155538][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.165647][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.296461][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 311.364702][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.389295][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.462203][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.468225][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.477744][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.553507][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.730826][ T26] audit: type=1800 audit(1718183511.936:1079): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 314.158057][T10808] loop2: detected capacity change from 0 to 256 [ 317.280096][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.286407][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.366479][T10821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 317.869127][ T26] audit: type=1804 audit(1718183516.996:1080): pid=10844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2573015882/syzkaller.VnMD3L/618/bus" dev="sda1" ino=1947 res=1 errno=0 [ 318.712553][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.786118][T10860] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 318.801726][T10866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.819023][T10860] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 318.826713][T10862] loop2: detected capacity change from 0 to 4096 [ 319.155188][T10862] ntfs3: loop2: failed to convert "256c" to koi8-ru [ 319.208298][T10890] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 319.219353][T10890] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 319.275436][T10892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.705030][T10921] loop2: detected capacity change from 0 to 128 [ 321.732709][T10927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.753928][T10921] FAT-fs (loop2): invalid media value (0x00) [ 321.775075][T10921] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 321.789246][T10921] FAT-fs (loop2): Can't find a valid FAT filesystem [ 321.802439][ T26] audit: type=1804 audit(1718183521.006:1081): pid=10930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3188359555/syzkaller.wXtxVG/255/bus" dev="sda1" ino=1949 res=1 errno=0 [ 322.090093][ T5193] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 324.378693][T10956] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 324.395290][T10956] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 324.429466][ T5193] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.453543][ T5193] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 324.471164][ T26] audit: type=1804 audit(1718183523.676:1082): pid=10962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1414577950/syzkaller.6LEU9V/76/bus" dev="sda1" ino=1943 res=1 errno=0 [ 324.517159][ T5193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.543796][ T5193] usb 4-1: config 0 descriptor?? [ 324.709689][ T3820] usb 4-1: USB disconnect, device number 13 [ 327.400239][T10988] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.437150][T10988] device vlan2 entered promiscuous mode [ 327.496606][ T26] audit: type=1326 audit(1718183526.696:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa66bcc1ea9 code=0x0 [ 327.550691][ T26] audit: type=1804 audit(1718183526.746:1084): pid=10999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir731269102/syzkaller.uxtRjE/26/bus" dev="sda1" ino=1966 res=1 errno=0 [ 327.576859][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.569558][T11017] input: syz0 as /devices/virtual/input/input13 [ 328.595505][T10997] loop2: detected capacity change from 0 to 32768 [ 328.646179][T10997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (10997) [ 328.713683][T10997] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 328.723059][ T4031] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 328.738400][T10997] BTRFS info (device loop2): setting nodatacow, compression disabled [ 328.747996][T10997] BTRFS info (device loop2): turning on flush-on-commit [ 328.771168][T10997] BTRFS info (device loop2): enabling auto defrag [ 328.779994][T10997] BTRFS info (device loop2): max_inline at 0 [ 328.787901][T10997] BTRFS info (device loop2): using free space tree [ 328.799619][T10997] BTRFS info (device loop2): has skinny extents [ 328.832314][T11035] loop3: detected capacity change from 0 to 2048 [ 328.865313][T11043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 328.882576][T11035] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 328.918828][T11053] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.989109][ T4031] usb 5-1: Using ep0 maxpacket: 8 [ 329.028485][T10997] BTRFS info (device loop2): enabling ssd optimizations [ 329.149588][ T4031] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 329.157714][ T4031] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.199474][ T4031] usb 5-1: config 0 has no interface number 0 [ 329.216134][ T4031] usb 5-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 329.245183][ T4031] usb 5-1: config 0 interface 52 has no altsetting 0 [ 329.309194][ T5195] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 329.425018][ T4031] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 329.434441][ T4031] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 329.443364][ T4031] usb 5-1: Product: syz [ 329.447514][ T4031] usb 5-1: SerialNumber: syz [ 329.463472][ T4031] usb 5-1: config 0 descriptor?? [ 329.569447][ T5195] usb 1-1: Using ep0 maxpacket: 16 [ 329.689141][ T5195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 198, changing to 11 [ 329.700598][ T5195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50887, setting to 1024 [ 329.779162][ T4031] usb 5-1: Can not set alternate setting to 1, error: -71 [ 329.786562][ T4031] synaptics_usb: probe of 5-1:0.52 failed with error -71 [ 329.794957][ T4031] usb 5-1: USB disconnect, device number 13 [ 329.915263][ T5195] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 329.996058][ T5195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.075121][ T5195] usb 1-1: Product: syz [ 330.114770][ T5195] usb 1-1: Manufacturer: syz [ 330.161306][ T5195] usb 1-1: SerialNumber: syz [ 330.247621][ T5195] usb 1-1: config 0 descriptor?? [ 330.320670][T11060] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 330.391513][ T5195] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 330.509352][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 330.655900][ T3818] usb 1-1: USB disconnect, device number 24 [ 331.149022][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 331.543883][ T3569] Bluetooth: hci5: command 0x1003 tx timeout [ 331.550716][ T3540] Bluetooth: hci5: sending frame failed (-49) [ 331.689178][ T23] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 331.708932][ T23] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 331.732863][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 331.929379][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 331.969010][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.988734][ T23] usb 3-1: Product: и [ 331.994120][ T23] usb 3-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 332.029027][ T3818] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 332.449083][ T3818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.612597][ T3818] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 334.281133][ T3648] Bluetooth: hci5: command 0x1001 tx timeout [ 334.287189][ T3540] Bluetooth: hci5: sending frame failed (-49) [ 335.280626][ T3818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.294948][ T3818] usb 5-1: config 0 descriptor?? [ 335.862118][ T23] usbhid 3-1:1.0: can't add hid device: -71 [ 335.878355][ T23] usbhid: probe of 3-1:1.0 failed with error -71 [ 335.935488][ T23] usb 3-1: USB disconnect, device number 12 [ 335.941844][T11132] loop2: detected capacity change from 0 to 512 [ 335.975368][ T3818] usb 5-1: can't set config #0, error -71 [ 335.996565][ T3818] usb 5-1: USB disconnect, device number 14 [ 335.997014][T11132] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 336.309621][ T3648] Bluetooth: hci5: command 0x1009 tx timeout [ 336.360174][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.401265][T11145] chnl_net:caif_netlink_parms(): no params data found [ 336.434386][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.487563][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 336.504680][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.512345][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.520280][T11145] device bridge_slave_0 entered promiscuous mode [ 336.533588][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.545361][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.553678][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.562187][T11145] device bridge_slave_1 entered promiscuous mode [ 336.593200][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.608430][T11145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.621196][T11145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.647323][T11145] team0: Port device team_slave_0 added [ 336.658564][T11145] team0: Port device team_slave_1 added [ 