last executing test programs: 10.405239746s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="01202a3a8a"], 0x8) close(r2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) r3 = memfd_create(&(0x7f0000000080)='}\xa4-}{\x00\xaa\x81\xde\xac\xc0\xe8\xf1v\xbd\xd2\xd4\x03[t\xe8\x92\x9d\xc2\xdep\x11y\xf7\xb0\x90\v\xb9\x9f\x12\xfc\x8c\x19\xf7v\xdb\r\xf4\xce\xdb\xf8Cw\xe6c\xd1\xe9\xe1\x8e\x1bKn\x9c{[\xbe|\x13\x97{\x12z\xea(\xb8\xc7\xca\x9a\x17)\xfcl\xe9\x87\xe7\xf5U\xc9@\xeb\x02\x90\'\x8d\xccd\x05\xf7zJ\x8f+\\\x16\x9e\x10t^\xb7\x90\xa7\x8f \xc0#\xeb&s\xc6\x11\xfb\xc3\x1fp\xeb^\x82\x8a\x1d\xe3\x93\xfdt\x86-\b*c2\xe6\xd4\xc6\xf9\x172\xf7', 0x0) fallocate(r3, 0x0, 0x0, 0x8002006) 9.058949233s ago: executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0x1e, 0xc6, 0x8, 0x2040, 0xd300, 0x32a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0xab, 0x39}}]}}]}}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x4020940d, &(0x7f0000000040)={0x4, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x41015500, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb1, 0xf7, 0x65, 0x10, 0x4fc, 0x235, 0x277e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xf5, 0x93, 0xf2, 0x0, [], [{{0x9, 0x5, 0x8, 0x3a}}, {{0x9, 0x5, 0x87, 0x2}}]}}]}}]}}, 0x0) 9.008416453s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) 8.972818695s ago: executing program 0: r0 = memfd_create(&(0x7f0000000240)='\"\x01$*\x00\xe51\x1f\xa9\x97\x84\x01N_\x1a\x99\xaes\xd0E\xb4\x801\xd38\xd2yJ\f/:\xbe\x00\x00\x00\x00', 0x2) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000366000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) rt_sigreturn() write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000080)={0x43, 0x9, 0x0, {0x1ff, 0x61}}, 0x43) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) ioctl$BTRFS_IOC_START_SYNC(r4, 0x5450, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000002040), 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) dup3(r1, 0xffffffffffffffff, 0x0) 8.622218091s ago: executing program 3: socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_pts(r0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0x5450, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = mq_open(&(0x7f00000016c0)='+!+({),-\x00', 0x40, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000002440)=ANY=[@ANYBLOB, @ANYBLOB], 0x90) write$P9_RSTATu(r3, &(0x7f00000022c0)=ANY=[@ANYRES8], 0x53) write$FUSE_STATFS(r3, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000200)={0x18}, 0xffffffa3) 7.872935815s ago: executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 7.543959987s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_emit_vhci(&(0x7f0000000e00)=ANY=[@ANYBLOB="040e0b080d04"], 0xd) 7.126807053s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e98500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='task_rename\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$P9_RREADDIR(r2, 0x0, 0x0) 7.014903059s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0xb, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0xc, 0x8000006}, 0x8) listen(r2, 0x0) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x2, @remote}, 0x10) r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='hugetlb.2MB.failcnt\x00', 0x657, 0xfeffffff) gettid() dup2(r4, r1) 6.789163547s ago: executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x3b, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x231, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000004580), &(0x7f0000000080)={0x3fe}, 0x0, 0x0, 0x0) 6.390055407s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c000240"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) recvmmsg(r0, &(0x7f000000c2c0), 0x0, 0x0, 0x0) 5.925881972s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./control\x00', 0x5000410) close_range(r3, 0xffffffffffffffff, 0x0) 5.88548483s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x800000000004, @tid=r0}, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f0000006340)='./file1\x00', &(0x7f0000006380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setregid(r1, 0x0) r2 = semget$private(0x0, 0x2, 0x308) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x87, 0x2}, 0x5, 0x0, 0xff, 0xfff, 0x0, 0x0, 0xfffb}) lstat(&(0x7f0000006440)='./file0\x00', &(0x7f0000006480)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000006540)='./binderfs2/binder-control\x00', 0x800, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) dup(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) rt_sigreturn() socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000004040)={0x7}, 0x7) close(0xffffffffffffffff) 5.763842365s ago: executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000340)) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 5.647963363s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0x1, &(0x7f00000000c0), 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="190e00000000f0"], 0x8) close(r2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) rt_sigreturn() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 5.284078052s ago: executing program 3: gettid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 4.851977755s ago: executing program 1: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r0 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, 0x0, 0xffffffe2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) sendmsg$netlink(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) 4.744382643s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000200)) dup(0xffffffffffffffff) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x6, 0xb, 0x0, 0x0) 4.614130616s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x700) 4.137499568s ago: executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 3.567484616s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_emit_vhci(&(0x7f0000000e00)=ANY=[@ANYBLOB="040e0b080d04"], 0xd) 3.300561006s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='task_rename\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$P9_RREADDIR(r1, 0x0, 0x0) 2.855552843s ago: executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0x1e, 0xc6, 0x8, 0x2040, 0xd300, 0x32a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0xab, 0x39}}]}}]}}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x4020940d, &(0x7f0000000040)={0x4, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0xf, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x41015500, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb1, 0xf7, 0x65, 0x10, 0x4fc, 0x235, 0x277e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xf5, 0x93, 0xf2, 0x0, [], [{{0x9, 0x5, 0x8, 0x3a}}, {{0x9, 0x5, 0x87, 0x2}}]}}]}}]}}, 0x0) 2.650778137s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4087, 0x1000}], 0x1, 0x0, 0x3c}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=@newlink={0x64, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @multicast}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6tnl0\x00'}]}, 0x64}}, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x11, r7, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2.454944792s ago: executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x3b, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x231, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000004580), &(0x7f0000000080)={0x3fe}, 0x0, 0x0, 0x0) 2.16304966s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c000240"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) recvmmsg(r0, &(0x7f000000c2c0), 0x0, 0x0, 0x0) 833.30259ms ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xfffffff7, &(0x7f0000000040)=0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000740), 0xfe, 0x499, &(0x7f0000001780)="$eJzs3M1vVFUbAPDn3umUb9qXF78ApYrGxo+WFlQWbjS608REF7gxqW0hlYEaWhIhRKsxuDQk7o0rY/QvcKUbo65M3OrekBAlJqALM+bO3NtOS6ftlClTnN8vueWc3jNzzjPnnrnn3sNtAF1rIPuRROyMiF8ioq+eXVxgoP7PjWsXx/+6dnE8iWr11d+TWrnr1y6OF0WL1+3IM4NpRPphkley2Mz5C6fGKpXJs3l+ePb028Mz5y88OXV67GQyFzF67NjRIyPPPD36VFvizOK6vu/d6QNJz+uXXx4/fvnNH77qbdjfGMctSXfMJweywP+o1iwt9khbKts8djWkk54ONoSWlCIi665ybfz3RSkWOq8vXvygo40DNlR2btrSfPdcFfgPS6LTLQA6ozjRZ9e/xXabph6bwtXn6hdAWdw38q2+pyfSvEx5A+u/NyKOz/39abZF3g//7NzACgGArvdNNv95Yrn5Xxp3N5Tbna+h9EfE/yJiT0T8PyL2RsRdEbWy9+TzmVbUl4ZK8/mb55/plXUHtwbZ/O/ZfG1r8fyvmP1FfynP7arFX05OTFUmD+efyWCUt2T5kRXq+PaFnz9utm+gYf6XbVn9xVwwb8eVniU36CbGZsfaNSm9+n7Evp7l4k/mVwKSiLgvIva19ta7i8TUY18caFZo9fhX0IZ1pupnEY/W+38ulsRfSJauT06enDyzsD45vDUqk4eHi6PiZj/+dOmV5Wvfemvxt0HW/9sXH/9LSvT9mTSu1860XselXz9qek253uO/N3mtNiaLNdx3xmZnz45E9CYv1fKLfj+68NoiX5TP4h88tBB/NIz/Pflrsvj3R0R2EN8fEQ9ExMG87Q9GxEMRcWiF+L9//uG3Wop/6vb2/8Sy33/zx3//4v5vPVE69d3XzepfW/8fraUG89/Uvv9W0bw5UZmMqFbXfTQDAADAnSeNiJ2RpEPz6TQdGqr/H/69sT2tTM/MPn5i+tyZifozAv1RTos7XX35/dDsanskmcvfsX5/dDS/V1zcLz2S3zf+pLStlh8an65MdDh26HY7moz/zG+lTrcO2HCe14LutXT8px1qB3D7Of9D9zL+oXsZ/9C9Gsb/l+cu7a8l3qv9PDi/Y9m1gBX+cghwZ3D+h+5l/EP3Mv6hexn/0JXW/hR/eV3P/rc/sS1v+WqFe1d+n2SThHNz4vPypmjGaolIVyrzRiy/ayAiNqhhsSk+lnYnkjUc6mtNnDiZD521FO7ktxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED7/BsAAP//1ELiOQ==") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x8, 0x0) getdents64(r1, 0x0, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) 422.467625ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./control\x00', 0x5000410) close_range(r3, 0xffffffffffffffff, 0x0) 327.514567ms ago: executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x800454df, &(0x7f0000000740)={'gretap0\x00', @random="6c79a6821d7f"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) 0s ago: executing program 0: shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="8bb164c20a7c0c4100ffa6f380d6f8b97ae2cf989619c4c6a3741628a38e59ce76f73bcd4623d6798a3234c32ef1fb6954cc0701020000acaea457f05e513b1a51d326d737a98527"], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_emit_ethernet(0x56, 0x0, 0x0) kernel console output (not intermixed with test programs): nterface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.470293][T10487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.853206][T10487] hsr_slave_0: entered promiscuous mode [ 919.923655][T10487] hsr_slave_1: entered promiscuous mode [ 919.977466][T10487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 919.986706][T10487] Cannot create hsr debugfs directory [ 920.802888][ T8834] Bluetooth: hci5: command tx timeout [ 921.579034][T10487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 921.638756][T10487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 921.736823][T10487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 921.890375][T10487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 922.887510][T10487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.006893][T10487] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.073494][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.081252][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.178941][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.186784][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.241433][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 923.248293][ T29] audit: type=1326 audit(1717565370.244:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee4e7cee9 code=0x7ffc0000 [ 923.278294][ T29] audit: type=1326 audit(1717565370.244:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee4e7cee9 code=0x7ffc0000 [ 923.303493][ T29] audit: type=1326 audit(1717565370.254:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee4e7cee9 code=0x7ffc0000 [ 923.327255][ T29] audit: type=1326 audit(1717565370.254:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee4e7cee9 code=0x7ffc0000 [ 923.351484][ T29] audit: type=1326 audit(1717565370.254:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f1ee4e7cee9 code=0x7ffc0000 [ 923.382819][ T29] audit: type=1326 audit(1717565370.254:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee4e7cee9 code=0x7ffc0000 [ 923.406584][ T29] audit: type=1326 audit(1717565370.254:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee4e7cee9 code=0x7ffc0000 [ 923.430243][ T29] audit: type=1326 audit(1717565370.254:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee4e7cee9 code=0x7ffc0000 [ 923.459756][ T29] audit: type=1326 audit(1717565370.284:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee4e7cee9 code=0x7ffc0000 [ 923.485173][ T29] audit: type=1326 audit(1717565370.284:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee4e7cee9 code=0x7ffc0000 [ 925.353895][T10487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.798167][T10487] veth0_vlan: entered promiscuous mode [ 925.900500][T10487] veth1_vlan: entered promiscuous mode [ 926.131313][T10487] veth0_macvtap: entered promiscuous mode [ 926.161946][ T5120] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 926.196164][T10487] veth1_macvtap: entered promiscuous mode [ 926.381987][T10487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.395741][T10487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.406031][T10487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.416822][T10487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.432889][T10487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.443707][T10487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.453908][T10487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.464777][T10487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.474962][T10487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.485725][T10487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.501683][T10487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.562105][ T5120] usb 2-1: Using ep0 maxpacket: 8 [ 926.618883][T10487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.637121][T10487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.649066][T10487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.659847][T10487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.670181][T10487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.680968][T10487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.691157][T10487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.702069][T10487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.712263][T10487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.723388][T10487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.747607][T10487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.802839][T10487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.812669][T10487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.821833][T10487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.830888][T10487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.074512][ T5120] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 927.085295][ T5120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.095023][ T5120] usb 2-1: Product: syz [ 927.099461][ T5120] usb 2-1: Manufacturer: syz [ 927.105866][ T5120] usb 2-1: SerialNumber: syz [ 927.155799][ T5120] usb 2-1: config 0 descriptor?? [ 927.451901][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.461014][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.538884][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.548188][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.640903][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.650218][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.834110][ T5120] msi2500 2-1:0.0: Registered as swradio16 [ 927.840429][ T5120] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 928.052243][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.065918][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.187781][ T5120] usb 2-1: USB disconnect, device number 13 [ 930.650032][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 930.650111][ T29] audit: type=1326 audit(1717565377.654:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512a7cee9 code=0x7ffc0000 [ 930.750647][ T29] audit: type=1326 audit(1717565377.694:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512a7cee9 code=0x7ffc0000 [ 930.775479][ T29] audit: type=1326 audit(1717565377.694:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff512a7cee9 code=0x7ffc0000 [ 930.799097][ T29] audit: type=1326 audit(1717565377.694:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512a7cee9 code=0x7ffc0000 [ 930.822890][ T29] audit: type=1326 audit(1717565377.694:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ff512a7cee9 code=0x7ffc0000 [ 930.849840][ T29] audit: type=1326 audit(1717565377.704:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512a7cee9 code=0x7ffc0000 [ 930.874825][ T29] audit: type=1326 audit(1717565377.704:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512a7cee9 code=0x7ffc0000 [ 930.898376][ T29] audit: type=1326 audit(1717565377.724:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff512a7cee9 code=0x7ffc0000 [ 930.922319][ T29] audit: type=1326 audit(1717565377.754:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512a7cee9 code=0x7ffc0000 [ 930.949112][ T29] audit: type=1326 audit(1717565377.754:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512a7cee9 code=0x7ffc0000 [ 931.640748][ T9608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.654425][ T9608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.781164][ T6702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.789703][ T6702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.642783][ T5115] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 934.962212][ T5115] usb 1-1: Using ep0 maxpacket: 8 [ 935.262670][ T5115] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 935.272542][ T5115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.283303][ T5115] usb 1-1: Product: syz [ 935.287782][ T5115] usb 1-1: Manufacturer: syz [ 935.293666][ T5115] usb 1-1: SerialNumber: syz [ 935.314286][ T5115] usb 1-1: config 0 descriptor?? [ 935.592758][ T5115] msi2500 1-1:0.0: Registered as swradio16 [ 935.598996][ T5115] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 935.608485][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.619255][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.652612][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.662015][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.675940][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.687634][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.912281][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.921478][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.934046][ T5120] usb 1-1: USB disconnect, device number 11 [ 937.317783][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 937.317876][ T29] audit: type=1326 audit(1717565384.314:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce67cee9 code=0x7fc00000 [ 937.365447][T10666] loop4: detected capacity change from 0 to 2048 [ 937.464024][T10666] Dev loop4: unable to read RDB block 8 [ 937.470316][T10666] loop4: unable to read partition table [ 937.480575][T10666] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 937.989815][ T29] audit: type=1326 audit(1717565384.954:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8ce67cee9 code=0x7fc00000 [ 943.842595][ T5120] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 944.222435][ T5120] usb 1-1: Using ep0 maxpacket: 8 [ 944.577374][ T5120] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 944.587114][ T5120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.595634][ T5120] usb 1-1: Product: syz [ 944.600202][ T5120] usb 1-1: Manufacturer: syz [ 944.605902][ T5120] usb 1-1: SerialNumber: syz [ 944.656063][ T5120] usb 1-1: config 0 descriptor?? [ 944.949623][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.966700][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.030269][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.039885][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.078093][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.087885][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.170118][ T5120] msi2500 1-1:0.0: Registered as swradio16 [ 945.176524][ T5120] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 945.354964][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.364375][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.392576][ T5125] usb 1-1: USB disconnect, device number 12 [ 950.872511][ T5125] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 951.173060][ T5125] usb 2-1: Using ep0 maxpacket: 8 [ 951.472395][ T5125] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 951.482136][ T5125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.490442][ T5125] usb 2-1: Product: syz [ 951.495093][ T5125] usb 2-1: Manufacturer: syz [ 951.499957][ T5125] usb 2-1: SerialNumber: syz [ 951.584485][ T5125] usb 2-1: config 0 descriptor?? [ 951.840376][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.849838][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.894310][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.903704][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.920560][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.936084][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.962459][ T5125] msi2500 2-1:0.0: Registered as swradio16 [ 951.968602][ T5125] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 952.219618][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.232714][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.271450][ T5120] usb 2-1: USB disconnect, device number 14 [ 952.441408][T10777] loop3: detected capacity change from 0 to 2048 [ 953.618484][T10792] loop2: detected capacity change from 0 to 2048 [ 953.989412][T10790] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 954.456871][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 958.753918][ T5120] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 959.021954][ T5120] usb 2-1: Using ep0 maxpacket: 8 [ 959.342335][ T5120] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 959.352268][ T5120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.360663][ T5120] usb 2-1: Product: syz [ 959.365298][ T5120] usb 2-1: Manufacturer: syz [ 959.370369][ T5120] usb 2-1: SerialNumber: syz [ 959.426946][ T5120] usb 2-1: config 0 descriptor?? [ 959.764455][T10822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.773960][T10822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.925089][T10822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.934864][T10822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.070413][T10822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.079754][T10822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.163888][ T5120] msi2500 2-1:0.0: Registered as swradio16 [ 960.170257][ T5120] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 960.265932][T10836] loop0: detected capacity change from 0 to 2048 [ 960.411853][T10822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.424642][T10822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.498763][ T5125] usb 2-1: USB disconnect, device number 15 [ 961.458353][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 963.514045][ T8834] Bluetooth: hci2: command 0x0406 tx timeout [ 963.623951][T10858] loop1: detected capacity change from 0 to 1024 [ 963.724698][T10858] EXT4-fs: Ignoring removed orlov option [ 963.730943][T10858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 963.865197][T10858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.543500][ T8833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.952735][T10863] syz-executor.3 (10863) used greatest stack depth: 5096 bytes left [ 966.950116][T10879] loop4: detected capacity change from 0 to 2048 [ 967.677483][ T5120] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 967.932511][ T5120] usb 2-1: Using ep0 maxpacket: 8 [ 968.243210][ T5120] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 968.253435][ T5120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.261902][ T5120] usb 2-1: Product: syz [ 968.266333][ T5120] usb 2-1: Manufacturer: syz [ 968.271180][ T5120] usb 2-1: SerialNumber: syz [ 968.315419][ T5120] usb 2-1: config 0 descriptor?? [ 968.648816][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.658064][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.770558][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.779792][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.873677][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.883833][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.902323][ T5120] msi2500 2-1:0.0: Registered as swradio16 [ 968.908453][ T5120] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 969.178008][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.187264][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.396969][ T5120] usb 2-1: USB disconnect, device number 16 [ 970.706633][T10913] loop4: detected capacity change from 0 to 1024 [ 970.804138][T10913] EXT4-fs: Ignoring removed orlov option [ 970.810247][T10913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 971.045158][T10913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.860069][ T9945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.906656][ T5120] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 972.174033][ T5120] usb 2-1: Using ep0 maxpacket: 32 [ 972.305881][ T5120] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.319350][ T5120] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.329933][ T5120] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 972.339425][ T5120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.415005][ T5120] hub 2-1:4.0: USB hub found [ 972.664259][ T5120] hub 2-1:4.0: 2 ports detected [ 974.254708][T10940] loop2: detected capacity change from 0 to 2048 [ 974.803337][ T5120] hub 2-1:4.0: hub_ext_port_status failed (err = -32) [ 975.104087][ T5125] usb 2-1: USB disconnect, device number 17 [ 976.124075][ T5115] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 976.416183][ T5115] usb 3-1: Using ep0 maxpacket: 8 [ 976.491932][T10957] loop3: detected capacity change from 0 to 1024 [ 976.665052][T10957] EXT4-fs: Ignoring removed orlov option [ 976.671076][T10957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 976.762769][ T5115] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 976.772403][ T5115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.781024][ T5115] usb 3-1: Product: syz [ 976.786385][ T5115] usb 3-1: Manufacturer: syz [ 976.791640][ T5115] usb 3-1: SerialNumber: syz [ 976.850653][ T5115] usb 3-1: config 0 descriptor?? [ 976.863472][T10957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.140492][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.149898][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.284941][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.294268][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.410462][ T5115] msi2500 3-1:0.0: Registered as swradio16 [ 977.417414][ T5115] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 977.497179][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.507149][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.769221][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.775813][ T6411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.778350][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.823021][ T5120] usb 3-1: USB disconnect, device number 7 [ 980.443597][T10996] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 980.625907][T10995] loop3: detected capacity change from 0 to 2048 [ 982.769839][T11010] loop3: detected capacity change from 0 to 1024 [ 982.881243][T11010] EXT4-fs: Ignoring removed orlov option [ 982.887467][T11010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 982.974312][T11010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.740949][ T6411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.852402][ T5120] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 984.101836][ T5120] usb 2-1: Using ep0 maxpacket: 8 [ 984.393829][ T5120] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 984.403505][ T5120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.412146][ T5120] usb 2-1: Product: syz [ 984.416568][ T5120] usb 2-1: Manufacturer: syz [ 984.421428][ T5120] usb 2-1: SerialNumber: syz [ 984.449166][ T5120] usb 2-1: config 0 descriptor?? [ 984.820316][T11032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.830561][T11032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.949697][ T5120] msi2500 2-1:0.0: Registered as swradio16 [ 984.952447][T11032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.956112][ T5120] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 984.964974][T11032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.139047][T11032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.148362][T11032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.590702][T11032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.602654][T11032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.804241][ T5115] usb 2-1: USB disconnect, device number 18 [ 987.907758][T11045] loop3: detected capacity change from 0 to 2048 [ 992.071313][ T5115] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 992.322003][ T5115] usb 3-1: Using ep0 maxpacket: 8 [ 992.672704][ T5115] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 992.689278][ T5115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.700184][ T5115] usb 3-1: Product: syz [ 992.704935][ T5115] usb 3-1: Manufacturer: syz [ 992.709776][ T5115] usb 3-1: SerialNumber: syz [ 992.737975][T11089] loop1: detected capacity change from 0 to 2048 [ 992.770930][ T5115] usb 3-1: config 0 descriptor?? [ 993.035703][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.045739][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.082789][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.095477][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.103360][ T5115] msi2500 3-1:0.0: Registered as swradio16 [ 993.103484][ T5115] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 993.151192][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.161452][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.387340][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.400225][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.419463][ T5124] usb 3-1: USB disconnect, device number 8 [ 994.566398][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1000.095094][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1000.204904][T11147] loop4: detected capacity change from 0 to 2048 [ 1006.351216][T11193] loop3: detected capacity change from 0 to 2048 [ 1007.024668][T11199] fuse: Unknown parameter 'f®KÁçy.'׫trB³N' [ 1007.060614][ T29] audit: type=1326 audit(1717565454.064:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31e647cee9 code=0x0 [ 1009.211833][T11223] loop1: detected capacity change from 0 to 8 [ 1012.893801][T11242] loop3: detected capacity change from 0 to 256 [ 1013.033305][T11242] FAT-fs (loop3): Unrecognized mount option "shortnamerodir" or missing value [ 1014.129528][T11251] loop1: detected capacity change from 0 to 2048 [ 1014.950685][ T29] audit: type=1326 audit(1717565461.934:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce67cee9 code=0x7ffc0000 [ 1014.974689][ T29] audit: type=1326 audit(1717565461.944:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce67cee9 code=0x7ffc0000 [ 1014.998229][ T29] audit: type=1326 audit(1717565461.944:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7ff8ce67cee9 code=0x7ffc0000 [ 1015.025391][ T29] audit: type=1326 audit(1717565461.944:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce67cee9 code=0x7ffc0000 [ 1015.052289][ T29] audit: type=1326 audit(1717565461.944:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ff8ce67cee9 code=0x7ffc0000 [ 1015.076328][ T29] audit: type=1326 audit(1717565461.954:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce67cee9 code=0x7ffc0000 [ 1015.099967][ T29] audit: type=1326 audit(1717565461.954:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7ff8ce67cee9 code=0x7ffc0000 [ 1015.126917][ T29] audit: type=1326 audit(1717565461.984:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce67cee9 code=0x7ffc0000 [ 1015.401120][T11259] fuse: Unknown parameter 'f®KÁçy.'׫trB³N' [ 1015.450645][ T29] audit: type=1326 audit(1717565462.444:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11257 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa53967cee9 code=0x0 [ 1018.113749][T11281] binder_alloc: 11278: binder_alloc_buf, no vma [ 1020.885247][T11298] loop1: detected capacity change from 0 to 2048 [ 1022.898682][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.284928][T11306] fuse: Unknown parameter 'f®KÁçy.'׫trB³N' [ 1023.422296][ T29] audit: type=1326 audit(1717565470.384:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11305 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa53967cee9 code=0x0 [ 1027.129749][T11321] loop2: detected capacity change from 0 to 32768 [ 1027.239205][T11321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11321) [ 1027.255562][T11331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1027.314972][T11331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1027.325219][T11331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1027.354661][T11331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1027.370485][T11331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1027.388888][T11331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1027.677691][T11321] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1027.688572][T11321] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 1027.707354][T11321] BTRFS info (device loop2): using free-space-tree [ 1028.767219][ T9603] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.201282][ T9603] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.507691][ T9603] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.523618][ T4427] Bluetooth: hci4: command tx timeout [ 1029.702777][ T9603] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.882546][T11321] BTRFS error (device loop2): open_ctree failed [ 1030.242832][T11328] chnl_net:caif_netlink_parms(): no params data found [ 1030.298106][ T9603] bridge_slave_1: left allmulticast mode [ 1030.304787][ T9603] bridge_slave_1: left promiscuous mode [ 1030.312034][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.345836][ T9603] bridge_slave_0: left allmulticast mode [ 1030.352816][ T9603] bridge_slave_0: left promiscuous mode [ 1030.370998][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.940288][ T9603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.023363][ T9603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.050213][ T9603] bond0 (unregistering): Released all slaves [ 1031.315612][T11358] loop0: detected capacity change from 0 to 2048 [ 1031.627837][ T4427] Bluetooth: hci4: command tx timeout [ 1032.122188][ T9603] hsr_slave_0: left promiscuous mode [ 1032.155836][ T9603] hsr_slave_1: left promiscuous mode [ 1032.198938][ T9603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.215744][ T9603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.247045][ T9603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.254976][ T9603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.293734][ T9603] veth1_macvtap: left promiscuous mode [ 1032.300121][ T9603] veth0_macvtap: left promiscuous mode [ 1032.315434][ T9603] veth1_vlan: left promiscuous mode [ 1032.321068][ T9603] veth0_vlan: left promiscuous mode [ 1033.256115][ T9603] team0 (unregistering): Port device team_slave_1 removed [ 1033.309474][ T9603] team0 (unregistering): Port device team_slave_0 removed [ 1033.512785][T11375] fuse: Unknown parameter 'f®KÁçy.'׫trB³N' [ 1033.680348][T11331] Bluetooth: hci4: command tx timeout [ 1033.695184][ T29] audit: type=1326 audit(1717565480.594:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8ce67cee9 code=0x0 [ 1034.198296][T11379] loop0: detected capacity change from 0 to 1024 [ 1034.241248][T11328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.242999][T11328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.243733][T11328] bridge_slave_0: entered allmulticast mode [ 1034.247079][T11328] bridge_slave_0: entered promiscuous mode [ 1034.286317][T11328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.286996][T11328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.287750][T11328] bridge_slave_1: entered allmulticast mode [ 1034.291290][T11328] bridge_slave_1: entered promiscuous mode [ 1034.464410][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.464495][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.464778][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.464847][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.465122][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.465188][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.465584][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.465646][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.465911][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.465972][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.466267][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.466327][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.466585][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.466647][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.466954][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.467017][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.467308][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.467374][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.467689][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.467773][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.468056][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.468125][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.468495][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.468565][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.468863][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.468929][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.469206][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.469273][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.469545][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.469608][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.502337][T11328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.503659][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.503745][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.504006][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.504168][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.504432][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.504595][T11379] hfsplus: request for non-existent node 16777216 in B*Tree [ 1034.539163][ T29] audit: type=1800 audit(1717565481.514:5016): pid=11379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 1034.570126][T11328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.825926][T11328] team0: Port device team_slave_0 added [ 1034.886695][T11328] team0: Port device team_slave_1 added [ 1035.039105][T11328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.039188][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.039351][T11328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.049105][T11328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.049192][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.049357][T11328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.192757][T11331] Bluetooth: hci5: command 0x0406 tx timeout [ 1035.400836][T11328] hsr_slave_0: entered promiscuous mode [ 1035.406690][T11328] hsr_slave_1: entered promiscuous mode [ 1035.410431][T11328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1035.410519][T11328] Cannot create hsr debugfs directory [ 1035.751927][ T4427] Bluetooth: hci4: command tx timeout [ 1037.098793][T11328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1037.153532][T11328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1037.218736][T11328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1037.298923][T11328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1038.530300][T11328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.733215][T11328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.820890][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.828735][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.893225][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.901003][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.869456][T11328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.047246][T11419] geneve0: entered allmulticast mode [ 1041.298976][T11416] loop0: detected capacity change from 0 to 2048 [ 1042.747365][T11429] loop1: detected capacity change from 0 to 1024 [ 1043.170484][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.178210][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.186216][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.193996][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.201946][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.209475][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.217536][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.225282][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.233360][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.240907][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.248939][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.256646][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.274236][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.285621][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.294398][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.302289][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.310058][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.317836][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.325756][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.333486][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.341230][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.348989][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.362950][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.383764][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.394164][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.402608][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.410721][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.418826][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.426875][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.434533][T11429] hfsplus: request for non-existent node 16777216 in B*Tree [ 1043.533562][ T29] audit: type=1800 audit(1717565490.524:5017): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 1043.558294][T11328] veth0_vlan: entered promiscuous mode [ 1043.664279][T11328] veth1_vlan: entered promiscuous mode [ 1043.938332][T11328] veth0_macvtap: entered promiscuous mode [ 1043.985311][T11328] veth1_macvtap: entered promiscuous mode [ 1044.079062][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.093433][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.106037][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.116943][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.127160][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.138037][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.148219][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.163103][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.177196][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.191769][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.208824][T11328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.462825][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.475012][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.485189][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.499463][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.512148][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.523150][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.533426][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.544225][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.554456][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1044.565347][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.581362][T11328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.626317][T11328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.637076][T11328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.647472][T11328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.656786][T11328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.374242][T11442] fuse: Unknown parameter 'f®KÁçy.'