336.682281][T11145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.689906][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.717159][T11145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.734604][T11145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.742122][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.749003][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 336.768418][T11145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.778994][ T3569] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 336.820613][T11145] device hsr_slave_0 entered promiscuous mode [ 336.827433][T11145] device hsr_slave_1 entered promiscuous mode [ 336.834857][T11145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.843071][T11145] Cannot create hsr debugfs directory [ 336.950081][ T23] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 336.958663][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.969003][ T23] usb 3-1: config 0 has no interface number 0 [ 336.975281][ T23] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.988802][ T23] usb 3-1: config 0 interface 52 has no altsetting 0 [ 337.139305][ T23] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 337.148486][ T23] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 337.157059][ T23] usb 3-1: Product: syz [ 337.161596][ T23] usb 3-1: SerialNumber: syz [ 337.168144][ T23] usb 3-1: config 0 descriptor?? [ 337.199264][ T3569] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.209707][ T3569] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 337.218932][ T3569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.236119][ T3569] usb 5-1: config 0 descriptor?? [ 337.509499][ T23] usb 3-1: Can not set alternate setting to 1, error: -71 [ 337.516864][ T23] synaptics_usb: probe of 3-1:0.52 failed with error -71 [ 337.525967][ T23] usb 3-1: USB disconnect, device number 13 [ 337.627657][ T9] device hsr_slave_0 left promiscuous mode [ 337.635069][ T9] device hsr_slave_1 left promiscuous mode [ 337.642203][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.649743][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.658307][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.665847][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.675089][ T9] device bridge_slave_1 left promiscuous mode [ 337.683132][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.691983][ T9] device bridge_slave_0 left promiscuous mode [ 337.698176][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.710286][ T9] device veth1_macvtap left promiscuous mode [ 337.716314][ T9] device veth0_macvtap left promiscuous mode [ 337.722529][ T9] device veth1_vlan left promiscuous mode [ 337.728274][ T9] device veth0_vlan left promiscuous mode [ 337.923911][ T9] team0 (unregistering): Port device team_slave_1 removed [ 337.942264][ T9] team0 (unregistering): Port device team_slave_0 removed [ 337.954867][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.004997][ T3648] usb 5-1: USB disconnect, device number 15 [ 338.015363][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.167513][ T9] bond0 (unregistering): Released all slaves [ 338.285995][T11145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.307928][T11145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.319689][ T3569] Bluetooth: hci4: command 0x0409 tx timeout [ 338.358025][T11145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.373704][T11145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.529877][T11177] loop2: detected capacity change from 0 to 1764 [ 338.624449][T11145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.654485][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.666007][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.684430][T11145] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.702838][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.714500][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.727471][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.734621][ T5193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.764684][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.782565][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.795651][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.809904][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.816957][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.829626][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.845622][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.859075][ T3569] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 338.868805][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.888729][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.923447][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.933060][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.948764][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.967412][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.980398][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.998264][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.014309][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.029485][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.139042][ T3569] usb 3-1: Using ep0 maxpacket: 16 [ 339.216813][T11189] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 339.245075][T11189] device vlan2 entered promiscuous mode [ 339.289088][ T3569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 198, changing to 11 [ 339.299761][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.307799][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.323495][ T3569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50887, setting to 1024 [ 339.325023][T11145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.355117][ T26] audit: type=1326 audit(1718183538.556:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa66bcc1ea9 code=0x0 [ 339.412819][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.422853][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.454721][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.469766][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.488114][T11145] device veth0_vlan entered promiscuous mode [ 339.528576][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.544820][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.559181][ T3569] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 339.568044][T11145] device veth1_vlan entered promiscuous mode [ 339.574374][ T3569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.592949][ T3569] usb 3-1: Product: syz [ 339.607368][ T3569] usb 3-1: Manufacturer: syz [ 339.623335][ T3569] usb 3-1: SerialNumber: syz [ 339.649880][ T3569] usb 3-1: config 0 descriptor?? [ 339.660648][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 339.668857][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 339.679445][ T5193] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 339.679668][T11177] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 339.705558][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.732564][ T3569] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 339.742689][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.770098][T11145] device veth0_macvtap entered promiscuous mode [ 339.820390][T11145] device veth1_macvtap entered promiscuous mode [ 339.845762][T11204] input: syz0 as /devices/virtual/input/input16 [ 339.874287][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.900720][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.911622][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.922494][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.933385][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.958935][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.977237][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.001868][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.019189][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.037562][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.047887][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.079208][ T5193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.091980][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.102066][ T5193] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 340.113478][T11145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.121794][ T5193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.135966][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.148566][ T5193] usb 1-1: config 0 descriptor?? [ 340.155712][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.165945][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.176623][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.194091][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.204756][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.215032][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.225890][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.236476][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.247588][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.257757][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.268357][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.287995][ T23] usb 3-1: USB disconnect, device number 