׫trB³N' [ 1045.468444][ T29] audit: type=1326 audit(1717565492.414:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31e647cee9 code=0x0 [ 1048.880358][T11472] loop0: detected capacity change from 0 to 2048 [ 1050.168894][T11480] loop3: detected capacity change from 0 to 2048 [ 1050.363517][T11482] loop1: detected capacity change from 0 to 1024 [ 1050.669765][T11480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.799783][ T6748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.808867][ T6748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.016936][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.025600][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.116993][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.124846][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.132973][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.140508][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.152565][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.160178][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.169825][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.177530][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.185384][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.193186][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.200934][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.208622][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.216482][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.224111][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.232013][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.239546][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.247509][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.259095][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.268219][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.275855][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.283765][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.291378][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.299318][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.307005][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.315117][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.322870][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.330622][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.338418][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.346489][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.360985][T11482] hfsplus: request for non-existent node 16777216 in B*Tree [ 1051.550744][ T29] audit: type=1800 audit(1717565498.504:5019): pid=11482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 1051.742047][T11331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1051.753819][T11331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1051.782797][T11331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1051.802464][T11331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1051.818881][T11331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1051.838279][T11331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1051.985336][ T6411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.360226][ T6702] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.537606][ T6702] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.634009][ T6702] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.753871][ T6702] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.058134][ T6702] bridge_slave_1: left allmulticast mode [ 1053.064207][ T6702] bridge_slave_1: left promiscuous mode [ 1053.071066][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.115391][ T6702] bridge_slave_0: left allmulticast mode [ 1053.121441][ T6702] bridge_slave_0: left promiscuous mode [ 1053.128607][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.882881][ T6702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.910485][ T6702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.922063][ T4427] Bluetooth: hci2: command tx timeout [ 1053.946524][ T6702] bond0 (unregistering): Released all slaves [ 1054.025026][T11487] chnl_net:caif_netlink_parms(): no params data found [ 1054.649190][ T6702] hsr_slave_0: left promiscuous mode [ 1054.660669][ T6702] hsr_slave_1: left promiscuous mode [ 1054.672241][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.680301][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.704344][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.712662][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.762645][ T6702] veth1_macvtap: left promiscuous mode [ 1054.768461][ T6702] veth0_macvtap: left promiscuous mode [ 1054.774663][ T6702] veth1_vlan: left promiscuous mode [ 1054.780329][ T6702] veth0_vlan: left promiscuous mode [ 1054.930890][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1055.735041][ T6702] team0 (unregistering): Port device team_slave_1 removed [ 1055.769095][ T6702] team0 (unregistering): Port device team_slave_0 removed [ 1056.013435][ T4427] Bluetooth: hci2: command tx timeout [ 1056.864047][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.872521][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.880416][T11487] bridge_slave_0: entered allmulticast mode [ 1056.901671][T11487] bridge_slave_0: entered promiscuous mode [ 1056.949780][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.958177][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.966253][T11487] bridge_slave_1: entered allmulticast mode [ 1056.975894][T11487] bridge_slave_1: entered promiscuous mode [ 1057.319668][T11487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.354609][T11487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.696665][T11487] team0: Port device team_slave_0 added [ 1057.738792][T11487] team0: Port device team_slave_1 added [ 1057.932907][T11487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.940317][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.967379][T11487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.995294][T11487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.002617][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.037458][T11487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.075060][ T4427] Bluetooth: hci2: command tx timeout [ 1058.398049][T11487] hsr_slave_0: entered promiscuous mode [ 1058.443309][T11487] hsr_slave_1: entered promiscuous mode [ 1058.497632][T11487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1058.505564][T11487] Cannot create hsr debugfs directory [ 1060.192490][ T4427] Bluetooth: hci2: command tx timeout [ 1060.249360][T11487] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1060.311453][T11487] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1060.345093][T11487] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1060.397739][T11487] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1061.224234][T11487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.395840][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1061.424439][T11487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.500844][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.508953][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.583971][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.591860][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.868607][T11487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.387693][T11487] veth0_vlan: entered promiscuous mode [ 1063.439734][T11487] veth1_vlan: entered promiscuous mode [ 1063.661405][T11487] veth0_macvtap: entered promiscuous mode [ 1063.715139][T11487] veth1_macvtap: entered promiscuous mode [ 1063.831241][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.843400][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.862437][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.875832][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.886011][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.896881][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.907114][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.917964][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.928369][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.939283][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.967148][T11487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.182887][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.193849][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.204534][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.215474][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.226355][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.238157][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.248435][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.268370][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.282779][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.293682][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.309828][T11487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.380954][T11487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.390295][T11487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.402582][T11487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.411856][T11487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.685347][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1067.732645][ T5126] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1068.002465][ T5126] usb 5-1: Using ep0 maxpacket: 8 [ 1068.313287][ T5126] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1068.322919][ T5126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.331249][ T5126] usb 5-1: Product: syz [ 1068.335797][ T5126] usb 5-1: Manufacturer: syz [ 1068.340678][ T5126] usb 5-1: SerialNumber: syz [ 1068.401734][ T5126] usb 5-1: config 0 descriptor?? [ 1068.684927][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.694799][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.858830][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.875427][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.895868][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.905401][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.064835][ T5126] msi2500 5-1:0.0: Registered as swradio16 [ 1069.082039][ T5126] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1069.152397][ T9608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.160666][ T9608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.241688][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.250789][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.283586][ T6224] usb 5-1: USB disconnect, device number 4 [ 1069.302548][ T6748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.310622][ T6748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.217301][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1074.932138][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1075.202201][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1075.607644][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1075.617146][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.628549][ T10] usb 5-1: Product: syz [ 1075.633909][ T10] usb 5-1: Manufacturer: syz [ 1075.638767][ T10] usb 5-1: SerialNumber: syz [ 1075.691052][ T10] usb 5-1: config 0 descriptor?? [ 1075.985461][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.997376][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.056403][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.065603][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.161769][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.170864][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.221091][ T10] msi2500 5-1:0.0: Registered as swradio16 [ 1076.227703][ T10] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1076.553237][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.565192][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.672874][ T43] usb 5-1: USB disconnect, device number 5 [ 1079.785403][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1081.886656][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1082.157885][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1082.309396][T11716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1082.484957][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1082.494788][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.503295][ T10] usb 1-1: Product: syz [ 1082.507730][ T10] usb 1-1: Manufacturer: syz [ 1082.512791][ T10] usb 1-1: SerialNumber: syz [ 1082.526844][ T10] usb 1-1: config 0 descriptor?? [ 1082.834782][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.844512][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.862266][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.871352][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.896793][ T10] msi2500 1-1:0.0: Registered as swradio16 [ 1082.903145][ T10] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1082.967013][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.976392][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.278977][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.288654][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.438647][ T43] usb 1-1: USB disconnect, device number 13 [ 1083.503649][T11733] loop2: detected capacity change from 0 to 512 [ 1083.624527][T11733] EXT4-fs: Ignoring removed orlov option [ 1083.630900][T11733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1083.663382][T11733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1083.724697][T11733] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1083.733334][T11733] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 1083.746336][T11733] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1083.753704][T11733] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1083.763565][T11733] EXT4-fs warning (device loop2): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1083.778642][T11733] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1083.794195][T11733] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 40: padding at end of block bitmap is not set [ 1083.827864][T11733] EXT4-fs (loop2): Remounting filesystem read-only [ 1083.835282][T11733] EXT4-fs (loop2): 1 truncate cleaned up [ 1083.841227][T11733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1084.334142][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.383243][T10487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.468867][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1084.616354][ T29] audit: type=1326 audit(1717565531.624:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31e647cee9 code=0x0 [ 1087.257592][T11775] loop0: detected capacity change from 0 to 512 [ 1087.337637][T11775] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1087.394221][T11775] block device autoloading is deprecated and will be removed. [ 1087.411434][T11775] syz-executor.0: attempt to access beyond end of device [ 1087.411434][T11775] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1087.427956][T11775] EXT4-fs (loop0): couldn't read superblock of external journal [ 1087.576430][T11775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1088.983420][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1089.276807][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1089.417693][T11791] loop4: detected capacity change from 0 to 512 [ 1089.480583][T11791] ext4: Unknown parameter 'nouser_xattr' [ 1089.608098][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1089.617799][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.626232][ T10] usb 4-1: Product: syz [ 1089.630746][ T10] usb 4-1: Manufacturer: syz [ 1089.635856][ T10] usb 4-1: SerialNumber: syz [ 1089.687519][ T10] usb 4-1: config 0 descriptor?? [ 1089.974600][T11785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.983945][T11785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.025344][T11785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.035298][T11785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.115492][T11785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.125068][T11785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.165078][ T10] msi2500 4-1:0.0: Registered as swradio16 [ 1090.172373][ T10] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1090.198927][ T29] audit: type=1326 audit(1717565537.154:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fb27cee9 code=0x7ffc0000 [ 1090.223076][ T29] audit: type=1326 audit(1717565537.164:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fb27cee9 code=0x7ffc0000 [ 1090.246587][ T29] audit: type=1326 audit(1717565537.164:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43fb27cee9 code=0x7ffc0000 [ 1090.276168][ T29] audit: type=1326 audit(1717565537.164:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fb27cee9 code=0x7ffc0000 [ 1090.301404][ T29] audit: type=1326 audit(1717565537.164:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43fb27cee9 code=0x7ffc0000 [ 1090.422244][ T29] audit: type=1326 audit(1717565537.384:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fb27cee9 code=0x7ffc0000 [ 1090.423841][T11785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.446197][ T29] audit: type=1326 audit(1717565537.414:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fb27cee9 code=0x7ffc0000 [ 1090.455158][T11785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.495720][ T29] audit: type=1326 audit(1717565537.424:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f43fb27cee9 code=0x7ffc0000 [ 1090.519023][ T29] audit: type=1326 audit(1717565537.424:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fb27cee9 code=0x7ffc0000 [ 1090.542412][ T29] audit: type=1326 audit(1717565537.424:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43fb27cee9 code=0x7ffc0000 [ 1090.647253][ T43] usb 4-1: USB disconnect, device number 7 [ 1092.335702][T11822] veth1_macvtap: left promiscuous mode [ 1092.341876][T11822] macsec0: entered allmulticast mode [ 1095.363763][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1095.661859][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1095.851370][T11851] loop4: detected capacity change from 0 to 256 [ 1095.936217][T11851] exfat: Deprecated parameter 'utf8' [ 1095.942355][T11851] exfat: Deprecated parameter 'namecase' [ 1095.948716][T11851] exfat: Deprecated parameter 'utf8' [ 1095.968540][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1095.978482][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.986441][T11851] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1095.987197][ T43] usb 3-1: Product: syz [ 1096.011161][ T43] usb 3-1: Manufacturer: syz [ 1096.018927][ T43] usb 3-1: SerialNumber: syz [ 1096.068870][ T43] usb 3-1: config 0 descriptor?? [ 1096.363116][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.372669][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.470390][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.481259][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.514649][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.522508][ T43] msi2500 3-1:0.0: Registered as swradio16 [ 1096.524990][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.529038][ T43] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1096.791393][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.800786][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.840737][ T10] usb 3-1: USB disconnect, device number 9 [ 1098.736417][T11883] loop1: detected capacity change from 0 to 512 [ 1098.903324][T11883] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1099.025659][T11883] EXT4-fs (loop1): 1 orphan inode deleted [ 1099.035230][T11883] EXT4-fs (loop1): 1 truncate cleaned up [ 1099.041172][T11883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1099.123015][T11883] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1099.144011][T11883] EXT4-fs (loop1): Remounting filesystem read-only [ 1099.152271][T11883] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 1099.358876][ T8833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.072239][T11897] veth1_macvtap: entered promiscuous mode [ 1100.078252][T11897] veth1_macvtap: entered allmulticast mode [ 1100.084681][T11897] macsec0: left allmulticast mode [ 1100.089985][T11897] veth1_macvtap: left allmulticast mode [ 1101.663492][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1101.911979][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1102.140145][T11916] pim6reg1: entered promiscuous mode [ 1102.150305][T11916] pim6reg1: entered allmulticast mode [ 1102.217525][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1102.227205][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.237534][ T10] usb 5-1: Product: syz [ 1102.242686][ T10] usb 5-1: Manufacturer: syz [ 1102.250243][ T10] usb 5-1: SerialNumber: syz [ 1102.314931][ T10] usb 5-1: config 0 descriptor?? [ 1102.603635][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.613028][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.676254][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.685602][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.698745][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.708711][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.851729][ T10] msi2500 5-1:0.0: Registered as swradio16 [ 1102.857929][ T10] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1102.971317][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.980888][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.008536][ T10] usb 5-1: USB disconnect, device number 6 [ 1103.849123][T11931] loop0: detected capacity change from 0 to 512 [ 1103.903529][T11931] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 1107.373742][T11958] pim6reg1: entered promiscuous mode [ 1107.379334][T11958] pim6reg1: entered allmulticast mode [ 1108.314232][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1108.572245][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1108.893485][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1108.906434][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.915669][ T10] usb 4-1: Product: syz [ 1108.920102][ T10] usb 4-1: Manufacturer: syz [ 1108.925190][ T10] usb 4-1: SerialNumber: syz [ 1108.949084][ T10] usb 4-1: config 0 descriptor?? [ 1109.216013][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.225591][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.256054][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.265203][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.287401][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.298118][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.332941][ T10] msi2500 4-1:0.0: Registered as swradio16 [ 1109.339245][ T10] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1109.535354][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.544768][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.564681][ T10] usb 4-1: USB disconnect, device number 8 [ 1111.329720][T11989] ipvlan2: entered promiscuous mode [ 1111.335394][T11989] ipvlan2: entered allmulticast mode [ 1111.340909][T11989] bridge0: entered allmulticast mode [ 1112.931995][ T5124] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1113.415438][ T5124] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 1113.427373][ T5124] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1113.437809][ T5124] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1113.447254][ T5124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.503708][T12004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1114.144875][ T5115] usb 3-1: USB disconnect, device number 10 [ 1114.902391][ T5124] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1115.187245][ T5124] usb 4-1: Using ep0 maxpacket: 8 [ 1115.522772][ T5124] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1115.532315][ T5124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.540774][ T5124] usb 4-1: Product: syz [ 1115.545573][ T5124] usb 4-1: Manufacturer: syz [ 1115.550454][ T5124] usb 4-1: SerialNumber: syz [ 1115.593087][ T5124] usb 4-1: config 0 descriptor?? [ 1115.888028][T12017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.897323][T12017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.954682][T12017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.964434][T12017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.008317][ T5124] msi2500 4-1:0.0: Registered as swradio16 [ 1116.016684][ T5124] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1116.123687][T12017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.133097][T12017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.384395][T12017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.393978][T12017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.493082][ T5124] usb 4-1: USB disconnect, device number 9 [ 1123.092010][ T6224] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1123.493609][ T6224] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 1123.505319][ T6224] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1123.516001][ T6224] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.525543][ T6224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.574365][T12057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1124.211280][ T5115] usb 4-1: USB disconnect, device number 10 [ 1124.483194][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1124.743655][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1125.106108][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1125.115565][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.124114][ T43] usb 3-1: Product: syz [ 1125.128562][ T43] usb 3-1: Manufacturer: syz [ 1125.133557][ T43] usb 3-1: SerialNumber: syz [ 1125.161727][ T43] usb 3-1: config 0 descriptor?? [ 1125.376332][ T43] msi2500 3-1:0.0: Registered as swradio16 [ 1125.382882][ T43] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1125.442080][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.451283][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.466686][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.476227][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.488050][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.506293][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.729347][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.738793][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.820616][ T43] usb 3-1: USB disconnect, device number 11 [ 