14 [ 340.294595][T11145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.326135][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.339169][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.355704][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.373917][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.387277][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.399192][ T3569] Bluetooth: hci4: command 0x041b tx timeout [ 340.426510][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.438529][T11145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.455637][T11145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.465975][T11145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.475604][T11145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.633662][ T8418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.653887][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.656890][ T8418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.696888][T11219] device vlan2 entered promiscuous mode [ 340.724334][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.740128][ T26] audit: type=1326 audit(1718183539.946:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11218 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d7324bea9 code=0x0 [ 340.772563][ T565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.793257][ T565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.829218][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.921970][ T7] usb 1-1: USB disconnect, device number 25 [ 341.164925][T11240] input: syz0 as /devices/virtual/input/input17 [ 341.298683][T11250] loop2: detected capacity change from 0 to 1764 [ 341.343426][T11252] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.367354][T11252] device vlan2 entered promiscuous mode [ 341.427487][T11236] loop3: detected capacity change from 0 to 32768 [ 341.438646][ T26] audit: type=1326 audit(1718183540.646:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca8a1a6ea9 code=0x0 [ 341.514801][T11236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (11236) [ 341.558807][T11255] fscrypt (sda1, inode 1968): Unsupported encryption modes (contents 1, filenames 10) [ 341.579969][T11255] overlayfs: overlapping lowerdir path [ 341.586643][T11236] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 341.597726][T11236] BTRFS info (device loop3): setting nodatacow, compression disabled [ 341.606347][T11236] BTRFS info (device loop3): turning on flush-on-commit [ 341.614189][T11236] BTRFS info (device loop3): enabling auto defrag [ 341.620865][T11236] BTRFS info (device loop3): max_inline at 0 [ 341.627284][T11236] BTRFS info (device loop3): using free space tree [ 341.634099][T11236] BTRFS info (device loop3): has skinny extents [ 341.668339][T11236] BTRFS info (device loop3): enabling ssd optimizations [ 341.689105][ T3648] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 341.955383][ T3648] usb 3-1: Using ep0 maxpacket: 16 [ 342.079883][ T3648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 198, changing to 11 [ 342.099132][ T3648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50887, setting to 1024 [ 342.262012][T11293] loop3: detected capacity change from 0 to 512 [ 342.299250][ T3648] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 342.306697][T11293] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 342.306697][T11293] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 342.306697][T11293] [ 342.315268][ T3648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.332029][T11293] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 342.350634][ T3648] usb 3-1: Product: syz [ 342.354799][ T3648] usb 3-1: Manufacturer: syz [ 342.362139][ T3648] usb 3-1: SerialNumber: syz [ 342.368278][ T3648] usb 3-1: config 0 descriptor?? [ 342.389444][T11250] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 342.415557][ T3648] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 342.469838][ T3820] Bluetooth: hci4: command 0x040f tx timeout [ 342.494689][T11295] input: syz0 as /devices/virtual/input/input19 [ 342.609294][T11302] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.632490][T11302] device vlan2 entered promiscuous mode [ 342.661532][ T3820] usb 3-1: USB disconnect, device number 15 [ 342.691002][ T26] audit: type=1326 audit(1718183541.896:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d7324bea9 code=0x0 [ 342.862673][T11305] fscrypt (sda1, inode 1968): Unsupported encryption modes (contents 1, filenames 10) [ 342.874720][T11305] overlayfs: overlapping lowerdir path [ 343.380198][T11323] loop2: detected capacity change from 0 to 4096 [ 343.464483][T11327] input: syz0 as /devices/virtual/input/input20 [ 343.471911][T11326] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.599626][ T3648] Bluetooth: hci5: command 0x1003 tx timeout [ 343.605982][ T3540] Bluetooth: hci5: sending frame failed (-49) [ 343.875337][T11339] loop3: detected capacity change from 0 to 1764 [ 343.894818][T11337] fscrypt (sda1, inode 1962): Unsupported encryption modes (contents 1, filenames 10) [ 343.908724][T11337] overlayfs: overlapping lowerdir path [ 344.115268][T11343] loop2: detected capacity change from 0 to 32768 [ 344.175011][T11343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (11343) [ 344.223859][ T3648] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 344.249364][T11343] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 344.258098][T11343] BTRFS info (device loop2): setting nodatacow, compression disabled [ 344.280922][T11343] BTRFS info (device loop2): turning on flush-on-commit [ 344.288261][T11343] BTRFS info (device loop2): enabling auto defrag [ 344.304921][T11343] BTRFS info (device loop2): max_inline at 0 [ 344.319076][T11343] BTRFS info (device loop2): using free space tree [ 344.334320][T11343] BTRFS info (device loop2): has skinny extents [ 344.343207][T11355] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 344.357955][T11355] device vlan2 entered promiscuous mode [ 344.378241][T11343] BTRFS info (device loop2): enabling ssd optimizations [ 344.436899][ T26] audit: type=1326 audit(1718183543.636:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca8a1a6ea9 code=0x0 [ 344.529006][ T3648] usb 4-1: Using ep0 maxpacket: 16 [ 344.593525][ T3652] Bluetooth: hci4: command 0x0419 tx timeout [ 344.675665][ T3648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 198, changing to 11 [ 344.687040][ T3648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50887, setting to 1024 [ 344.816050][T11376] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 344.873819][T11378] loop2: detected capacity change from 0 to 4096 [ 344.889486][ T3648] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 344.902152][ T3648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.916177][ T3648] usb 4-1: Product: syz [ 344.920508][ T3648] usb 4-1: Manufacturer: syz [ 344.925205][ T3648] usb 4-1: SerialNumber: syz [ 344.931529][ T3648] usb 4-1: config 0 descriptor?? [ 344.948040][T11381] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.963442][T11339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 345.001516][ T3648] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 345.239609][ T3648] usb 4-1: USB disconnect, device number 14 [ 345.337585][T11392] loop2: detected capacity change from 0 to 256 [ 345.343576][T11390] fscrypt (sda1, inode 1968): Unsupported encryption modes (contents 1, filenames 10) [ 345.355750][T11390] overlayfs: overlapping lowerdir path [ 345.424431][T11396] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 345.443277][T11396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.669373][ T3648] Bluetooth: hci5: command 0x1001 tx timeout [ 345.693503][ T3540] Bluetooth: hci5: sending frame failed (-49) [ 345.791096][T11406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 346.044247][T11409] loop3: detected capacity change from 0 to 8 [ 346.095670][T11409] SQUASHFS error: lzo decompression failed, data probably corrupt [ 346.103932][T11409] SQUASHFS error: Failed to read block 0x28d: -5 [ 346.111115][T11409] SQUASHFS error: Unable to read metadata cache entry [28b] [ 346.118502][T11409] SQUASHFS error: Unable to read inode 0x11f [ 346.345195][T11412] loop2: detected capacity change from 0 to 4096 [ 346.411773][T11413] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.724051][T11420] loop3: detected capacity change from 0 to 256 [ 346.866005][T11427] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 346.879156][T11427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.944640][T11431] loop3: detected capacity change from 0 to 2048 [ 346.980601][T11433] loop2: detected capacity change from 0 to 4096 [ 347.014112][T11431] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 347.037841][T11431] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 347.047447][T11431] System zones: 0-19 [ 347.051607][T11433] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 347.063583][T11431] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 347.097994][T11433] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 347.113140][T11433] ntfs3: loop2: Failed to load root. [ 347.143870][T11431] fscrypt (loop3, inode 19): Unsupported encryption modes (contents 1, filenames 10) [ 347.297148][T11439] loop3: detected capacity change from 0 to 1024 [ 347.639152][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.760005][ T3652] Bluetooth: hci5: command 0x1009 tx timeout [ 347.959200][ T3652] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 347.990642][T11445] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 348.253116][ T3652] usb 4-1: Using ep0 maxpacket: 8 [ 348.260351][T11447] loop2: detected capacity change from 0 to 4096 [ 348.314040][T11452] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.369294][ T3652] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.387877][ T3652] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 348.407183][ T3652] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.430577][ T3652] usb 4-1: config 0 descriptor?? [ 348.573958][T11463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.782634][T11472] device bond1 entered promiscuous mode [ 348.797469][T11472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.226398][T11483] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 349.644047][T11491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.987444][T11495] loop2: detected capacity change from 0 to 32768 [ 350.044185][T11495] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (11495) [ 350.101844][T11495] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 350.116117][T11500] device bond1 entered promiscuous mode [ 350.122466][T11495] BTRFS info (device loop2): use zlib compression, level 3 [ 350.142517][T11500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.157467][T11495] BTRFS info (device loop2): using free space tree [ 350.165619][T11495] BTRFS info (device loop2): has skinny extents [ 350.209071][T11495] BTRFS info (device loop2): enabling ssd optimizations [ 350.249257][T11495] BTRFS info (device loop2): Snapshot src from another FS [ 350.350315][ T3652] usb 4-1: USB disconnect, device number 15 [ 350.408163][T11528] loop3: detected capacity change from 0 to 256 [ 350.637144][T11536] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 350.647775][T11536] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.786408][T11541] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 350.881935][T11549] device bond1 entered promiscuous mode [ 350.887703][T11549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.920149][T11552] loop3: detected capacity change from 0 to 8 [ 350.990371][T11552] SQUASHFS error: Unable to read inode 0xa7 [ 351.363278][T11556] loop3: detected capacity change from 0 to 32768 [ 351.459071][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.654422][T11556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (11556) [ 351.799372][ T3648] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 352.011539][T11556] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 352.027211][T11556] BTRFS info (device loop3): use zlib compression, level 3 [ 352.045078][T11556] BTRFS info (device loop3): using free space tree [ 352.051857][ T3648] usb 1-1: Using ep0 maxpacket: 8 [ 352.059403][T11556] BTRFS info (device loop3): has skinny extents [ 352.157704][T11584] device bond1 entered promiscuous mode [ 352.164808][T11584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.177114][T11589] loop2: detected capacity change from 0 to 8 [ 352.189473][ T3648] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.224771][ T3648] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 352.250016][T11556] BTRFS info (device loop3): enabling ssd optimizations [ 352.278465][ T3648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.314628][T11556] BTRFS info (device loop3): Snapshot src from another FS [ 352.322982][ T3648] usb 1-1: config 0 descriptor?? [ 352.330703][T11589] SQUASHFS error: Unable to read inode 0xa7 [ 352.886202][T11628] device bond2 entered promiscuous mode [ 352.893643][T11628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.047129][ T26] audit: type=1804 audit(1718183552.246:1090): pid=11633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3188359555/syzkaller.wXtxVG/314/bus" dev="sda1" ino=1965 res=1 errno=0 [ 353.271480][T11631] loop3: detected capacity change from 0 to 32768 [ 353.313991][T11631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (11631) [ 353.367696][T11631] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 353.385468][T11631] BTRFS info (device loop3): use zlib compression, level 3 [ 353.403648][T11631] BTRFS info (device loop3): using free space tree [ 353.417739][T11631] BTRFS info (device loop3): has skinny extents [ 353.463459][ T26] audit: type=1804 audit(1718183552.666:1091): pid=11663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3188359555/syzkaller.wXtxVG/322/bus" dev="sda1" ino=1967 res=1 errno=0 [ 353.490686][T11631] BTRFS info (device loop3): enabling ssd optimizations [ 353.519454][T11631] BTRFS info (device loop3): Snapshot src from another FS [ 354.000886][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.057809][T11700] loop3: detected capacity change from 0 to 512 [ 354.108915][T11700] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 354.230174][ T3651] usb 1-1: USB disconnect, device number 26 [ 354.321768][ T26] audit: type=1804 audit(1718183553.526:1092): pid=11704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2573015882/syzkaller.VnMD3L/694/bus" dev="sda1" ino=1960 res=1 errno=0 [ 354.362276][T11700] loop3: detected capacity change from 0 to 512 [ 354.423929][T11700] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 354.458212][T11700] EXT4-fs (loop3): invalid journal inode [ 354.467077][T11700] EXT4-fs (loop3): can't get journal size [ 354.549090][ T3651] Bluetooth: hci5: command 0x1003 tx timeout [ 354.549976][T11708] bond0: (slave bond_slave_0): Releasing backup interface [ 354.555435][ T3540] Bluetooth: hci5: sending frame failed (-49) [ 354.575110][T11700] EXT4-fs (loop3): 1 truncate cleaned up [ 354.586706][T11700] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 355.022656][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.419062][ T4031] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 355.635099][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.728058][ T4031] usb 2-1: Using ep0 maxpacket: 8 [ 355.867329][T11752] loop3: detected capacity change from 0 to 512 [ 355.879287][ T4031] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.898448][ T4031] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 355.910717][ T4031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.926046][T11752] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 355.937881][ T4031] usb 2-1: config 0 descriptor?? [ 356.602564][T11773] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.629230][ T3579] Bluetooth: hci5: command 0x1001 tx timeout [ 356.640887][ T3540] Bluetooth: hci5: sending frame failed (-49) [ 356.929630][T11794] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 356.948701][T11794] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 356.962251][T11794] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 357.222199][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.618592][T11822] loop3: detected capacity change from 0 to 512 [ 357.676614][T11822] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 357.716001][T11828] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.725696][T11828] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.742601][T11828] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.811204][ T3651] usb 2-1: USB disconnect, device number 9 [ 357.848155][T11837] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.497184][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 358.766705][ T1066] Bluetooth: hci5: command 0x1009 tx timeout [ 361.699652][ T3574] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 362.042987][T11914] loop3: detected capacity change from 0 to 4096 [ 362.078667][ T9] device hsr_slave_0 left promiscuous mode [ 362.086034][ T9] device hsr_slave_1 left promiscuous mode [ 362.100363][T11914] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 362.112144][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.121378][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.125598][T11914] ntfs3: loop3: Failed to load $BadClus. [ 362.136208][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.143985][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.152730][ T9] device bridge_slave_1 left promiscuous mode [ 362.160084][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.169660][ T9] device bridge_slave_0 left promiscuous mode [ 362.175843][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.188595][ T9] device veth1_macvtap left promiscuous mode [ 362.195422][ T9] device veth0_macvtap left promiscuous mode [ 362.201595][ T9] device veth1_vlan left promiscuous mode [ 362.207653][ T9] device veth0_vlan left promiscuous mode [ 362.249342][ T3574] usb 2-1: Using ep0 maxpacket: 8 [ 362.349348][ T3574] usb 2-1: device descriptor read/all, error -71 [ 362.458215][ T9] bond1 (unregistering): Released all slaves [ 362.638824][ T9] team0 (unregistering): Port device team_slave_1 removed [ 362.658808][ T9] team0 (unregistering): Port device team_slave_0 removed [ 362.674136][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.727021][T11940] loop2: detected capacity change from 0 to 2048 [ 362.734533][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.794861][T11945] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.854054][ T9] bond0 (unregistering): Released all slaves [ 362.915443][T11944] __nla_validate_parse: 3 callbacks suppressed [ 362.915458][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.934699][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.944318][T11944] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.536971][T11956] loop3: detected capacity change from 0 to 4096 [ 363.584172][T11956] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 363.664732][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.989085][ T3574] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 364.245256][T11956] ntfs3: loop3: Failed to load $BadClus. [ 364.269017][ T3574] usb 2-1: Using ep0 maxpacket: 8 [ 364.394342][ T3574] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.425448][ T3574] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 364.479590][ T3574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.510850][ T3574] usb 2-1: config 0 descriptor?? [ 364.528678][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.547697][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.572508][T11983] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.487428][T12018] loop3: detected capacity change from 0 to 4096 [ 365.548243][T12018] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 365.571575][T12018] ntfs3: loop3: Failed to load $BadClus. [ 365.679012][ T3579] Bluetooth: hci5: command 0x1003 tx timeout [ 365.686321][ T3540] Bluetooth: hci5: sending frame failed (-49) [ 366.117963][T12038] loop3: detected capacity change from 0 to 2048 [ 366.370516][ T3651] usb 2-1: USB disconnect, device number 12 [ 366.453574][T12045] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 366.963742][T12076] loop3: detected capacity change from 0 to 2048 [ 367.072767][T12082] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.166435][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 367.489061][ T3574] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 367.749016][ T3579] Bluetooth: hci5: command 0x1001 tx timeout [ 367.749115][ T3574] usb 1-1: Using ep0 maxpacket: 8 [ 367.755144][ T3540] Bluetooth: hci5: sending frame failed (-49) [ 367.900122][ T3574] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.910393][ T3574] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 367.919738][ T3574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.948056][ T3574] usb 1-1: config 0 descriptor?? [ 368.099042][ T3579] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 368.359033][ T3579] usb 4-1: Using ep0 maxpacket: 32 [ 368.479193][ T3579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 368.494460][ T3579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 368.669264][ T3579] usb 4-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice= 5.c0 [ 368.682609][ T3579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.696469][ T3579] usb 4-1: Product: syz [ 368.704488][ T3579] usb 4-1: Manufacturer: syz [ 368.719849][ T3579] usb 4-1: SerialNumber: syz [ 368.727338][ T3579] usb 4-1: config 0 descriptor?? [ 368.982070][ T1066] usb 4-1: USB disconnect, device number 16 [ 369.048061][T12138] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 369.078381][T12138] team0: Port device dummy0 added [ 369.680245][T12152] device syz_tun entered promiscuous mode [ 369.717295][T12151] device syz_tun left promiscuous mode [ 369.846208][ T1066] Bluetooth: hci5: command 0x1009 tx timeout [ 369.853193][T12162] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 369.921134][T11537] usb 1-1: USB disconnect, device number 27 [ 369.932822][T12162] team0: Port device dummy0 added [ 370.036834][ T7] kernel write not supported for file /snd/seq (pid: 7 comm: kworker/0:0) [ 370.241515][T12185] device syz_tun entered promiscuous mode [ 370.258741][T12184] device syz_tun left promiscuous mode [ 370.379303][T11537] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 370.546278][ T3651] kernel write not supported for file /snd/seq (pid: 3651 comm: kworker/1:14) [ 370.549225][ T3574] kernel read not supported for file /radio0 (pid: 3574 comm: kworker/0:7) [ 370.647654][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.749924][T11537] usb 1-1: Using ep0 maxpacket: 32 [ 370.870697][T11537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 370.908281][T11537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 370.999108][ T3574] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 371.209696][T11537] usb 1-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice= 5.c0 [ 371.230313][T11537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.239068][T11537] usb 1-1: Product: syz [ 371.249384][T11537] usb 1-1: Manufacturer: syz [ 371.259126][T11537] usb 1-1: SerialNumber: syz [ 371.268384][T12207] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 371.275502][T11537] usb 1-1: config 0 descriptor?? [ 371.282048][ T3574] usb 2-1: Using ep0 maxpacket: 8 [ 371.338808][T12212] device syz_tun entered promiscuous mode [ 371.360770][T12211] device syz_tun left promiscuous mode [ 371.399575][ T3574] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.423347][ T3574] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 371.434092][ T3574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.445277][ T3574] usb 2-1: config 0 descriptor?? [ 371.559854][ T3574] usb 1-1: USB disconnect, device number 28 [ 371.729554][ T3651] kernel write not supported for file /snd/seq (pid: 3651 comm: kworker/1:14) [ 371.741961][T11537] kernel read not supported for file /radio0 (pid: 11537 comm: kworker/0:19) [ 372.057187][T12235] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 372.105730][T12235] team0: Port device dummy0 added [ 372.208806][T12242] device syz_tun entered promiscuous mode [ 372.221669][T12241] device syz_tun left promiscuous mode [ 372.555816][ T1066] kernel read not supported for file /radio0 (pid: 1066 comm: kworker/1:2) [ 372.555964][T11537] kernel write not supported for file /snd/seq (pid: 11537 comm: kworker/0:19) [ 372.796188][T12270] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 372.845692][T12272] device syz_tun entered promiscuous mode [ 372.855345][T12271] device syz_tun left promiscuous mode [ 373.000001][ T1066] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 373.040376][T12282] loop3: detected capacity change from 0 to 16 [ 373.080129][T12282] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 373.207641][ T3651] kernel write not supported for file /snd/seq (pid: 3651 comm: kworker/1:14) [ 373.289083][ T1066] usb 5-1: Using ep0 maxpacket: 32 [ 373.394760][ T3651] usb 2-1: USB disconnect, device number 13 [ 373.415002][T12296] libceph: resolve '00' (ret=-3): failed [ 373.428266][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.459753][ T1066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 373.478199][ T1066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 373.512720][T12294] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.535555][T12294] loop3: detected capacity change from 0 to 256 [ 373.651726][ T26] audit: type=1800 audit(1718183572.856:1093): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 373.679352][ T1066] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice= 5.c0 [ 373.694110][ T1066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.714293][ T1066] usb 5-1: Product: syz [ 373.723344][ T1066] usb 5-1: Manufacturer: syz [ 373.732423][ T1066] usb 5-1: SerialNumber: syz [ 373.746531][ T1066] usb 5-1: config 0 descriptor?? [ 374.018054][ T1066] usb 5-1: USB disconnect, device number 16 [ 374.305260][T12321] libceph: resolve '00' (ret=-3): failed [ 374.539508][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.596053][ T3818] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 374.879304][T11537] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 374.969710][ T3818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.064288][ T3818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.112106][T12336] loop3: detected capacity change from 0 to 512 [ 375.126887][ T3818] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 375.156522][ T3818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.179176][T11537] usb 2-1: Using ep0 maxpacket: 8 [ 375.180126][T12336] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2) [ 375.195400][ T3818] usb 3-1: config 0 descriptor?? [ 375.216459][T12336] EXT4-fs (loop3): Remounting filesystem read-only [ 375.223485][T12336] EXT4-fs (loop3): 2 truncates cleaned up [ 375.229259][T12336] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,debug_want_extra_isize=0x0000000000000008,data_err=ignore,. Quota mode: writeback. [ 375.302555][T11537] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.307034][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.332843][T11537] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 375.356102][T11537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.379210][T11537] usb 2-1: config 0 descriptor?? [ 375.402591][T12345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.434643][ T26] audit: type=1800 