1127.403825][T12100] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1127.524827][T12100] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1128.489750][T12109] loop4: detected capacity change from 0 to 8 [ 1129.391750][ T6224] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1130.412438][ T6224] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 1130.424222][ T6224] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1130.434554][ T6224] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1130.444033][ T6224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.493946][T12113] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1131.189370][ T5115] usb 4-1: USB disconnect, device number 11 [ 1132.057106][ T5115] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1132.301932][ T5115] usb 1-1: Using ep0 maxpacket: 8 [ 1132.587895][ T5115] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1132.597506][ T5115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.605975][ T5115] usb 1-1: Product: syz [ 1132.610396][ T5115] usb 1-1: Manufacturer: syz [ 1132.615855][ T5115] usb 1-1: SerialNumber: syz [ 1132.630594][ T5115] usb 1-1: config 0 descriptor?? [ 1133.005494][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.014791][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.111260][ T5115] msi2500 1-1:0.0: Registered as swradio16 [ 1133.123239][ T5115] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1133.125134][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.143370][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.199221][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.208648][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.431326][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.440742][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.454066][ T6224] usb 1-1: USB disconnect, device number 14 [ 1134.330002][T12155] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1139.222875][ T5115] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1139.471774][ T5115] usb 3-1: Using ep0 maxpacket: 8 [ 1139.559743][T12193] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1139.753856][ T5115] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1139.763923][ T5115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.772726][ T5115] usb 3-1: Product: syz [ 1139.777041][ T5115] usb 3-1: Manufacturer: syz [ 1139.782073][ T5115] usb 3-1: SerialNumber: syz [ 1139.798416][ T5115] usb 3-1: config 0 descriptor?? [ 1140.111267][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.121080][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.243341][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.252584][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.283985][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.293318][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.523927][ T5115] msi2500 3-1:0.0: Registered as swradio16 [ 1140.530031][ T5115] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1140.590113][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.599493][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.655185][ T5115] usb 3-1: USB disconnect, device number 12 [ 1143.324639][T12224] loop3: detected capacity change from 0 to 16 [ 1143.397956][T12224] erofs: (device loop3): mounted with root inode @ nid 36. [ 1143.416993][T12224] syz-executor.3: attempt to access beyond end of device [ 1143.416993][T12224] loop3: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1143.452966][T12224] syz-executor.3: attempt to access beyond end of device [ 1143.452966][T12224] loop3: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1143.478290][T12224] syz-executor.3: attempt to access beyond end of device [ 1143.478290][T12224] loop3: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1143.502350][T12224] syz-executor.3: attempt to access beyond end of device [ 1143.502350][T12224] loop3: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1143.531184][T12224] syz-executor.3: attempt to access beyond end of device [ 1143.531184][T12224] loop3: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1143.548137][T12224] syz-executor.3: attempt to access beyond end of device [ 1143.548137][T12224] loop3: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1143.879942][T12227] loop1: detected capacity change from 0 to 128 [ 1144.979555][T12232] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1146.805506][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 1149.011772][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1149.232803][T12246] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1149.329198][T12247] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1151.643504][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1152.870497][T12252] loop1: detected capacity change from 0 to 512 [ 1153.644308][ T4427] Bluetooth: hci4: command 0x0406 tx timeout [ 1154.013014][ T43] usb 3-1: device descriptor read/all, error -71 [ 1155.093347][T12262] loop4: detected capacity change from 0 to 16 [ 1155.168662][T12262] erofs: (device loop4): mounted with root inode @ nid 36. [ 1155.220490][T12262] syz-executor.4: attempt to access beyond end of device [ 1155.220490][T12262] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1155.246463][T12262] syz-executor.4: attempt to access beyond end of device [ 1155.246463][T12262] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1155.310702][T12262] syz-executor.4: attempt to access beyond end of device [ 1155.310702][T12262] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1155.337254][T12262] syz-executor.4: attempt to access beyond end of device [ 1155.337254][T12262] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1155.446888][T12269] syz-executor.4: attempt to access beyond end of device [ 1155.446888][T12269] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1155.476726][T12262] syz-executor.4: attempt to access beyond end of device [ 1155.476726][T12262] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1155.900633][T12273] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1156.560110][T12277] loop0: detected capacity change from 0 to 512 [ 1156.726044][T12277] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 15 [ 1156.813250][T12277] ext4_test_bit(bit=14, block=5) = 0 [ 1156.818973][T12277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.991802][T12277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.273986][T12292] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1158.386740][T12293] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1159.438113][T12295] fuse: Bad value for 'fd' [ 1161.226066][ T5115] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1161.511718][ T5115] usb 3-1: Using ep0 maxpacket: 8 [ 1161.816930][ T5115] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1161.826568][ T5115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.835057][ T5115] usb 3-1: Product: syz [ 1161.839494][ T5115] usb 3-1: Manufacturer: syz [ 1161.852589][ T5115] usb 3-1: SerialNumber: syz [ 1161.973964][ T5115] usb 3-1: config 0 descriptor?? [ 1161.982983][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1162.329226][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.338649][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.340180][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1162.424837][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.434879][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.582662][ T5115] msi2500 3-1:0.0: Registered as swradio16 [ 1162.588791][ T5115] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1162.743177][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.752529][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.769860][ T6224] usb 3-1: USB disconnect, device number 15 [ 1163.612260][T12308] loop3: detected capacity change from 0 to 4096 [ 1163.720214][T12308] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1164.044408][T12314] loop1: detected capacity change from 0 to 16 [ 1164.268979][T12314] erofs: (device loop1): mounted with root inode @ nid 36. [ 1164.423433][T12316] syz-executor.1: attempt to access beyond end of device [ 1164.423433][T12316] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1164.580812][T12314] syz-executor.1: attempt to access beyond end of device [ 1164.580812][T12314] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1164.694000][T12314] syz-executor.1: attempt to access beyond end of device [ 1164.694000][T12314] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1165.044376][T12314] syz-executor.1: attempt to access beyond end of device [ 1165.044376][T12314] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1165.061398][T12314] syz-executor.1: attempt to access beyond end of device [ 1165.061398][T12314] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1166.959348][T12314] syz-executor.1: attempt to access beyond end of device [ 1166.959348][T12314] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1168.701272][T12329] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1168.827487][T12330] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1171.419153][T12337] fuse: Bad value for 'fd' [ 1172.448935][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1172.539076][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1173.281728][ T5115] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1173.592383][ T5115] usb 3-1: Using ep0 maxpacket: 8 [ 1173.594087][T12354] loop1: detected capacity change from 0 to 16 [ 1173.765160][T12354] erofs: (device loop1): mounted with root inode @ nid 36. [ 1173.895290][T12354] syz-executor.1: attempt to access beyond end of device [ 1173.895290][T12354] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1173.942948][ T5115] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1173.952612][ T5115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.961042][ T5115] usb 3-1: Product: syz [ 1173.965713][ T5115] usb 3-1: Manufacturer: syz [ 1173.970604][ T5115] usb 3-1: SerialNumber: syz [ 1174.009550][T12354] syz-executor.1: attempt to access beyond end of device [ 1174.009550][T12354] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1174.020637][ T5115] usb 3-1: config 0 descriptor?? [ 1174.096818][T12356] syz-executor.1: attempt to access beyond end of device [ 1174.096818][T12356] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1174.192092][T12353] loop3: detected capacity change from 0 to 4096 [ 1174.207662][T12358] syz-executor.1: attempt to access beyond end of device [ 1174.207662][T12358] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1174.257868][T12354] syz-executor.1: attempt to access beyond end of device [ 1174.257868][T12354] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1174.275228][T12353] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1174.327307][T12354] syz-executor.1: attempt to access beyond end of device [ 1174.327307][T12354] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1174.376852][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.386174][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.490424][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.499516][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.701287][ T5115] msi2500 3-1:0.0: Registered as swradio16 [ 1174.707820][ T5115] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1174.844847][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.856859][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.983957][ T5124] usb 3-1: USB disconnect, device number 16 [ 1178.632511][T11331] Bluetooth: hci2: command 0x0406 tx timeout [ 1178.854263][T12371] loop4: detected capacity change from 0 to 8 [ 1178.989556][T12371] squashfs: Unknown parameter '18446744073709551615ÿÿÿ01777777777777777777777ÿÿÿÿ' [ 1180.605091][T12374] loop4: detected capacity change from 0 to 256 [ 1184.240222][T12384] loop2: detected capacity change from 0 to 16 [ 1184.408499][T12384] erofs: (device loop2): mounted with root inode @ nid 36. [ 1185.275541][T12386] fuse: Bad value for 'fd' [ 1186.606490][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1186.777524][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1187.527906][T12398] loop4: detected capacity change from 0 to 16 [ 1187.684687][T12398] erofs: (device loop4): mounted with root inode @ nid 36. [ 1187.769422][T12398] syz-executor.4: attempt to access beyond end of device [ 1187.769422][T12398] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1187.940880][T12398] syz-executor.4: attempt to access beyond end of device [ 1187.940880][T12398] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1187.967620][T12398] syz-executor.4: attempt to access beyond end of device [ 1187.967620][T12398] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1188.049509][T12399] syz-executor.4: attempt to access beyond end of device [ 1188.049509][T12399] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1188.100802][T12398] syz-executor.4: attempt to access beyond end of device [ 1188.100802][T12398] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1188.126651][T12398] syz-executor.4: attempt to access beyond end of device [ 1188.126651][T12398] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 1188.732709][ T6224] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1189.001794][ T6224] usb 2-1: Using ep0 maxpacket: 8 [ 1189.293537][ T6224] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1189.303373][ T6224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.311943][ T6224] usb 2-1: Product: syz [ 1189.316436][ T6224] usb 2-1: Manufacturer: syz [ 1189.321739][ T6224] usb 2-1: SerialNumber: syz [ 1189.374445][ T6224] usb 2-1: config 0 descriptor?? [ 1189.635343][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.644871][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.692511][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.709720][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.839580][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.848967][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.877613][ T6224] msi2500 2-1:0.0: Registered as swradio16 [ 1189.884072][ T6224] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1190.112727][T12409] loop4: detected capacity change from 0 to 4096 [ 