audit(1718183574.636:1094): pid=12347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 375.487448][ T26] audit: type=1800 audit(1718183574.686:1095): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1946 res=0 errno=0 [ 375.591981][T12351] loop3: detected capacity change from 0 to 16 [ 375.650655][T12351] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 375.786234][T12311] loop2: detected capacity change from 0 to 8192 [ 375.843868][T12353] libceph: resolve '00' (ret=-3): failed [ 375.900320][ T3818] hid (null): bogus close delimiter [ 376.112453][ T3818] usb 3-1: language id specifier not provided by device, defaulting to English [ 376.180393][ T26] audit: type=1800 audit(1718183575.386:1096): pid=12372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 376.288561][T12378] libceph: resolve '00' (ret=-3): failed [ 376.313395][T12311] udc-core: couldn't find an available UDC or it's busy [ 376.325153][T12311] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 376.369194][ T1066] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 376.466039][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.509968][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.544871][ T26] audit: type=1800 audit(1718183575.746:1097): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 376.562848][ T3818] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000B/input/input29 [ 376.639057][ T1066] usb 4-1: Using ep0 maxpacket: 32 [ 376.664878][ T3818] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000B/input/input30 [ 376.686638][ T3818] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 376.759106][ T1066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 376.778812][ T1066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 376.969177][ T1066] usb 4-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice= 5.c0 [ 376.988813][ T1066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.998842][ T1066] usb 4-1: Product: syz [ 377.007089][ T1066] usb 4-1: Manufacturer: syz [ 377.013404][ T1066] usb 4-1: SerialNumber: syz [ 377.026473][ T1066] usb 4-1: config 0 descriptor?? [ 377.199121][ T1066] Bluetooth: hci5: command 0x1003 tx timeout [ 377.205621][ T3540] Bluetooth: hci5: sending frame failed (-49) [ 377.281850][ T1066] usb 2-1: USB disconnect, device number 14 [ 377.300194][ T3818] usb 3-1: USB disconnect, device number 16 [ 377.309368][ T3579] usb 4-1: USB disconnect, device number 17 [ 377.490310][ T26] audit: type=1800 audit(1718183576.696:1098): pid=12398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 377.583985][T12404] libceph: resolve '00' (ret=-3): failed [ 377.923749][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 378.269038][ T1066] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 378.442685][ T3818] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 378.452243][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.540163][ T26] audit: type=1800 audit(1718183577.746:1099): pid=12429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 378.562045][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.562147][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.575702][ T1066] usb 1-1: Using ep0 maxpacket: 8 [ 378.639152][T12424] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.653775][T12431] loop3: detected capacity change from 0 to 512 [ 378.709277][ T1066] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.719799][ T1066] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 378.728837][ T1066] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.729053][ T26] audit: type=1800 audit(1718183577.896:1100): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 378.760116][ T1066] usb 1-1: config 0 descriptor?? [ 378.780421][T12431] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2) [ 378.840261][ T3818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.851623][ T3818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.865273][ T3818] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 378.877850][ T3818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.892753][ T3818] usb 3-1: config 0 descriptor?? [ 378.896426][T12431] EXT4-fs (loop3): Remounting filesystem read-only [ 378.930784][T12431] EXT4-fs (loop3): 2 truncates cleaned up [ 378.948089][T12431] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,debug_want_extra_isize=0x0000000000000008,data_err=ignore,. Quota mode: writeback. [ 379.279570][ T1066] Bluetooth: hci5: command 0x1001 tx timeout [ 379.289089][ T3540] Bluetooth: hci5: sending frame failed (-49) [ 379.499209][T12417] loop2: detected capacity change from 0 to 8192 [ 379.590168][ T3818] hid (null): bogus close delimiter [ 379.666569][T12445] loop3: detected capacity change from 0 to 32768 [ 379.723892][T12445] XFS (loop3): Mounting V5 Filesystem [ 379.775180][T12445] XFS (loop3): Ending clean mount [ 379.786678][T12445] XFS (loop3): Quotacheck needed: Please wait. [ 379.799448][ T3818] usb 3-1: language id specifier not provided by device, defaulting to English [ 379.838961][T11537] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 379.848292][T12445] XFS (loop3): Quotacheck: Done. [ 379.936480][T10441] XFS (loop3): Unmounting Filesystem [ 380.008607][T12417] udc-core: couldn't find an available UDC or it's busy [ 380.021575][T12417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 380.079047][T11537] usb 2-1: Using ep0 maxpacket: 32 [ 380.199181][T11537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 380.214092][ T26] audit: type=1800 audit(1718183579.416:1101): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 380.243111][T11537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 380.272154][ T3818] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input32 [ 380.298820][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.327979][T12469] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.348694][T12469] loop3: detected capacity change from 0 to 256 [ 380.359685][ T3818] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input33 [ 380.378528][ T3818] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 380.409171][T11537] usb 2-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice= 5.c0 [ 380.418427][T11537] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.426722][T11537] usb 2-1: Product: syz [ 380.432128][T11537] usb 2-1: Manufacturer: syz [ 380.438425][T11537] usb 2-1: SerialNumber: syz [ 380.465726][ T26] audit: type=1800 audit(1718183579.666:1102): pid=12469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 380.466421][T11537] usb 2-1: config 0 descriptor?? [ 380.691229][ T3818] usb 1-1: USB disconnect, device number 29 [ 380.761423][T11537] usb 2-1: USB disconnect, device number 15 [ 380.983711][T12477] Illegal XDP return value 4294967274, expect packet loss! [ 381.021696][ T3568] usb 3-1: USB disconnect, device number 17 [ 381.147838][T12482] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 381.186677][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.199341][T12482] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.248096][T12487] loop3: detected capacity change from 0 to 512 [ 381.299353][T12487] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 381.306751][T12487] UDF-fs: Scanning with blocksize 512 failed [ 381.338389][T12487] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 381.359177][ T3651] Bluetooth: hci5: command 0x1009 tx timeout [ 381.366406][T12487] UDF-fs: Scanning with blocksize 1024 failed [ 381.375935][T12493] loop2: detected capacity change from 0 to 1024 [ 381.382558][T12487] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 381.390206][T12487] UDF-fs: Scanning with blocksize 2048 failed [ 381.396982][T12487] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 381.414337][T12487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.667263][ T26] audit: type=1800 audit(1718183580.866:1103): pid=12495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 381.755490][T12497] loop3: detected capacity change from 0 to 128 [ 381.821767][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.179209][T11537] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 382.438996][T11537] usb 3-1: Using ep0 maxpacket: 8 [ 382.559290][T11537] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.577939][T11537] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 382.603960][T11537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.622032][T11537] usb 3-1: config 0 descriptor?? [ 382.653826][T12514] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 382.670650][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 382.687194][T12514] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 382.721714][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 382.797079][T12515] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 382.819250][ T3574] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 382.836589][T12521] loop3: detected capacity change from 0 to 512 [ 382.894142][ T26] audit: type=1800 audit(1718183582.096:1104): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 382.935757][T12521] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 382.944086][T12521] UDF-fs: Scanning with blocksize 512 failed [ 382.951687][T12521] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 