1190.152773][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.162050][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.185737][ T6224] usb 2-1: USB disconnect, device number 19 [ 1190.242735][T12409] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1194.924637][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1195.079370][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1198.432537][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1198.681922][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1198.992427][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1199.002295][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.004574][T12449] loop2: detected capacity change from 0 to 4096 [ 1199.010475][ T10] usb 2-1: Product: syz [ 1199.025063][ T10] usb 2-1: Manufacturer: syz [ 1199.029923][ T10] usb 2-1: SerialNumber: syz [ 1199.088143][ T10] usb 2-1: config 0 descriptor?? [ 1199.111349][T12449] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1199.379195][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.388438][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.478758][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.488496][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.545713][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.555085][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.704208][ T10] msi2500 2-1:0.0: Registered as swradio16 [ 1199.710523][ T10] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1199.882980][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.892372][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.960059][ T6224] usb 2-1: USB disconnect, device number 20 [ 1201.075961][T12459] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1203.362008][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1203.500429][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1204.695923][ T9608] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.836252][ T9608] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.031009][ T9608] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.221682][ T9608] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.327258][ T4427] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1205.352515][ T4427] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1205.409452][ T4427] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1205.443375][ T4427] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1205.468059][ T4427] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1205.484074][ T4427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1205.667476][ T9608] bridge_slave_1: left allmulticast mode [ 1205.687170][ T9608] bridge_slave_1: left promiscuous mode [ 1205.694038][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.730477][ T9608] bridge_slave_0: left allmulticast mode [ 1205.736745][ T9608] bridge_slave_0: left promiscuous mode [ 1205.743425][ T9608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.330265][ T9608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.373926][ T9608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.415204][ T9608] bond0 (unregistering): Released all slaves [ 1207.157665][ T9608] hsr_slave_0: left promiscuous mode [ 1207.173439][ T9608] hsr_slave_1: left promiscuous mode [ 1207.186202][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.219113][ T9608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.225822][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.245993][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.253929][ T9608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.284995][ T9608] veth1_macvtap: left promiscuous mode [ 1207.290964][ T9608] veth0_macvtap: left promiscuous mode [ 1207.297744][ T9608] veth1_vlan: left promiscuous mode [ 1207.300336][ T5115] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1207.303607][ T9608] veth0_vlan: left promiscuous mode [ 1207.592287][ T5115] usb 5-1: Using ep0 maxpacket: 8 [ 1207.642407][T11331] Bluetooth: hci2: command tx timeout [ 1207.983426][ T5115] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1207.993229][ T5115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.001625][ T5115] usb 5-1: Product: syz [ 1208.006041][ T5115] usb 5-1: Manufacturer: syz [ 1208.010884][ T5115] usb 5-1: SerialNumber: syz [ 1208.109122][ T5115] usb 5-1: config 0 descriptor?? [ 1208.473703][ T9608] team0 (unregistering): Port device team_slave_1 removed [ 1208.524885][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.534211][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.589359][ T9608] team0 (unregistering): Port device team_slave_0 removed [ 1209.005605][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.014811][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.083820][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1209.107865][T12487] geneve2: entered promiscuous mode [ 1209.113490][T12487] geneve2: entered allmulticast mode [ 1209.286712][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.296396][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.593886][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.603128][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.682048][T11331] Bluetooth: hci2: command tx timeout [ 1209.940205][ T5115] msi2500 5-1:0.0: Registered as swradio16 [ 1209.947418][ T5115] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1210.172514][ T5115] usb 5-1: USB disconnect, device number 7 [ 1210.707459][T12477] chnl_net:caif_netlink_parms(): no params data found [ 1211.751681][T11331] Bluetooth: hci2: command tx timeout [ 1211.856091][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1212.346217][T12477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.356985][T12477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.365049][T12477] bridge_slave_0: entered allmulticast mode [ 1212.374864][T12477] bridge_slave_0: entered promiscuous mode [ 1212.465090][T12477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.473428][T12477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.481262][T12477] bridge_slave_1: entered allmulticast mode [ 1212.490781][T12477] bridge_slave_1: entered promiscuous mode [ 1212.504416][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1212.673792][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1212.686923][T12506] loop1: detected capacity change from 0 to 4096 [ 1212.811393][T12477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.846234][T12477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.856842][T12506] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1213.045453][T12477] team0: Port device team_slave_0 added [ 1213.085644][T12477] team0: Port device team_slave_1 added [ 1213.292413][T12477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.299615][T12477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.326191][T12477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.380949][T12477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.388578][T12477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.415324][T12477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.855316][T12477] hsr_slave_0: entered promiscuous mode [ 1213.867888][T11331] Bluetooth: hci2: command tx timeout [ 1213.946887][T12477] hsr_slave_1: entered promiscuous mode [ 1214.028108][T12477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.036218][T12477] Cannot create hsr debugfs directory [ 1217.198721][T12477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1217.249749][T12477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1217.283389][T12477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1217.357949][T12477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1218.135698][T12477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.313517][T12477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.357675][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.365733][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.428229][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.436150][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.698882][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1220.412315][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1220.429270][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1220.753208][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1220.762788][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.771063][ T10] usb 4-1: Product: syz [ 1220.775672][ T10] usb 4-1: Manufacturer: syz [ 1220.780501][ T10] usb 4-1: SerialNumber: syz [ 1220.884722][ T10] usb 4-1: config 0 descriptor?? [ 1221.216301][T12537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.226513][T12537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.422940][T12537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.433076][T12537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.604910][T12537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.615521][T12537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.000686][ T10] msi2500 4-1:0.0: Registered as swradio16 [ 1222.007970][ T10] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1222.034110][T12537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.043363][T12537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.071823][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1222.213182][ T10] usb 4-1: USB disconnect, device number 12 [ 1222.378696][T12477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.387341][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1222.796871][T12477] veth0_vlan: entered promiscuous mode [ 1222.868512][T12477] veth1_vlan: entered promiscuous mode [ 1223.113267][T12477] veth0_macvtap: entered promiscuous mode [ 1223.146661][T12477] veth1_macvtap: entered promiscuous mode [ 1223.256574][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.267716][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.280323][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.293845][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.304925][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.315725][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.325957][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.336770][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.346913][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.357892][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.373768][T12477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.419916][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.432083][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.442301][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.453303][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.463463][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.474244][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.484429][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.497427][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.508153][T12477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.522151][T12477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.537964][T12477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.593149][T12477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.602396][T12477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.611587][T12477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.620650][T12477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.807257][T12583] loop1: detected capacity change from 0 to 512 [ 1226.028760][T12583] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 1226.082562][T12583] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 1226.133897][T12583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1226.604853][ T8833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.707714][T12594] loop2: detected capacity change from 0 to 128 [ 1226.830023][T12594] syz-executor.2: attempt to access beyond end of device [ 1226.830023][T12594] loop2: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 1226.893889][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1226.893971][ T29] audit: type=1107 audit(1717565673.894:5046): pid=12593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1228.494236][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1228.875375][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1229.041926][ T6224] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1229.332078][ T6224] usb 4-1: Using ep0 maxpacket: 8 [ 1229.739690][ T6224] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1229.749205][ T6224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.757885][ T6224] usb 4-1: Product: syz [ 1229.762357][ T6224] usb 4-1: Manufacturer: syz [ 1229.767190][ T6224] usb 4-1: SerialNumber: syz [ 1229.792885][ T6224] usb 4-1: config 0 descriptor?? [ 1229.864356][ T9608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.872752][ T9608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.066316][T12608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.075638][T12608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.213273][T12608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.222463][T12608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.327254][T12608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.336581][T12608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.416331][ T9558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.425373][ T9558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.777001][T12608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.786318][T12608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.808289][ T6224] msi2500 4-1:0.0: Registered as swradio16 [ 1230.815982][ T6224] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1230.838377][ T6224] usb 4-1: USB disconnect, device number 13 [ 1233.399834][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1233.505768][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1235.502160][ T6224] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1235.771918][ T6224] usb 3-1: Using ep0 maxpacket: 8 [ 1236.108801][ T6224] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1236.118438][ T6224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.126922][ T6224] usb 3-1: Product: syz [ 1236.131363][ T6224] usb 3-1: Manufacturer: syz [ 1236.136513][ T6224] usb 3-1: SerialNumber: syz [ 1236.162965][ T6224] usb 3-1: config 0 descriptor?? [ 1236.444458][T12654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.454052][T12654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.461096][ T6224] msi2500 3-1:0.0: Registered as swradio16 [ 1236.468330][ T6224] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1236.618845][T12654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.629108][T12654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.670519][T12654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.679789][T12654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.936717][T12654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.946108][T12654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.965278][ T5115] usb 3-1: USB disconnect, device number 17 [ 1238.255665][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1238.363502][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1240.442671][ T6224] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1241.077232][ T29] audit: type=1800 audit(1717565687.994:5047): pid=12704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 1241.316540][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1241.727376][ T5115] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1242.137903][ T5115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.149536][ T5115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.160064][ T5115] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1242.169678][ T5115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.255850][ T5115] usb 4-1: config 0 descriptor?? [ 1242.795859][ T5115] lg-g15 0003:046D:C222.0002: item fetching failed at offset 10/11 [ 1242.914762][ T5115] lg-g15 0003:046D:C222.0002: probe with driver lg-g15 failed with error -22 [ 1243.094855][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1243.102613][ T29] audit: type=1800 audit(1717565690.094:5048): pid=12707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1961 res=0 errno=0 [ 1243.163713][T12707] loop3: detected capacity change from 0 to 16 [ 1243.187097][T12707] erofs: (device loop3): mounted with root inode @ nid 36. [ 1243.202227][ T6224] usb 2-1: device descriptor read/all, error -71 [ 1243.334484][ T10] usb 4-1: USB disconnect, device number 14 [ 1244.047539][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1244.390991][ T29] audit: type=1800 audit(1717565691.334:5049): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1943 res=0 errno=0 [ 1244.514626][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1244.524253][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.533197][ T43] usb 5-1: Product: syz [ 1244.537613][ T43] usb 5-1: Manufacturer: syz [ 1244.542594][ T43] usb 5-1: SerialNumber: syz [ 1244.640057][ T43] usb 5-1: config 0 descriptor?? [ 1244.678423][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1245.034240][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.043852][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.173884][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1245.214228][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.223618][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.448789][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.459034][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.781055][ T43] msi2500 5-1:0.0: Registered as swradio16 [ 1245.787507][ T43] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1245.842794][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.852131][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.978795][ T5124] usb 5-1: USB disconnect, device number 8 [ 1249.424725][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1249.472022][T11331] Bluetooth: hci4: unexpected event for opcode 0x040d [ 1249.563939][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1249.757995][T12749] loop1: detected capacity change from 0 to 4096 [ 1249.858098][T12749] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1249.937523][T12749] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1250.162067][ T6224] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1250.462038][ T6224] usb 3-1: Using ep0 maxpacket: 8 [ 1250.792648][ T6224] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1250.803528][ T6224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.811976][ T6224] usb 3-1: Product: syz [ 1250.816409][ T6224] usb 3-1: Manufacturer: syz [ 1250.821269][ T6224] usb 3-1: SerialNumber: syz [ 1250.913460][ T6224] usb 3-1: config 0 descriptor?? [ 1251.204845][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.215547][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.297808][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.305527][ T6224] msi2500 3-1:0.0: Registered as swradio16 [ 1251.307133][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.312425][ T6224] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1251.357036][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.373308][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.599424][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.609260][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.651043][ T6224] usb 3-1: USB disconnect, device number 18 [ 1253.266423][ T29] audit: type=1800 audit(1717565700.254:5050): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1253.325707][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1253.518388][T11331] Bluetooth: hci4: unexpected event for opcode 0x040d [ 1255.882228][ T6223] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1256.132074][ T6223] usb 2-1: Using ep0 maxpacket: 8 [ 1256.434371][ T6223] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1256.444507][ T6223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.453008][ T6223] usb 2-1: Product: syz [ 1256.457459][ T6223] usb 2-1: Manufacturer: syz [ 1256.466546][ T6223] usb 2-1: SerialNumber: syz [ 1256.490841][ T6223] usb 2-1: config 0 descriptor?? [ 1256.807843][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.817306][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.859704][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.876887][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.902905][ T6223] msi2500 2-1:0.0: Registered as swradio16 [ 1256.909005][ T6223] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1256.909218][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1256.952644][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.962007][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.218871][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.228343][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.241099][ T6223] usb 2-1: USB disconnect, device number 23 [ 1257.328397][T11331] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1257.798729][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1260.697448][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1261.295749][T11331] Bluetooth: hci0: unexpected event for opcode 0x040d [ 1262.311803][ T6223] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1262.527180][T12867] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1262.555794][ T6223] usb 4-1: Using ep0 maxpacket: 8 [ 1262.874514][ T6223] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1262.884775][ T6223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.893227][ T6223] usb 4-1: Product: syz [ 1262.897667][ T6223] usb 4-1: Manufacturer: syz [ 1262.902764][ T6223] usb 4-1: SerialNumber: syz [ 1263.043766][ T6223] usb 4-1: config 0 descriptor?? [ 1263.326087][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.335309][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.430290][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.441883][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.491536][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.500915][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.530678][ T6223] msi2500 4-1:0.0: Registered as swradio16 [ 1263.537284][ T6223] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1263.868707][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.877972][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.909032][T12875] loop1: detected capacity change from 0 to 512 [ 1263.919116][ T5115] usb 4-1: USB disconnect, device number 15 [ 1264.010427][T12875] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 1264.030703][T12875] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 1264.060718][T12875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1264.095865][T12875] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #18: comm syz-executor.1: Siphash requires key [ 1264.108116][T12875] ===================================================== [ 1264.115476][T12875] BUG: KMSAN: uninit-value in ext4_inlinedir_to_tree+0xde2/0x15a0 [ 1264.123683][T12875] ext4_inlinedir_to_tree+0xde2/0x15a0 [ 1264.129421][T12875] ext4_htree_fill_tree+0x1941/0x1cd0 [ 1264.135182][T12875] ext4_readdir+0x4bbf/0x5b00 [ 1264.148274][T12875] iterate_dir+0x688/0x870 [ 1264.155561][T12875] __se_sys_getdents64+0x169/0x530 [ 1264.160951][T12875] __x64_sys_getdents64+0x96/0xe0 [ 1264.166430][T12875] x64_sys_call+0x343d/0x3b50 [ 1264.172037][T12875] do_syscall_64+0xcf/0x1e0 [ 1264.177205][T12875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.183496][T12875] [ 1264.185944][T12875] Local variable hinfo created at: [ 1264.191183][T12875] ext4_htree_fill_tree+0x52/0x1cd0 [ 1264.196739][T12875] ext4_readdir+0x4bbf/0x5b00 [ 1264.201848][T12875] [ 1264.204306][T12875] CPU: 1 PID: 12875 Comm: syz-executor.1 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 1264.214797][T12875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1264.226741][T12875] ===================================================== [ 1264.234259][T12875] Disabling lock debugging due to kernel taint [ 1264.249882][T12875] Kernel panic - not syncing: kmsan.panic set ... 2024/06/05 05:35:11 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1264.256457][T12875] CPU: 1 PID: 12875 Comm: syz-executor.1 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 1264.268228][T12875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1264.278478][T12875] Call Trace: [ 1264.281895][T12875] [ 1264.284955][T12875] dump_stack_lvl+0x216/0x2d0 [ 1264.289891][T12875] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1264.295965][T12875] dump_stack+0x1e/0x30 [ 1264.300364][T12875] panic+0x4e2/0xcd0 [ 1264.304513][T12875] ? kmsan_get_metadata+0xf1/0x1d0 [ 1264.309872][T12875] kmsan_report+0x2d5/0x2e0 [ 1264.314631][T12875] ? __msan_warning+0x95/0x120 [ 1264.319594][T12875] ? ext4_inlinedir_to_tree+0xde2/0x15a0 [ 1264.325490][T12875] ? ext4_htree_fill_tree+0x1941/0x1cd0 [ 1264.331277][T12875] ? ext4_readdir+0x4bbf/0x5b00 [ 1264.336349][T12875] ? iterate_dir+0x688/0x870 [ 1264.341198][T12875] ? __se_sys_getdents64+0x169/0x530 [ 1264.346745][T12875] ? __x64_sys_getdents64+0x96/0xe0 [ 1264.352219][T12875] ? x64_sys_call+0x343d/0x3b50 [ 1264.357336][T12875] ? do_syscall_64+0xcf/0x1e0 [ 1264.362268][T12875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.368610][T12875] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1264.374652][T12875] ? stack_depot_save_flags+0x66d/0x6e0 [ 1264.380417][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.385840][T12875] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1264.392368][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.397804][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.403262][T12875] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1264.409303][T12875] __msan_warning+0x95/0x120 [ 1264.414120][T12875] ext4_inlinedir_to_tree+0xde2/0x15a0 [ 1264.419860][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.425264][T12875] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1264.431310][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.436719][T12875] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1264.443344][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.448785][T12875] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1264.454907][T12875] ext4_htree_fill_tree+0x1941/0x1cd0 [ 1264.460522][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.465945][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.471474][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.476924][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.482397][T12875] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1264.488756][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.494190][T12875] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1264.500243][T12875] ext4_readdir+0x4bbf/0x5b00 [ 1264.505164][T12875] ? aa_file_perm+0x3e4/0x17a0 [ 1264.510178][T12875] ? __futex_wait+0x4e6/0x540 [ 1264.515129][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.520569][T12875] ? kmsan_get_metadata+0x146/0x1d0 [ 1264.525993][T12875] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1264.532526][T12875] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1264.538611][T12875] ? __pfx_ext4_readdir+0x10/0x10 [ 1264.543875][T12875] iterate_dir+0x688/0x870 [ 1264.548646][T12875] __se_sys_getdents64+0x169/0x530 [ 1264.554028][T12875] ? __pfx_filldir64+0x10/0x10 [ 1264.559046][T12875] __x64_sys_getdents64+0x96/0xe0 [ 1264.564331][T12875] x64_sys_call+0x343d/0x3b50 [ 1264.569279][T12875] do_syscall_64+0xcf/0x1e0 [ 1264.574057][T12875] ? clear_bhb_loop+0x25/0x80 [ 1264.579007][T12875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.585171][T12875] RIP: 0033:0x7f31e647cee9 [ 1264.589756][T12875] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1264.609613][T12875] RSP: 002b:00007f31e72ac0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1264.618260][T12875] RAX: ffffffffffffffda RBX: 00007f31e65b3f80 RCX: 00007f31e647cee9 [ 1264.626427][T12875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1264.634569][T12875] RBP: 00007f31e64da6fe R08: 0000000000000000 R09: 0000000000000000 [ 1264.642716][T12875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.650954][T12875] R13: 000000000000000b R14: 00007f31e65b3f80 R15: 00007ffea382f748 [ 1264.659137][T12875] [ 1264.662412][T12875] Kernel Offset: disabled [ 1264.666836][T12875] Rebooting in 86400 seconds..