382.959280][T12521] UDF-fs: Scanning with blocksize 1024 failed [ 382.969592][T12521] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 382.977391][T12521] UDF-fs: Scanning with blocksize 2048 failed [ 382.988275][T12521] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 383.003838][T12521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.189956][ T3574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.203459][ T3574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.216042][ T3574] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 383.240137][ T3574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.279537][ T3574] usb 1-1: config 0 descriptor?? [ 384.096965][ T26] audit: type=1800 audit(1718183583.296:1105): pid=12537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 384.110226][ T3574] hid (null): bogus close delimiter [ 384.180428][T12538] loop3: detected capacity change from 0 to 128 [ 384.329172][ T3574] usb 1-1: language id specifier not provided by device, defaulting to English [ 384.339285][T12542] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 384.419354][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 384.441769][ T3817] usb 3-1: USB disconnect, device number 18 [ 384.452637][T12542] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 384.530430][T12506] udc-core: couldn't find an available UDC or it's busy [ 384.541072][T12506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 384.608467][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.668438][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.714424][T12551] loop2: detected capacity change from 0 to 256 [ 384.795765][ T3574] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input35 [ 384.852081][ T26] audit: type=1800 audit(1718183584.056:1106): pid=12551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1945 res=0 errno=0 [ 384.942973][ T3574] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input36 [ 384.992956][ T3574] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 385.376439][T12565] loop3: detected capacity change from 0 to 32768 [ 385.446964][T12565] XFS (loop3): Mounting V5 Filesystem [ 385.494490][T12575] loop2: detected capacity change from 0 to 1024 [ 385.515926][T12565] XFS (loop3): Ending clean mount [ 385.538358][T12565] XFS (loop3): Quotacheck needed: Please wait. [ 385.579710][ T3817] usb 1-1: USB disconnect, device number 30 [ 385.723561][T12565] XFS (loop3): Quotacheck: Done. [ 385.821592][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 386.455731][T12582] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 386.581263][T10441] XFS (loop3): Unmounting Filesystem [ 386.677052][ T26] audit: type=1800 audit(1718183585.886:1107): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1963 res=0 errno=0 [ 386.689230][ T3518] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 386.843034][T12600] __nla_validate_parse: 2 callbacks suppressed [ 386.843045][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.972702][ T3518] usb 3-1: Using ep0 maxpacket: 8 [ 386.992114][T12600] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.072679][ T26] audit: type=1800 audit(1718183586.276:1108): pid=12600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 387.089264][ T3518] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.167803][ T3518] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 387.223202][ T3518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.286289][ T3518] usb 3-1: config 0 descriptor?? [ 387.609071][ T3518] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 387.728539][T12614] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 387.749093][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.758344][T12614] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.969212][ T3518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.011122][ T3518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.071855][ T3518] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 388.091393][ T3518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.122316][ T3518] usb 2-1: config 0 descriptor?? [ 388.183062][T12626] loop3: detected capacity change from 0 to 512 [ 388.236851][T12626] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 388.245791][T12626] UDF-fs: Scanning with blocksize 512 failed [ 388.260589][T12626] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 388.270447][T12626] UDF-fs: Scanning with blocksize 1024 failed [ 388.281073][T12626] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 388.293050][T12626] UDF-fs: Scanning with blocksize 2048 failed [ 388.301860][T12626] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 388.324159][T12626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.672822][ T3651] usb 3-1: USB disconnect, device number 19 [ 388.799722][ T3518] hid (null): bogus close delimiter [ 388.855760][T12632] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 388.892104][ T26] audit: type=1800 audit(1718183588.096:1109): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1955 res=0 errno=0 [ 388.973674][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.986288][T12640] loop2: detected capacity change from 0 to 128 [ 389.030142][ T3518] usb 2-1: language id specifier not provided by device, defaulting to English [ 389.104903][T12639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 389.174218][ T26] audit: type=1800 audit(1718183588.376:1110): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 389.242080][T12605] udc-core: couldn't find an available UDC or it's busy [ 389.306213][T12605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 389.854605][ T3518] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000E/input/input38 [ 390.063795][ T3518] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000E/input/input39 [ 390.099854][T12648] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 390.120539][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.127814][T12628] loop3: detected capacity change from 0 to 40427 [ 390.136649][T12648] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.159644][ T3518] uclogic 0003:256C:006D.000E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 390.184876][T12628] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 390.193010][T12628] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 390.218151][T12628] F2FS-fs (loop3): invalid crc value [ 390.246614][T12628] F2FS-fs (loop3): Found nat_bits in checkpoint [ 390.316355][T12663] loop2: detected capacity change from 0 to 1024 [ 390.348128][T12628] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 390.363204][T12628] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 390.649359][ T1066] usb 2-1: USB disconnect, device number 16 [ 390.674083][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 391.877725][T11537] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 391.935268][T12678] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 391.995610][ T26] audit: type=1800 audit(1718183591.196:1111): pid=12685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 392.107098][ T26] audit: type=1804 audit(1718183591.306:1112): pid=12694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1953222338/syzkaller.zooonB/95/bus" dev="sda1" ino=1950 res=1 errno=0 [ 392.139779][T11537] usb 3-1: Using ep0 maxpacket: 8 [ 392.185969][ T26] audit: type=1804 audit(1718183591.386:1113): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1953222338/syzkaller.zooonB/95/bus" dev="sda1" ino=1950 res=1 errno=0 [ 392.222539][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 392.259447][T11537] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.286929][T11537] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 392.322789][T11537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.426954][T11537] usb 3-1: config 0 descriptor?? [ 392.926941][ T3651] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 393.470411][ T3651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.986433][ T3651] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.996383][ T3651] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 394.005476][ T3651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.017417][T11537] usb 3-1: USB disconnect, device number 20 [ 394.030083][ T3651] usb 5-1: config 0 descriptor?? [ 394.048891][T12725] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 394.256104][ T26] audit: type=1804 audit(1718183593.456:1114): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1414577950/syzkaller.6LEU9V/139/bus" dev="sda1" ino=1964 res=1 errno=0 [ 394.346074][ T26] audit: type=1804 audit(1718183593.496:1115): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1414577950/syzkaller.6LEU9V/139/bus" dev="sda1" ino=1964 res=1 errno=0 [ 395.359613][ T3651] hid (null): bogus close delimiter [ 395.559544][T12759] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 395.971085][T12766] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 395.999207][ T3651] usb 5-1: language id specifier not provided by device, defaulting to English [ 396.070988][ T26] audit: type=1804 audit(1718183595.276:1116): pid=12772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1953222338/syzkaller.zooonB/100/bus" dev="sda1" ino=1955 res=1 errno=0 [ 396.163508][ T26] audit: type=1804 audit(1718183595.306:1117): pid=12772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1953222338/syzkaller.zooonB/100/bus" dev="sda1" ino=1955 res=1 errno=0 [ 396.209601][T12706] udc-core: couldn't find an available UDC or it's busy [ 396.216566][T12706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 396.458800][T12790] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 398.023594][ T3651] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000F/input/input41 [ 398.090772][T12802] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 398.103236][ T3651] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000F/input/input42 [ 398.118308][ T26] audit: type=1804 audit(1718183597.316:1118): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2573015882/syzkaller.VnMD3L/808/bus" dev="sda1" ino=1964 res=1 errno=0 [ 398.185373][ T3651] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 398.222849][ T3651] usb 5-1: USB disconnect, device number 17 [ 398.253002][ T26] audit: type=1804 audit(1718183597.346:1119): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2573015882/syzkaller.VnMD3L/808/bus" dev="sda1" ino=1964 res=1 errno=0 [ 398.475758][T12785] loop3: detected capacity change from 0 to 40427 [ 398.537988][T12785] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 398.557465][T12785] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 503.578868][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 503.585982][ C0] (detected by 0, t=10502 jiffies, g=55053, q=41) [ 503.592499][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294987479-4294976977), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 503.606356][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g55053 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 503.617558][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 503.627758][ C0] rcu: RCU grace-period kthread stack dump: [ 503.633645][ C0] task:rcu_preempt state:R running task stack:26712 pid: 15 ppid: 2 flags:0x00004000 [ 503.644444][ C0] Call Trace: [ 503.647726][ C0] [ 503.650664][ C0] __schedule+0x12c4/0x45b0 [ 503.655176][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 503.661091][ C0] ? release_firmware_map_entry+0x190/0x190 [ 503.667232][ C0] ? mod_timer_pending+0x20/0x20 [ 503.672193][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 503.677579][ C0] schedule+0x11b/0x1f0 [ 503.681738][ C0] schedule_timeout+0x1b9/0x300 [ 503.686585][ C0] ? console_conditional_schedule+0x40/0x40 [ 503.692478][ C0] ? update_process_times+0x200/0x200 [ 503.697851][ C0] ? prepare_to_swait_event+0x321/0x340 [ 503.703670][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 503.708519][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 503.713728][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 503.719096][ C0] ? rcu_gp_init+0xdae/0x1140 [ 503.723769][ C0] ? rcu_gp_init+0x1140/0x1140 [ 503.728724][ C0] ? finish_swait+0xc5/0x1d0 [ 503.733309][ C0] rcu_gp_kthread+0xa4/0x360 [ 503.737889][ C0] ? _raw_spin_unlock+0x40/0x40 [ 503.742732][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 503.747832][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 503.753719][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 503.758748][ C0] kthread+0x3f6/0x4f0 [ 503.762828][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 503.767929][ C0] ? kthread_blkcg+0xd0/0xd0 [ 503.772508][ C0] ret_from_fork+0x1f/0x30 [ 503.776927][ C0] [ 503.779933][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 503.786235][ C0] Sending NMI from CPU 0 to CPUs 1: [ 503.791428][ C1] NMI backtrace for cpu 1 [ 503.791448][ C1] CPU: 1 PID: 12832 Comm: syz-executor.2 Not tainted 5.15.160-syzkaller #0 [ 503.791462][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 503.791471][ C1] RIP: 0010:__lock_acquire+0x19c/0x1ff0 [ 503.791489][ C1] Code: 6c 24 48 0f 84 31 01 00 00 49 8d 9d f0 0a 00 00 83 fd 30 0f 87 88 1b 00 00 48 8d 44 ad 00 48 8d 5c c3 f8 48 89 d8 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 8b 16 00 00 48 89 e8 48 83 bc 24 c0 00 00 [ 503.791501][ C1] RSP: 0018:ffffc90000dd09e0 EFLAGS: 00000806 [ 503.791514][ C1] RAX: 1ffff1100eac78d7 RBX: ffff88807563c6b8 RCX: ffffffff913eff03 [ 503.791526][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff915ef878 [ 503.791536][ C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000001 [ 503.791544][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 503.791553][ C1] R13: ffff88807563bb80 R14: 0000000000000000 R15: 0000000000000000 [ 503.791562][ C1] FS: 00007fcfc38016c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 503.791575][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.791585][ C1] CR2: 0000000000000000 CR3: 0000000062b56000 CR4: 00000000003506e0 [ 503.791597][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.791605][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.791614][ C1] Call Trace: [ 503.791619][ C1] [ 503.791623][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 503.791639][ C1] ? read_lock_is_recursive+0x10/0x10 [ 503.791654][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 503.791675][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 503.791690][ C1] ? nmi_handle+0xf7/0x370 [ 503.791705][ C1] ? __lock_acquire+0x19c/0x1ff0 [ 503.791718][ C1] ? default_do_nmi+0x62/0x150 [ 503.791733][ C1] ? exc_nmi+0xa8/0x100 [ 503.791747][ C1] ? end_repeat_nmi+0x16/0x31 [ 503.791764][ C1] ? __lock_acquire+0x19c/0x1ff0 [ 503.791777][ C1] ? __lock_acquire+0x19c/0x1ff0 [ 503.791790][ C1] ? __lock_acquire+0x19c/0x1ff0 [ 503.791803][ C1] [ 503.791807][ C1] [ 503.791813][ C1] ? mark_lock+0x98/0x340 [ 503.791828][ C1] lock_acquire+0x1db/0x4f0 [ 503.791840][ C1] ? debug_object_activate+0x63/0x4e0 [ 503.791859][ C1] ? read_lock_is_recursive+0x10/0x10 [ 503.791876][ C1] ? read_lock_is_recursive+0x10/0x10 [ 503.791889][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 503.791909][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 503.791926][ C1] ? debug_object_activate+0x63/0x4e0 [ 503.791941][ C1] ? _raw_spin_lock+0x40/0x40 [ 503.791959][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 503.791976][ C1] debug_object_activate+0x63/0x4e0 [ 503.791992][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 503.792010][ C1] enqueue_hrtimer+0x30/0x390 [ 503.792025][ C1] __hrtimer_run_queues+0x6b6/0xcf0 [ 503.792106][ C1] ? hrtimer_interrupt+0x980/0x980 [ 503.792121][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 503.792139][ C1] hrtimer_interrupt+0x392/0x980 [ 503.792160][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 503.792179][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 503.792197][ C1] [ 503.792202][ C1] [ 503.792206][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 503.792221][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 503.792236][ C1] Code: 2b 00 74 08 4c 89 f7 e8 fc 7c 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 503.792248][ C1] RSP: 0018:ffffc90002f4f9e0 EFLAGS: 00000206 [ 503.792262][ C1] RAX: 0000000000000001 RBX: 1ffff920005e9f48 RCX: ffffffff81636502 [ 503.792273][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8b3c20 RDI: ffffffff8ad8f6c0 [ 503.792283][ C1] RBP: ffffc90002f4fb38 R08: dffffc0000000000 R09: fffffbfff1f7f020 [ 503.792294][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005e9f44 [ 503.792304][ C1] R13: dffffc0000000000 R14: ffffc90002f4fa40 R15: 0000000000000246 [ 503.792317][ C1] ? validate_chain+0x112/0x5930 [ 503.792335][ C1] ? read_lock_is_recursive+0x10/0x10 [ 503.792348][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 503.792361][ C1] ? slab_post_alloc_hook+0x2ae/0x380 [ 503.792378][ C1] ? __d_alloc+0x2a/0x700 [ 503.792393][ C1] ? rcu_is_watching+0x11/0xa0 [ 503.792407][ C1] ? d_set_d_op+0x284/0x3a0 [ 503.792423][ C1] ? __d_alloc+0x54c/0x700 [ 503.792438][ C1] _raw_spin_lock+0x2a/0x40 [ 503.792453][ C1] ? d_instantiate+0x60/0x90 [ 503.792468][ C1] d_instantiate+0x60/0x90 [ 503.792483][ C1] alloc_file_pseudo+0x248/0x2f0 [ 503.792499][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 503.792521][ C1] ? alloc_empty_file_noaccount+0x80/0x80 [ 503.792537][ C1] ? alloc_fd+0x594/0x630 [ 503.792554][ C1] __anon_inode_getfd+0x2aa/0x430 [ 503.792573][ C1] ? anon_inode_getfd+0x40/0x40 [ 503.792588][ C1] ? security_bpf_map+0x75/0x90 [ 503.792604][ C1] map_create+0x18bb/0x2070 [ 503.792623][ C1] __sys_bpf+0x276/0x670 [ 503.792638][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 503.792661][ C1] __x64_sys_bpf+0x78/0x90 [ 503.792677][ C1] do_syscall_64+0x3b/0xb0 [ 503.792691][ C1] ? clear_bhb_loop+0x15/0x70 [ 503.792710][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 503.792725][ C1] RIP: 0033:0x7fcfc4c87ea9 [ 503.792742][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 503.792754][ C1] RSP: 002b:00007fcfc38010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 503.792769][ C1] RAX: ffffffffffffffda RBX: 00007fcfc4dbef80 RCX: 00007fcfc4c87ea9 [ 503.792779][ C1] RDX: 0000000000000048 RSI: 0000000020000240 RDI: 0000000000000000 [ 503.792788][ C1] RBP: 00007fcfc4cf6ff4 R08: 0000000000000000 R09: 0000000000000000 [ 503.792797][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.792805][ C1] R13: 000000000000000b R14: 00007fcfc4dbef80 R15: 00007ffe0bdf7c78 [ 503.792820][ C1]